$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30379/bmc4BOG4gXE2Eo5w0OJ0LbdnV7Y.roa File: bmc4BOG4gXE2Eo5w0OJ0LbdnV7Y.roa (raw, json) Hash identifier: FWRTIERycuay8VGTyKiZ71CE8dnxnxkiEI9Pgw0Vsk4= Subject key identifier: 6E:67:38:04:E1:B8:81:71:36:12:8E:70:D0:E2:74:2D:B7:67:57:B6 Certificate issuer: /CN=9670A0F485AF88A2DF9D8AE62E01EF4F50C71417 Certificate serial: 3B Authority key identifier: 96:70:A0:F4:85:AF:88:A2:DF:9D:8A:E6:2E:01:EF:4F:50:C7:14:17 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lnCg9IWviKLfnYrmLgHvT1DHFBc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30379/bmc4BOG4gXE2Eo5w0OJ0LbdnV7Y.roa Signing time: Thu 01 May 2025 01:29:49 +0000 ROA not before: Thu 01 May 2025 01:29:49 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 63791 IP address blocks: 2407:a2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30379/lnCg9IWviKLfnYrmLgHvT1DHFBc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30379/lnCg9IWviKLfnYrmLgHvT1DHFBc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lnCg9IWviKLfnYrmLgHvT1DHFBc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 May 2025 00:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9670A0F485AF88A2DF9D8AE62E01EF4F50C71417 Validity Not Before: May 1 01:29:49 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=6E673804E1B8817136128E70D0E2742DB76757B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:38:4d:11:17:31:e1:c6:a0:70:55:cd:2f:e0: 6c:aa:21:5a:8f:98:db:50:42:9e:12:41:ea:72:98: 08:14:7d:cf:7d:74:17:43:e9:fc:77:66:13:c2:b0: 28:36:f2:00:36:46:a4:45:9d:b2:3f:c2:79:b7:02: 40:46:52:8f:bb:f2:09:f0:6b:ab:00:58:1e:c3:72: cb:94:01:96:58:8c:ec:c9:c2:f1:ef:71:c3:d5:dd: e6:58:8a:83:17:a0:d2:c2:96:40:e2:04:19:f5:23: ae:b6:53:51:70:bf:52:48:b1:7e:e1:7e:5a:e9:76: b0:42:1d:29:8d:68:63:d1:0e:18:25:6f:93:9c:f0: 51:a2:5c:47:70:bc:cb:02:e9:dd:67:ef:68:c3:5d: 14:c4:6b:c1:32:56:bd:1f:f8:72:0c:ef:4d:91:bf: c6:cc:7b:39:d7:87:ee:46:ee:91:ca:f1:0c:ee:d9: a3:e5:ea:79:a3:73:7d:94:43:fb:dd:78:b5:ba:e7: 99:28:89:59:a7:03:4f:b9:d9:87:a4:f8:e2:5f:b4: aa:06:f7:8f:a5:c8:7a:aa:d9:f0:14:4d:5a:e9:1c: 2c:8f:11:28:f7:1a:3e:0d:b8:c9:64:d4:19:d6:bf: 16:f0:c9:23:f4:0c:ba:49:be:13:e5:a4:2e:fc:cf: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:67:38:04:E1:B8:81:71:36:12:8E:70:D0:E2:74:2D:B7:67:57:B6 X509v3 Authority Key Identifier: keyid:96:70:A0:F4:85:AF:88:A2:DF:9D:8A:E6:2E:01:EF:4F:50:C7:14:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30379/lnCg9IWviKLfnYrmLgHvT1DHFBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lnCg9IWviKLfnYrmLgHvT1DHFBc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30379/bmc4BOG4gXE2Eo5w0OJ0LbdnV7Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:a2c0::/32 