$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2eHegYk4SkQmOP8paLMq0Ul1LF0.roa File: 2eHegYk4SkQmOP8paLMq0Ul1LF0.roa (raw, json) Hash identifier: OWe/ElbivFooPPDDFWGKAtDHplMqqYVT5CGTxb8pIZQ= Subject key identifier: D9:E1:DE:81:89:38:4A:44:26:38:FF:29:68:B3:2A:D1:49:75:2C:5D Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03E2 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2eHegYk4SkQmOP8paLMq0Ul1LF0.roa Signing time: Thu 01 May 2025 01:42:50 +0000 ROA not before: Thu 01 May 2025 01:42:50 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 111.232.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 994 (0x3e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:50 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=D9E1DE8189384A442638FF2968B32AD149752C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:56:9c:11:35:cd:24:fd:a9:15:15:0d:e4:67: eb:94:2e:38:42:b7:00:e3:81:63:b4:4c:f0:11:bc: 72:ea:e6:fb:68:83:57:2e:b6:24:82:5c:c8:29:08: 49:2f:b7:64:25:73:1b:62:ce:20:17:27:d5:2a:fa: 21:fe:38:18:5f:5f:f2:83:4b:5c:9d:b1:7c:b8:aa: a3:ca:a9:7b:c4:7d:b1:cd:d1:05:ba:6b:3e:bb:13: b5:a0:52:9b:44:c3:aa:2d:dd:bc:26:8d:e8:c3:d9: 24:ca:0e:02:7d:f3:98:23:c1:d2:0f:49:55:57:2c: 2f:42:bf:fd:23:44:7d:e9:40:63:05:33:a9:b5:6a: 36:54:c1:a6:74:af:e3:18:03:54:08:9f:83:6b:d2: 5f:96:13:04:0b:54:c7:fd:2a:54:0f:8c:db:78:a2: 65:80:94:7b:30:1d:3b:2c:84:7d:96:d6:e1:76:68: 83:2e:d4:23:0d:d3:68:d9:bf:f2:71:d4:a9:8a:b7: ce:e4:bb:0d:9b:5b:45:5e:f9:3d:c8:3b:7d:68:40: 1d:30:9b:cc:a3:96:9c:42:95:7d:07:cb:72:ab:a0: 0b:4d:61:d7:37:8a:e3:bd:bd:03:3c:59:6a:fc:d9: 1a:37:da:ed:ed:c0:c7:11:5b:99:ce:ac:f2:da:bf: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E1:DE:81:89:38:4A:44:26:38:FF:29:68:B3:2A:D1:49:75:2C:5D X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2eHegYk4SkQmOP8paLMq0Ul1LF0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.232.0.0/15 Signature Algorithm: sha256WithRSAEncryption 3b:70:64:dc:6f:31:80:49:cf:a1:0f:1a:6e:fb:fa:18:72:93: 25:29:3d:11:98:42:75:c2:e5:dc:54:82:ab:f8:a0:7c:f0:5f: e8:b8:d7:25:3a:9d:5a:f6:f5:d0:95:cf:d5:f9:3c:2b:3a:12: d6:0b:9d:16:11:ca:4a:ce:80:22:2e:47:ce:9d:ff:e5:9b:28: 32:6a:52:26:3b:fa:28:e1:a7:1a:39:0b:6c:67:f4:d8:a9:70: f9:e8:66:e1:a3:9a:c1:9c:13:80:7f:da:cc:08:fa:4a:a7:f6: 3e:64:bf:e0:6c:0e:90:c0:2d:61:35:82:e2:ac:1d:a9:1e:88: 19:33:f3:c9:bd:13:05:5d:82:43:ef:aa:da:7e:6f:10:0f:27: cf:57:f9:bf:49:c9:82:a2:a6:56:fd:fa:e3:66:87:73:10:d5: 1c:ad:fd:76:9c:dd:ba:d4:a2:af:11:10:91:0d:32:9f:e3:a3: 9e:d5:98:ac:ee:d4:24:5b:26:d7:14:fb:e5:8a:84:43:68:61: 5b:b8:60:3c:9d:d7:04:d2:2c:7a:d6:fa:28:81:be:cc:76:75: 8f:68:2a:75:d2:c7:0c:e4:3c:cc:99:d5:d0:f8:7f:aa:69:cf: 92:d8:76:c5:60:8d:34:27:55:fa:16:68:16:19:45:d6:c3:26: e7:db:f4:13 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNTBaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ5RTFERTgxODkzODRB NDQyNjM4RkYyOTY4QjMyQUQxNDk3NTJDNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdVpwRNc0k/akVFQ3kZ+uULjhCtwDjgWO0TPARvHLq5vtog1cu tiSCXMgpCEkvt2QlcxtiziAXJ9Uq+iH+OBhfX/KDS1ydsXy4qqPKqXvEfbHN0QW6 az67E7WgUptEw6ot3bwmjejD2STKDgJ985gjwdIPSVVXLC9Cv/0jRH3pQGMFM6m1 ajZUwaZ0r+MYA1QIn4Nr0l+WEwQLVMf9KlQPjNt4omWAlHswHTsshH2W1uF2aIMu 1CMN02jZv/Jx1KmKt87kuw2bW0Ve+T3IO31oQB0wm8yjlpxClX0Hy3KroAtNYdc3 iuO9vQM8WWr82Ro32u3twMcRW5nOrPLav8vhAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU2eHegYk4SkQmOP8paLMq0Ul1LF0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzJlSGVnWWs0U2tRbU9QOHBhTE1xMFVsMUxGMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFv6DANBgkqhkiG9w0BAQsFAAOCAQEAO3Bk3G8xgEnPoQ8abvv6GHKTJSk9 EZhCdcLl3FSCq/igfPBf6LjXJTqdWvb10JXP1fk8KzoS1gudFhHKSs6AIi5Hzp3/ 5ZsoMmpSJjv6KOGnGjkLbGf02Klw+ehm4aOawZwTgH/azAj6Sqf2PmS/4GwOkMAt YTWC4qwdqR6IGTPzyb0TBV2CQ++q2n5vEA8nz1f5v0nJgqKmVv3642aHcxDVHK39 dpzdutSirxEQkQ0yn+OjntWYrO7UJFsm1xT75YqEQ2hhW7hgPJ3XBNIsetb6KIG+ zHZ1j2gqddLHDOQ8zJnV0Ph/qmnPkth2xWCNNCdV+hZoFhlF1sMm59v0Ew== -----END CERTIFICATE-----Generated at Sun May 18 02:01:34 2025 by rpki-client