$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/smTjhajw4q3AY-dNMHHHlGumyao.roa File: smTjhajw4q3AY-dNMHHHlGumyao.roa (raw, json) Hash identifier: KbKllaPqbl/4qzgYGYmRGUkbM177aPemOuiO3hdX5rU= Subject key identifier: B2:64:E3:85:A8:F0:E2:AD:C0:63:E7:4D:30:71:C7:94:6B:A6:C9:AA Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: AB Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/smTjhajw4q3AY-dNMHHHlGumyao.roa Signing time: Tue 01 Jul 2025 01:37:18 +0000 ROA not before: Tue 01 Jul 2025 01:37:18 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.208.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jul 1 01:37:18 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=B264E385A8F0E2ADC063E74D3071C7946BA6C9AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:f9:f9:e3:ed:cf:15:64:f7:2e:0f:f0:b6: 51:f3:b6:76:f0:2d:a8:31:1a:f5:b2:b0:58:d9:de: 05:89:c9:42:e5:a8:a8:aa:eb:95:62:35:57:6c:77: bc:e6:4c:7b:3b:00:51:64:a3:39:dd:10:24:8f:a4: a7:95:ab:88:f8:36:2b:1a:55:4c:3d:b9:25:03:3e: 14:09:b3:c5:ff:e0:23:05:1a:e8:81:77:33:8b:a5: 95:66:ea:65:13:e5:53:a9:11:f9:bf:24:10:30:ad: 8c:d8:22:a8:2e:ec:98:a2:c0:83:c5:05:7e:c2:75: 08:f8:d0:3d:03:93:a5:af:47:bf:7d:6d:e9:20:7a: ea:bf:73:78:46:5d:0a:20:2e:d7:1f:71:6f:5f:12: ed:7e:26:b1:f9:da:ae:4f:e1:24:fb:f1:13:6d:ad: d1:2d:38:89:45:91:73:e3:ec:a0:b3:39:34:a0:7c: a1:ce:4c:3d:2d:e1:1c:98:b0:76:76:01:f8:66:7e: 9d:d4:78:02:5e:bf:c5:02:36:38:29:fe:e4:52:48: cb:20:cf:23:37:48:e6:07:9c:5b:58:a7:a4:35:89: 8e:87:26:c4:96:a6:43:59:15:79:4e:ad:cf:9b:c7: 8d:54:07:84:cb:63:9d:a4:0b:9a:d5:e6:20:eb:bc: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:64:E3:85:A8:F0:E2:AD:C0:63:E7:4D:30:71:C7:94:6B:A6:C9:AA X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/smTjhajw4q3AY-dNMHHHlGumyao.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.248.208.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:4c:97:65:b5:bb:50:20:67:d9:5c:d1:3f:34:c8:dc:98:67: 3d:c8:f1:0d:e4:ce:a0:4d:90:2a:b6:de:95:53:97:6a:55:42: 2b:52:1e:ac:6c:a3:fb:56:5b:20:0a:58:a3:b0:89:e8:93:dc: c5:28:dd:1f:43:31:7d:55:42:aa:ab:b6:52:14:62:31:20:c0: f2:5e:6a:ba:c4:ce:f7:41:74:01:5d:08:b8:04:1e:7d:97:c4: e4:bf:de:5c:b2:97:45:a9:a0:8e:e3:56:92:12:8f:8f:69:a3: d6:36:6c:8d:43:22:fc:41:bc:f3:93:e9:5a:95:e3:4f:20:7d: 19:08:62:73:ad:d3:c7:29:b4:c9:2e:80:00:25:b0:6a:1d:08: df:0e:4c:c7:b7:f9:fc:9f:9d:18:8d:2b:1b:14:7b:bc:0f:05: ba:ec:19:cb:15:9f:5e:fe:ea:f8:ea:0e:4a:da:96:c3:1e:1d: 44:5e:c7:3a:df:83:c6:c6:14:38:86:e0:1b:46:a9:3f:e6:56: ae:b4:d6:73:f8:90:f8:22:ae:67:82:46:3c:b9:71:c8:d2:15: f5:0e:ed:1e:4c:a5:25:61:ca:74:84:5d:0e:c3:cb:06:8e:ff: 56:54:7d:ad:99:ef:62:11:17:c1:b9:a4:70:c8:d6:d6:72:04: 20:da:2f:1e -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTA3MDEw MTM3MThaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIyNjRFMzg1QThGMEUy QURDMDYzRTc0RDMwNzFDNzk0NkJBNkM5QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmNfn54+3PFWT3Lg/wtlHztnbwLagxGvWysFjZ3gWJyULlqKiq 65ViNVdsd7zmTHs7AFFkozndECSPpKeVq4j4NisaVUw9uSUDPhQJs8X/4CMFGuiB dzOLpZVm6mUT5VOpEfm/JBAwrYzYIqgu7JiiwIPFBX7CdQj40D0Dk6WvR799bekg euq/c3hGXQogLtcfcW9fEu1+JrH52q5P4ST78RNtrdEtOIlFkXPj7KCzOTSgfKHO TD0t4RyYsHZ2Afhmfp3UeAJev8UCNjgp/uRSSMsgzyM3SOYHnFtYp6Q1iY6HJsSW pkNZFXlOrc+bx41UB4TLY52kC5rV5iDrvNA/AgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUsmTjhajw4q3AY+dNMHHHlGumyaowHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yOS9zbVRqaGFqdzRxM0FZLWROTUhISGxHdW15YW8ucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQEoPjQMA0GCSqGSIb3DQEBCwUAA4IBAQBuTJdltbtQIGfZXNE/NMjcmGc9yPEN 5M6gTZAqtt6VU5dqVUIrUh6sbKP7VlsgClijsInok9zFKN0fQzF9VUKqq7ZSFGIx IMDyXmq6xM73QXQBXQi4BB59l8Tkv95cspdFqaCO41aSEo+PaaPWNmyNQyL8Qbzz k+laleNPIH0ZCGJzrdPHKbTJLoAAJbBqHQjfDkzHt/n8n50YjSsbFHu8DwW67BnL FZ9e/ur46g5K2pbDHh1EXsc634PGxhQ4huAbRqk/5lautNZz+JD4Iq5ngkY8uXHI 0hX1Du0eTKUlYcp0hF0Ow8sGjv9WVH2tme9iERfBuaRwyNbWcgQg2i8e -----END CERTIFICATE-----Generated at Sat Jul 5 09:29:56 2025 by rpki-client