$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JOrhVBtalOWI2CuarCLq-yiOzTo.roa File: JOrhVBtalOWI2CuarCLq-yiOzTo.roa (raw, json) Hash identifier: CZ7DKq0tl7lindgNH1ODYZX1Ghawgh4lusgWufSh9bw= Subject key identifier: 24:EA:E1:54:1B:5A:94:E5:88:D8:2B:9A:AC:22:EA:FB:28:8E:CD:3A Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0394 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JOrhVBtalOWI2CuarCLq-yiOzTo.roa Signing time: Thu 01 May 2025 01:37:32 +0000 ROA not before: Thu 01 May 2025 01:37:32 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 27.135.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:32 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=24EAE1541B5A94E588D82B9AAC22EAFB288ECD3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:51:c3:fc:27:8e:10:59:12:70:3d:26:f6: 40:4f:60:43:ec:09:92:6c:5e:a2:43:01:5d:92:17: ab:76:4d:38:c8:f3:35:4b:78:b2:11:56:f3:d1:75: 1c:26:45:e8:da:65:af:d3:e3:00:bd:c7:ee:ac:42: 5f:20:23:43:c3:6c:43:36:f3:10:75:66:06:1d:1c: 55:10:c3:32:79:21:c8:c4:bc:3f:25:76:90:ed:5f: 5c:d5:34:7f:25:cf:d9:b0:b9:33:2d:80:18:8a:92: ba:2f:b0:fd:3a:f8:f4:bf:a4:8f:64:2b:fa:00:19: ce:f0:9e:1c:65:b2:a9:37:ca:d2:2d:25:41:1b:eb: d4:77:ef:41:5f:b2:72:68:33:ed:7a:2a:b2:62:db: fd:bb:a4:b3:f8:56:89:78:e3:aa:f7:b3:d1:b5:c7: ef:29:3f:d9:6e:28:43:27:69:9e:08:8d:9b:46:5e: e7:98:df:ac:e5:e2:a4:58:6e:f7:76:c3:d4:84:25: 31:00:6d:78:0a:48:af:5d:97:00:a1:a8:1e:14:dd: 56:96:94:ec:cb:81:8f:17:84:21:04:0a:8e:97:e8: 43:5b:db:dc:e7:cd:c0:dd:cc:ee:7e:a1:e7:12:3f: 0c:43:6f:4a:e6:54:45:af:ac:1d:1e:3f:a9:19:73: 48:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EA:E1:54:1B:5A:94:E5:88:D8:2B:9A:AC:22:EA:FB:28:8E:CD:3A X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JOrhVBtalOWI2CuarCLq-yiOzTo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.135.0.0/19 Signature Algorithm: sha256WithRSAEncryption 3a:d5:7d:67:aa:a5:13:7b:59:a3:c6:f9:9f:2c:b4:18:eb:d8: ca:79:8e:b1:51:91:d0:73:6a:f5:00:b6:36:33:b4:bd:af:c6: 84:f8:0a:5b:ef:c0:70:df:bc:28:dd:47:fd:37:48:e9:ed:24: 04:a9:74:4d:00:1c:a0:f3:54:4c:93:e9:ec:0d:83:85:8a:67: 0b:ea:43:62:2c:47:f8:f2:ed:08:d6:99:ec:be:98:d8:1d:e3: b4:99:20:b0:fd:eb:6e:48:7f:12:09:b3:65:1a:da:b5:52:26: 36:d7:1a:19:07:d2:eb:0d:c6:26:79:fe:29:c8:a8:68:e0:de: 4b:d0:f5:b3:b9:c4:fe:3f:d6:47:ac:a8:a2:05:9e:15:53:c5: e9:82:6b:da:d8:33:62:27:6b:da:bc:21:a5:d4:5a:63:48:00: 17:a1:45:69:f4:89:15:c4:f6:cf:ce:ae:78:61:ab:96:5f:1f: 60:2f:44:d1:2b:de:09:63:86:13:d4:29:ab:d5:bf:43:88:26: d4:95:29:df:9f:e3:a4:2e:96:88:61:36:7a:1b:27:e1:2c:40: 42:27:a4:4e:77:4b:b2:3f:70:df:43:81:df:98:33:cd:20:8a: cb:6e:e1:ff:ef:e4:26:bf:8c:1c:cd:0e:87:e3:bf:2e:40:7a: e3:38:7e:ed -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MzJaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI0RUFFMTU0MUI1QTk0 RTU4OEQ4MkI5QUFDMjJFQUZCMjg4RUNEM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIg1HD/CeOEFkScD0m9kBPYEPsCZJsXqJDAV2SF6t2TTjI8zVL eLIRVvPRdRwmRejaZa/T4wC9x+6sQl8gI0PDbEM28xB1ZgYdHFUQwzJ5IcjEvD8l dpDtX1zVNH8lz9mwuTMtgBiKkrovsP06+PS/pI9kK/oAGc7wnhxlsqk3ytItJUEb 69R370FfsnJoM+16KrJi2/27pLP4Vol446r3s9G1x+8pP9luKEMnaZ4IjZtGXueY 36zl4qRYbvd2w9SEJTEAbXgKSK9dlwChqB4U3VaWlOzLgY8XhCEECo6X6ENb29zn zcDdzO5+oecSPwxDb0rmVEWvrB0eP6kZc0jVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJOrhVBtalOWI2CuarCLq+yiOzTowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0pPcmhWQnRhbE9XSTJDdWFyQ0xxLXlpT3pUby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUbhwAwDQYJKoZIhvcNAQELBQADggEBADrVfWeqpRN7WaPG+Z8stBjr2Mp5 jrFRkdBzavUAtjYztL2vxoT4ClvvwHDfvCjdR/03SOntJASpdE0AHKDzVEyT6ewN g4WKZwvqQ2IsR/jy7QjWmey+mNgd47SZILD9625IfxIJs2Ua2rVSJjbXGhkH0usN xiZ5/inIqGjg3kvQ9bO5xP4/1kesqKIFnhVTxemCa9rYM2Ina9q8IaXUWmNIABeh RWn0iRXE9s/Ornhhq5ZfH2AvRNEr3gljhhPUKavVv0OIJtSVKd+f46QulohhNnob J+EsQEInpE53S7I/cN9Dgd+YM80gistu4f/v5Ca/jBzNDofjvy5AeuM4fu0= -----END CERTIFICATE-----Generated at Sat May 17 19:37:42 2025 by rpki-client