$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2mw7gtQysUAvXevWjNprxceLgoU.roa File: 2mw7gtQysUAvXevWjNprxceLgoU.roa (raw, json) Hash identifier: p5UgFZCjxMYIBqpl3G/ulrqDBzr4Rz6zIdbWQzB2ZxA= Subject key identifier: DA:6C:3B:82:D4:32:B1:40:2F:5D:EB:D6:8C:DA:6B:C5:C7:8B:82:85 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0397 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2mw7gtQysUAvXevWjNprxceLgoU.roa Signing time: Thu 01 May 2025 01:37:33 +0000 ROA not before: Thu 01 May 2025 01:37:33 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 36.52.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:33 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=DA6C3B82D432B1402F5DEBD68CDA6BC5C78B8285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:10:5b:df:50:83:2f:b7:0f:e4:d0:25:8f: d0:cb:02:e9:19:72:f5:7a:8f:0d:1c:e1:7b:e0:9e: a9:d9:4d:f5:cd:d6:7c:50:bb:43:82:0a:e9:cd:c1: 5d:0a:f1:3d:37:f8:03:85:0d:71:0f:9f:74:e4:5b: 7e:69:2b:72:09:b0:32:9d:19:02:21:c0:f2:e0:dc: 32:54:3c:ca:64:7e:ef:d8:a8:b0:b0:34:84:86:d0: e2:32:9c:38:d2:cc:8d:20:dc:77:ff:a5:21:ce:2a: ce:c2:12:ba:4b:0b:82:af:f6:9f:70:38:e6:fc:2f: 7b:7d:3b:1a:19:19:09:03:03:74:e1:ca:aa:7f:4e: 20:4a:f6:78:42:14:5b:e4:98:2e:a5:43:19:22:18: ee:24:97:90:8f:c0:37:86:96:a1:31:b0:d5:f9:a7: 5e:4b:5d:e6:59:7b:ba:69:bf:17:12:fa:88:65:55: ad:a9:2a:a5:ed:5f:cf:e3:97:34:2a:a6:07:63:fd: f7:f3:e7:da:d1:6e:f0:50:bf:6a:78:d1:dd:6b:2f: 94:07:92:8d:79:91:a9:66:5b:33:ec:2a:c9:e2:b5: 0c:9e:f9:8b:d7:57:3f:52:4b:d8:0a:56:aa:3f:92: 30:53:4b:5f:fb:c1:59:39:fd:13:42:ad:a0:c9:3e: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6C:3B:82:D4:32:B1:40:2F:5D:EB:D6:8C:DA:6B:C5:C7:8B:82:85 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2mw7gtQysUAvXevWjNprxceLgoU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.0.0/20 Signature Algorithm: sha256WithRSAEncryption 2f:77:94:fe:0d:03:7e:ac:f5:ef:3b:6d:78:cf:28:b9:d1:6d: 7b:71:fd:11:61:2f:ff:5a:90:4b:d4:89:db:4b:12:a8:1f:17: d5:1b:e9:0b:e2:10:5f:a5:95:e7:d6:46:f8:1c:18:85:d8:fe: 70:71:1f:ab:87:2a:5c:01:5c:c9:8a:7c:fd:67:52:ce:c4:42: ee:07:48:fd:ef:37:e9:bb:b8:85:ab:8a:06:1f:08:2e:1e:d3: d8:03:33:ab:74:6e:32:0f:33:6c:a1:5c:c0:e4:06:e5:60:59: 84:e7:9c:3b:d7:8a:4d:71:33:e2:79:15:28:fd:55:31:86:74: 28:1a:0f:cf:da:07:8c:1d:7a:bd:54:58:e2:70:bb:4f:6a:10: ff:49:3d:58:d8:c2:6e:e0:01:2d:5e:88:d1:d7:42:ea:ce:e8: 23:c6:88:cb:5a:a5:d4:9b:91:e1:c5:3d:33:86:c3:b1:7a:09: 94:b3:51:69:9a:dc:f4:23:62:c3:fd:99:9d:5a:d3:75:1b:eb: 8a:37:e3:dd:e9:68:57:8f:9e:e9:67:47:86:90:fb:ab:1a:f7: c3:0d:56:dc:1c:a8:23:9a:6e:29:6e:fe:b4:d0:07:b4:b9:62: db:92:b2:d5:9e:d0:9e:1c:1e:6b:a6:ff:61:6a:b2:a5:9f:69: 83:7c:63:e5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MzNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKERBNkMzQjgyRDQzMkIx NDAyRjVERUJENjhDREE2QkM1Qzc4QjgyODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOehBb31CDL7cP5NAlj9DLAukZcvV6jw0c4XvgnqnZTfXN1nxQ u0OCCunNwV0K8T03+AOFDXEPn3TkW35pK3IJsDKdGQIhwPLg3DJUPMpkfu/YqLCw NISG0OIynDjSzI0g3Hf/pSHOKs7CErpLC4Kv9p9wOOb8L3t9OxoZGQkDA3Thyqp/ TiBK9nhCFFvkmC6lQxkiGO4kl5CPwDeGlqExsNX5p15LXeZZe7ppvxcS+ohlVa2p KqXtX8/jlzQqpgdj/ffz59rRbvBQv2p40d1rL5QHko15kalmWzPsKsnitQye+YvX Vz9SS9gKVqo/kjBTS1/7wVk5/RNCraDJPjATAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2mw7gtQysUAvXevWjNprxceLgoUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzJtdzdndFF5c1VBdlhldldqTnByeGNlTGdvVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQkNAAwDQYJKoZIhvcNAQELBQADggEBAC93lP4NA36s9e87bXjPKLnRbXtx /RFhL/9akEvUidtLEqgfF9Ub6QviEF+llefWRvgcGIXY/nBxH6uHKlwBXMmKfP1n Us7EQu4HSP3vN+m7uIWrigYfCC4e09gDM6t0bjIPM2yhXMDkBuVgWYTnnDvXik1x M+J5FSj9VTGGdCgaD8/aB4wder1UWOJwu09qEP9JPVjYwm7gAS1eiNHXQurO6CPG iMtapdSbkeHFPTOGw7F6CZSzUWma3PQjYsP9mZ1a03Ub64o3493paFePnulnR4aQ +6sa98MNVtwcqCOabilu/rTQB7S5YtuSstWe0J4cHmum/2FqsqWfaYN8Y+U= -----END CERTIFICATE-----Generated at Sat May 17 21:30:18 2025 by rpki-client