$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GpP2houTbMJZvfCb9gDxCli2rE8.roa File: GpP2houTbMJZvfCb9gDxCli2rE8.roa (raw, json) Hash identifier: X2TFW7EdojbnfFHIdHISwZePv4LiIs0tPf5iPZxyFIM= Subject key identifier: 1A:93:F6:86:8B:93:6C:C2:59:BD:F0:9B:F6:00:F1:0A:58:B6:AC:4F Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0375 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GpP2houTbMJZvfCb9gDxCli2rE8.roa Signing time: Thu 01 May 2025 01:33:30 +0000 ROA not before: Thu 01 May 2025 01:33:30 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 119.150.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 885 (0x375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:30 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=1A93F6868B936CC259BDF09BF600F10A58B6AC4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:59:1c:d9:25:4a:40:53:d1:fd:ab:6b:9b: 2b:05:2a:be:3d:7e:30:70:89:b2:8b:e0:8b:e9:92: 3e:5a:67:8c:d0:ba:bf:a4:72:f0:38:cd:a1:bd:17: 41:9e:f9:7a:06:03:9a:ea:03:ad:83:2f:64:ad:a3: 4b:e1:95:dd:f5:03:64:89:05:a9:25:d4:e5:19:8c: a1:f5:1a:9f:98:a3:b5:4d:ac:61:ae:c3:bd:5a:92: 15:fd:67:77:64:5b:08:39:33:35:3b:9d:ba:57:76: 00:1b:33:7f:1e:fc:c1:75:a0:83:c5:bb:52:e4:aa: 8e:35:82:32:37:f8:ab:ef:2a:21:33:08:1c:30:92: 9e:70:48:cd:3f:9d:64:d0:c8:c5:ef:f1:d6:e7:94: 9a:c1:a0:f5:4f:0a:e5:2a:e3:c6:5f:be:11:63:b9: 45:8e:d9:19:e3:c6:2d:7c:13:a8:99:ea:6f:65:3d: 00:88:04:1d:a8:d5:38:d7:c7:93:02:97:8f:69:a5: 07:1e:d5:de:b1:17:b1:2a:e7:45:03:de:a3:8e:dc: 0f:03:bc:27:3d:66:8d:1f:bb:47:27:17:b1:bc:f2: f8:d6:a0:bc:0b:30:97:b6:d5:ac:1d:07:f1:6b:c8: ef:d5:4d:21:d9:1b:73:79:b2:e6:18:68:fc:a9:c6: 41:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:93:F6:86:8B:93:6C:C2:59:BD:F0:9B:F6:00:F1:0A:58:B6:AC:4F X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GpP2houTbMJZvfCb9gDxCli2rE8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.150.239.0/24 Signature Algorithm: sha256WithRSAEncryption 05:0e:1d:83:04:b1:73:e9:8f:62:9d:da:15:d6:14:09:2c:93: ab:9f:96:13:0f:7c:c4:4b:4d:b0:11:fe:d9:c9:a6:67:97:e9: 18:c3:3f:01:31:f0:d4:e4:89:3f:6e:85:66:ec:e7:fe:d8:80: 75:80:a8:fb:dc:26:e7:1c:d9:ac:f5:23:68:bc:2c:3b:de:76: 1b:87:24:b6:fe:60:87:71:2a:78:d1:82:38:ec:65:69:ab:b4: d0:f5:53:b4:3f:e3:89:63:81:49:6c:53:d6:8d:d1:af:61:be: b9:24:46:e3:88:99:3c:ad:b6:56:e5:bf:b6:ec:64:3b:18:7a: 78:9f:f5:1e:af:03:45:00:ab:e4:db:1c:0d:1b:4c:a4:64:72: 0b:42:46:b3:1d:e8:ff:d5:e1:c8:76:51:65:6a:6c:18:3b:c4: 30:e2:9c:ac:df:e6:b0:32:96:8e:c6:95:1c:3e:b9:a2:67:1c: 00:d6:51:61:d3:b3:55:2c:b7:a3:7f:7b:31:2e:d2:f9:23:10: ef:9a:10:d5:1c:3e:f8:43:28:14:d8:0e:fa:be:3c:9c:83:89: 65:e4:c3:be:6f:2b:b9:35:08:e1:d0:9f:ee:fc:2e:18:80:48: d1:57:8d:cb:23:ca:82:a2:0f:a5:c6:3b:c3:7a:6b:f7:c3:17: 6c:89:61:1a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMzBaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFBOTNGNjg2OEI5MzZD QzI1OUJERjA5QkY2MDBGMTBBNThCNkFDNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEQ1kc2SVKQFPR/atrmysFKr49fjBwibKL4Ivpkj5aZ4zQur+k cvA4zaG9F0Ge+XoGA5rqA62DL2Sto0vhld31A2SJBakl1OUZjKH1Gp+Yo7VNrGGu w71akhX9Z3dkWwg5MzU7nbpXdgAbM38e/MF1oIPFu1Lkqo41gjI3+KvvKiEzCBww kp5wSM0/nWTQyMXv8dbnlJrBoPVPCuUq48ZfvhFjuUWO2Rnjxi18E6iZ6m9lPQCI BB2o1TjXx5MCl49ppQce1d6xF7Eq50UD3qOO3A8DvCc9Zo0fu0cnF7G88vjWoLwL MJe21awdB/FryO/VTSHZG3N5suYYaPypxkHdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGpP2houTbMJZvfCb9gDxCli2rE8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0dwUDJob3VUYk1KWnZmQ2I5Z0R4Q2xpMnJFOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB3lu8wDQYJKoZIhvcNAQELBQADggEBAAUOHYMEsXPpj2Kd2hXWFAksk6uf lhMPfMRLTbAR/tnJpmeX6RjDPwEx8NTkiT9uhWbs5/7YgHWAqPvcJucc2az1I2i8 LDvedhuHJLb+YIdxKnjRgjjsZWmrtND1U7Q/44ljgUlsU9aN0a9hvrkkRuOImTyt tlblv7bsZDsYenif9R6vA0UAq+TbHA0bTKRkcgtCRrMd6P/V4ch2UWVqbBg7xDDi nKzf5rAylo7GlRw+uaJnHADWUWHTs1Ust6N/ezEu0vkjEO+aENUcPvhDKBTYDvq+ PJyDiWXkw75vK7k1COHQn+78LhiASNFXjcsjyoKiD6XGO8N6a/fDF2yJYRo= -----END CERTIFICATE-----Generated at Sun May 18 09:09:37 2025 by rpki-client