$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/mNXM5zyB4fBfRNLEgEOyN5oUqE8.roa File: mNXM5zyB4fBfRNLEgEOyN5oUqE8.roa (raw, json) Hash identifier: mBRWkhQPKfxgoKeVaWaabNZuvT/Yy5VJel9UkIh6E3E= Subject key identifier: 98:D5:CC:E7:3C:81:E1:F0:5F:44:D2:C4:80:43:B2:37:9A:14:A8:4F Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: A7 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/mNXM5zyB4fBfRNLEgEOyN5oUqE8.roa Signing time: Tue 01 Jul 2025 01:28:16 +0000 ROA not before: Tue 01 Jul 2025 01:28:16 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2514 IP address blocks: 157.65.224.0/19 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jul 1 01:28:16 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=98D5CCE73C81E1F05F44D2C48043B2379A14A84F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:27:1e:57:5b:58:c5:0f:28:7f:4e:37:f5: 95:45:74:5c:1b:eb:b1:5b:9d:46:ff:6b:16:60:ef: d9:c8:6c:0c:95:0b:d0:61:37:7e:a9:de:69:7e:11: 51:84:54:a4:17:3e:2e:56:8c:89:ee:25:d5:e3:a7: 02:03:59:3d:cc:80:6a:74:11:b0:8c:de:e8:cf:16: 50:3c:cc:1a:39:e9:b3:e9:1f:57:e1:90:51:1b:f2: 94:1a:3e:68:9b:09:ee:a7:42:ea:be:35:f3:7b:2f: 7c:d9:c7:16:57:fc:8a:64:f0:d7:3b:95:d9:ab:d3: 99:42:d3:9f:38:dc:9b:22:79:b8:dc:4e:96:d9:be: 1b:1b:50:a2:a3:cb:25:ca:6a:52:d2:b0:e8:48:c5: 66:74:b8:88:c7:c0:47:17:bf:50:f2:ab:9f:6f:8c: f9:70:af:96:74:75:11:f8:5b:3b:80:fa:28:bd:d5: 99:e0:e0:75:e0:a3:41:71:e4:f6:d7:ca:45:4f:27: c8:ba:a1:36:d4:3c:66:a4:67:27:7f:db:63:ff:1e: b5:aa:31:65:9d:d0:f6:55:12:76:b9:e3:d7:2b:8f: ae:b8:48:e1:be:9a:8f:c1:99:5e:e3:7f:49:ab:fe: e3:fa:7d:ec:19:12:5e:f6:6b:9c:d9:4b:ba:70:d6: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D5:CC:E7:3C:81:E1:F0:5F:44:D2:C4:80:43:B2:37:9A:14:A8:4F X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/mNXM5zyB4fBfRNLEgEOyN5oUqE8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.65.224.0/19 Signature Algorithm: sha256WithRSAEncryption 40:3e:22:14:81:33:b9:3a:73:0b:31:de:4c:b0:40:ef:a4:f1: b5:76:f7:ad:52:31:16:9f:f6:bc:9a:1e:c6:0b:d4:0d:4e:4e: eb:09:b1:b2:aa:c3:83:55:e4:5a:ff:c5:f5:0c:c1:a5:64:83: ec:b1:39:30:52:ed:c3:10:b9:c9:94:b9:0f:ce:0f:5b:94:85: 07:df:bf:fb:d5:7d:c6:3a:84:16:61:7c:72:ba:2b:4f:4d:4c: c2:5a:1c:fc:0b:e7:ef:1c:b0:7c:bc:7a:ab:79:01:7f:c1:c6: b8:a8:fd:12:5b:74:e9:8c:4e:dd:cd:04:33:9c:15:ff:e6:94: bc:d6:66:d8:a2:a3:b4:e4:b8:4e:40:f2:1d:ab:cb:00:cd:b1: 14:10:ae:f5:d2:88:9c:e6:e1:7c:13:08:cc:d8:48:37:4d:75: f3:71:57:9e:8a:04:4e:23:a7:ff:11:5b:7d:1d:c7:68:53:00: 52:4a:03:e4:9b:f0:4a:be:df:db:ed:f3:dd:bc:6d:9b:26:be: 8e:38:be:5c:18:45:f6:02:e3:86:eb:4c:63:9f:a1:8b:95:4e: 9a:db:d3:04:e2:39:72:94:14:f7:39:b6:81:8d:12:ad:d9:86: 4d:09:79:94:14:f2:14:76:e7:f8:fc:2c:b0:1c:89:e7:52:d2: e3:14:a3:9d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTA3MDEw MTI4MTZaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk4RDVDQ0U3M0M4MUUx RjA1RjQ0RDJDNDgwNDNCMjM3OUExNEE4NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr5CceV1tYxQ8of0439ZVFdFwb67FbnUb/axZg79nIbAyVC9Bh N36p3ml+EVGEVKQXPi5WjInuJdXjpwIDWT3MgGp0EbCM3ujPFlA8zBo56bPpH1fh kFEb8pQaPmibCe6nQuq+NfN7L3zZxxZX/Ipk8Nc7ldmr05lC05843JsiebjcTpbZ vhsbUKKjyyXKalLSsOhIxWZ0uIjHwEcXv1Dyq59vjPlwr5Z0dRH4WzuA+ii91Zng 4HXgo0Fx5PbXykVPJ8i6oTbUPGakZyd/22P/HrWqMWWd0PZVEna549crj664SOG+ mo/BmV7jf0mr/uP6fewZEl72a5zZS7pw1vCLAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUmNXM5zyB4fBfRNLEgEOyN5oUqE8wHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yOS9tTlhNNXp5QjRmQmZSTkxFZ0VPeU41b1VxRTgucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFnUHgMA0GCSqGSIb3DQEBCwUAA4IBAQBAPiIUgTO5OnMLMd5MsEDvpPG1dvet UjEWn/a8mh7GC9QNTk7rCbGyqsODVeRa/8X1DMGlZIPssTkwUu3DELnJlLkPzg9b lIUH37/71X3GOoQWYXxyuitPTUzCWhz8C+fvHLB8vHqreQF/wca4qP0SW3TpjE7d zQQznBX/5pS81mbYoqO05LhOQPIdq8sAzbEUEK710oic5uF8EwjM2Eg3TXXzcVee igROI6f/EVt9HcdoUwBSSgPkm/BKvt/b7fPdvG2bJr6OOL5cGEX2AuOG60xjn6GL lU6a29ME4jlylBT3ObaBjRKt2YZNCXmUFPIUduf4/CywHInnUtLjFKOd -----END CERTIFICATE-----Generated at Sat Jul 5 08:29:25 2025 by rpki-client