$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/umAlya8B7xPEiE60jFdU3CaN00M.roa File: umAlya8B7xPEiE60jFdU3CaN00M.roa (raw, json) Hash identifier: DXZKew9G1HFaUEiQJbAYRJQ7hhL9vYLdwBxVBwFqrOM= Subject key identifier: BA:60:25:C9:AF:01:EF:13:C4:88:4E:B4:8C:57:54:DC:26:8D:D3:43 Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B Certificate serial: 46 Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/umAlya8B7xPEiE60jFdU3CaN00M.roa Signing time: Thu 01 May 2025 01:33:04 +0000 ROA not before: Thu 01 May 2025 01:33:04 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 7672 IP address blocks: 218.223.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 May 2025 02:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2222A4C3961E467181A78700B960718846C8404B Validity Not Before: May 1 01:33:04 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=BA6025C9AF01EF13C4884EB48C5754DC268DD343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:60:dc:47:07:be:b1:58:7e:4f:3b:9b:99: a5:7a:f9:e5:7b:8e:eb:d1:d5:19:14:33:0c:3c:d3: 37:83:b1:b9:d5:41:7c:68:e1:d5:1c:f9:b2:dc:27: 1a:e9:c7:d9:a2:9b:f9:24:05:d6:be:a7:26:00:00: 49:47:56:c3:88:4b:d2:85:ab:c9:99:db:21:86:d1: 35:41:d7:65:b8:ea:9c:77:07:9a:40:a9:ac:fb:e9: d0:a4:a4:09:2d:4e:8e:db:a8:e5:ab:72:f4:cc:f2: d7:49:e6:9e:47:e0:cc:0c:ee:2a:1f:f7:e6:6e:f6: 1f:64:a2:50:77:8f:5b:a3:1b:8c:dc:35:e7:64:a6: 0a:9f:70:d7:bf:3b:aa:36:39:ec:f4:2b:6e:c2:8c: 3c:e5:82:de:45:48:bb:3e:c2:4c:67:3e:5f:ad:55: 76:9f:27:e4:b6:76:33:92:68:18:d8:d3:f0:d0:24: c3:0d:5c:e7:20:3c:c5:71:1c:a9:24:fd:0d:7d:a1: 2e:15:93:31:04:99:bf:15:16:1d:86:8e:ca:75:ee: e7:97:77:4d:82:00:e4:61:44:1e:e9:7d:bd:37:4d: 17:4a:bc:2c:0f:92:d9:fb:26:5e:8d:13:de:38:19: 5c:39:fe:c9:da:11:10:71:c5:b6:82:dc:8a:36:2d: 8c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:60:25:C9:AF:01:EF:13:C4:88:4E:B4:8C:57:54:DC:26:8D:D3:43 X509v3 Authority Key Identifier: keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/umAlya8B7xPEiE60jFdU3CaN00M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.223.208.0/20 Signature Algorithm: sha256WithRSAEncryption 6a:7a:61:34:4f:f2:ab:46:07:84:cc:15:73:82:8a:f8:8b:cc: b8:ea:b0:ce:77:94:ee:fc:ea:c5:ce:ce:78:e7:20:ba:ab:35: c3:bc:89:04:8f:02:26:99:b3:36:de:97:75:fd:9f:46:a5:13: 00:79:0b:3b:f1:c7:57:38:f4:e5:fc:ef:38:84:94:dc:51:a0: 8c:68:bd:63:46:c6:d0:f6:e8:82:13:9d:da:68:3c:af:d2:c3: 89:5c:61:83:7e:5d:5a:95:71:9e:44:0d:5b:c9:b8:1e:08:6f: f5:a0:07:3b:88:49:6a:cc:d1:6c:c8:e5:da:ec:1a:a1:8b:1d: be:89:de:03:6f:ac:db:08:89:2f:4d:07:7a:ee:71:32:31:75: 0c:a3:e0:37:81:f6:4e:90:13:ec:2c:40:5f:7c:5b:26:fd:93: 23:5d:3f:b3:c4:94:46:5a:01:0b:e4:57:a3:df:0d:30:b4:52: 27:e8:7f:7d:45:f9:f5:6f:25:95:36:d7:1a:0c:47:97:da:0c: 1e:83:cf:9a:f1:26:a8:39:40:89:cd:9a:ea:71:97:f1:40:98: 04:80:fd:82:cc:c3:a7:6d:0a:83:24:b9:d6:cf:71:4c:1f:e5: ac:9a:bb:f5:db:79:3a:8e:f2:70:c7:24:95:62:39:fa:2b:d3: 9f:c7:1b:f7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI1MDUwMTAx MzMwNFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQkE2MDI1QzlBRjAxRUYx M0M0ODg0RUI0OEM1NzU0REMyNjhERDM0MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKPXYNxHB76xWH5PO5uZpXr55XuO69HVGRQzDDzTN4OxudVBfGjh 1Rz5stwnGunH2aKb+SQF1r6nJgAASUdWw4hL0oWryZnbIYbRNUHXZbjqnHcHmkCp rPvp0KSkCS1Ojtuo5aty9Mzy10nmnkfgzAzuKh/35m72H2SiUHePW6MbjNw152Sm Cp9w1787qjY57PQrbsKMPOWC3kVIuz7CTGc+X61Vdp8n5LZ2M5JoGNjT8NAkww1c 5yA8xXEcqST9DX2hLhWTMQSZvxUWHYaOynXu55d3TYIA5GFEHul9vTdNF0q8LA+S 2fsmXo0T3jgZXDn+ydoREHHFtoLcijYtjN8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS6YCXJrwHvE8SITrSMV1TcJo3TQzAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5 YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzIvdW1BbHlhOEI3eFBFaUU2MGpGZFUzQ2FOMDBNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNrf0DANBgkqhkiG9w0BAQsFAAOCAQEAanphNE/yq0YHhMwVc4KK+IvMuOqw zneU7vzqxc7OeOcguqs1w7yJBI8CJpmzNt6Xdf2fRqUTAHkLO/HHVzj05fzvOISU 3FGgjGi9Y0bG0PboghOd2mg8r9LDiVxhg35dWpVxnkQNW8m4Hghv9aAHO4hJaszR bMjl2uwaoYsdvoneA2+s2wiJL00Heu5xMjF1DKPgN4H2TpAT7CxAX3xbJv2TI10/ s8SURloBC+RXo98NMLRSJ+h/fUX59W8llTbXGgxHl9oMHoPPmvEmqDlAic2a6nGX 8UCYBID9gszDp20KgyS51s9xTB/lrJq79dt5Oo7ycMcklWI5+ivTn8cb9w== -----END CERTIFICATE-----Generated at Mon May 19 04:33:54 2025 by rpki-client