$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/DaT6kHVsUIazVdJb2Z5gEC1Rdzg.roa File: DaT6kHVsUIazVdJb2Z5gEC1Rdzg.roa (raw, json) Hash identifier: 6nVBFa9kZSkR9IlBDPp3tstHduMkXISva7Da69lxeKM= Subject key identifier: 0D:A4:FA:90:75:6C:50:86:B3:55:D2:5B:D9:9E:60:10:2D:51:77:38 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03BD Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DaT6kHVsUIazVdJb2Z5gEC1Rdzg.roa Signing time: Thu 01 May 2025 01:40:34 +0000 ROA not before: Thu 01 May 2025 01:40:34 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 59.156.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:34 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=0DA4FA90756C5086B355D25BD99E60102D517738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:da:ff:1a:69:83:7e:95:c3:7f:a9:4c:75: 66:30:65:41:0a:83:d3:9c:fc:97:c4:5d:5b:0c:4c: 34:6b:10:01:13:c9:5d:64:00:ef:51:72:ec:4e:97: 10:04:e0:26:8e:47:e1:5d:a1:5c:1c:eb:72:03:14: 21:2b:dc:e9:1b:fd:b1:15:7e:da:21:a7:f1:c2:b9: 32:1b:3d:9b:93:3c:14:ee:77:b5:18:72:2a:ef:6c: 0d:a8:87:3d:a3:f2:83:83:f2:20:5a:52:0b:b8:6c: 84:40:60:01:a5:13:f7:59:86:6e:64:f0:74:15:56: b6:6f:de:c1:e5:33:c3:ca:4c:d7:50:5b:79:60:c8: 14:f7:8b:ff:34:68:76:cb:f3:4b:d5:c0:d7:d0:c8: 7d:02:37:af:c2:7e:72:21:50:6f:6d:64:9b:00:3a: fd:48:45:81:c0:7d:95:6f:63:cf:58:8e:e5:cd:42: 17:93:f2:aa:4e:22:4b:21:41:aa:63:8f:86:6b:6d: 0e:ba:95:ce:f7:d7:74:05:4d:6e:52:8f:79:7d:90: a3:06:3e:24:63:f2:9a:8a:78:b3:37:4f:7f:dc:7b: 37:5b:39:4f:33:64:32:05:71:fa:58:46:34:71:38: 6b:12:ff:b3:58:a4:e7:65:a6:2b:30:fe:91:4b:60: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A4:FA:90:75:6C:50:86:B3:55:D2:5B:D9:9E:60:10:2D:51:77:38 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DaT6kHVsUIazVdJb2Z5gEC1Rdzg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.156.16.0/22 Signature Algorithm: sha256WithRSAEncryption 19:82:aa:ed:3a:e4:5c:ce:67:87:e6:04:a3:a8:98:3d:f6:7d: 83:41:65:62:dc:c8:78:30:c8:da:db:4f:66:aa:db:2b:c0:40: b1:8c:ef:56:5e:33:d2:ca:95:0a:27:f8:d5:0a:3c:ae:ae:87: a0:66:f6:bf:a5:87:9f:e0:f4:59:ee:7e:5b:87:ce:a1:5f:71: 5a:5e:c7:5c:78:a5:40:9a:67:a1:94:6a:39:27:98:f2:0b:8b: 60:9e:71:60:b2:24:63:c0:26:ca:07:0f:56:3c:37:5c:4a:2c: 40:66:11:17:84:67:a1:fe:4e:20:ca:04:9c:34:39:76:20:be: 8a:28:e8:d2:07:ab:2a:72:48:9c:87:3b:02:8f:1b:ac:ea:bb: 72:9a:50:8e:bb:d1:fc:7d:f9:7e:c6:05:89:f0:39:af:6f:47: 81:97:37:fd:f3:69:9d:48:29:9c:66:c2:2f:d6:d2:f4:5d:ef: 1b:03:2b:ec:4c:30:40:55:53:03:ef:e7:05:1f:e2:c1:b5:a0: 2d:ca:3b:2d:f7:bd:63:bf:a7:12:d4:28:17:ed:68:1e:a7:dc: 40:bf:60:b3:f8:1d:a6:5e:00:1c:33:a2:08:f8:17:4c:31:32: f9:94:1d:4d:f1:32:d3:d0:86:82:a0:d9:07:7f:a3:a4:14:11: 3a:43:5b:a6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA70wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMzRaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBEQTRGQTkwNzU2QzUw ODZCMzU1RDI1QkQ5OUU2MDEwMkQ1MTc3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBm9r/GmmDfpXDf6lMdWYwZUEKg9Oc/JfEXVsMTDRrEAETyV1k AO9RcuxOlxAE4CaOR+FdoVwc63IDFCEr3Okb/bEVftohp/HCuTIbPZuTPBTud7UY cirvbA2ohz2j8oOD8iBaUgu4bIRAYAGlE/dZhm5k8HQVVrZv3sHlM8PKTNdQW3lg yBT3i/80aHbL80vVwNfQyH0CN6/CfnIhUG9tZJsAOv1IRYHAfZVvY89YjuXNQheT 8qpOIkshQapjj4ZrbQ66lc7313QFTW5Sj3l9kKMGPiRj8pqKeLM3T3/cezdbOU8z ZDIFcfpYRjRxOGsS/7NYpOdlpisw/pFLYAr/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDaT6kHVsUIazVdJb2Z5gEC1RdzgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0RhVDZrSFZzVUlhelZkSmIyWjVnRUMxUmR6Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI7nBAwDQYJKoZIhvcNAQELBQADggEBABmCqu065FzOZ4fmBKOomD32fYNB ZWLcyHgwyNrbT2aq2yvAQLGM71ZeM9LKlQon+NUKPK6uh6Bm9r+lh5/g9FnufluH zqFfcVpex1x4pUCaZ6GUajknmPILi2CecWCyJGPAJsoHD1Y8N1xKLEBmEReEZ6H+ TiDKBJw0OXYgvooo6NIHqypySJyHOwKPG6zqu3KaUI670fx9+X7GBYnwOa9vR4GX N/3zaZ1IKZxmwi/W0vRd7xsDK+xMMEBVUwPv5wUf4sG1oC3KOy33vWO/pxLUKBft aB6n3EC/YLP4HaZeABwzogj4F0wxMvmUHU3xMtPQhoKg2Qd/o6QUETpDW6Y= -----END CERTIFICATE-----Generated at Sun May 18 09:08:18 2025 by rpki-client