$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2p6toEiY6VFf974rw4ZwPINTtug.roa File: 2p6toEiY6VFf974rw4ZwPINTtug.roa (raw, json) Hash identifier: mnI1mUScIVgH0LAgM09tk7oL0PlaEvu4U4zsjHDzPk8= Subject key identifier: DA:9E:AD:A0:48:98:E9:51:5F:F7:BE:2B:C3:86:70:3C:83:53:B6:E8 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03C5 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2p6toEiY6VFf974rw4ZwPINTtug.roa Signing time: Thu 01 May 2025 01:40:37 +0000 ROA not before: Thu 01 May 2025 01:40:37 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 59.156.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:37 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=DA9EADA04898E9515FF7BE2BC386703C8353B6E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:7e:72:b0:d1:89:00:0b:b5:ba:1d:9e:32: 81:81:22:5d:2b:5b:8e:f3:2f:e4:45:52:88:a6:b9: e8:47:43:e5:76:68:b1:be:05:b7:57:36:d2:8f:ea: 41:5b:97:4e:26:56:97:8c:f7:fb:11:1e:ad:84:e6: 19:25:19:da:11:d1:a6:63:f8:62:56:33:55:d3:c2: da:2f:78:bf:35:f0:72:e4:94:c4:77:ea:92:62:12: d6:f4:77:cf:5a:a2:0f:d0:d3:f9:af:1f:1e:f5:5d: 5e:12:2a:7d:99:e8:e7:1b:ad:60:00:08:28:75:28: e5:17:99:d6:b8:f5:63:67:e2:b9:75:07:20:72:41: 36:f6:3c:45:d7:c1:db:5d:c7:5b:6e:c4:42:33:51: 16:6e:37:ab:35:d1:5c:7e:37:2a:2e:a5:54:9b:34: 57:22:08:ca:b7:49:9b:f8:6c:d5:b5:31:e6:0f:66: 57:be:12:2a:c9:4c:90:d0:7c:98:aa:99:1a:46:30: e2:2e:0f:55:d7:46:5a:23:8c:57:69:a2:b3:f1:b2: e6:0e:b3:f3:c0:0e:71:79:5d:3d:0d:67:68:86:51: fb:ba:7a:8e:8e:32:3a:38:a0:fc:ac:bf:4e:20:93: 94:e6:85:49:7a:53:cc:df:fd:14:2b:4e:d8:b6:82: c4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9E:AD:A0:48:98:E9:51:5F:F7:BE:2B:C3:86:70:3C:83:53:B6:E8 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2p6toEiY6VFf974rw4ZwPINTtug.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.156.134.0/24 Signature Algorithm: sha256WithRSAEncryption 56:93:31:9c:9e:1b:b3:76:05:8f:0d:f7:e4:11:39:e2:6c:5c: 65:70:38:06:31:0f:be:51:09:41:e8:73:e2:e5:2f:5e:cf:0d: 0a:ad:dc:d1:26:ee:e2:a8:3d:ec:9f:06:60:39:91:28:7e:bd: 42:a4:7d:b5:a5:18:d5:34:3b:b9:e6:55:b4:36:cd:e6:9b:4a: ff:d8:4b:5e:05:83:f5:5e:a8:da:b6:6a:01:72:4d:30:9c:7c: eb:e9:f9:9e:eb:13:eb:61:b4:f2:51:d5:d9:3c:12:e9:63:9d: 26:37:04:0a:e4:64:8f:14:bb:a8:e6:c6:6d:8e:98:0c:a5:48: 78:26:89:2f:ef:a3:c0:01:05:0d:f1:ae:e3:9b:e5:19:03:67: 63:b0:35:e9:43:d1:66:da:8b:88:52:0a:1f:ae:ec:aa:4b:27: 3c:42:54:8a:14:12:b6:7f:7e:2f:18:0a:d3:93:45:44:4b:83: 3d:f7:7c:97:93:c4:cb:9a:26:b8:c5:8d:49:70:15:55:96:ef: f8:0e:89:6e:b5:61:c3:a3:1f:5c:e1:eb:8e:f9:b6:92:54:df: 1d:22:3a:73:b8:f2:12:84:6b:19:dd:b7:81:b6:f8:95:a6:c4: 4c:68:ab:49:61:a4:ec:22:bd:a5:4a:aa:4e:62:c8:91:3b:79: 27:73:e9:11 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMzdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKERBOUVBREEwNDg5OEU5 NTE1RkY3QkUyQkMzODY3MDNDODM1M0I2RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyWn5ysNGJAAu1uh2eMoGBIl0rW47zL+RFUoimuehHQ+V2aLG+ BbdXNtKP6kFbl04mVpeM9/sRHq2E5hklGdoR0aZj+GJWM1XTwtoveL818HLklMR3 6pJiEtb0d89aog/Q0/mvHx71XV4SKn2Z6OcbrWAACCh1KOUXmda49WNn4rl1ByBy QTb2PEXXwdtdx1tuxEIzURZuN6s10Vx+NyoupVSbNFciCMq3SZv4bNW1MeYPZle+ EirJTJDQfJiqmRpGMOIuD1XXRlojjFdporPxsuYOs/PADnF5XT0NZ2iGUfu6eo6O Mjo4oPysv04gk5TmhUl6U8zf/RQrTti2gsQTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2p6toEiY6VFf974rw4ZwPINTtugwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzJwNnRvRWlZNlZGZjk3NHJ3NFp3UElOVHR1Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA7nIYwDQYJKoZIhvcNAQELBQADggEBAFaTMZyeG7N2BY8N9+QROeJsXGVw OAYxD75RCUHoc+LlL17PDQqt3NEm7uKoPeyfBmA5kSh+vUKkfbWlGNU0O7nmVbQ2 zeabSv/YS14Fg/VeqNq2agFyTTCcfOvp+Z7rE+thtPJR1dk8EuljnSY3BArkZI8U u6jmxm2OmAylSHgmiS/vo8ABBQ3xruOb5RkDZ2OwNelD0Wbai4hSCh+u7KpLJzxC VIoUErZ/fi8YCtOTRURLgz33fJeTxMuaJrjFjUlwFVWW7/gOiW61YcOjH1zh6475 tpJU3x0iOnO48hKEaxndt4G2+JWmxExoq0lhpOwivaVKqk5iyJE7eSdz6RE= -----END CERTIFICATE-----Generated at Sat May 17 23:25:53 2025 by rpki-client