$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/TRU5KUJiB47zxn17AYrnRpNo2_Q.roa File: TRU5KUJiB47zxn17AYrnRpNo2_Q.roa (raw, json) Hash identifier: NY7Se8QvhShX9aaxlw8HuyZYkvXtJGIL1JlQjn+hfV0= Subject key identifier: 4D:15:39:29:42:62:07:8E:F3:C6:7D:7B:01:8A:E7:46:93:68:DB:F4 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 022C Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TRU5KUJiB47zxn17AYrnRpNo2_Q.roa Signing time: Thu 01 May 2025 01:31:43 +0000 ROA not before: Thu 01 May 2025 01:31:43 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 210.254.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:43 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=4D1539294262078EF3C67D7B018AE7469368DBF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:f2:cc:ff:32:f8:43:39:8b:96:1f:5c:61: 75:22:80:0c:ff:4e:6a:da:f0:0f:89:dc:82:ae:90: 87:86:03:54:53:22:36:21:89:53:b9:4c:19:fd:0d: 5e:bb:fa:aa:56:02:fb:46:05:1d:67:9d:a0:6d:94: f4:96:07:d9:10:9c:06:4e:4e:74:6a:95:f2:5a:1a: 2c:68:85:af:43:12:5c:d2:de:e7:34:b6:21:45:e2: 83:14:4d:ee:af:d0:21:bb:7a:93:b6:f2:97:8b:8b: 56:53:a0:6d:43:61:66:49:46:54:8d:fe:20:51:9b: c9:37:f3:d8:12:6a:22:c0:ea:3b:3c:1b:78:da:9a: b4:51:bd:12:ee:c1:a4:bc:56:8e:57:4f:69:86:3f: 75:07:41:ff:1c:de:f1:67:84:5f:b4:52:25:80:94: 95:56:60:65:cd:3a:ce:7f:95:fa:4c:1d:93:8a:33: 78:99:27:be:73:1c:6d:b1:31:a9:07:85:1b:f4:bd: 24:22:ba:7d:b3:f9:70:df:cc:33:48:28:ea:b2:f2: ad:39:38:8c:4e:54:e8:9f:c1:44:1d:0b:af:70:04: b6:c9:ee:a9:d9:c7:a7:1e:67:dd:a6:72:b1:0e:94: 64:25:de:47:f4:b9:e1:0c:8a:5f:fb:06:b9:87:7e: d3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:15:39:29:42:62:07:8E:F3:C6:7D:7B:01:8A:E7:46:93:68:DB:F4 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TRU5KUJiB47zxn17AYrnRpNo2_Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.254.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1a:db:81:ff:d1:7f:68:d7:d6:73:da:6a:65:18:92:11:18:47: 7b:34:84:87:90:f5:b3:19:e0:e9:4a:61:51:c2:7e:a7:16:c9: fe:b4:3c:c3:b3:dd:59:bb:6f:de:b4:62:07:50:fa:f3:3a:35: a5:5b:01:65:7e:ea:b3:1e:a9:d3:79:bc:89:4b:9b:fe:fb:aa: dc:6a:b9:04:6c:9a:0c:2c:e9:88:c1:27:44:a3:02:78:59:07: 75:2f:49:42:fd:88:65:e7:97:a2:33:b4:6b:29:14:49:36:6e: 77:85:1d:0b:8b:37:c2:82:61:ff:ac:b0:46:4c:58:84:6d:39: f8:d9:41:1f:d7:89:4c:09:1a:fb:97:53:01:ac:9b:f6:fd:40: d5:b4:ab:28:1c:78:a5:d8:a3:12:e6:a8:a4:f1:a6:5a:d5:22: b5:88:97:a9:32:3b:6b:78:74:dd:30:c3:78:51:d3:7d:70:2e: f4:11:6f:24:27:94:4b:eb:63:81:11:8f:b6:df:a4:cc:89:ba: 52:0a:4a:24:dd:2a:94:aa:19:d0:21:35:ea:f6:7d:d8:1c:e9: af:38:2b:e1:46:20:81:43:a9:21:47:fe:6e:e0:6b:f6:b2:b5: d5:74:3c:bb:e7:a0:c4:9c:fa:66:df:41:38:34:47:fe:df:dc: 6b:00:f0:85 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxNDNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDREMTUzOTI5NDI2MjA3 OEVGM0M2N0Q3QjAxOEFFNzQ2OTM2OERCRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeI/LM/zL4QzmLlh9cYXUigAz/Tmra8A+J3IKukIeGA1RTIjYh iVO5TBn9DV67+qpWAvtGBR1nnaBtlPSWB9kQnAZOTnRqlfJaGixoha9DElzS3uc0 tiFF4oMUTe6v0CG7epO28peLi1ZToG1DYWZJRlSN/iBRm8k389gSaiLA6js8G3ja mrRRvRLuwaS8Vo5XT2mGP3UHQf8c3vFnhF+0UiWAlJVWYGXNOs5/lfpMHZOKM3iZ J75zHG2xMakHhRv0vSQiun2z+XDfzDNIKOqy8q05OIxOVOifwUQdC69wBLbJ7qnZ x6ceZ92mcrEOlGQl3kf0ueEMil/7BrmHftNfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTRU5KUJiB47zxn17AYrnRpNo2/QwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL1RSVTVLVUppQjQ3enhuMTdBWXJuUnBObzJfUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfS/oAwDQYJKoZIhvcNAQELBQADggEBABrbgf/Rf2jX1nPaamUYkhEYR3s0 hIeQ9bMZ4OlKYVHCfqcWyf60PMOz3Vm7b960YgdQ+vM6NaVbAWV+6rMeqdN5vIlL m/77qtxquQRsmgws6YjBJ0SjAnhZB3UvSUL9iGXnl6IztGspFEk2bneFHQuLN8KC Yf+ssEZMWIRtOfjZQR/XiUwJGvuXUwGsm/b9QNW0qygceKXYoxLmqKTxplrVIrWI l6kyO2t4dN0ww3hR031wLvQRbyQnlEvrY4ERj7bfpMyJulIKSiTdKpSqGdAhNer2 fdgc6a84K+FGIIFDqSFH/m7ga/aytdV0PLvnoMSc+mbfQTg0R/7f3GsA8IU= -----END CERTIFICATE-----Generated at Sat May 17 21:52:52 2025 by rpki-client