$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/tyro0xVFy9QJokdJbyHFcI6cAKA.roa File: tyro0xVFy9QJokdJbyHFcI6cAKA.roa (raw, json) Hash identifier: jOxMOrDUMbMHuAYN3nQlfnuho1xo/6w0PyZoEOssJ80= Subject key identifier: B7:2A:E8:D3:15:45:CB:D4:09:A2:47:49:6F:21:C5:70:8E:9C:00:A0 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0225 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tyro0xVFy9QJokdJbyHFcI6cAKA.roa Signing time: Thu 01 May 2025 01:31:39 +0000 ROA not before: Thu 01 May 2025 01:31:39 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 210.164.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:39 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=B72AE8D31545CBD409A247496F21C5708E9C00A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b0:e6:18:ed:d0:ce:f7:d4:06:b3:ab:c1:39: 8e:f0:0f:29:85:83:7a:33:60:4e:e5:3a:26:78:9e: 29:98:d9:d3:f5:f6:78:bb:47:0f:14:b1:da:a0:ce: 76:90:e6:fd:e8:94:0f:9a:f2:68:df:60:9f:f6:a6: 49:db:c4:0e:6e:20:e2:87:8c:02:ec:20:2f:b7:4e: 73:50:6d:e4:1f:2a:81:5a:9c:96:61:44:a8:b3:6d: 77:71:21:1b:0e:52:9d:cf:2e:62:2e:85:e6:64:cc: cb:ac:f6:aa:fb:6d:72:db:da:35:c5:df:a0:94:4a: f3:78:89:92:72:68:5d:99:39:79:c9:c0:15:1c:77: e3:a8:21:ca:d0:6d:bc:28:b7:ce:74:73:2f:63:2b: 28:e3:68:1d:c5:7e:11:11:3f:43:93:ef:b8:78:6e: ab:52:c6:a8:05:f9:0c:51:11:d2:18:e5:e5:bd:9c: f9:15:07:30:45:b1:17:49:a8:27:20:ff:81:91:23: b4:35:79:ab:9d:45:96:14:06:9e:34:11:f1:92:94: b9:aa:df:16:28:a9:7a:01:23:70:20:e8:15:c5:ac: 3e:13:a8:59:e5:91:53:b5:19:ed:36:3e:34:5c:fb: 41:a6:bb:ee:b5:18:a4:f1:5d:64:f7:ec:0f:1d:39: ca:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2A:E8:D3:15:45:CB:D4:09:A2:47:49:6F:21:C5:70:8E:9C:00:A0 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tyro0xVFy9QJokdJbyHFcI6cAKA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.164.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8c:b9:e9:29:75:df:23:aa:b4:32:c0:8f:24:44:3d:90:fd:7c: 58:72:2c:dc:58:bc:67:d5:13:00:5b:22:d0:ca:f3:5a:95:cc: 52:67:2d:d3:ae:a6:b6:51:9f:af:09:57:a3:09:d3:56:b1:f7: c1:50:05:95:23:81:f3:62:53:55:85:a7:f3:bb:03:2d:6e:30: 6e:49:28:7f:5c:9b:a4:7b:e1:55:6b:50:40:a6:67:bd:5d:10: f5:20:28:5b:4d:9a:03:52:07:39:41:15:ee:49:9a:f0:6f:a9: d4:37:36:0e:fc:e2:1a:de:3e:53:9b:19:84:1d:9a:32:57:83: 90:1d:d6:84:05:82:88:08:2c:3f:8a:f6:3d:86:df:b9:7b:70: 89:8c:31:5b:5d:58:a3:14:b4:f6:d4:26:fd:e3:8b:3a:9c:8e: 7b:1f:3c:22:7c:d1:39:a3:32:a2:55:74:0f:39:c7:3f:28:19: 7a:02:dd:07:b5:24:1b:23:4a:37:24:8c:04:f3:3b:5d:79:83: 4c:56:ed:5d:8f:d1:84:85:96:a1:e8:bb:08:72:17:d8:72:31: d1:2c:2e:4e:1e:db:22:0d:d5:8a:49:38:cb:5a:21:5c:1f:0f: 93:83:7a:5f:93:e6:d7:ab:02:24:6f:04:e4:72:81:44:f2:79: d3:45:4f:d3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxMzlaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI3MkFFOEQzMTU0NUNC RDQwOUEyNDc0OTZGMjFDNTcwOEU5QzAwQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwsOYY7dDO99QGs6vBOY7wDymFg3ozYE7lOiZ4nimY2dP19ni7 Rw8UsdqgznaQ5v3olA+a8mjfYJ/2pknbxA5uIOKHjALsIC+3TnNQbeQfKoFanJZh RKizbXdxIRsOUp3PLmIuheZkzMus9qr7bXLb2jXF36CUSvN4iZJyaF2ZOXnJwBUc d+OoIcrQbbwot850cy9jKyjjaB3FfhERP0OT77h4bqtSxqgF+QxREdIY5eW9nPkV BzBFsRdJqCcg/4GRI7Q1eaudRZYUBp40EfGSlLmq3xYoqXoBI3Ag6BXFrD4TqFnl kVO1Ge02PjRc+0Gmu+61GKTxXWT37A8dOcr9AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUtyro0xVFy9QJokdJbyHFcI6cAKAwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL3R5cm8weFZGeTlRSm9rZEpieUhGY0k2Y0FLQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDSpDANBgkqhkiG9w0BAQsFAAOCAQEAjLnpKXXfI6q0MsCPJEQ9kP18WHIs 3Fi8Z9UTAFsi0MrzWpXMUmct066mtlGfrwlXownTVrH3wVAFlSOB82JTVYWn87sD LW4wbkkof1ybpHvhVWtQQKZnvV0Q9SAoW02aA1IHOUEV7kma8G+p1Dc2DvziGt4+ U5sZhB2aMleDkB3WhAWCiAgsP4r2PYbfuXtwiYwxW11YoxS09tQm/eOLOpyOex88 InzROaMyolV0DznHPygZegLdB7UkGyNKNySMBPM7XXmDTFbtXY/RhIWWoei7CHIX 2HIx0SwuTh7bIg3Vikk4y1ohXB8Pk4N6X5Pm16sCJG8E5HKBRPJ500VP0w== -----END CERTIFICATE-----Generated at Sun May 18 09:37:23 2025 by rpki-client