$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20106/sz1vACZwkZko5fOaOf5461Biebc.roa File: sz1vACZwkZko5fOaOf5461Biebc.roa (raw, json) Hash identifier: XsMyuM+nv9/X6UYrulrO3tDaS9277lugoLahO3ZqV3o= Subject key identifier: B3:3D:6F:00:26:70:91:99:28:E5:F3:9A:39:FE:78:EB:50:62:79:B7 Certificate issuer: /CN=DBCABDC53755C35CD5BC8744886E745742C7FED0 Certificate serial: 02 Authority key identifier: DB:CA:BD:C5:37:55:C3:5C:D5:BC:87:44:88:6E:74:57:42:C7:FE:D0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/28q9xTdVw1zVvIdEiG50V0LH_tA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/sz1vACZwkZko5fOaOf5461Biebc.roa Signing time: Thu 12 Jun 2025 06:11:30 +0000 ROA not before: Thu 12 Jun 2025 06:11:30 +0000 ROA not after: Tue 26 May 2026 07:57:30 +0000 asID: 131958 IP address blocks: 157.14.64.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/28q9xTdVw1zVvIdEiG50V0LH_tA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBCABDC53755C35CD5BC8744886E745742C7FED0 Validity Not Before: Jun 12 06:11:30 2025 GMT Not After : May 26 07:57:30 2026 GMT Subject: CN=B33D6F002670919928E5F39A39FE78EB506279B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:18:86:4b:1d:a6:61:c7:a0:eb:fa:c3:db:5c: db:6a:4b:7e:ac:57:3a:15:9b:a7:1f:46:3c:a1:b9: 1f:97:89:e5:ef:20:a2:ff:c6:7f:e5:37:a3:a2:26: b2:38:d7:2a:50:81:c1:23:f5:08:40:43:1f:5f:1f: c2:92:f3:7f:c1:e7:4f:10:1a:1e:b7:3e:60:c1:bf: 13:38:dc:2b:38:bf:16:d6:46:f8:df:d1:e8:ea:77: 8c:dc:93:8c:0d:c5:1d:72:19:04:d5:c6:00:74:45: 70:f9:30:05:6f:e7:4f:38:c3:35:62:93:30:67:05: e1:d7:f0:72:ff:65:6b:0c:da:60:71:1a:82:7a:79: 6e:40:4f:ec:7e:89:6d:dd:32:84:1b:59:2a:97:39: d1:4b:f4:28:e3:80:25:d3:f1:2d:b1:f9:0d:50:a8: e6:87:60:15:35:fe:07:37:fb:bc:0b:1d:f6:ec:99: aa:d2:fd:90:03:28:2d:86:4b:e8:18:29:9c:70:90: 0e:2f:9b:ef:f8:e4:3c:53:3b:41:fc:6c:8b:2b:f2: b0:62:e0:b7:76:4e:4f:f5:03:ec:71:3e:6a:8f:46: 1d:af:07:e1:15:7f:b2:c7:c9:dc:4b:d5:1e:d3:c1: 2f:90:9f:29:9b:1f:53:ad:3a:94:7c:40:ce:44:5e: 03:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3D:6F:00:26:70:91:99:28:E5:F3:9A:39:FE:78:EB:50:62:79:B7 X509v3 Authority Key Identifier: keyid:DB:CA:BD:C5:37:55:C3:5C:D5:BC:87:44:88:6E:74:57:42:C7:FE:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/28q9xTdVw1zVvIdEiG50V0LH_tA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/sz1vACZwkZko5fOaOf5461Biebc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.14.64.0/20 