$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/my9MKKPv0QPQP9cBYm5Tgjg49ic.roa File: my9MKKPv0QPQP9cBYm5Tgjg49ic.roa (raw, json) Hash identifier: T+7lPN7SGXPcYxVcJE5KiG8t/Xl+fes98oBbiggzrNQ= Subject key identifier: 9B:2F:4C:28:A3:EF:D1:03:D0:3F:D7:01:62:6E:53:82:38:38:F6:27 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0222 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/my9MKKPv0QPQP9cBYm5Tgjg49ic.roa Signing time: Thu 01 May 2025 01:31:37 +0000 ROA not before: Thu 01 May 2025 01:31:37 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 210.145.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 09:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:37 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=9B2F4C28A3EFD103D03FD701626E53823838F627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:bc:6b:c2:83:c4:2f:ba:a1:b7:6e:2d:b4: de:a4:4b:e9:e2:76:47:13:b8:b0:38:18:6b:98:96: a0:9d:34:86:ec:64:8a:be:67:99:5e:80:c2:94:25: fa:5f:fb:8c:28:ff:28:98:0c:d6:94:8d:e0:3c:69: cd:9a:8e:97:f9:86:51:6f:3c:bb:d7:a5:10:4d:96: 32:42:57:f7:1e:32:a6:ee:d2:98:13:52:b1:6f:38: af:21:14:06:46:61:35:2b:e8:08:f7:26:63:b9:f8: ac:43:29:07:3d:24:56:2b:63:17:9a:e7:08:ad:10: 59:50:fc:e1:38:e7:6c:0d:ce:4e:e5:cb:3b:32:91: d6:3b:a8:25:a9:e0:bd:4b:9d:b8:95:1b:bb:ef:9b: f3:3d:ea:1c:7c:98:d3:6c:9a:f5:12:bd:8a:57:d5: 41:cb:e5:93:27:88:fa:2e:25:6c:c7:1f:72:f0:d3: 50:76:61:c5:a4:74:e1:12:f0:e5:cf:0d:f3:7e:67: 86:45:ab:e2:e9:2d:e7:86:cf:a3:f3:77:47:bd:49: 09:ee:ae:74:bd:dd:3f:54:e2:46:72:46:4b:77:11: 4e:f3:47:97:0b:0f:b8:08:12:5f:7f:54:dd:c6:0a: d3:e3:38:89:c6:a5:27:18:da:9b:db:e8:73:d0:2e: 74:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2F:4C:28:A3:EF:D1:03:D0:3F:D7:01:62:6E:53:82:38:38:F6:27 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/my9MKKPv0QPQP9cBYm5Tgjg49ic.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.145.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2f:28:6c:c2:f6:73:d6:2f:ce:2b:a6:64:96:c0:62:b0:18:0c: 49:42:76:ce:4b:60:49:28:5a:ce:a1:7b:94:60:e6:38:0d:e8: a5:45:93:b2:f9:19:09:37:5a:04:49:70:21:94:ae:3c:3e:aa: db:2d:42:e2:64:5b:66:73:a8:7d:32:4b:60:1e:f5:c3:bb:a0: 55:79:9f:e7:41:a0:92:93:88:61:29:d5:a5:4d:38:97:98:e6: 6e:e2:15:b4:2d:07:cf:ec:1c:08:e1:f0:6b:e0:38:fd:d2:71: d8:2e:48:aa:72:4a:78:1c:27:81:12:4f:ff:54:a8:a5:ae:3a: 0a:e6:d6:ad:4c:d8:c2:1f:3d:00:f7:2f:05:b0:3d:a8:82:26: 85:8f:fb:34:50:38:28:b6:e0:7f:2e:36:a7:e7:dc:17:1b:25: 13:f0:89:11:ae:2b:02:0d:04:05:b0:40:22:f7:1e:9d:35:1a: 12:e3:1b:ab:e8:9f:46:9f:5a:42:74:38:33:3a:d7:60:e9:99: 47:ad:cc:30:c9:4f:f8:78:2c:55:85:4a:52:fa:ad:c2:fd:11: d8:07:46:6f:b0:5a:b3:96:b7:3e:8d:8a:79:9a:c4:6f:85:4f: 17:9e:98:02:04:d4:e9:82:71:a2:d2:9b:5e:84:45:ce:5e:61: 40:b6:5c:28 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxMzdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlCMkY0QzI4QTNFRkQx MDNEMDNGRDcwMTYyNkU1MzgyMzgzOEY2MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/h7xrwoPEL7qht24ttN6kS+nidkcTuLA4GGuYlqCdNIbsZIq+ Z5legMKUJfpf+4wo/yiYDNaUjeA8ac2ajpf5hlFvPLvXpRBNljJCV/ceMqbu0pgT UrFvOK8hFAZGYTUr6Aj3JmO5+KxDKQc9JFYrYxea5witEFlQ/OE452wNzk7lyzsy kdY7qCWp4L1LnbiVG7vvm/M96hx8mNNsmvUSvYpX1UHL5ZMniPouJWzHH3Lw01B2 YcWkdOES8OXPDfN+Z4ZFq+LpLeeGz6Pzd0e9SQnurnS93T9U4kZyRkt3EU7zR5cL D7gIEl9/VN3GCtPjOInGpScY2pvb6HPQLnRFAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUmy9MKKPv0QPQP9cBYm5Tgjg49icwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL215OU1LS1B2MFFQUVA5Y0JZbTVUZ2pnNDlpYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDSkTANBgkqhkiG9w0BAQsFAAOCAQEALyhswvZz1i/OK6ZklsBisBgMSUJ2 zktgSShazqF7lGDmOA3opUWTsvkZCTdaBElwIZSuPD6q2y1C4mRbZnOofTJLYB71 w7ugVXmf50GgkpOIYSnVpU04l5jmbuIVtC0Hz+wcCOHwa+A4/dJx2C5IqnJKeBwn gRJP/1Sopa46CubWrUzYwh89APcvBbA9qIImhY/7NFA4KLbgfy42p+fcFxslE/CJ Ea4rAg0EBbBAIvcenTUaEuMbq+ifRp9aQnQ4MzrXYOmZR63MMMlP+HgsVYVKUvqt wv0R2AdGb7Bas5a3Po2KeZrEb4VPF56YAgTU6YJxotKbXoRFzl5hQLZcKA== -----END CERTIFICATE-----Generated at Sat May 17 12:50:15 2025 by rpki-client