$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/nGJU9jmqTy5m_77XpuBYccn-tfM.roa File: nGJU9jmqTy5m_77XpuBYccn-tfM.roa (raw, json) Hash identifier: OHDUyhQ8U0Eb2Bw8iR7oHMS4f1u45/STvOgZdADnCqE= Subject key identifier: 9C:62:54:F6:39:AA:4F:2E:66:FF:BE:D7:A6:E0:58:71:C9:FE:B5:F3 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 023A Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/nGJU9jmqTy5m_77XpuBYccn-tfM.roa Signing time: Thu 01 May 2025 01:36:05 +0000 ROA not before: Thu 01 May 2025 01:36:05 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 219.96.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:36:05 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=9C6254F639AA4F2E66FFBED7A6E05871C9FEB5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2c:22:ff:56:f5:25:2d:01:35:e3:e7:52:c7: c2:86:91:33:4b:c5:08:b2:15:8a:02:5c:e6:7b:75: d8:df:28:62:1c:eb:08:f3:46:24:a3:b7:0d:49:b2: db:ed:dc:eb:c2:1e:d2:00:78:0b:36:e8:82:ce:74: 92:ee:f9:be:c8:c3:a1:c2:1d:1f:6b:28:e2:62:a1: 13:f6:ce:8c:29:7a:25:b1:4c:47:6c:fc:c8:df:bb: 3a:eb:84:e0:80:26:9d:37:cc:08:b5:d6:c9:c9:12: 01:d4:8d:27:f6:ca:a0:69:17:d6:ce:9c:ae:cd:01: 6e:32:59:49:24:db:2a:03:99:8b:db:63:8d:aa:88: 0f:b5:22:bc:00:a6:fd:63:83:69:94:11:60:4f:91: 12:9a:d6:9c:2b:76:14:39:ee:82:9c:19:c9:1f:3c: 80:23:fb:94:1c:c0:69:15:98:72:cf:4a:d7:8d:52: 96:ce:dc:b3:97:fe:fb:b9:79:cc:78:59:42:04:c2: e3:15:dd:53:8a:b3:f1:e5:3e:e4:ba:b6:e7:67:14: e9:bf:a3:01:54:07:65:2b:52:2b:a2:ba:00:73:bf: 4e:7f:ff:68:f9:f5:a2:45:d4:ee:96:40:e6:42:a2: 00:b5:ea:ba:46:bf:51:39:f8:a6:91:2d:c8:51:30: 51:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:62:54:F6:39:AA:4F:2E:66:FF:BE:D7:A6:E0:58:71:C9:FE:B5:F3 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/nGJU9jmqTy5m_77XpuBYccn-tfM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.96.128.0/17 Signature Algorithm: sha256WithRSAEncryption 10:0e:41:09:37:18:35:17:f0:dc:55:3d:82:1c:29:e5:4a:52: 48:4a:9f:ec:c7:e5:cd:1f:32:14:a0:7c:36:11:28:66:6c:c0: 1c:13:93:11:9b:21:3a:33:3f:3a:48:52:9a:ff:3e:2c:1b:df: 42:71:2b:ea:dd:ca:16:d2:4f:25:1d:68:74:80:2f:a4:db:0c: 70:21:4a:9d:23:ed:f2:34:b3:5f:c0:6e:ba:04:42:a5:5a:13: ab:5b:05:c6:ff:d2:2a:52:53:8e:aa:5f:61:b7:74:5c:f5:25: 53:f0:6b:8d:bb:0d:13:9e:32:f8:c5:a3:4f:c0:73:54:24:4b: 8c:5e:87:15:a8:e1:46:b1:71:92:05:4f:84:af:77:1d:12:a4: ab:4f:fe:2f:2c:ee:df:71:3e:7c:7d:7f:13:02:97:a8:f0:df: f8:81:66:2b:84:12:05:d6:2f:74:2b:2b:10:6f:83:26:b3:2f: 8c:6c:3e:c3:ff:c6:8a:df:2b:3c:62:36:2a:e5:53:96:55:5e: be:07:d1:27:60:79:7b:84:f1:fe:93:1b:f1:1e:8a:68:da:6b: fb:95:bf:0d:31:23:61:c6:72:ed:15:e7:86:86:1d:ac:f7:6a: b4:f0:cf:92:cc:1a:2c:8b:bd:58:0b:e5:6b:1b:0b:76:c0:c1: 56:59:38:d3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTM2MDVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlDNjI1NEY2MzlBQTRG MkU2NkZGQkVEN0E2RTA1ODcxQzlGRUI1RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXLCL/VvUlLQE14+dSx8KGkTNLxQiyFYoCXOZ7ddjfKGIc6wjz RiSjtw1Jstvt3OvCHtIAeAs26ILOdJLu+b7Iw6HCHR9rKOJioRP2zowpeiWxTEds /MjfuzrrhOCAJp03zAi11snJEgHUjSf2yqBpF9bOnK7NAW4yWUkk2yoDmYvbY42q iA+1IrwApv1jg2mUEWBPkRKa1pwrdhQ57oKcGckfPIAj+5QcwGkVmHLPSteNUpbO 3LOX/vu5ecx4WUIEwuMV3VOKs/HlPuS6tudnFOm/owFUB2UrUiuiugBzv05//2j5 9aJF1O6WQOZCogC16rpGv1E5+KaRLchRMFEnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnGJU9jmqTy5m/77XpuBYccn+tfMwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL25HSlU5am1xVHk1bV83N1hwdUJZY2NuLXRmTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfbYIAwDQYJKoZIhvcNAQELBQADggEBABAOQQk3GDUX8NxVPYIcKeVKUkhK n+zH5c0fMhSgfDYRKGZswBwTkxGbITozPzpIUpr/Piwb30JxK+rdyhbSTyUdaHSA L6TbDHAhSp0j7fI0s1/AbroEQqVaE6tbBcb/0ipSU46qX2G3dFz1JVPwa427DROe MvjFo0/Ac1QkS4xehxWo4UaxcZIFT4Svdx0SpKtP/i8s7t9xPnx9fxMCl6jw3/iB ZiuEEgXWL3QrKxBvgyazL4xsPsP/xorfKzxiNirlU5ZVXr4H0SdgeXuE8f6TG/Ee imjaa/uVvw0xI2HGcu0V54aGHaz3arTwz5LMGiyLvVgL5WsbC3bAwVZZONM= -----END CERTIFICATE-----Generated at Sat May 17 02:29:27 2025 by rpki-client