$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20133/2D4fwsZn9N7qENOOzI449-C5jQQ.roa File: 2D4fwsZn9N7qENOOzI449-C5jQQ.roa (raw, json) Hash identifier: FJIZ01mSTVnWmSJReTM/zyATu2ZSWPxUtI5GJiNz/kc= Subject key identifier: D8:3E:1F:C2:C6:67:F4:DE:EA:10:D3:8E:CC:8E:38:F7:E0:B9:8D:04 Certificate issuer: /CN=08EC6E8AC170A7A96F7C4DF33F833332D32302B1 Certificate serial: 17 Authority key identifier: 08:EC:6E:8A:C1:70:A7:A9:6F:7C:4D:F3:3F:83:33:32:D3:23:02:B1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/COxuisFwp6lvfE3zP4MzMtMjArE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20133/2D4fwsZn9N7qENOOzI449-C5jQQ.roa Signing time: Thu 01 May 2025 01:30:26 +0000 ROA not before: Thu 01 May 2025 01:30:26 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131970 IP address blocks: 103.153.206.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20133/COxuisFwp6lvfE3zP4MzMtMjArE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20133/COxuisFwp6lvfE3zP4MzMtMjArE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/COxuisFwp6lvfE3zP4MzMtMjArE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 May 2025 02:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08EC6E8AC170A7A96F7C4DF33F833332D32302B1 Validity Not Before: May 1 01:30:26 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=D83E1FC2C667F4DEEA10D38ECC8E38F7E0B98D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:2d:34:33:71:f8:a1:4a:22:38:93:53:93: 61:ec:de:01:4e:36:94:6d:d1:96:d3:61:8d:90:fc: 7e:80:b1:2b:6f:fd:3f:dd:e3:34:ab:e4:68:79:d3: 46:59:c3:67:bb:1b:a0:5a:f9:70:0d:d5:61:f3:ab: 95:30:32:bc:0e:67:9a:94:50:96:64:d8:3d:16:a1: f0:79:60:69:b4:79:4e:29:c2:34:07:68:4a:96:88: 57:97:2b:c0:9a:9d:0b:7a:6b:ef:c2:54:08:2c:d4: b5:9a:0f:bd:f0:e3:d7:05:08:0f:ea:14:0a:ad:f5: 1c:f5:cb:90:1f:91:11:8d:03:17:02:ca:d8:dd:ba: 87:09:00:81:15:c4:cc:6a:e3:1f:dd:7e:d1:e7:20: a4:ca:45:d4:fc:ca:69:bf:e9:70:f2:2a:8b:f7:20: 6a:4e:17:4a:e4:02:46:76:b4:58:df:f4:dd:7e:15: 87:7f:a9:72:2d:f9:30:0e:47:6e:af:39:89:e5:e2: e0:0b:d8:38:54:d4:35:6a:50:ec:32:00:bf:fb:ee: 3a:2c:5a:a8:08:d1:ff:66:39:3a:4e:eb:7d:fa:fd: c1:73:a2:e2:6d:ed:4c:10:ef:ea:1c:61:19:df:db: 72:cd:2a:71:1d:45:dd:ce:d5:fb:57:ce:68:39:7d: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3E:1F:C2:C6:67:F4:DE:EA:10:D3:8E:CC:8E:38:F7:E0:B9:8D:04 X509v3 Authority Key Identifier: keyid:08:EC:6E:8A:C1:70:A7:A9:6F:7C:4D:F3:3F:83:33:32:D3:23:02:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20133/COxuisFwp6lvfE3zP4MzMtMjArE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/COxuisFwp6lvfE3zP4MzMtMjArE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20133/2D4fwsZn9N7qENOOzI449-C5jQQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.206.0/23 