$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/yQq_GAN8hUz3TC_PunLVtigoATw.roa File: yQq_GAN8hUz3TC_PunLVtigoATw.roa (raw, json) Hash identifier: xX/y/gJkNKxbDUjgZXq2ZdPedfgrDW+gHMSI1kTnWcM= Subject key identifier: C9:0A:BF:18:03:7C:85:4C:F7:4C:2F:CF:BA:72:D5:B6:28:28:01:3C Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: 0110 Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/yQq_GAN8hUz3TC_PunLVtigoATw.roa Signing time: Thu 01 May 2025 01:32:16 +0000 ROA not before: Thu 01 May 2025 01:32:16 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 9370 IP address blocks: 202.222.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 00:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: May 1 01:32:16 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=C90ABF18037C854CF74C2FCFBA72D5B62828013C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:84:46:81:99:0e:c6:bd:22:94:3d:a8:bd:d2: 0a:63:1c:47:85:32:c3:c2:53:bc:21:d9:1a:4b:2b: 03:fd:d5:b2:8a:8a:1d:fd:f4:8c:f7:1c:1d:d7:b5: 20:d6:72:ec:fe:a2:7d:ea:a8:42:1a:55:61:b4:91: d3:f7:e3:0c:20:48:34:f4:1b:05:e5:c9:02:b9:d2: a6:0f:88:53:06:a9:a9:cd:12:9a:2e:df:56:a2:b5: a1:4c:41:73:f4:b8:6c:b3:11:c8:da:32:f2:73:68: 65:5f:19:a3:50:3f:20:6b:7b:ad:ae:c6:37:1e:72: 0f:69:de:0e:72:df:43:fc:f0:35:0e:4b:fc:03:15: c6:5a:23:0b:d6:d6:a7:6f:01:57:de:d4:b9:19:e3: 3b:9c:46:53:0b:c7:75:e7:20:c7:47:75:21:c6:3d: c2:ef:c0:05:2b:10:05:4f:88:8a:96:9f:5d:21:d2: 37:0f:07:e1:4e:3f:d1:41:a3:57:bc:51:a2:04:e3: 21:2b:d8:49:73:54:48:c7:ee:87:df:1f:70:c6:3c: ab:8a:10:23:b2:12:ff:d3:69:21:99:44:5d:49:b5: cc:51:a4:12:7a:c5:05:b9:b2:b6:3d:ec:21:f0:8c: 1c:49:fb:b7:dd:d2:08:e9:95:11:bb:ab:16:6f:02: 10:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0A:BF:18:03:7C:85:4C:F7:4C:2F:CF:BA:72:D5:B6:28:28:01:3C X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/yQq_GAN8hUz3TC_PunLVtigoATw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.222.16.0/20 Signature Algorithm: sha256WithRSAEncryption 87:c2:0b:db:33:4c:34:31:7b:b2:12:c9:e2:65:79:80:79:f0: a4:16:9f:cc:50:80:b7:75:5c:5a:4b:ca:78:64:65:8b:43:31: b7:19:29:4c:bc:80:fd:0b:53:1d:d0:bb:25:25:85:ec:4c:4c: 9b:a1:26:ba:58:a7:35:e8:1a:83:0e:ae:69:ea:9f:54:67:dd: 9d:42:ec:54:f6:63:ed:cc:82:8e:30:65:69:c6:78:a5:c9:94: 9a:da:c3:cb:bd:c8:da:5e:d2:29:45:3b:3d:6d:16:06:f7:3e: 72:ad:83:88:34:12:45:70:35:95:85:1f:19:f0:23:f7:5a:6e: bf:88:fb:44:db:10:64:18:8f:3c:43:bb:9b:47:e1:9c:88:55: 9b:c3:f0:52:a0:95:3e:96:d2:9c:b9:f5:a3:57:92:cf:db:07: 8a:a5:e9:d3:75:10:c3:aa:42:5d:6d:b5:89:f8:2e:14:e9:56: be:7d:9d:a6:46:a6:ad:b3:9e:c4:b1:3f:bb:df:53:b9:bb:f9: a7:17:e8:65:0a:f9:6b:3c:86:30:e1:45:68:c0:7a:65:0a:58: f6:73:d0:a2:43:bd:d5:85:7a:d5:32:19:14:a5:c5:19:55:bc: 9f:33:96:5f:4c:2a:ff:20:e5:8a:ce:db:62:79:35:1e:1f:1f: f8:b6:c0:b2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICARAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNTA1MDEw MTMyMTZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM5MEFCRjE4MDM3Qzg1 NENGNzRDMkZDRkJBNzJENUI2MjgyODAxM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWhEaBmQ7GvSKUPai90gpjHEeFMsPCU7wh2RpLKwP91bKKih39 9Iz3HB3XtSDWcuz+on3qqEIaVWG0kdP34wwgSDT0GwXlyQK50qYPiFMGqanNEpou 31aitaFMQXP0uGyzEcjaMvJzaGVfGaNQPyBre62uxjcecg9p3g5y30P88DUOS/wD FcZaIwvW1qdvAVfe1LkZ4zucRlMLx3XnIMdHdSHGPcLvwAUrEAVPiIqWn10h0jcP B+FOP9FBo1e8UaIE4yEr2ElzVEjH7offH3DGPKuKECOyEv/TaSGZRF1JtcxRpBJ6 xQW5srY97CHwjBxJ+7fd0gjplRG7qxZvAhAJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyQq/GAN8hUz3TC/PunLVtigoATwwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ3L3lRcV9HQU44aFV6M1RDX1B1bkxWdGlnb0FUdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATK3hAwDQYJKoZIhvcNAQELBQADggEBAIfCC9szTDQxe7ISyeJleYB58KQW n8xQgLd1XFpLynhkZYtDMbcZKUy8gP0LUx3QuyUlhexMTJuhJrpYpzXoGoMOrmnq n1Rn3Z1C7FT2Y+3Mgo4wZWnGeKXJlJraw8u9yNpe0ilFOz1tFgb3PnKtg4g0EkVw NZWFHxnwI/dabr+I+0TbEGQYjzxDu5tH4ZyIVZvD8FKglT6W0py59aNXks/bB4ql 6dN1EMOqQl1ttYn4LhTpVr59naZGpq2znsSxP7vfU7m7+acX6GUK+Ws8hjDhRWjA emUKWPZz0KJDvdWFetUyGRSlxRlVvJ8zll9MKv8g5YrO22J5NR4fH/i2wLI= -----END CERTIFICATE-----Generated at Sat May 17 02:40:50 2025 by rpki-client