$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/dS3KtmOX72k18EU5X_qF2f4ejEg.roa File: dS3KtmOX72k18EU5X_qF2f4ejEg.roa (raw, json) Hash identifier: KeuoeYStrLfV2ig+1MS7Ih9U9SEuUg7tpivjfC3rXBo= Subject key identifier: 75:2D:CA:B6:63:97:EF:69:35:F0:45:39:5F:FA:85:D9:FE:1E:8C:48 Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Certificate serial: 5D Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/dS3KtmOX72k18EU5X_qF2f4ejEg.roa Signing time: Tue 01 Jul 2025 01:35:37 +0000 ROA not before: Tue 01 Jul 2025 01:35:37 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2497 IP address blocks: 2001:300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Validity Not Before: Jul 1 01:35:37 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=752DCAB66397EF6935F045395FFA85D9FE1E8C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:59:0a:4f:cc:cc:5f:05:cd:96:95:77:91:fa: c2:61:85:c6:64:8f:a1:47:91:6e:18:39:01:32:54: a6:3c:a5:fd:9e:9f:e5:ca:31:64:48:4d:68:cb:0e: 46:a9:5f:bd:c0:0c:44:69:2e:9c:2d:9c:cb:90:eb: 1f:06:f6:73:28:50:5c:6e:c3:23:70:07:77:a7:da: 47:7d:35:fb:8f:3e:8e:ce:b0:65:ff:e6:70:1e:f9: e5:a8:bb:24:a6:c9:3d:72:26:9d:b4:fc:da:41:4c: b7:04:92:e5:2d:12:92:0a:cc:53:80:02:f0:41:0b: 62:1c:74:cf:65:09:9e:ee:43:77:ee:cd:f8:60:61: 29:ae:91:9d:a9:fa:31:a1:22:0d:c9:0e:39:8c:d5: 3b:2f:44:64:8d:55:27:15:f9:3e:1b:30:02:9b:a5: 2e:4b:ba:ef:ea:44:9a:ba:fb:48:11:d6:ef:77:45: 9a:04:0c:1f:1a:f0:d5:33:d9:f2:1c:a9:d7:8f:c7: 13:1d:75:05:0a:d5:0c:15:b4:33:a1:a7:cc:be:f5: 89:b4:1c:53:36:c3:23:63:e7:da:3a:a5:3d:6b:bf: 50:3a:49:4d:72:83:a7:35:5c:52:2d:5b:17:9b:fb: 78:02:34:48:82:89:f7:4d:d9:7b:f0:58:79:28:31: ba:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2D:CA:B6:63:97:EF:69:35:F0:45:39:5F:FA:85:D9:FE:1E:8C:48 X509v3 Authority Key Identifier: keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/dS3KtmOX72k18EU5X_qF2f4ejEg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:300::/32 Signature Algorithm: sha256WithRSAEncryption 0d:8f:d4:8d:f6:84:bc:60:44:f3:f5:72:d5:cb:6d:87:43:0c: 73:a1:5d:0b:70:54:e5:d9:37:2b:cc:27:c0:66:21:ef:ab:4d: de:33:01:91:86:43:78:3b:a7:84:01:c0:25:19:21:77:6a:ee: 9b:97:32:c8:5c:e0:2f:a0:29:3b:eb:46:f3:0e:9d:45:d3:a6: 9f:7a:75:ad:70:d3:86:06:3d:f6:94:05:e7:93:db:ee:4a:07: 4d:28:3b:5f:3c:52:6a:a5:64:34:1e:95:26:c8:86:d9:27:44: 11:d8:9b:dc:91:71:af:27:b0:9f:98:df:fb:cd:74:7c:4e:b5: 02:52:bf:44:1a:fe:c9:31:9d:d5:9e:d4:c8:5a:86:6f:24:f3: 1f:10:86:c6:77:89:d5:68:d5:08:23:be:ce:0e:28:3b:8e:85: 72:50:88:5e:50:fb:38:5c:6f:f7:0e:45:29:5d:72:55:1e:e5: 79:d3:ca:3b:a4:ca:15:03:f8:7d:6c:32:87:ea:98:a9:1a:1e: 96:3d:af:e3:42:e3:64:ec:34:5b:ad:7f:b4:c4:3f:d2:7c:91: 24:50:04:75:86:d0:a4:36:4c:e9:57:2b:4f:c3:25:b9:f4:fa: 34:34:57:8e:93:18:3c:62:dc:7b:3f:1a:1d:fd:9c:d9:e5:40: 2a:52:d8:72 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1 QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI1MDcwMTAx MzUzN1oXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNzUyRENBQjY2Mzk3RUY2 OTM1RjA0NTM5NUZGQTg1RDlGRTFFOEM0ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ9ZCk/MzF8FzZaVd5H6wmGFxmSPoUeRbhg5ATJUpjyl/Z6f5cox ZEhNaMsORqlfvcAMRGkunC2cy5DrHwb2cyhQXG7DI3AHd6faR301+48+js6wZf/m cB755ai7JKbJPXImnbT82kFMtwSS5S0SkgrMU4AC8EELYhx0z2UJnu5Dd+7N+GBh Ka6Rnan6MaEiDckOOYzVOy9EZI1VJxX5PhswApulLku67+pEmrr7SBHW73dFmgQM Hxrw1TPZ8hyp14/HEx11BQrVDBW0M6GnzL71ibQcUzbDI2Pn2jqlPWu/UDpJTXKD pzVcUi1bF5v7eAI0SIKJ903Ze/BYeSgxuk0CAwEAAaOCAikwggIlMB0GA1UdDgQW BBR1Lcq2Y5fvaTXwRTlf+oXZ/h6MSDAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDE2L2RTM0t0bU9YNzJrMThFVTVYX3FGMmY0ZWpFZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQMAMA0GCSqGSIb3DQEBCwUAA4IBAQANj9SN9oS8YETz9XLVy22H QwxzoV0LcFTl2TcrzCfAZiHvq03eMwGRhkN4O6eEAcAlGSF3au6blzLIXOAvoCk7 60bzDp1F06afenWtcNOGBj32lAXnk9vuSgdNKDtfPFJqpWQ0HpUmyIbZJ0QR2Jvc kXGvJ7CfmN/7zXR8TrUCUr9EGv7JMZ3VntTIWoZvJPMfEIbGd4nVaNUII77ODig7 joVyUIheUPs4XG/3DkUpXXJVHuV508o7pMoVA/h9bDKH6pipGh6WPa/jQuNk7DRb rX+0xD/SfJEkUAR1htCkNkzpVytPwyW59Po0NFeOkxg8Ytx7Pxod/ZzZ5UAqUthy -----END CERTIFICATE-----Generated at Thu Jul 3 11:28:39 2025 by rpki-client