$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/kx7IEvrPQiz0NGVA8HsQUCJXG4I.roa File: kx7IEvrPQiz0NGVA8HsQUCJXG4I.roa (raw, json) Hash identifier: kMarafAcFYGrOFLxA2vTBZYr2QFCnfGTzE70UkKEyKo= Subject key identifier: 93:1E:C8:12:FA:CF:42:2C:F4:34:65:40:F0:7B:10:50:22:57:1B:82 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 022D Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/kx7IEvrPQiz0NGVA8HsQUCJXG4I.roa Signing time: Thu 01 May 2025 01:31:43 +0000 ROA not before: Thu 01 May 2025 01:31:43 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 211.0.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:43 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=931EC812FACF422CF4346540F07B105022571B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:d1:87:d5:4c:d4:3e:b4:dc:76:fb:a7:4d: d8:06:16:37:6c:46:5b:df:31:e3:09:58:6b:a0:a0: ee:d3:cc:44:ac:8d:6c:c6:1d:d5:34:05:db:ca:cc: 81:be:7b:65:03:6c:c3:0a:02:04:98:3a:1d:e9:a8: 49:1c:fe:3c:3b:ef:48:58:60:ec:e2:a7:68:12:ba: 5a:ca:28:1f:b6:10:e2:52:ea:90:04:e8:e3:1d:34: c8:a0:7d:5b:70:06:9c:fb:11:47:72:8c:9a:a5:d7: 70:a1:5a:3a:98:51:3b:46:e3:0a:85:4f:cc:a5:3c: f1:2f:9b:06:97:ce:d2:a0:0c:82:ca:8b:93:40:8c: 01:66:52:bf:80:ba:62:0e:f6:68:92:1d:e6:be:b5: af:d1:e6:21:45:39:8b:31:d7:9a:86:8e:67:65:16: e9:25:e2:3e:cb:31:09:e7:d9:16:93:27:1a:5e:af: e4:3a:94:5d:f1:66:5e:9c:8a:2f:2d:36:f2:41:15: 07:d7:ff:d4:f9:56:0b:da:13:63:ae:be:37:db:d2: 4f:f8:6e:30:19:8d:eb:34:2e:5b:e4:a8:9e:95:8f: de:a7:12:ab:97:70:48:5d:ff:89:eb:43:66:f1:01: c3:73:51:d1:35:6d:75:51:97:d1:d5:a4:14:64:0c: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1E:C8:12:FA:CF:42:2C:F4:34:65:40:F0:7B:10:50:22:57:1B:82 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/kx7IEvrPQiz0NGVA8HsQUCJXG4I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.0.0.0/16 Signature Algorithm: sha256WithRSAEncryption bb:a1:b4:8b:ec:d1:0b:c1:b5:1d:7a:1e:3a:3f:c7:73:d0:61: 23:0a:cd:de:19:fa:d0:96:47:90:95:ff:43:e4:47:84:d5:03: 02:df:b8:bb:20:96:2f:07:34:e7:4c:ee:4b:bb:29:fd:84:76: f8:11:9e:72:24:2e:af:4d:6b:b7:8e:39:24:20:8e:37:82:61: 15:a8:42:75:31:3f:41:30:38:26:c5:36:12:81:30:57:0b:8c: 77:de:70:35:52:c2:84:46:e2:5f:c4:c1:8a:bc:d4:f4:69:eb: 2c:93:6a:28:0d:db:7c:79:74:d4:7f:c3:02:79:38:34:58:ff: 33:47:39:60:f3:70:23:26:1f:7f:8e:92:90:f7:43:72:af:c3: d5:76:ee:e5:89:87:e7:07:19:8f:c3:82:ff:bc:dd:38:95:2d: e4:bb:4a:26:5b:e8:61:22:17:bc:d7:02:5f:4c:66:a2:af:ec: da:6a:59:ee:73:c3:27:c0:f3:26:e9:ab:90:66:4d:ea:1b:31: 7f:32:07:82:c5:0c:e3:94:18:6d:25:b6:16:b0:02:1f:a3:6c: f1:35:a3:bc:07:03:f6:31:a7:3c:f8:ea:8a:4a:28:10:0c:e5: 78:4a:ca:7f:bc:b6:d6:ec:7e:7a:bb:40:c6:f2:25:af:62:15: 95:01:4d:9b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxNDNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkzMUVDODEyRkFDRjQy MkNGNDM0NjU0MEYwN0IxMDUwMjI1NzFCODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5NtGH1UzUPrTcdvunTdgGFjdsRlvfMeMJWGugoO7TzESsjWzG HdU0BdvKzIG+e2UDbMMKAgSYOh3pqEkc/jw770hYYOzip2gSulrKKB+2EOJS6pAE 6OMdNMigfVtwBpz7EUdyjJql13ChWjqYUTtG4wqFT8ylPPEvmwaXztKgDILKi5NA jAFmUr+AumIO9miSHea+ta/R5iFFOYsx15qGjmdlFukl4j7LMQnn2RaTJxper+Q6 lF3xZl6cii8tNvJBFQfX/9T5VgvaE2Ouvjfb0k/4bjAZjes0LlvkqJ6Vj96nEquX cEhd/4nrQ2bxAcNzUdE1bXVRl9HVpBRkDKGhAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUkx7IEvrPQiz0NGVA8HsQUCJXG4IwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL2t4N0lFdnJQUWl6ME5HVkE4SHNRVUNKWEc0SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDTADANBgkqhkiG9w0BAQsFAAOCAQEAu6G0i+zRC8G1HXoeOj/Hc9BhIwrN 3hn60JZHkJX/Q+RHhNUDAt+4uyCWLwc050zuS7sp/YR2+BGeciQur01rt445JCCO N4JhFahCdTE/QTA4JsU2EoEwVwuMd95wNVLChEbiX8TBirzU9GnrLJNqKA3bfHl0 1H/DAnk4NFj/M0c5YPNwIyYff46SkPdDcq/D1Xbu5YmH5wcZj8OC/7zdOJUt5LtK JlvoYSIXvNcCX0xmoq/s2mpZ7nPDJ8DzJumrkGZN6hsxfzIHgsUM45QYbSW2FrAC H6Ns8TWjvAcD9jGnPPjqikooEAzleErKf7y21ux+ertAxvIlr2IVlQFNmw== -----END CERTIFICATE-----Generated at Sat May 17 01:35:46 2025 by rpki-client