$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20134/R68dh5NAt_CB8WWg_4OIcI2MkO0.roa File: R68dh5NAt_CB8WWg_4OIcI2MkO0.roa (raw, json) Hash identifier: oPCzuPkjfdkSsPOF+0AvL2pL3Eh9cyBA2o8zwhrJdKA= Subject key identifier: 47:AF:1D:87:93:40:B7:F0:81:F1:65:A0:FF:83:88:70:8D:8C:90:ED Certificate issuer: /CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063 Certificate serial: 18 Authority key identifier: D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/R68dh5NAt_CB8WWg_4OIcI2MkO0.roa Signing time: Wed 07 May 2025 06:22:33 +0000 ROA not before: Wed 07 May 2025 06:22:33 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131960 IP address blocks: 110.76.180.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 May 2025 02:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063 Validity Not Before: May 7 06:22:33 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=47AF1D879340B7F081F165A0FF8388708D8C90ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7c:f7:7d:81:4d:d0:94:c7:96:05:f7:ce:4e: 44:4e:82:c4:10:5a:cf:8d:da:c3:6a:7a:06:2d:32: 81:d1:53:da:c1:67:30:5c:17:23:9f:d0:b0:de:dd: 29:dc:dd:f6:58:60:e9:85:ca:77:8d:d7:f0:90:a7: c8:b6:3c:e2:95:6d:f8:88:7a:71:6c:bd:12:ab:15: f1:92:88:d2:e3:dd:3e:ef:66:b9:f2:79:d3:2f:3a: e4:50:4f:71:1b:be:c1:6e:c1:37:77:ba:2f:d9:de: a4:b7:b7:de:11:79:c8:ee:7c:c2:89:e6:96:0d:ca: 18:02:7b:eb:0a:a2:cf:8e:2a:17:8a:3f:32:a9:87: 60:a3:a0:47:a8:53:fb:4f:6e:71:9c:84:28:96:04: 78:bc:05:2e:cc:14:3b:0d:74:c2:fd:da:94:c1:4a: 58:44:dc:39:e5:a3:68:68:01:4d:c3:82:1f:06:7b: b3:a1:c7:39:9e:c5:4a:28:a7:a6:27:b7:1b:3a:e3: b8:61:98:eb:d3:45:2f:38:16:64:a6:52:1e:8b:77: 11:b3:3f:d1:d3:e5:62:f1:b9:2c:97:9c:f7:8a:41: 48:c8:22:63:14:be:b9:f1:f4:06:91:7c:66:7f:f1: f0:95:33:f0:8b:12:c4:89:0f:ac:2e:8b:96:c6:47: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AF:1D:87:93:40:B7:F0:81:F1:65:A0:FF:83:88:70:8D:8C:90:ED X509v3 Authority Key Identifier: keyid:D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/R68dh5NAt_CB8WWg_4OIcI2MkO0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.76.180.0/22 Signature Algorithm: sha256WithRSAEncryption 30:0b:2c:3f:6b:93:ca:31:a7:70:06:7a:88:c6:41:e7:67:f1: 4a:87:27:8b:ba:d6:39:c9:8d:45:cd:fe:5c:7f:b9:86:5f:26: df:0e:39:7b:8f:5a:9d:ee:c1:15:d2:df:ce:57:fb:44:83:7b: b3:c7:2b:66:99:b9:a7:15:be:c1:56:30:55:8f:45:ef:e0:a4: 0d:48:31:62:62:c0:24:06:e0:35:cb:f8:a5:e7:ab:78:14:98: bd:9f:95:5e:9b:b7:f7:8d:5d:d3:11:5b:0b:2a:3b:32:8f:74: de:6a:19:ad:3c:c5:8a:51:6d:4f:69:14:1e:97:8c:6e:b9:f8: c9:d5:68:41:c8:3f:2c:73:2f:d4:ae:3a:07:38:3a:fe:43:c5: f9:f8:96:ca:ad:55:f7:80:7f:0c:fe:be:df:d9:7e:3c:45:2d: b8:19:f6:a5:c8:0a:4c:d7:cb:67:b1:3d:78:5c:e2:32:4b:e7: e7:43:d9:bb:1b:d9:3a:19:8e:8f:0f:06:97:fc:8f:eb:52:86: 05:e0:fd:85:ff:93:13:b5:f8:45:ae:60:64:6f:a8:31:af:0f: b8:c4:67:3a:c3:41:9a:84:c6:be:73:46:c8:99:21:49:e1:aa: f7:9a:c7:d1:e3:c0:3c:8c:66:76:da:2b:e4:e0:2b:da:aa:57: 16:f3:7b:f2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDJB OUE2NTJCODdDOTY5NTdDOURBRkQ2RkZBRTcyNDQxODhFMDYzMB4XDTI1MDUwNzA2 MjIzM1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNDdBRjFEODc5MzQwQjdG MDgxRjE2NUEwRkY4Mzg4NzA4RDhDOTBFRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM98932BTdCUx5YF985ORE6CxBBaz43aw2p6Bi0ygdFT2sFnMFwX I5/QsN7dKdzd9lhg6YXKd43X8JCnyLY84pVt+Ih6cWy9EqsV8ZKI0uPdPu9mufJ5 0y865FBPcRu+wW7BN3e6L9nepLe33hF5yO58wonmlg3KGAJ76wqiz44qF4o/MqmH YKOgR6hT+09ucZyEKJYEeLwFLswUOw10wv3alMFKWETcOeWjaGgBTcOCHwZ7s6HH OZ7FSiinpie3GzrjuGGY69NFLzgWZKZSHot3EbM/0dPlYvG5LJec94pBSMgiYxS+ ufH0BpF8Zn/x8JUz8IsSxIkPrC6LlsZHIv8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBRHrx2Hk0C38IHxZaD/g4hwjYyQ7TAfBgNVHSMEGDAWgBTQKpplK4fJaVfJ2v1v +uckQYjgYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMzQvMENxYVpTdUh5V2xYeWRyOWJfcm5KRUdJNEdNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMENxYVpTdUh5V2xYeWRyOWJfcm5K RUdJNEdNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTM0L1I2OGRoNU5BdF9DQjhXV2dfNE9JY0kyTWtPMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJuTLQwDQYJKoZIhvcNAQELBQADggEBADALLD9rk8oxp3AGeojGQedn 8UqHJ4u61jnJjUXN/lx/uYZfJt8OOXuPWp3uwRXS385X+0SDe7PHK2aZuacVvsFW MFWPRe/gpA1IMWJiwCQG4DXL+KXnq3gUmL2flV6bt/eNXdMRWwsqOzKPdN5qGa08 xYpRbU9pFB6XjG65+MnVaEHIPyxzL9SuOgc4Ov5Dxfn4lsqtVfeAfwz+vt/ZfjxF LbgZ9qXICkzXy2exPXhc4jJL5+dD2bsb2ToZjo8PBpf8j+tShgXg/YX/kxO1+EWu YGRvqDGvD7jEZzrDQZqExr5zRsiZIUnhqveax9HjwDyMZnbaK+TgK9qqVxbze/I= -----END CERTIFICATE-----Generated at Mon May 19 04:28:35 2025 by rpki-client