$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/BaKxi4wor1Wi-rUchAg70Ka-_yw.roa File: BaKxi4wor1Wi-rUchAg70Ka-_yw.roa (raw, json) Hash identifier: sBJKFpC/gy1ezJC+WffqftGfpTe5Azqir0UeW2gx54M= Subject key identifier: 05:A2:B1:8B:8C:28:AF:55:A2:FA:B5:1C:84:08:3B:D0:A6:BE:FF:2C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0407 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BaKxi4wor1Wi-rUchAg70Ka-_yw.roa Signing time: Thu 01 May 2025 01:45:26 +0000 ROA not before: Thu 01 May 2025 01:45:26 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 111.235.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:45:26 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=05A2B18B8C28AF55A2FAB51C84083BD0A6BEFF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:84:53:33:8f:2f:e6:67:42:9c:0f:a2:7a: 4c:c9:f9:78:27:87:ad:f3:aa:e2:20:dc:10:57:40: 0a:36:c9:fd:32:58:1a:95:65:5d:be:cc:26:97:f9: 81:09:8c:a8:05:86:5c:70:e3:3e:d7:0c:f2:56:d3: 6c:5a:62:c9:9a:75:07:de:9b:99:c9:f0:a6:1a:ea: 33:8d:82:f4:19:6c:28:08:e8:bb:2f:ee:42:20:8e: 7e:5d:da:34:6f:a1:57:f2:de:9b:14:95:fb:93:42: 19:e4:ed:4f:14:75:2b:83:7a:79:8e:86:a7:0d:80: 7e:5a:17:07:ff:41:95:d9:48:ac:05:5d:69:c0:1f: 7d:31:02:a1:23:d8:e9:a1:cf:0e:6a:a2:4b:5a:94: 99:47:24:2e:10:88:74:e9:67:04:f2:7d:79:6c:1c: c7:40:d0:f8:47:ac:fe:67:7f:49:ad:41:c0:a2:25: 1a:62:30:e8:61:11:4c:1a:55:2c:79:75:bc:ab:43: b2:16:cd:08:12:8f:27:81:3a:7a:9b:74:70:02:1f: af:d7:e0:b6:69:3e:18:fa:38:6b:4d:70:29:49:c6: 86:67:08:c3:de:07:80:b9:12:26:0c:b3:f8:40:5f: 4c:1c:56:8c:16:ac:f6:87:76:1a:c5:b0:c9:09:d3: e5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A2:B1:8B:8C:28:AF:55:A2:FA:B5:1C:84:08:3B:D0:A6:BE:FF:2C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BaKxi4wor1Wi-rUchAg70Ka-_yw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.235.48.0/20 Signature Algorithm: sha256WithRSAEncryption 45:29:f3:3b:6b:88:78:c4:a5:ea:fc:50:16:c8:07:c9:2f:f8: 89:ac:7e:2c:cf:d6:9d:a7:41:82:c5:f1:2d:82:f6:aa:f9:7f: ed:e7:ef:34:cb:53:35:b5:65:3c:81:be:75:84:39:b9:48:8d: 87:0c:48:0e:4c:58:c2:90:85:3c:d9:2a:ef:6a:97:13:f9:d1: 3e:ce:ad:43:0d:5d:fb:c5:ee:71:f3:8f:eb:7b:00:86:d4:be: 6b:4e:1c:ef:e4:67:7e:8a:74:0a:14:01:0a:8a:a3:4e:1a:84: d4:25:d3:5d:f2:71:ee:81:db:5c:f8:e7:4a:bd:0e:15:4d:41: ef:05:28:c0:32:2b:ee:5c:d9:2d:25:64:6c:79:80:f4:60:78: d7:a4:a3:61:8c:e3:1c:b8:3e:b3:c6:74:34:e7:32:61:12:69: d7:09:74:0c:d9:c7:7e:34:d8:01:28:86:2e:ec:3d:e4:c0:5c: f5:8e:7f:2c:d4:e7:58:b4:31:9a:25:34:15:2b:29:d3:13:85: e0:59:ff:6e:be:c2:8c:01:f5:0f:9f:5e:62:92:99:b0:d2:db: 4c:20:09:2b:a4:98:78:de:a5:a7:ab:c7:61:19:0f:46:ca:4c: d4:27:ec:fd:66:cb:ec:e8:2f:82:59:f9:3c:1a:5a:55:6c:5f: c3:28:e9:d7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ1MjZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA1QTJCMThCOEMyOEFG NTVBMkZBQjUxQzg0MDgzQkQwQTZCRUZGMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEzYRTM48v5mdCnA+iekzJ+Xgnh63zquIg3BBXQAo2yf0yWBqV ZV2+zCaX+YEJjKgFhlxw4z7XDPJW02xaYsmadQfem5nJ8KYa6jONgvQZbCgI6Lsv 7kIgjn5d2jRvoVfy3psUlfuTQhnk7U8UdSuDenmOhqcNgH5aFwf/QZXZSKwFXWnA H30xAqEj2Omhzw5qoktalJlHJC4QiHTpZwTyfXlsHMdA0PhHrP5nf0mtQcCiJRpi MOhhEUwaVSx5dbyrQ7IWzQgSjyeBOnqbdHACH6/X4LZpPhj6OGtNcClJxoZnCMPe B4C5EiYMs/hAX0wcVowWrPaHdhrFsMkJ0+UzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBaKxi4wor1Wi+rUchAg70Ka+/ywwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0JhS3hpNHdvcjFXaS1yVWNoQWc3MEthLV95dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARv6zAwDQYJKoZIhvcNAQELBQADggEBAEUp8ztriHjEper8UBbIB8kv+Ims fizP1p2nQYLF8S2C9qr5f+3n7zTLUzW1ZTyBvnWEOblIjYcMSA5MWMKQhTzZKu9q lxP50T7OrUMNXfvF7nHzj+t7AIbUvmtOHO/kZ36KdAoUAQqKo04ahNQl013yce6B 21z450q9DhVNQe8FKMAyK+5c2S0lZGx5gPRgeNeko2GM4xy4PrPGdDTnMmESadcJ dAzZx3402AEohi7sPeTAXPWOfyzU51i0MZolNBUrKdMTheBZ/26+wowB9Q+fXmKS mbDS20wgCSukmHjepaerx2EZD0bKTNQn7P1my+zoL4JZ+TwaWlVsX8Mo6dc= -----END CERTIFICATE-----Generated at Sun May 18 07:37:17 2025 by rpki-client