$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/dKQ2XWW7v9IcN-BgtuGeraJbYQo.roa File: dKQ2XWW7v9IcN-BgtuGeraJbYQo.roa (raw, json) Hash identifier: GgnhfCxc3HzWQWJoxEzjGC4tPc6VYYEdXU39QtocGyI= Subject key identifier: 74:A4:36:5D:65:BB:BF:D2:1C:37:E0:60:B6:E1:9E:AD:A2:5B:61:0A Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Certificate serial: 5E Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/dKQ2XWW7v9IcN-BgtuGeraJbYQo.roa Signing time: Tue 01 Jul 2025 01:35:37 +0000 ROA not before: Tue 01 Jul 2025 01:35:37 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2497 IP address blocks: 2001:240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Validity Not Before: Jul 1 01:35:37 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=74A4365D65BBBFD21C37E060B6E19EADA25B610A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:45:02:53:9b:76:89:88:b2:8e:bd:ce:db: eb:be:08:11:2f:9d:63:3d:51:2d:04:83:b3:a2:20: b1:b1:66:32:48:f4:8f:21:a7:1f:ec:a6:95:1d:f6: a5:72:a2:47:15:4e:5f:91:31:77:45:07:3d:c6:f0: 7a:c9:e5:40:9e:dc:27:22:0b:b2:b5:01:6b:3a:0a: 66:85:e2:d5:99:03:51:45:5c:c4:a6:06:12:8c:74: fc:cf:fa:ef:46:86:c9:f8:8c:18:1e:6a:9a:42:16: 1f:61:aa:ac:93:1a:82:79:a2:1b:01:b8:0d:44:79: 19:60:4a:8c:24:b5:69:0a:61:c3:e0:85:c0:53:a7: d9:60:df:cf:01:40:f7:e3:1d:0e:27:bb:a7:25:8e: 39:2c:e3:1c:73:13:90:9a:d2:c9:1f:7b:b2:61:8a: 3e:2a:70:43:b1:f5:fb:15:86:4e:1c:5f:20:3e:5a: 6b:59:99:81:00:08:1f:c4:7f:e0:8c:21:da:bc:31: f4:84:59:ec:57:52:5b:bd:5a:ca:df:6a:79:83:c5: fb:a7:30:68:4d:fc:72:79:2f:dd:13:e0:72:1e:91: bb:d3:4e:67:67:bd:3e:aa:3d:f8:b8:a5:c9:83:09: c4:65:02:61:f3:cb:38:50:ac:3b:f8:a1:12:9e:2c: a8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A4:36:5D:65:BB:BF:D2:1C:37:E0:60:B6:E1:9E:AD:A2:5B:61:0A X509v3 Authority Key Identifier: keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/dKQ2XWW7v9IcN-BgtuGeraJbYQo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:240::/32 Signature Algorithm: sha256WithRSAEncryption 30:72:a1:42:44:90:82:c7:dd:4b:dd:03:d3:d1:a2:f4:6e:eb: 8a:5c:d9:53:5d:9d:cd:41:15:26:17:fe:96:13:81:8b:58:46: d5:7f:0f:06:ac:ba:97:15:45:61:9a:86:2b:89:63:77:1e:38: 04:c2:98:82:08:11:5e:c4:1c:f9:0d:09:6d:21:e5:6b:e0:c8: 5c:aa:0f:c8:25:e6:73:1f:ac:46:46:a5:64:01:28:7f:47:4e: 9d:b5:39:13:7c:02:2c:c0:9a:ff:a9:b7:5a:20:64:e0:cb:df: a3:cc:b0:1e:30:a4:1c:cc:4f:87:82:b2:8e:66:18:d7:8d:44: 22:5a:1c:2b:68:e9:e6:04:c8:fe:63:7a:10:b7:de:0c:32:52: cc:bb:71:cf:79:f4:4e:2f:43:02:e7:b0:9f:d3:7a:57:fd:75: 4a:db:8a:6e:78:95:62:43:3a:51:ec:7d:5e:7e:bb:d3:17:90: b0:c6:fc:74:e1:51:42:31:13:80:9f:8d:a1:96:42:8f:74:b3: 88:a1:ef:8f:cd:f6:3c:9c:22:19:d4:28:ab:86:a3:66:de:f7: a2:03:4c:e4:11:6c:b2:d4:11:19:36:4f:4a:ea:0e:52:8e:16: 2a:7c:b0:6d:be:3e:a1:97:db:57:d3:f2:b4:ea:13:e3:7c:0a: d5:3a:65:44 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1 QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI1MDcwMTAx MzUzN1oXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNzRBNDM2NUQ2NUJCQkZE MjFDMzdFMDYwQjZFMTlFQURBMjVCNjEwQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALjkRQJTm3aJiLKOvc7b674IES+dYz1RLQSDs6IgsbFmMkj0jyGn H+ymlR32pXKiRxVOX5Exd0UHPcbwesnlQJ7cJyILsrUBazoKZoXi1ZkDUUVcxKYG Eox0/M/670aGyfiMGB5qmkIWH2GqrJMagnmiGwG4DUR5GWBKjCS1aQphw+CFwFOn 2WDfzwFA9+MdDie7pyWOOSzjHHMTkJrSyR97smGKPipwQ7H1+xWGThxfID5aa1mZ gQAIH8R/4Iwh2rwx9IRZ7FdSW71ayt9qeYPF+6cwaE38cnkv3RPgch6Ru9NOZ2e9 Pqo9+LilyYMJxGUCYfPLOFCsO/ihEp4sqCUCAwEAAaOCAikwggIlMB0GA1UdDgQW BBR0pDZdZbu/0hw34GC24Z6tolthCjAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDE2L2RLUTJYV1c3djlJY04tQmd0dUdlcmFKYllRby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQJAMA0GCSqGSIb3DQEBCwUAA4IBAQAwcqFCRJCCx91L3QPT0aL0 buuKXNlTXZ3NQRUmF/6WE4GLWEbVfw8GrLqXFUVhmoYriWN3HjgEwpiCCBFexBz5 DQltIeVr4Mhcqg/IJeZzH6xGRqVkASh/R06dtTkTfAIswJr/qbdaIGTgy9+jzLAe MKQczE+HgrKOZhjXjUQiWhwraOnmBMj+Y3oQt94MMlLMu3HPefROL0MC57Cf03pX /XVK24pueJViQzpR7H1efrvTF5Cwxvx04VFCMROAn42hlkKPdLOIoe+PzfY8nCIZ 1CirhqNm3veiA0zkEWyy1BEZNk9K6g5SjhYqfLBtvj6hl9tX0/K06hPjfArVOmVE -----END CERTIFICATE-----Generated at Thu Jul 3 15:51:40 2025 by rpki-client