Signature Algorithm: sha256WithRSAEncryption 44:d9:e3:00:79:0f:6e:43:1d:0d:33:2a:89:99:d1:de:0f:d8: d9:1f:3a:09:d6:a7:0c:93:86:f6:5c:6a:e9:2a:a1:f2:4c:36: d1:97:38:d7:11:bb:79:b6:64:da:55:d8:a0:48:38:af:6e:56: 31:13:9e:89:e8:c2:71:eb:5b:80:81:cf:23:82:e1:dc:dd:d6: 18:0d:25:6c:84:23:67:82:10:82:42:d6:e9:f0:88:2a:a2:7f: 79:7c:84:7d:fc:b7:de:dd:76:3f:27:6e:33:17:80:2b:32:55: 7d:60:4b:26:74:b3:7e:f1:f8:2a:6b:53:a2:ab:9e:18:e9:ac: 70:69:32:66:84:1d:b1:b2:a1:6c:f0:e0:f1:1b:18:ae:e0:18: ad:27:ab:43:f9:90:b9:1b:bd:f3:24:be:61:ad:94:94:2a:23: 17:e1:ab:6e:37:96:26:01:b1:ad:0e:57:33:cc:19:0a:70:ed: 56:9f:0b:ce:d1:50:6a:04:08:9b:29:9d:b1:3f:4b:32:69:b7: 61:7c:39:e1:4e:dc:ca:63:58:2b:ce:9c:c5:d0:fb:da:03:10: cb:59:8f:4a:eb:2c:14:65:67:59:6e:48:9e:f6:c4:e3:e4:42: 96:62:5d:8e:23:ec:2e:49:3c:0a:6f:38:3e:d9:4a:0f:9c:db: cd:aa:5f:11 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5Njcw QTBGNDg1QUY4OEEyREY5RDhBRTYyRTAxRUY0RjUwQzcxNDE3MB4XDTI1MDUwMTAx Mjk0OVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNkU2NzM4MDRFMUI4ODE3 MTM2MTI4RTcwRDBFMjc0MkRCNzY3NTdCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJs4TREXMeHGoHBVzS/gbKohWo+Y21BCnhJB6nKYCBR9z310F0Pp /HdmE8KwKDbyADZGpEWdsj/CebcCQEZSj7vyCfBrqwBYHsNyy5QBlliM7MnC8e9x w9Xd5liKgxeg0sKWQOIEGfUjrrZTUXC/UkixfuF+Wul2sEIdKY1oY9EOGCVvk5zw UaJcR3C8ywLp3WfvaMNdFMRrwTJWvR/4cgzvTZG/xsx7OdeH7kbukcrxDO7Zo+Xq eaNzfZRD+914tbrnmSiJWacDT7nZh6T44l+0qgb3j6XIeqrZ8BRNWukcLI8RKPca Pg24yWTUGda/FvDJI/QMukm+E+WkLvzPH80CAwEAAaOCAikwggIlMB0GA1UdDgQW BBRuZzgE4biBcTYSjnDQ4nQtt2dXtjAfBgNVHSMEGDAWgBSWcKD0ha+Iot+diuYu Ae9PUMcUFzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNzkvbG5DZzlJV3ZpS0xmbllybUxnSHZUMURIRkJjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbG5DZzlJV3ZpS0xmbllybUxnSHZU MURIRkJjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzc5L2JtYzRCT0c0Z1hFMkVvNXcwT0owTGJkblY3WS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkB6LAMA0GCSqGSIb3DQEBCwUAA4IBAQBE2eMAeQ9uQx0NMyqJmdHe D9jZHzoJ1qcMk4b2XGrpKqHyTDbRlzjXEbt5tmTaVdigSDivblYxE56J6MJx61uA gc8jguHc3dYYDSVshCNnghCCQtbp8Igqon95fIR9/Lfe3XY/J24zF4ArMlV9YEsm dLN+8fgqa1Oiq54Y6axwaTJmhB2xsqFs8ODxGxiu4BitJ6tD+ZC5G73zJL5hrZSU KiMX4atuN5YmAbGtDlczzBkKcO1WnwvO0VBqBAibKZ2xP0syabdhfDnhTtzKY1gr zpzF0PvaAxDLWY9K6ywUZWdZbkie9sTj5EKWYl2OI+wuSTwKbzg+2UoPnNvNql8R -----END CERTIFICATE-----Generated at Mon May 19 02:26:03 2025 by rpki-client