$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/k-3Um3vUDa4_mm59G2ZFq3DQbls.roa File: k-3Um3vUDa4_mm59G2ZFq3DQbls.roa (raw, json) Hash identifier: VmEpR4PFYJtw3syMFv3H6fuxdCLSo07s/iz3l2btzzQ= Subject key identifier: 93:ED:D4:9B:7B:D4:0D:AE:3F:9A:6E:7D:1B:66:45:AB:70:D0:6E:5B Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: 0105 Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/k-3Um3vUDa4_mm59G2ZFq3DQbls.roa Signing time: Thu 01 May 2025 01:32:10 +0000 ROA not before: Thu 01 May 2025 01:32:10 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 9370 IP address blocks: 112.109.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: May 1 01:32:10 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=93EDD49B7BD40DAE3F9A6E7D1B6645AB70D06E5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:02:be:af:2f:7e:ee:3c:c1:7b:8d:fe:5b: 24:12:90:22:f6:2f:ff:62:a2:59:24:91:e6:cc:2c: 7d:33:1b:4e:21:b4:6a:43:32:de:5c:b4:64:1f:e4: a7:46:af:a0:5c:58:b5:a2:15:86:6b:14:39:bb:62: 38:68:6b:8c:42:35:0d:e6:9f:ed:e7:aa:85:a4:11: 5c:c4:b5:08:a3:e3:c0:7b:0f:7c:89:af:d0:e3:36: c3:33:05:7b:78:50:1b:aa:13:19:03:d7:d3:18:eb: 05:52:62:90:73:5d:fe:60:73:63:d5:bc:a2:9d:09: db:7a:e8:4e:e7:70:13:37:9a:93:52:91:34:b5:50: 21:30:34:0a:b6:4b:6d:3f:b7:11:53:d7:18:9f:82: 27:0b:80:5e:b4:fe:2f:31:93:0e:7f:75:96:ee:8b: 88:18:d6:35:fe:d2:42:5b:c1:af:8d:66:1e:0c:29: 40:6d:31:88:24:92:d7:59:fb:e2:fd:db:4b:8c:91: c6:12:33:e5:b6:b4:b6:9a:46:93:25:52:67:b7:ea: 41:d3:60:c2:fa:f2:c9:2b:88:8c:d8:27:65:21:01: c3:1b:71:1a:4b:77:8f:60:5b:bf:f7:a0:75:86:ab: 99:84:20:94:45:d9:c4:12:ee:1f:93:ed:ce:6e:df: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:ED:D4:9B:7B:D4:0D:AE:3F:9A:6E:7D:1B:66:45:AB:70:D0:6E:5B X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/k-3Um3vUDa4_mm59G2ZFq3DQbls.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.109.0.0/20 Signature Algorithm: sha256WithRSAEncryption 71:3e:d1:b9:f3:b8:34:ac:b3:b6:71:46:c8:7e:ef:c7:1e:fa: 00:56:35:e4:9c:3c:86:88:a3:06:92:21:0a:02:09:f9:f7:31: bc:7a:46:a4:3a:63:13:0c:e0:44:8f:fd:b6:0e:da:59:48:85: a6:0e:34:24:0e:8d:50:b3:e8:1a:4a:51:0d:26:37:4e:7e:bc: bb:7c:03:c1:54:5c:97:e4:a5:54:bd:08:13:08:e5:1e:bd:42: 32:29:7a:2c:ec:b6:8b:b9:28:24:0b:bb:01:f4:40:b8:de:5b: b4:4a:72:5a:a6:63:d7:6e:73:db:c2:4d:1c:b9:d1:e4:11:88: ec:fa:50:7e:80:3f:8d:5a:53:9c:0f:e3:87:89:f6:3b:70:c7: bf:bd:56:a5:99:49:7f:48:82:08:86:3e:fb:5f:4b:f0:0c:1d: fa:a6:24:40:3f:60:28:8c:84:90:df:f4:b4:d5:16:0b:bd:02: 7f:de:40:94:63:cf:82:41:b2:68:cd:c3:8a:b1:10:6f:6a:9d: bb:04:92:75:49:06:27:d3:6c:10:c6:55:2e:6d:1b:f6:d0:3a: 0b:ac:bf:cd:46:54:a7:d4:e2:e4:00:d6:6a:70:20:5d:43:d6: cd:ac:ad:ab:86:d2:88:1c:0c:e1:85:a7:88:34:5f:52:19:91: 32:95:0e:90 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNTA1MDEw MTMyMTBaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkzRURENDlCN0JENDBE QUUzRjlBNkU3RDFCNjY0NUFCNzBEMDZFNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAOgK+ry9+7jzBe43+WyQSkCL2L/9iolkkkebMLH0zG04htGpD Mt5ctGQf5KdGr6BcWLWiFYZrFDm7Yjhoa4xCNQ3mn+3nqoWkEVzEtQij48B7D3yJ r9DjNsMzBXt4UBuqExkD19MY6wVSYpBzXf5gc2PVvKKdCdt66E7ncBM3mpNSkTS1 UCEwNAq2S20/txFT1xifgicLgF60/i8xkw5/dZbui4gY1jX+0kJbwa+NZh4MKUBt MYgkktdZ++L920uMkcYSM+W2tLaaRpMlUme36kHTYML68skriIzYJ2UhAcMbcRpL d49gW7/3oHWGq5mEIJRF2cQS7h+T7c5u32TpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUk+3Um3vUDa4/mm59G2ZFq3DQblswHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ3L2stM1VtM3ZVRGE0X21tNTlHMlpGcTNEUWJscy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARwbQAwDQYJKoZIhvcNAQELBQADggEBAHE+0bnzuDSss7ZxRsh+78ce+gBW NeScPIaIowaSIQoCCfn3Mbx6RqQ6YxMM4ESP/bYO2llIhaYONCQOjVCz6BpKUQ0m N05+vLt8A8FUXJfkpVS9CBMI5R69QjIpeizstou5KCQLuwH0QLjeW7RKclqmY9du c9vCTRy50eQRiOz6UH6AP41aU5wP44eJ9jtwx7+9VqWZSX9IggiGPvtfS/AMHfqm JEA/YCiMhJDf9LTVFgu9An/eQJRjz4JBsmjNw4qxEG9qnbsEknVJBifTbBDGVS5t G/bQOgusv81GVKfU4uQA1mpwIF1D1s2srauG0ogcDOGFp4g0X1IZkTKVDpA= -----END CERTIFICATE-----Generated at Sat May 17 02:36:02 2025 by rpki-client