Signature Algorithm: sha256WithRSAEncryption 49:db:79:60:a7:fe:d9:8b:6f:24:ce:39:ba:59:2b:b0:f2:88: 36:22:ef:16:d2:66:8e:5e:db:8d:80:bb:53:d4:1e:8e:9c:1a: ef:3f:b6:0e:a9:ab:89:2b:67:11:94:83:ac:cf:15:70:d0:f1: c5:8d:57:97:0a:24:56:e8:32:e4:4c:73:a3:bc:15:06:48:38: aa:89:3e:e9:96:88:16:b7:98:dc:9a:6a:49:60:c4:83:09:da: e4:a1:fc:7d:b8:a3:30:2d:90:5d:9e:50:5b:c8:b6:62:90:c0: 96:fa:58:2a:9e:6e:d8:11:e0:58:b7:f6:1f:4f:c3:e5:91:ae: 46:b9:c2:10:1b:10:c0:3f:b0:07:a8:33:36:44:19:52:c7:bd: 7e:eb:d6:4c:a8:33:0f:4b:59:10:b9:90:21:9b:4d:45:6e:a3: 7a:60:24:46:3d:8b:ee:08:18:db:0c:7d:ad:58:cb:4b:69:16: ea:28:43:ea:e8:5e:81:d3:68:09:fd:d1:1c:b2:4b:1e:b4:15: c8:73:4e:56:7e:3b:44:3c:49:77:08:3d:b7:bd:8b:24:89:ec: 87:8b:26:c5:38:cc:32:1e:65:f0:9b:04:ba:01:2a:f6:fa:74: 4f:4a:cb:80:a8:4b:ab:de:bb:29:28:78:aa:90:af:a9:91:95: ce:13:b3:9c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwOEVD NkU4QUMxNzBBN0E5NkY3QzRERjMzRjgzMzMzMkQzMjMwMkIxMB4XDTI1MDUwMTAx MzAyNloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRDgzRTFGQzJDNjY3RjRE RUVBMTBEMzhFQ0M4RTM4RjdFMEI5OEQwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMbBLTQzcfihSiI4k1OTYezeAU42lG3RltNhjZD8foCxK2/9P93j NKvkaHnTRlnDZ7sboFr5cA3VYfOrlTAyvA5nmpRQlmTYPRah8HlgabR5TinCNAdo SpaIV5crwJqdC3pr78JUCCzUtZoPvfDj1wUID+oUCq31HPXLkB+REY0DFwLK2N26 hwkAgRXEzGrjH91+0ecgpMpF1PzKab/pcPIqi/cgak4XSuQCRna0WN/03X4Vh3+p ci35MA5Hbq85ieXi4AvYOFTUNWpQ7DIAv/vuOixaqAjR/2Y5Ok7rffr9wXOi4m3t TBDv6hxhGd/bcs0qcR1F3c7V+1fOaDl9ZIMCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTYPh/Cxmf03uoQ047Mjjj34LmNBDAfBgNVHSMEGDAWgBQI7G6KwXCnqW98TfM/ gzMy0yMCsTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMzMvQ094dWlzRndwNmx2ZkUzelA0TXpNdE1qQXJFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQ094dWlzRndwNmx2ZkUzelA0TXpN dE1qQXJFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTMzLzJENGZ3c1puOU43cUVOT096STQ0OS1DNWpRUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnmc4wDQYJKoZIhvcNAQELBQADggEBAEnbeWCn/tmLbyTOObpZK7Dy iDYi7xbSZo5e242Au1PUHo6cGu8/tg6pq4krZxGUg6zPFXDQ8cWNV5cKJFboMuRM c6O8FQZIOKqJPumWiBa3mNyaaklgxIMJ2uSh/H24ozAtkF2eUFvItmKQwJb6WCqe btgR4Fi39h9Pw+WRrka5whAbEMA/sAeoMzZEGVLHvX7r1kyoMw9LWRC5kCGbTUVu o3pgJEY9i+4IGNsMfa1Yy0tpFuooQ+roXoHTaAn90RyySx60FchzTlZ+O0Q8SXcI Pbe9iySJ7IeLJsU4zDIeZfCbBLoBKvb6dE9Ky4CoS6veuykoeKqQr6mRlc4Ts5w= -----END CERTIFICATE-----Generated at Mon May 19 04:39:19 2025 by rpki-client