Signature Algorithm: sha256WithRSAEncryption 33:9a:71:22:66:0d:39:d0:f9:30:3b:e7:01:ac:a8:ab:0a:76: 90:ae:9a:21:fe:14:42:c0:4f:0d:3a:8a:82:36:a7:e4:d7:c7: eb:0a:2f:c7:1f:57:51:d2:88:49:32:8a:2c:4d:bb:30:34:14: 87:c8:eb:4b:e6:01:de:86:ba:70:a7:12:0b:db:60:02:c0:ff: 71:ff:3d:ac:b0:4e:dd:2a:83:72:63:09:bb:d7:4f:ea:8e:78: 20:11:9e:de:11:76:2b:e0:d2:e7:98:b3:43:f4:01:93:b7:0f: d4:5a:4d:d4:b4:9b:65:d7:77:19:86:73:97:16:2c:cc:f4:34: 8e:91:ba:af:7e:cc:32:63:5a:84:9e:c5:1b:79:23:e8:e1:fe: cf:98:d2:7f:4d:4d:a1:e5:e7:67:8d:00:c7:dd:be:7c:ab:a2: b5:37:f4:0e:f3:e2:b2:a7:92:cb:38:ec:61:10:76:f2:dc:21: f3:c8:a7:fe:df:b9:4b:3e:62:bf:6a:ad:53:ed:0b:31:cb:5c: 69:c2:e4:2e:48:1b:2b:eb:cb:27:f4:65:67:07:8c:a4:33:64: 50:07:44:c4:d4:fe:69:d5:69:59:66:85:97:13:e8:d1:65:a7: be:56:0f:60:84:2e:e1:77:ee:02:80:47:43:75:37:73:00:06: 6f:83:81:62 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQkNB QkRDNTM3NTVDMzVDRDVCQzg3NDQ4ODZFNzQ1NzQyQzdGRUQwMB4XDTI1MDYxMjA2 MTEzMFoXDTI2MDUyNjA3NTczMFowMzExMC8GA1UEAxMoQjMzRDZGMDAyNjcwOTE5 OTI4RTVGMzlBMzlGRTc4RUI1MDYyNzlCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANUYhksdpmHHoOv6w9tc22pLfqxXOhWbpx9GPKG5H5eJ5e8gov/G f+U3o6ImsjjXKlCBwSP1CEBDH18fwpLzf8HnTxAaHrc+YMG/EzjcKzi/FtZG+N/R 6Op3jNyTjA3FHXIZBNXGAHRFcPkwBW/nTzjDNWKTMGcF4dfwcv9lawzaYHEagnp5 bkBP7H6Jbd0yhBtZKpc50Uv0KOOAJdPxLbH5DVCo5odgFTX+Bzf7vAsd9uyZqtL9 kAMoLYZL6BgpnHCQDi+b7/jkPFM7QfxsiyvysGLgt3ZOT/UD7HE+ao9GHa8H4RV/ ssfJ3EvVHtPBL5CfKZsfU606lHxAzkReA/UCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSzPW8AJnCRmSjl85o5/njrUGJ5tzAfBgNVHSMEGDAWgBTbyr3FN1XDXNW8h0SI bnRXQsf+0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMDYvMjhxOXhUZFZ3MXpWdklkRWlHNTBWMExIX3RBLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjhxOXhUZFZ3MXpWdklkRWlHNTBW MExIX3RBLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTA2L3N6MXZBQ1p3a1prbzVmT2FPZjU0NjFCaWViYy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBASdDkAwDQYJKoZIhvcNAQELBQADggEBADOacSJmDTnQ+TA75wGsqKsK dpCumiH+FELATw06ioI2p+TXx+sKL8cfV1HSiEkyiixNuzA0FIfI60vmAd6GunCn EgvbYALA/3H/PaywTt0qg3JjCbvXT+qOeCARnt4Rdivg0ueYs0P0AZO3D9RaTdS0 m2XXdxmGc5cWLMz0NI6Ruq9+zDJjWoSexRt5I+jh/s+Y0n9NTaHl52eNAMfdvnyr orU39A7z4rKnkss47GEQdvLcIfPIp/7fuUs+Yr9qrVPtCzHLXGnC5C5IGyvryyf0 ZWcHjKQzZFAHRMTU/mnVaVlmhZcT6NFlp75WD2CELuF37gKAR0N1N3MABm+DgWI= -----END CERTIFICATE-----Generated at Fri Jul 4 10:56:08 2025 by rpki-client