$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/iC0iwFmBAK8iTyU5DxIBfskoSEQ.roa File: iC0iwFmBAK8iTyU5DxIBfskoSEQ.roa (raw, json) Hash identifier: +/XxwPkAVVUH6tlaUw6NZaIjCtoxqHLvsOz5afskqGk= Subject key identifier: 88:2D:22:C0:59:81:00:AF:22:4F:25:39:0F:12:01:7E:C9:28:48:44 Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B Certificate serial: 3D Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/iC0iwFmBAK8iTyU5DxIBfskoSEQ.roa Signing time: Thu 01 May 2025 01:33:00 +0000 ROA not before: Thu 01 May 2025 01:33:00 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 7672 IP address blocks: 103.225.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2222A4C3961E467181A78700B960718846C8404B Validity Not Before: May 1 01:33:00 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=882D22C0598100AF224F25390F12017EC9284844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:71:b6:84:ea:1f:ea:3d:2b:b7:85:5f:d4: de:e5:17:ac:b6:a2:7c:c7:c5:a0:c3:45:f1:f6:aa: fa:2c:84:ea:97:67:d3:e7:b0:1f:5a:64:53:89:9b: 9e:68:ac:bc:2a:88:d8:29:e5:d5:b2:3f:97:2a:0c: e6:9c:35:da:5c:1e:9b:ee:b1:e3:10:e7:84:03:52: fa:fa:74:c8:06:b2:cb:5a:01:b4:6e:d8:62:62:06: 03:7b:24:6d:6b:cf:a8:13:43:53:fc:9e:a5:e2:69: ad:30:97:69:a5:90:79:54:4d:61:f9:d7:a1:ae:45: 84:9d:be:7e:97:34:43:a9:4b:c3:04:10:34:4a:25: df:66:87:45:ac:6a:c7:4f:2c:c4:35:51:46:8a:c8: 61:4b:51:cd:ce:68:2c:57:51:b3:b2:ca:db:fc:80: d6:77:7f:4a:80:4f:b3:b8:a3:e1:fd:76:87:eb:d9: 3a:81:6c:7a:82:20:ba:97:f6:bf:28:40:87:77:d9: 54:12:6d:2c:ab:60:27:c0:3d:35:01:5c:2f:e8:ff: 91:a7:02:36:a1:79:1d:40:b0:a4:9f:5c:ad:c2:a7: 96:c5:28:6a:2b:a2:d4:4d:af:31:8a:45:92:7d:0e: a7:80:8d:f8:f7:27:65:4b:8c:88:27:04:1c:2f:2f: c9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2D:22:C0:59:81:00:AF:22:4F:25:39:0F:12:01:7E:C9:28:48:44 X509v3 Authority Key Identifier: keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/iC0iwFmBAK8iTyU5DxIBfskoSEQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.225.120.0/22 Signature Algorithm: sha256WithRSAEncryption 67:36:fa:85:17:8b:f2:3c:79:69:84:92:24:ab:14:4e:58:36: 57:62:07:3b:3b:f4:22:6d:47:f5:ca:6a:9a:3f:1b:5f:07:7f: 6d:94:d0:8a:10:c8:4f:33:77:12:39:c7:06:5f:82:18:cf:e6: 83:96:dc:22:fe:db:e4:ee:9b:a4:3e:81:04:5a:83:f5:28:89: d2:a6:86:0e:f2:a8:47:3d:54:6c:05:84:56:84:46:76:70:4b: 8d:e4:38:2b:eb:1b:25:ad:40:b3:5d:02:c5:83:65:ad:07:39: db:1f:d0:64:5b:b0:0c:06:46:09:f2:b9:9e:3b:16:73:a8:21: 46:d0:4d:19:83:73:08:3a:9c:50:15:b5:3e:ad:d6:f6:8a:e8: 41:8c:4d:c3:93:19:d0:24:b1:42:18:78:67:b4:a1:33:d7:d8: 20:3a:7d:aa:2e:c7:80:1b:36:a9:5b:d8:6b:ab:2c:5e:08:1a: 36:b5:be:3c:ee:bc:c9:40:a4:d2:d9:0b:9d:e2:b6:cb:c2:c2: 05:1a:c8:b4:cc:00:ce:ab:f3:36:0e:e3:66:3a:e4:87:36:96: ef:24:c8:69:43:42:98:b0:6c:5c:c7:8e:8f:80:1e:3a:8d:a0: ab:12:b2:4b:45:4f:8a:4f:e5:52:57:d7:ce:03:7f:0f:04:29: 8f:9f:07:0b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI1MDUwMTAx MzMwMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoODgyRDIyQzA1OTgxMDBB RjIyNEYyNTM5MEYxMjAxN0VDOTI4NDg0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANuKcbaE6h/qPSu3hV/U3uUXrLaifMfFoMNF8faq+iyE6pdn0+ew H1pkU4mbnmisvCqI2Cnl1bI/lyoM5pw12lwem+6x4xDnhANS+vp0yAayy1oBtG7Y YmIGA3skbWvPqBNDU/yepeJprTCXaaWQeVRNYfnXoa5FhJ2+fpc0Q6lLwwQQNEol 32aHRaxqx08sxDVRRorIYUtRzc5oLFdRs7LK2/yA1nd/SoBPs7ij4f12h+vZOoFs eoIgupf2vyhAh3fZVBJtLKtgJ8A9NQFcL+j/kacCNqF5HUCwpJ9crcKnlsUoaiui 1E2vMYpFkn0Op4CN+PcnZUuMiCcEHC8vydUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSILSLAWYEAryJPJTkPEgF+yShIRDAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5 YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzIvaUMwaXdGbUJBSzhpVHlVNUR4SUJmc2tvU0VRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfheDANBgkqhkiG9w0BAQsFAAOCAQEAZzb6hReL8jx5aYSSJKsUTlg2V2IH Ozv0Im1H9cpqmj8bXwd/bZTQihDITzN3EjnHBl+CGM/mg5bcIv7b5O6bpD6BBFqD 9SiJ0qaGDvKoRz1UbAWEVoRGdnBLjeQ4K+sbJa1As10CxYNlrQc52x/QZFuwDAZG CfK5njsWc6ghRtBNGYNzCDqcUBW1Pq3W9oroQYxNw5MZ0CSxQhh4Z7ShM9fYIDp9 qi7HgBs2qVvYa6ssXggaNrW+PO68yUCk0tkLneK2y8LCBRrItMwAzqvzNg7jZjrk hzaW7yTIaUNCmLBsXMeOj4AeOo2gqxKyS0VPik/lUlfXzgN/DwQpj58HCw== -----END CERTIFICATE-----Generated at Sun May 18 21:28:35 2025 by rpki-client