$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/tUFxl7oD6E1isbgDzzu_hDDo6t8.roa File: tUFxl7oD6E1isbgDzzu_hDDo6t8.roa (raw, json) Hash identifier: YDxy9ThTMv3U32BRVvzx5Opc6EEigd9rFxONEX5t0IY= Subject key identifier: B5:41:71:97:BA:03:E8:4D:62:B1:B8:03:CF:3B:BF:84:30:E8:EA:DF Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: 010C Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/tUFxl7oD6E1isbgDzzu_hDDo6t8.roa Signing time: Thu 01 May 2025 01:32:13 +0000 ROA not before: Thu 01 May 2025 01:32:13 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 9370 IP address blocks: 36.53.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 16:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: May 1 01:32:13 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=B5417197BA03E84D62B1B803CF3BBF8430E8EADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:cb:31:5f:9e:16:ff:02:89:a1:a8:35:ae: 4b:72:b8:f1:c4:f3:14:a2:63:04:59:45:99:6a:fe: 0e:92:cc:24:b0:13:d9:30:e6:60:48:ef:4a:3a:77: 5c:df:a3:ec:8d:9d:34:13:de:81:61:db:d8:b5:b6: 88:27:0e:4e:ce:28:45:8c:2a:46:d3:fc:3a:ab:75: 0a:47:6d:a7:11:d4:dd:af:bc:7c:03:bd:e5:59:c8: 41:1b:c5:35:65:73:b8:43:48:41:3e:e4:f1:5b:12: ef:21:23:27:c1:24:22:89:68:4a:36:8f:c2:bc:46: a1:fc:d2:4c:ba:b0:a8:fb:16:7c:77:27:eb:6c:47: f5:22:32:c8:90:59:fa:9f:49:8b:d5:2f:c1:a3:b4: b2:72:13:4a:4b:19:00:10:83:5f:f5:12:c7:56:1d: e7:e5:d7:1e:8f:10:49:2f:22:cc:c1:28:e3:5a:f8: da:05:5b:32:08:d7:68:cc:c8:a9:9e:0a:52:40:6d: 62:1d:28:9b:7e:74:2f:21:b3:01:cb:35:ea:53:83: e9:d8:94:85:4d:dc:3f:32:7d:8a:30:c9:64:dd:47: d7:ba:0e:17:7b:89:77:89:79:f0:db:8b:5a:e3:84: 29:0b:cc:4b:4f:d3:d4:f6:80:80:da:ef:e1:7d:4f: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:41:71:97:BA:03:E8:4D:62:B1:B8:03:CF:3B:BF:84:30:E8:EA:DF X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/tUFxl7oD6E1isbgDzzu_hDDo6t8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.53.0.0/17 Signature Algorithm: sha256WithRSAEncryption a6:17:ff:fa:57:f4:fc:36:14:aa:20:2c:8d:ad:bd:67:a3:82: 25:df:27:8d:4d:b5:b3:2c:31:43:b3:37:7a:74:dd:90:0e:fc: be:4c:d1:d6:fd:1f:19:f0:2c:82:b5:0d:ea:62:82:69:cd:4c: 46:7c:ae:73:37:d2:0f:7e:13:8f:6e:50:30:05:2e:59:53:42: 17:e9:92:23:c6:be:8e:79:8b:d8:21:c6:27:7e:69:8f:4a:b0: b5:b8:b7:f6:56:74:bf:c1:33:24:83:9b:1d:86:81:e5:e6:a2: df:9e:f6:5e:07:9b:6e:2e:22:96:89:5c:87:23:15:61:8e:e7: c8:e9:00:52:50:05:12:18:50:dd:0f:d0:16:9f:53:74:18:bc: 48:f2:29:5c:23:9c:6d:c8:fd:81:3f:64:3f:3f:a4:b3:95:fe: 4a:56:1e:e0:f1:e8:95:b6:b0:c7:11:e7:62:a8:ea:71:ed:12: fd:72:3b:f6:2d:28:89:96:fa:50:0c:ad:26:92:3a:8b:e5:8e: 98:93:b2:a5:e7:98:00:30:79:6c:dc:93:51:cb:d3:58:6f:74: 10:8e:e1:67:21:a9:89:f5:9e:df:5e:6e:86:f1:e8:a8:86:b7: 7e:b2:9e:7f:3e:e9:a4:46:a4:69:d1:c6:fc:cb:25:4f:d7:67: 66:3c:d0:08 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNTA1MDEw MTMyMTNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI1NDE3MTk3QkEwM0U4 NEQ2MkIxQjgwM0NGM0JCRjg0MzBFOEVBREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE+ssxX54W/wKJoag1rktyuPHE8xSiYwRZRZlq/g6SzCSwE9kw 5mBI70o6d1zfo+yNnTQT3oFh29i1tognDk7OKEWMKkbT/DqrdQpHbacR1N2vvHwD veVZyEEbxTVlc7hDSEE+5PFbEu8hIyfBJCKJaEo2j8K8RqH80ky6sKj7Fnx3J+ts R/UiMsiQWfqfSYvVL8GjtLJyE0pLGQAQg1/1EsdWHefl1x6PEEkvIszBKONa+NoF WzII12jMyKmeClJAbWIdKJt+dC8hswHLNepTg+nYlIVN3D8yfYowyWTdR9e6Dhd7 iXeJefDbi1rjhCkLzEtP09T2gIDa7+F9T8YlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUtUFxl7oD6E1isbgDzzu/hDDo6t8wHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ3L3RVRnhsN29ENkUxaXNiZ0R6enVfaEREbzZ0OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAckNQAwDQYJKoZIhvcNAQELBQADggEBAKYX//pX9Pw2FKogLI2tvWejgiXf J41NtbMsMUOzN3p03ZAO/L5M0db9HxnwLIK1DepigmnNTEZ8rnM30g9+E49uUDAF LllTQhfpkiPGvo55i9ghxid+aY9KsLW4t/ZWdL/BMySDmx2GgeXmot+e9l4Hm24u IpaJXIcjFWGO58jpAFJQBRIYUN0P0BafU3QYvEjyKVwjnG3I/YE/ZD8/pLOV/kpW HuDx6JW2sMcR52Ko6nHtEv1yO/YtKImW+lAMrSaSOovljpiTsqXnmAAweWzck1HL 01hvdBCO4WchqYn1nt9ebobx6KiGt36ynn8+6aRGpGnRxvzLJU/XZ2Y80Ag= -----END CERTIFICATE-----Generated at Sat May 17 19:24:15 2025 by rpki-client