$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/F3k-BnrQMw4PaedfTebAqcQYKmc.roa File: F3k-BnrQMw4PaedfTebAqcQYKmc.roa (raw, json) Hash identifier: bxfk4XvR9anBSpQXREi9EesCmKMJbxY8Eb8Vil+FCVI= Subject key identifier: 17:79:3E:06:7A:D0:33:0E:0F:69:E7:5F:4D:E6:C0:A9:C4:18:2A:67 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0384 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/F3k-BnrQMw4PaedfTebAqcQYKmc.roa Signing time: Thu 01 May 2025 01:37:25 +0000 ROA not before: Thu 01 May 2025 01:37:25 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 36.52.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:25 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=17793E067AD0330E0F69E75F4DE6C0A9C4182A67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:61:da:24:5c:71:0f:e3:b9:b5:f0:b3:fa: 4e:1c:92:c8:00:36:af:67:4e:4b:a3:06:6d:ff:38: 2c:0c:67:f7:7e:19:e0:2a:5e:10:9e:e4:e7:35:b6: 91:23:1a:45:a6:5c:da:4d:d6:a5:c9:45:ac:4c:58: 5b:46:b0:98:64:6f:fb:15:68:2a:d2:1d:fc:ee:a1: 01:f1:fe:26:c6:86:e1:6f:9e:9e:51:ab:62:ad:69: 6f:84:82:08:bc:43:ed:ec:4b:a0:f9:45:93:e0:0c: 4e:cf:86:fe:a4:74:2d:b4:18:92:86:c7:ff:b0:0d: dd:ba:7c:4c:cd:fc:1c:3b:ed:42:27:5b:01:09:41: e6:8c:b0:34:61:4b:d9:29:a4:75:e6:30:cf:ce:97: 5e:14:37:49:c2:d0:cd:72:cb:15:a2:48:ba:1c:8c: 22:02:e2:9d:bf:8b:e1:24:80:8f:a2:b0:2f:b6:1d: 73:91:b3:f8:44:8a:72:68:45:14:0f:05:cd:fd:df: 66:c8:d4:ae:23:d0:00:f8:34:ff:84:57:16:3c:8d: ed:47:c1:1b:f4:33:36:75:ab:cf:6f:c6:e2:38:7e: 54:57:df:cc:bf:bc:69:88:4f:22:e9:d6:9c:c3:4d: e0:3d:c3:7b:c6:94:f1:f8:8a:51:6f:86:6e:c9:72: a5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:79:3E:06:7A:D0:33:0E:0F:69:E7:5F:4D:E6:C0:A9:C4:18:2A:67 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/F3k-BnrQMw4PaedfTebAqcQYKmc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.128.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:d5:ea:64:7e:c9:1b:12:b9:31:a6:39:96:73:35:2b:38:31: 45:66:2a:e1:24:a4:77:38:9d:87:d3:f4:4a:06:99:34:25:aa: 39:e5:d8:20:a3:c9:5c:f1:44:c4:e6:60:46:40:03:10:1d:9c: 28:e3:2f:79:58:bf:c5:05:c9:d9:c4:1e:35:4a:35:2d:fa:fd: e2:1b:f9:0a:a0:16:54:b9:84:45:43:3c:5c:90:bc:f2:3b:76: 6c:b8:06:94:6c:2d:5e:fe:47:c7:62:6a:4d:b8:6a:12:29:ad: 97:b3:cb:52:94:06:bb:a9:58:89:99:bd:74:17:b0:12:1e:8b: c3:23:10:d8:c7:ce:22:74:67:71:66:0d:71:0c:92:c3:31:1c: ed:d3:3e:be:91:78:52:3e:40:fc:d8:75:ef:11:c0:90:32:a6: 1a:26:d1:df:63:0f:24:fd:37:6b:22:a6:42:3a:f8:38:7e:46: d5:47:cb:8f:de:09:6f:db:d8:4e:4e:c1:65:45:31:01:3d:13: 77:f1:8a:2f:c4:f7:22:25:c2:f2:3a:bb:0e:92:8d:3a:59:4d: 1b:cb:e4:af:03:d7:f5:b3:26:bb:e2:30:fc:e8:8c:f7:47:57: f6:55:8a:64:e5:f7:41:5a:73:8c:e0:f2:d5:ec:2a:71:52:b7: d7:b8:c7:0e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MjVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE3NzkzRTA2N0FEMDMz MEUwRjY5RTc1RjRERTZDMEE5QzQxODJBNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4s2HaJFxxD+O5tfCz+k4cksgANq9nTkujBm3/OCwMZ/d+GeAq XhCe5Oc1tpEjGkWmXNpN1qXJRaxMWFtGsJhkb/sVaCrSHfzuoQHx/ibGhuFvnp5R q2KtaW+Eggi8Q+3sS6D5RZPgDE7Phv6kdC20GJKGx/+wDd26fEzN/Bw77UInWwEJ QeaMsDRhS9kppHXmMM/Ol14UN0nC0M1yyxWiSLocjCIC4p2/i+EkgI+isC+2HXOR s/hEinJoRRQPBc3932bI1K4j0AD4NP+EVxY8je1HwRv0MzZ1q89vxuI4flRX38y/ vGmITyLp1pzDTeA9w3vGlPH4ilFvhm7JcqWbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUF3k+BnrQMw4PaedfTebAqcQYKmcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0Yzay1CbnJRTXc0UGFlZGZUZWJBcWNRWUttYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMkNIAwDQYJKoZIhvcNAQELBQADggEBAJvV6mR+yRsSuTGmOZZzNSs4MUVm KuEkpHc4nYfT9EoGmTQlqjnl2CCjyVzxRMTmYEZAAxAdnCjjL3lYv8UFydnEHjVK NS36/eIb+QqgFlS5hEVDPFyQvPI7dmy4BpRsLV7+R8diak24ahIprZezy1KUBrup WImZvXQXsBIei8MjENjHziJ0Z3FmDXEMksMxHO3TPr6ReFI+QPzYde8RwJAyphom 0d9jDyT9N2sipkI6+Dh+RtVHy4/eCW/b2E5OwWVFMQE9E3fxii/E9yIlwvI6uw6S jTpZTRvL5K8D1/WzJrviMPzojPdHV/ZVimTl90Fac4zg8tXsKnFSt9e4xw4= -----END CERTIFICATE-----Generated at Sat May 17 21:33:14 2025 by rpki-client