$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3860/Dl50UO0PZsAzCKmf-xUwPbYWU0U.roa File: Dl50UO0PZsAzCKmf-xUwPbYWU0U.roa (raw, json) Hash identifier: gp3v6Lu2Jm4R2MSXfieEgye619U6Jq3OUyaLhiaUpts= Subject key identifier: 0E:5E:74:50:ED:0F:66:C0:33:08:A9:9F:FB:15:30:3D:B6:16:53:45 Certificate issuer: /CN=E4B8CA152BCBC12C0B0972BD56AC45B07D6E6C1B Certificate serial: 17 Authority key identifier: E4:B8:CA:15:2B:CB:C1:2C:0B:09:72:BD:56:AC:45:B0:7D:6E:6C:1B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5LjKFSvLwSwLCXK9VqxFsH1ubBs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3860/Dl50UO0PZsAzCKmf-xUwPbYWU0U.roa Signing time: Thu 01 May 2025 01:30:05 +0000 ROA not before: Thu 01 May 2025 01:30:05 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131921 IP address blocks: 202.237.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3860/5LjKFSvLwSwLCXK9VqxFsH1ubBs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3860/5LjKFSvLwSwLCXK9VqxFsH1ubBs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5LjKFSvLwSwLCXK9VqxFsH1ubBs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4B8CA152BCBC12C0B0972BD56AC45B07D6E6C1B Validity Not Before: May 1 01:30:05 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=0E5E7450ED0F66C03308A99FFB15303DB6165345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:1b:55:00:a9:22:8d:60:ae:01:8e:1e:12: dc:1a:8c:66:72:9f:49:8e:65:eb:8f:19:23:23:56: ba:9f:dd:b4:5a:a4:62:9a:8e:63:c7:15:98:69:7f: 8e:80:0e:af:99:f5:49:70:de:d8:8f:1f:7e:9a:d3: df:47:b2:76:0b:55:4b:75:d9:2b:81:9b:53:cb:9c: 18:66:ee:bc:8e:37:9d:c8:47:82:24:c8:64:d5:89: 30:59:db:0f:18:ca:01:e8:e0:f5:04:df:d8:82:af: 66:0e:b4:d6:02:76:57:e0:e2:d0:ca:90:2d:93:30: b9:a0:eb:f5:87:4b:c7:b2:e3:29:f7:11:af:9f:26: 2f:e0:e5:70:9e:bb:a5:b6:3d:f2:a1:26:d4:52:08: a3:58:aa:23:62:23:08:13:23:f8:64:95:00:63:d7: 58:7c:72:be:32:2f:9f:10:39:69:b1:20:3d:a2:19: b7:aa:f6:d6:04:a9:f9:f2:3b:aa:a8:cc:35:ab:2b: 7d:d5:57:bd:b9:fe:6a:d5:9d:4e:44:d2:2c:8c:f0: 7d:81:2b:7a:de:ca:f5:a3:b9:79:bf:58:84:b5:26: af:9f:51:da:d5:63:1f:82:3d:74:44:71:6b:37:72: 5d:95:96:e7:ef:b2:75:ce:6d:a8:68:4d:fc:10:ce: c5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5E:74:50:ED:0F:66:C0:33:08:A9:9F:FB:15:30:3D:B6:16:53:45 X509v3 Authority Key Identifier: keyid:E4:B8:CA:15:2B:CB:C1:2C:0B:09:72:BD:56:AC:45:B0:7D:6E:6C:1B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3860/5LjKFSvLwSwLCXK9VqxFsH1ubBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5LjKFSvLwSwLCXK9VqxFsH1ubBs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3860/Dl50UO0PZsAzCKmf-xUwPbYWU0U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.237.148.0/23 