$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8jRL_-a4dpL6Q4nVS97nJu0bnd8.roa File: 8jRL_-a4dpL6Q4nVS97nJu0bnd8.roa (raw, json) Hash identifier: fZAkXoaN33kJbTmnQ7ZEUVCjcGNGumeTd5r58DOBrO0= Subject key identifier: F2:34:4B:FF:E6:B8:76:92:FA:43:89:D5:4B:DE:E7:26:ED:1B:9D:DF Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0396 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8jRL_-a4dpL6Q4nVS97nJu0bnd8.roa Signing time: Thu 01 May 2025 01:37:32 +0000 ROA not before: Thu 01 May 2025 01:37:32 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 27.133.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:32 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=F2344BFFE6B87692FA4389D54BDEE726ED1B9DDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:48:11:f4:1e:fd:4d:9b:f3:fd:61:4d:87: c3:4b:b2:1a:e5:b5:ad:f0:1f:1d:b0:fa:f2:6a:64: ed:b8:1d:7e:f5:36:01:26:64:1d:c5:ca:31:e9:68: 5e:e8:80:a3:65:00:96:af:e3:b2:66:00:26:51:7b: b5:4d:a1:28:f7:58:f0:dd:63:e8:75:44:a5:cd:ba: a7:87:39:d1:24:a1:37:a9:e4:83:7e:32:b3:d2:af: 92:cd:ed:53:d1:8f:23:1b:23:e3:b1:56:c5:0a:9f: be:9d:64:de:d9:71:6e:89:fe:3f:a2:46:71:e8:a7: ee:e9:12:59:dc:af:c5:39:bf:d1:74:6f:69:f7:e2: c5:1b:4e:f3:be:ea:1a:11:63:47:65:a2:53:42:90: a4:00:4e:cd:98:7d:4d:a5:32:47:fc:a4:29:d7:d9: b5:78:cb:ec:3b:af:0f:b3:55:f6:b6:c9:3b:04:80: f2:f4:d1:0d:4b:17:ba:2d:5a:fb:06:18:2e:15:46: 85:65:0d:a2:80:89:ed:f9:8b:3e:04:1e:93:2e:b3: a3:ad:63:99:10:fa:a4:4d:68:ef:d3:87:b5:be:23: 2c:ec:7d:fa:67:ec:6c:56:4f:6a:69:c1:76:f8:d2: 41:f3:b1:f4:ea:fc:53:99:bc:64:21:0b:98:d2:bf: a3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:34:4B:FF:E6:B8:76:92:FA:43:89:D5:4B:DE:E7:26:ED:1B:9D:DF X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8jRL_-a4dpL6Q4nVS97nJu0bnd8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.133.168.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:34:89:57:07:33:49:7e:8d:19:87:15:c8:29:62:73:32:85: 6f:ff:76:da:f0:a0:5c:87:76:8b:e9:5f:ef:1f:94:b6:8e:76: 54:63:42:35:00:69:eb:97:f7:08:da:dc:e5:f1:77:df:e7:5e: ae:4e:7f:b4:bb:56:d8:31:93:5b:5f:f2:ad:11:23:50:e6:33: 5e:14:fa:fa:89:f6:24:cd:bc:6a:26:e3:bb:6a:ff:6c:04:b7: 12:7c:bb:53:09:f1:42:cd:00:13:7f:f0:9f:44:00:35:ed:f7: d6:80:9a:66:71:3b:76:2b:c7:6e:5b:03:a9:43:a6:2d:67:14: 11:9e:4a:ef:39:6b:95:10:70:b7:6d:50:dc:bd:03:01:9e:00: 66:bb:2e:e2:9c:ae:59:22:b2:2f:c1:cc:fc:7f:ae:0b:7c:ce: 39:1d:73:55:9e:6c:53:b5:eb:6f:e1:68:32:df:06:17:4a:52: c3:de:1c:e1:43:2f:7f:53:27:20:5e:ae:02:58:88:48:9c:fd: 66:a3:5f:92:36:ef:cf:e3:fa:35:dc:4d:5f:99:44:e5:94:bf: 35:d9:a4:38:cf:69:37:6c:f7:69:d6:71:d9:3f:67:45:b7:b2: 48:67:60:35:c0:69:7c:2c:f5:31:44:aa:0e:87:82:82:a3:c7: c0:5d:50:ff -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MzJaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYyMzQ0QkZGRTZCODc2 OTJGQTQzODlENTRCREVFNzI2RUQxQjlEREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFyEgR9B79TZvz/WFNh8NLshrlta3wHx2w+vJqZO24HX71NgEm ZB3FyjHpaF7ogKNlAJav47JmACZRe7VNoSj3WPDdY+h1RKXNuqeHOdEkoTep5IN+ MrPSr5LN7VPRjyMbI+OxVsUKn76dZN7ZcW6J/j+iRnHop+7pElncr8U5v9F0b2n3 4sUbTvO+6hoRY0dlolNCkKQATs2YfU2lMkf8pCnX2bV4y+w7rw+zVfa2yTsEgPL0 0Q1LF7otWvsGGC4VRoVlDaKAie35iz4EHpMus6OtY5kQ+qRNaO/Th7W+Iyzsffpn 7GxWT2ppwXb40kHzsfTq/FOZvGQhC5jSv6MLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8jRL/+a4dpL6Q4nVS97nJu0bnd8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzhqUkxfLWE0ZHBMNlE0blZTOTduSnUwYm5kOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIbhagwDQYJKoZIhvcNAQELBQADggEBAI80iVcHM0l+jRmHFcgpYnMyhW// dtrwoFyHdovpX+8flLaOdlRjQjUAaeuX9wja3OXxd9/nXq5Of7S7Vtgxk1tf8q0R I1DmM14U+vqJ9iTNvGom47tq/2wEtxJ8u1MJ8ULNABN/8J9EADXt99aAmmZxO3Yr x25bA6lDpi1nFBGeSu85a5UQcLdtUNy9AwGeAGa7LuKcrlkisi/BzPx/rgt8zjkd c1WebFO162/haDLfBhdKUsPeHOFDL39TJyBergJYiEic/WajX5I278/j+jXcTV+Z ROWUvzXZpDjPaTds92nWcdk/Z0W3skhnYDXAaXws9TFEqg6HgoKjx8BdUP8= -----END CERTIFICATE-----Generated at Sun May 18 12:24:21 2025 by rpki-client