$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/3RIuGI3bLS7tVizOjmc-MvoGaO8.roa File: 3RIuGI3bLS7tVizOjmc-MvoGaO8.roa (raw, json) Hash identifier: wPQZbISjUUuCi1YgOpVAhoCEAkRnUS+TRg7AYF1McUc= Subject key identifier: DD:12:2E:18:8D:DB:2D:2E:ED:56:2C:CE:8E:67:3E:32:FA:06:68:EF Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03D1 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3RIuGI3bLS7tVizOjmc-MvoGaO8.roa Signing time: Thu 01 May 2025 01:42:42 +0000 ROA not before: Thu 01 May 2025 01:42:42 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.44.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 977 (0x3d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:42 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=DD122E188DDB2D2EED562CCE8E673E32FA0668EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:8a:61:61:ef:49:29:9f:88:04:6b:88:cc: 65:2b:26:96:9b:09:04:34:b5:66:95:82:79:11:73: f2:ec:aa:bf:d3:be:eb:3e:6d:fb:13:ca:4f:4a:7b: 08:84:ed:23:eb:60:2d:e6:63:e7:5f:62:05:21:c8: ae:4b:33:d7:2e:a6:83:38:51:a8:36:8a:04:9d:52: 0d:be:38:bf:95:77:0b:65:74:16:c0:cb:d8:ff:8a: 06:11:f5:2d:ed:8b:6f:8b:42:22:6c:4c:d4:fc:3f: a0:fa:17:c2:ce:1e:ec:99:cb:ce:67:92:02:95:c6: e4:0f:d3:e2:a4:cf:1d:fa:49:18:2a:27:7e:03:44: 52:ec:6b:af:6c:8b:14:53:1a:c0:9d:f3:a9:a7:90: 50:19:16:a0:16:cb:3e:d3:0a:d4:50:2c:48:de:f0: 26:b6:36:39:0c:fe:28:47:8a:39:75:a0:a7:6d:30: f9:3d:70:e6:c6:94:a4:c8:aa:e4:b3:24:8a:6d:09: c3:4d:04:79:f9:ea:39:92:e0:ca:82:65:dc:df:ae: c4:ee:46:4d:8b:97:f3:4b:3e:32:91:d1:f5:09:1f: 21:8a:08:71:ec:ca:3a:7e:e1:0b:64:1d:0d:40:26: d0:e7:6f:9f:fc:47:18:e5:77:cf:29:84:c5:2d:7f: b3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:12:2E:18:8D:DB:2D:2E:ED:56:2C:CE:8E:67:3E:32:FA:06:68:EF X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3RIuGI3bLS7tVizOjmc-MvoGaO8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.44.72.0/21 Signature Algorithm: sha256WithRSAEncryption 92:51:d8:ea:7c:a3:bb:aa:4e:b8:92:a8:7d:86:2c:6b:8e:b0: e1:53:15:5d:15:1d:8a:15:46:f3:73:0f:de:e1:ca:a7:cd:52: 52:c1:4b:1c:7f:7a:3a:5f:4d:0a:8d:83:77:e8:97:d0:82:a7: 1f:4f:7b:36:9f:4c:44:6f:53:c3:26:20:8b:7c:9b:e0:dd:67: 3a:c9:33:fe:8e:ee:94:df:53:a3:53:f7:b5:2c:33:c5:70:f6: 06:3e:e5:d4:a0:4c:fa:04:49:a3:c0:77:dc:49:36:5a:c6:ea: 55:a1:d9:c0:1e:51:fe:81:60:2c:a5:2b:0d:6d:88:10:5a:74: 7f:a4:ea:50:08:a6:ec:fa:2e:57:a5:78:5c:fe:2f:4d:08:af: d6:64:15:d2:89:38:9b:7f:c6:9d:d2:54:85:ee:ab:8f:38:ed: 4d:80:84:9f:d9:0f:c7:b1:88:1e:e0:13:f2:67:5c:ac:26:6b: fe:c1:7a:3a:59:f7:59:ca:fd:4b:8e:23:3b:64:17:1c:9b:e7: 25:c6:88:6d:9d:07:29:64:9e:45:a3:39:0d:50:ba:d2:da:fb: 56:d3:09:23:04:3b:b9:58:aa:f8:5a:5c:6c:e6:04:7b:30:2d: 21:1c:d0:68:61:58:f9:ea:e0:52:97:f2:53:16:3d:a0:b4:e9: 9b:0e:4b:c2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNDJaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEREMTIyRTE4OEREQjJE MkVFRDU2MkNDRThFNjczRTMyRkEwNjY4RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3UYphYe9JKZ+IBGuIzGUrJpabCQQ0tWaVgnkRc/Lsqr/Tvus+ bfsTyk9KewiE7SPrYC3mY+dfYgUhyK5LM9cupoM4Uag2igSdUg2+OL+VdwtldBbA y9j/igYR9S3ti2+LQiJsTNT8P6D6F8LOHuyZy85nkgKVxuQP0+Kkzx36SRgqJ34D RFLsa69sixRTGsCd86mnkFAZFqAWyz7TCtRQLEje8Ca2NjkM/ihHijl1oKdtMPk9 cObGlKTIquSzJIptCcNNBHn56jmS4MqCZdzfrsTuRk2Ll/NLPjKR0fUJHyGKCHHs yjp+4QtkHQ1AJtDnb5/8Rxjld88phMUtf7MDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3RIuGI3bLS7tVizOjmc+MvoGaO8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzNSSXVHSTNiTFM3dFZpek9qbWMtTXZvR2FPOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9LEgwDQYJKoZIhvcNAQELBQADggEBAJJR2Op8o7uqTriSqH2GLGuOsOFT FV0VHYoVRvNzD97hyqfNUlLBSxx/ejpfTQqNg3fol9CCpx9PezafTERvU8MmIIt8 m+DdZzrJM/6O7pTfU6NT97UsM8Vw9gY+5dSgTPoESaPAd9xJNlrG6lWh2cAeUf6B YCylKw1tiBBadH+k6lAIpuz6LleleFz+L00Ir9ZkFdKJOJt/xp3SVIXuq4847U2A hJ/ZD8exiB7gE/JnXKwma/7BejpZ91nK/UuOIztkFxyb5yXGiG2dBylknkWjOQ1Q utLa+1bTCSMEO7lYqvhaXGzmBHswLSEc0GhhWPnq4FKX8lMWPaC06ZsOS8I= -----END CERTIFICATE-----Generated at Sun May 18 19:36:02 2025 by rpki-client