$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/iMi2ig8lhjzSdOJKxHjF1z1q-gk.roa File: iMi2ig8lhjzSdOJKxHjF1z1q-gk.roa (raw, json) Hash identifier: VubjvFLg4+by1pA/YLduVkD1+RFRy74aYKDw8L/iMUc= Subject key identifier: 88:C8:B6:8A:0F:25:86:3C:D2:74:E2:4A:C4:78:C5:D7:3D:6A:FA:09 Certificate issuer: /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Certificate serial: 3E Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/iMi2ig8lhjzSdOJKxHjF1z1q-gk.roa Signing time: Thu 01 May 2025 01:34:33 +0000 ROA not before: Thu 01 May 2025 01:34:33 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 151382 IP address blocks: 2401:d20:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Validity Not Before: May 1 01:34:33 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=88C8B68A0F25863CD274E24AC478C5D73D6AFA09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c7:e0:ce:7e:e8:dd:f6:48:89:c3:87:f0:d3: 25:b5:6f:51:c7:5f:17:da:f7:bd:eb:fa:0f:11:d6: ba:5c:56:9f:1e:bc:d4:27:01:3e:b2:14:46:89:3b: 0a:1d:b4:70:c7:85:ba:fd:cf:05:5d:f2:22:05:b4: 99:b4:cb:d4:30:1c:6d:9e:59:d1:99:d5:fb:8b:83: 63:6f:ba:14:61:e7:55:28:07:9a:05:e0:1d:f8:4c: 1f:04:ae:0d:d9:02:79:60:53:7b:49:59:06:e8:a8: 81:ef:ac:1c:03:6a:eb:94:d3:dd:7c:70:a2:8c:bb: b2:be:f0:96:b6:63:1a:df:9e:bd:b5:e5:b4:b6:b9: b2:62:6e:68:d4:8d:77:35:8c:68:e5:af:64:8f:5a: 71:b5:d7:19:d7:da:68:a5:69:c9:76:dc:82:9c:08: c8:a1:35:e9:73:8a:71:6a:a2:bb:82:96:7c:91:11: 24:eb:b4:0e:55:1b:41:62:c0:92:96:3d:fa:99:39: d3:04:a2:9e:02:db:93:02:4a:ba:c8:fa:3a:a9:d6: 05:b1:47:c8:b0:40:ba:66:67:e3:cc:09:7e:a3:87: f3:c7:e3:27:60:ae:71:40:ae:56:1d:33:e7:82:a1: 35:93:d5:f0:a1:41:8f:d6:eb:d1:3b:24:18:4d:95: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C8:B6:8A:0F:25:86:3C:D2:74:E2:4A:C4:78:C5:D7:3D:6A:FA:09 X509v3 Authority Key Identifier: keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/iMi2ig8lhjzSdOJKxHjF1z1q-gk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d20:a::/48 Signature Algorithm: sha256WithRSAEncryption 24:e8:f5:3c:46:fc:11:78:d5:f1:90:f4:79:79:5f:51:ec:dd: 3c:28:b6:a2:1c:a4:07:41:0e:e6:b0:be:b6:2d:36:7d:8a:35: 64:8c:6c:14:2f:5d:17:7e:ac:68:fd:3a:9d:9e:f3:03:c7:24: 94:7a:94:e7:1b:13:10:86:56:fb:f2:ca:27:fd:00:82:ea:56: 0c:78:4d:cb:b4:d9:36:6e:c5:99:3f:3b:a3:03:e5:8b:c6:c6: 72:32:fd:8b:01:cb:03:20:bf:bd:11:12:69:6a:d1:bc:36:e6: d8:24:2f:d3:35:49:69:fb:9b:68:e9:96:89:50:ef:b7:7c:a4: ec:fe:51:1c:cd:68:0c:d8:7a:7a:01:f5:3d:b6:76:30:d1:64: 30:dc:60:bf:6d:06:49:39:a9:72:71:19:8a:59:da:bc:62:65: 67:32:4e:af:03:65:f5:46:af:ae:a9:82:a0:ff:d8:09:85:f5: a6:b6:1e:cf:51:9b:fc:1c:c5:e4:06:66:ae:48:74:0d:db:00: ad:eb:26:36:0b:ec:22:65:b8:4c:7c:e0:42:ab:c8:a3:ef:25: c2:c7:59:57:57:03:6a:a6:db:72:ec:c8:9e:1d:31:ff:ec:72: 37:f4:9e:13:ba:2d:db:07:c9:f8:ee:ab:9e:46:98:2c:6c:d0: 39:d6:ee:ce -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI1MDUwMTAx MzQzM1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoODhDOEI2OEEwRjI1ODYz Q0QyNzRFMjRBQzQ3OEM1RDczRDZBRkEwOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOXH4M5+6N32SInDh/DTJbVvUcdfF9r3vev6DxHWulxWnx681CcB PrIURok7Ch20cMeFuv3PBV3yIgW0mbTL1DAcbZ5Z0ZnV+4uDY2+6FGHnVSgHmgXg HfhMHwSuDdkCeWBTe0lZBuioge+sHANq65TT3Xxwooy7sr7wlrZjGt+evbXltLa5 smJuaNSNdzWMaOWvZI9acbXXGdfaaKVpyXbcgpwIyKE16XOKcWqiu4KWfJERJOu0 DlUbQWLAkpY9+pk50wSingLbkwJKusj6OqnWBbFHyLBAumZn48wJfqOH88fjJ2Cu cUCuVh0z54KhNZPV8KFBj9br0TskGE2Vp7sCAwEAAaOCAiswggInMB0GA1UdDgQW BBSIyLaKDyWGPNJ04krEeMXXPWr6CTAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDIzL2lNaTJpZzhsaGp6U2RPSkt4SGpGMXoxcS1nay5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkAQ0gAAowDQYJKoZIhvcNAQELBQADggEBACTo9TxG/BF41fGQ9Hl5 X1Hs3TwotqIcpAdBDuawvrYtNn2KNWSMbBQvXRd+rGj9Op2e8wPHJJR6lOcbExCG Vvvyyif9AILqVgx4Tcu02TZuxZk/O6MD5YvGxnIy/YsBywMgv70REmlq0bw25tgk L9M1SWn7m2jplolQ77d8pOz+URzNaAzYenoB9T22djDRZDDcYL9tBkk5qXJxGYpZ 2rxiZWcyTq8DZfVGr66pgqD/2AmF9aa2Hs9Rm/wcxeQGZq5IdA3bAK3rJjYL7CJl uEx84EKryKPvJcLHWVdXA2qm23LsyJ4dMf/scjf0nhO6LdsHyfjuq55GmCxs0DnW 7s4= -----END CERTIFICATE-----Generated at Sun May 18 06:10:40 2025 by rpki-client