$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30405/Y-d61U3zRtxtzoCJDVZkBw37_tI.roa File: Y-d61U3zRtxtzoCJDVZkBw37_tI.roa (raw, json) Hash identifier: 7czCnHKyDMcO+A6R6d0WmNeMjlrGI3v4zTGaTkYJjIo= Subject key identifier: 63:E7:7A:D5:4D:F3:46:DC:6D:CE:80:89:0D:56:64:07:0D:FB:FE:D2 Certificate issuer: /CN=2A80ACC85AD675948A730937A0E57ABB571C057C Certificate serial: 2B Authority key identifier: 2A:80:AC:C8:5A:D6:75:94:8A:73:09:37:A0:E5:7A:BB:57:1C:05:7C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/Y-d61U3zRtxtzoCJDVZkBw37_tI.roa Signing time: Thu 01 May 2025 01:33:14 +0000 ROA not before: Thu 01 May 2025 01:33:14 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 146981 IP address blocks: 2400:8820::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/KoCsyFrWdZSKcwk3oOV6u1ccBXw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/KoCsyFrWdZSKcwk3oOV6u1ccBXw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A80ACC85AD675948A730937A0E57ABB571C057C Validity Not Before: May 1 01:33:14 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=63E77AD54DF346DC6DCE80890D5664070DFBFED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:61:b1:0b:12:cf:67:2a:55:8d:cf:20:14: fb:30:89:f1:35:6d:05:8d:02:52:e2:eb:91:2a:ae: 6c:f4:40:b3:be:d4:b9:1d:c8:b1:c3:d8:c0:68:2c: ac:d0:bb:8d:56:a0:ca:63:e5:bd:f4:3b:bf:b3:ee: 93:f7:b9:d8:87:69:f0:8a:68:dc:ad:2f:9d:a3:56: 10:91:f9:13:c9:5f:20:33:da:19:f2:93:3f:23:7c: 62:fd:fe:fd:b8:04:52:30:44:ec:41:fc:e4:b6:19: 7c:d1:e9:f7:9b:7a:d0:4c:44:90:7b:6a:77:b7:2d: 70:8f:74:8a:97:12:d3:b6:9d:bc:3b:77:8f:94:c2: db:db:e7:fa:f8:1c:b1:60:93:aa:0f:7c:0a:21:c2: 29:3c:c7:22:49:78:23:57:45:58:84:90:ec:29:c1: 16:53:a5:43:f0:d3:42:4e:93:a2:cf:7a:ac:9f:4a: 63:27:bf:c8:b9:41:d4:25:81:9a:0e:e3:b1:df:15: 7b:03:ab:51:62:dd:ae:72:44:e9:4c:36:09:43:d4: 2d:97:24:9d:ae:ed:61:ff:a6:3b:d2:2e:52:a1:48: ad:a1:e1:aa:04:cd:64:73:85:04:87:40:f0:52:41: 89:a0:30:d0:a1:15:b7:67:95:0d:25:9a:84:b3:0f: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E7:7A:D5:4D:F3:46:DC:6D:CE:80:89:0D:56:64:07:0D:FB:FE:D2 X509v3 Authority Key Identifier: keyid:2A:80:AC:C8:5A:D6:75:94:8A:73:09:37:A0:E5:7A:BB:57:1C:05:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/KoCsyFrWdZSKcwk3oOV6u1ccBXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/Y-d61U3zRtxtzoCJDVZkBw37_tI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8820::/32 