$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/HBr-ude8DVkg5zv43bCUpHQgAJs.roa File: HBr-ude8DVkg5zv43bCUpHQgAJs.roa (raw, json) Hash identifier: M6O88IakCjj5hnyLOGn46osz7C2U3a8k1fKnxdG6CQw= Subject key identifier: 1C:1A:FE:B9:D7:BC:0D:59:20:E7:3B:F8:DD:B0:94:A4:74:20:00:9B Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0410 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HBr-ude8DVkg5zv43bCUpHQgAJs.roa Signing time: Thu 01 May 2025 01:48:40 +0000 ROA not before: Thu 01 May 2025 01:48:40 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 153.120.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:48:40 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=1C1AFEB9D7BC0D5920E73BF8DDB094A47420009B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5c:7a:41:2e:4c:2a:85:16:59:fd:a9:c4:67: 19:3b:88:29:9d:44:3e:00:7f:ca:b1:9e:5f:15:4c: d7:b5:eb:bc:27:12:26:d3:99:89:1c:45:60:77:1c: 13:fa:e0:bb:bc:7a:15:18:db:ea:b3:be:9d:17:27: 9e:f5:43:e8:09:4e:05:f3:77:12:02:61:21:7d:20: 75:fd:05:09:e6:b8:f6:fa:b8:52:eb:55:f0:2c:2c: ca:02:d3:c9:c7:6d:e0:a8:2f:b2:76:ff:63:55:cc: 25:71:44:11:c3:32:cd:b4:d7:11:05:ad:07:da:a7: 7d:fe:cf:e7:a5:46:c0:d3:77:9b:9e:b6:dd:67:ad: dd:4f:d1:16:45:84:a9:1d:a7:25:c5:f2:aa:73:c4: c5:11:4f:51:77:99:c8:56:ed:26:68:e0:a3:60:9d: 73:9f:c3:95:3e:0a:c3:53:39:f1:24:13:2c:49:97: 08:7e:55:60:ce:62:e0:07:7e:8c:2e:aa:3e:9a:0f: 1b:0a:c6:f0:a7:c0:d3:96:d5:6f:88:52:8a:85:2f: 1b:9f:e4:b2:5c:3f:0d:bc:4d:27:3e:83:75:34:49: cd:90:c3:72:2d:12:5c:70:0d:5e:c6:47:7e:af:c9: 21:fd:72:c3:2d:ac:80:e9:82:e0:68:01:cd:f7:e3: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1A:FE:B9:D7:BC:0D:59:20:E7:3B:F8:DD:B0:94:A4:74:20:00:9B X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HBr-ude8DVkg5zv43bCUpHQgAJs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.120.192.0/20 Signature Algorithm: sha256WithRSAEncryption 34:a1:69:41:37:6e:a1:72:13:80:dc:c3:7a:e7:3c:2f:6a:c2: d2:27:54:eb:9d:6d:55:07:b8:f1:f7:fc:1d:0b:00:fd:e5:78: ba:41:be:45:dc:a7:b4:dd:b3:e6:ed:40:5a:11:71:f2:76:98: 81:38:ee:31:64:31:bb:9d:66:70:fd:10:2d:78:ea:86:e2:e6: 14:0c:68:b0:63:dc:c0:01:bf:ee:0e:a0:27:f1:49:f5:e6:4e: 01:93:a0:31:49:10:e9:a5:1b:a9:b8:18:29:6f:b3:86:96:d2: 54:34:f8:58:ab:9a:f6:04:19:ca:ff:85:33:89:6f:29:68:86: d7:32:85:9c:b6:be:1a:59:04:01:b9:90:0a:41:7f:3b:27:73: 7d:84:5f:fd:5c:77:68:6b:f3:04:28:da:87:6b:c4:4a:6d:6d: 3a:a2:2b:c5:5e:3e:ca:bf:e0:c2:91:56:5b:27:60:47:41:aa: bc:f1:8e:35:7b:78:ba:ae:a8:b2:4a:60:d8:8c:2e:aa:fc:09: cc:8b:5b:6b:2d:14:9d:3d:c7:59:dc:71:b6:43:7d:2a:2d:aa: 41:c5:f5:6c:18:63:43:b0:1e:f5:07:89:63:c1:53:ad:1c:e1: 86:19:96:3b:28:ab:fd:46:a3:d5:41:9b:63:62:5b:db:29:fe: bf:61:0b:91 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ4NDBaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFDMUFGRUI5RDdCQzBE NTkyMEU3M0JGOEREQjA5NEE0NzQyMDAwOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUXHpBLkwqhRZZ/anEZxk7iCmdRD4Af8qxnl8VTNe167wnEibT mYkcRWB3HBP64Lu8ehUY2+qzvp0XJ571Q+gJTgXzdxICYSF9IHX9BQnmuPb6uFLr VfAsLMoC08nHbeCoL7J2/2NVzCVxRBHDMs201xEFrQfap33+z+elRsDTd5uett1n rd1P0RZFhKkdpyXF8qpzxMURT1F3mchW7SZo4KNgnXOfw5U+CsNTOfEkEyxJlwh+ VWDOYuAHfowuqj6aDxsKxvCnwNOW1W+IUoqFLxuf5LJcPw28TSc+g3U0Sc2Qw3It ElxwDV7GR36vySH9csMtrIDpguBoAc33496tAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHBr+ude8DVkg5zv43bCUpHQgAJswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0hCci11ZGU4RFZrZzV6djQzYkNVcEhRZ0FKcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASZeMAwDQYJKoZIhvcNAQELBQADggEBADShaUE3bqFyE4Dcw3rnPC9qwtIn VOudbVUHuPH3/B0LAP3leLpBvkXcp7Tds+btQFoRcfJ2mIE47jFkMbudZnD9EC14 6obi5hQMaLBj3MABv+4OoCfxSfXmTgGToDFJEOmlG6m4GClvs4aW0lQ0+FirmvYE Gcr/hTOJbylohtcyhZy2vhpZBAG5kApBfzsnc32EX/1cd2hr8wQo2odrxEptbTqi K8VePsq/4MKRVlsnYEdBqrzxjjV7eLquqLJKYNiMLqr8CcyLW2stFJ09x1nccbZD fSotqkHF9WwYY0OwHvUHiWPBU60c4YYZljsoq/1Go9VBm2NiW9sp/r9hC5E= -----END CERTIFICATE-----Generated at Sun May 18 03:07:42 2025 by rpki-client