$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20134/BqI7_0JfD38955AgMNANyNh1DzQ.roa File: BqI7_0JfD38955AgMNANyNh1DzQ.roa (raw, json) Hash identifier: YdNMECBVmOg75qFe3OLYPG5s9tvqJ7NtJ4IlBwe8yeU= Subject key identifier: 06:A2:3B:FF:42:5F:0F:7F:3D:E7:90:20:30:D0:0D:C8:D8:75:0F:34 Certificate issuer: /CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063 Certificate serial: 1A Authority key identifier: D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/BqI7_0JfD38955AgMNANyNh1DzQ.roa Signing time: Wed 07 May 2025 06:22:33 +0000 ROA not before: Wed 07 May 2025 06:22:33 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131960 IP address blocks: 123.108.152.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 May 2025 04:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063 Validity Not Before: May 7 06:22:33 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=06A23BFF425F0F7F3DE7902030D00DC8D8750F34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:ec:58:95:97:96:f5:87:e1:f9:6f:45:3d: 5d:59:35:ac:57:0c:36:1b:30:30:f4:f6:95:42:44: b3:08:3e:1c:b0:ec:6a:19:bc:5a:74:8d:4f:8f:8b: ed:02:0d:19:fd:93:89:0c:62:97:8b:57:c7:a2:13: 60:64:99:7d:e3:15:45:64:c4:e9:c9:b2:b4:30:35: b6:d7:f3:fd:14:96:e0:70:90:2f:be:4c:04:2b:e1: fe:13:b6:80:91:a4:53:76:3e:62:22:35:35:50:38: ba:d5:a7:30:6a:cd:37:00:00:42:77:25:a8:31:22: 1c:32:5e:e9:ca:de:d5:68:03:98:d8:b4:9c:5b:f2: f2:8b:45:c0:1d:1d:bd:db:00:42:d8:21:15:01:e6: 0a:9c:f7:02:cd:9d:c9:06:fa:e5:b9:84:4e:0b:d2: 72:f3:58:37:f2:77:81:35:5f:53:c3:c0:f3:de:e2: 24:af:54:d8:83:9b:91:34:ed:63:e3:52:21:45:4b: f6:87:ab:d5:2b:99:a0:7e:d9:07:60:df:d0:f1:c6: 25:ec:cd:2e:3f:39:80:f8:42:c6:87:38:bf:34:b9: a4:c5:d3:98:21:fa:df:f0:00:64:90:a9:eb:8d:b3: f3:c5:9b:33:9b:99:6c:ca:1d:de:c2:31:da:e1:c2: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A2:3B:FF:42:5F:0F:7F:3D:E7:90:20:30:D0:0D:C8:D8:75:0F:34 X509v3 Authority Key Identifier: keyid:D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/BqI7_0JfD38955AgMNANyNh1DzQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.108.152.0/21 Signature Algorithm: sha256WithRSAEncryption 42:04:bf:92:4b:52:4b:49:bf:09:7b:31:48:c6:32:2c:1c:e4: 19:e4:0b:4c:65:a5:29:61:14:c9:15:2f:7a:fb:5e:b0:5f:26: 91:4f:68:cc:4a:21:2d:79:a9:a7:b3:4a:88:1f:08:b4:a0:74: ad:08:f4:2a:14:53:7e:fd:be:f6:73:f1:bf:9a:a2:64:3a:d1: f2:b5:a0:0b:79:bf:bc:af:42:19:58:86:4c:1a:b9:c4:cb:15: 0c:c1:1d:df:99:ff:e7:fe:d3:aa:35:29:10:d1:f7:b7:67:6c: 0c:50:5e:6f:49:98:0c:c2:c3:f0:ec:4b:18:d3:50:4d:c9:01: 1d:41:96:3b:c5:8a:25:9f:36:ec:9c:80:cd:cf:7b:5c:a5:23: 13:42:9a:e6:84:21:0c:b1:51:61:36:70:6b:3f:77:cc:2c:1d: aa:de:b1:f0:23:6c:25:3a:da:ec:29:61:d7:f9:aa:9a:dd:38: 39:a1:12:cf:af:01:ae:6b:43:05:3f:50:dd:e8:ee:be:ac:8a: 69:94:70:0e:e0:09:da:da:8d:18:6f:85:77:6a:1a:3d:70:fb: 88:00:73:4b:43:96:9f:35:46:62:d8:1e:39:b8:a5:66:80:8b: 53:fd:4f:52:3b:1b:3f:c7:ea:fe:0e:c4:b6:a4:46:47:4b:21: 51:67:5d:4a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDJB OUE2NTJCODdDOTY5NTdDOURBRkQ2RkZBRTcyNDQxODhFMDYzMB4XDTI1MDUwNzA2 MjIzM1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMDZBMjNCRkY0MjVGMEY3 RjNERTc5MDIwMzBEMDBEQzhEODc1MEYzNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKKd7FiVl5b1h+H5b0U9XVk1rFcMNhswMPT2lUJEswg+HLDsahm8 WnSNT4+L7QINGf2TiQxil4tXx6ITYGSZfeMVRWTE6cmytDA1ttfz/RSW4HCQL75M BCvh/hO2gJGkU3Y+YiI1NVA4utWnMGrNNwAAQnclqDEiHDJe6cre1WgDmNi0nFvy 8otFwB0dvdsAQtghFQHmCpz3As2dyQb65bmETgvScvNYN/J3gTVfU8PA897iJK9U 2IObkTTtY+NSIUVL9oer1SuZoH7ZB2Df0PHGJezNLj85gPhCxoc4vzS5pMXTmCH6 3/AAZJCp642z88WbM5uZbMod3sIx2uHChzUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQGojv/Ql8Pfz3nkCAw0A3I2HUPNDAfBgNVHSMEGDAWgBTQKpplK4fJaVfJ2v1v +uckQYjgYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMzQvMENxYVpTdUh5V2xYeWRyOWJfcm5KRUdJNEdNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMENxYVpTdUh5V2xYeWRyOWJfcm5K RUdJNEdNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTM0L0JxSTdfMEpmRDM4OTU1QWdNTkFOeU5oMUR6US5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAN7bJgwDQYJKoZIhvcNAQELBQADggEBAEIEv5JLUktJvwl7MUjGMiwc 5BnkC0xlpSlhFMkVL3r7XrBfJpFPaMxKIS15qaezSogfCLSgdK0I9CoUU379vvZz 8b+aomQ60fK1oAt5v7yvQhlYhkwaucTLFQzBHd+Z/+f+06o1KRDR97dnbAxQXm9J mAzCw/DsSxjTUE3JAR1BljvFiiWfNuycgM3Pe1ylIxNCmuaEIQyxUWE2cGs/d8ws HaresfAjbCU62uwpYdf5qprdODmhEs+vAa5rQwU/UN3o7r6simmUcA7gCdrajRhv hXdqGj1w+4gAc0tDlp81RmLYHjm4pWaAi1P9T1I7Gz/H6v4OxLakRkdLIVFnXUo= -----END CERTIFICATE-----Generated at Mon May 19 07:36:01 2025 by rpki-client