Signature Algorithm: sha256WithRSAEncryption 61:dc:c9:16:ea:d3:b5:01:25:2c:9c:7d:15:b7:94:29:70:27: dc:b3:35:b5:f2:2a:43:e7:c1:30:a3:8d:58:30:c0:a8:b6:9e: 16:0a:d4:7b:cd:d2:0c:f2:7f:5f:57:50:23:29:58:98:85:1b: 83:2b:4d:d5:3a:99:0b:79:05:66:34:cb:71:84:3e:21:0d:a7: d1:d8:c6:2c:e7:8e:00:4b:9b:e8:f0:e5:7d:92:2b:f4:fd:2f: 59:2b:05:5e:b4:20:0f:6a:fa:53:6a:50:72:79:33:7b:4e:2d: 0e:b8:41:d1:bb:79:40:97:14:ba:58:93:5c:50:e4:d3:de:f1: ad:a5:f6:b4:06:06:ea:e4:2e:1f:17:5f:4d:a0:66:5b:cf:1e: 5c:7f:b9:92:2a:86:20:d0:6a:43:cf:47:a2:02:72:40:93:40: 92:27:fa:e2:6c:33:30:19:a9:29:bf:51:b7:7d:dc:69:79:46: 0c:61:34:b6:83:be:3a:39:b2:47:2e:b6:1f:df:45:b2:5c:7d: 7f:44:52:c7:75:57:70:65:38:28:44:4a:c6:be:c4:9a:e6:f5: 5c:c8:ab:ac:1b:07:89:13:94:7e:50:04:b1:20:6b:28:f4:13: c9:5f:fa:76:aa:34:ad:fb:d8:68:b8:58:7e:bd:d8:d6:39:f7: 67:53:4a:27 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNEI4 Q0ExNTJCQ0JDMTJDMEIwOTcyQkQ1NkFDNDVCMDdENkU2QzFCMB4XDTI1MDUwMTAx MzAwNVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMEU1RTc0NTBFRDBGNjZD MDMzMDhBOTlGRkIxNTMwM0RCNjE2NTM0NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMazG1UAqSKNYK4Bjh4S3BqMZnKfSY5l648ZIyNWup/dtFqkYpqO Y8cVmGl/joAOr5n1SXDe2I8ffprT30eydgtVS3XZK4GbU8ucGGbuvI43nchHgiTI ZNWJMFnbDxjKAejg9QTf2IKvZg601gJ2V+Di0MqQLZMwuaDr9YdLx7LjKfcRr58m L+DlcJ67pbY98qEm1FIIo1iqI2IjCBMj+GSVAGPXWHxyvjIvnxA5abEgPaIZt6r2 1gSp+fI7qqjMNasrfdVXvbn+atWdTkTSLIzwfYEret7K9aO5eb9YhLUmr59R2tVj H4I9dERxazdyXZWW5++ydc5tqGhN/BDOxasCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQOXnRQ7Q9mwDMIqZ/7FTA9thZTRTAfBgNVHSMEGDAWgBTkuMoVK8vBLAsJcr1W rEWwfW5sGzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzg2MC81TGpLRlN2THdTd0xDWEs5VnF4RnNIMXViQnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC81TGpLRlN2THdTd0xDWEs5VnF4RnNI MXViQnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzg2MC9EbDUwVU8wUFpzQXpDS21mLXhVd1BiWVdVMFUucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQByu2UMA0GCSqGSIb3DQEBCwUAA4IBAQBh3MkW6tO1ASUsnH0Vt5QpcCfc szW18ipD58Ewo41YMMCotp4WCtR7zdIM8n9fV1AjKViYhRuDK03VOpkLeQVmNMtx hD4hDafR2MYs544AS5vo8OV9kiv0/S9ZKwVetCAPavpTalByeTN7Ti0OuEHRu3lA lxS6WJNcUOTT3vGtpfa0Bgbq5C4fF19NoGZbzx5cf7mSKoYg0GpDz0eiAnJAk0CS J/ribDMwGakpv1G3fdxpeUYMYTS2g746ObJHLrYf30WyXH1/RFLHdVdwZTgoRErG vsSa5vVcyKusGweJE5R+UASxIGso9BPJX/p2qjSt+9houFh+vdjWOfdnU0on -----END CERTIFICATE-----Generated at Sun May 18 21:54:20 2025 by rpki-client