Signature Algorithm: sha256WithRSAEncryption 42:21:6c:e3:11:37:72:53:ec:ed:75:78:2b:f3:4c:33:3e:a4: c1:41:8c:03:79:40:10:75:24:56:cc:ca:b3:2f:f1:20:3b:56: c1:3d:02:db:c1:64:fb:c4:53:58:99:b2:70:72:b0:4e:2b:17: d5:2e:fc:03:30:83:14:cb:3f:56:58:5a:a4:46:7d:8d:94:f5: 28:17:37:c8:cd:6d:b9:19:4f:f3:75:56:8a:f8:9d:8e:18:c8: e6:fa:e1:fe:79:1a:80:74:db:d2:47:23:a1:d0:f9:9c:4e:82: 58:a0:c1:48:43:40:64:e4:55:94:12:a2:9b:cb:d4:ce:b5:e5: ba:9e:1a:f8:cf:94:f0:9a:d6:e1:15:e7:a2:52:70:cc:00:35: 37:91:3a:d3:08:3a:dc:2d:46:93:77:f4:36:3c:74:f6:69:dc: e3:e4:92:83:35:48:18:d1:c0:33:ee:2d:c1:1a:ce:aa:a1:c1: ee:f8:1b:35:9d:b6:fa:98:43:28:e6:67:c2:89:54:e9:35:ca: c6:bc:0e:68:97:60:3b:db:aa:b5:d8:92:d3:70:c0:f2:31:f1: ea:e9:61:94:56:1a:66:f3:31:13:f6:5e:00:50:d0:8f:4e:f0: c6:a8:c2:44:fe:dc:18:c3:61:b8:aa:d2:45:e1:2e:eb:dc:0a: ee:b1:0e:a8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQTgw QUNDODVBRDY3NTk0OEE3MzA5MzdBMEU1N0FCQjU3MUMwNTdDMB4XDTI1MDUwMTAx MzMxNFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNjNFNzdBRDU0REYzNDZE QzZEQ0U4MDg5MEQ1NjY0MDcwREZCRkVEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL/hYbELEs9nKlWNzyAU+zCJ8TVtBY0CUuLrkSqubPRAs77UuR3I scPYwGgsrNC7jVagymPlvfQ7v7Puk/e52Idp8Ipo3K0vnaNWEJH5E8lfIDPaGfKT PyN8Yv3+/bgEUjBE7EH85LYZfNHp95t60ExEkHtqd7ctcI90ipcS07advDt3j5TC 29vn+vgcsWCTqg98CiHCKTzHIkl4I1dFWISQ7CnBFlOlQ/DTQk6Tos96rJ9KYye/ yLlB1CWBmg7jsd8VewOrUWLdrnJE6Uw2CUPULZckna7tYf+mO9IuUqFIraHhqgTN ZHOFBIdA8FJBiaAw0KEVt2eVDSWahLMPdRsCAwEAAaOCAikwggIlMB0GA1UdDgQW BBRj53rVTfNG3G3OgIkNVmQHDfv+0jAfBgNVHSMEGDAWgBQqgKzIWtZ1lIpzCTeg 5Xq7VxwFfDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MDUvS29Dc3lGcldkWlNLY3drM29PVjZ1MWNjQlh3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS29Dc3lGcldkWlNLY3drM29PVjZ1 MWNjQlh3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDA1L1ktZDYxVTN6UnR4dHpvQ0pEVlprQnczN190SS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAIggMA0GCSqGSIb3DQEBCwUAA4IBAQBCIWzjETdyU+ztdXgr80wz PqTBQYwDeUAQdSRWzMqzL/EgO1bBPQLbwWT7xFNYmbJwcrBOKxfVLvwDMIMUyz9W WFqkRn2NlPUoFzfIzW25GU/zdVaK+J2OGMjm+uH+eRqAdNvSRyOh0PmcToJYoMFI Q0Bk5FWUEqKby9TOteW6nhr4z5TwmtbhFeeiUnDMADU3kTrTCDrcLUaTd/Q2PHT2 adzj5JKDNUgY0cAz7i3BGs6qocHu+Bs1nbb6mEMo5mfCiVTpNcrGvA5ol2A726q1 2JLTcMDyMfHq6WGUVhpm8zET9l4AUNCPTvDGqMJE/twYw2G4qtJF4S7r3ArusQ6o -----END CERTIFICATE-----Generated at Sun May 18 21:40:18 2025 by rpki-client