$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JPjLVRHReCQHnWUxMgfZH3CVAtw.roa File: JPjLVRHReCQHnWUxMgfZH3CVAtw.roa (raw, json) Hash identifier: gsdL8rkHynpUNr4m7GT/oGUmbK6e/+geJM8m1YSV4zo= Subject key identifier: 24:F8:CB:55:11:D1:78:24:07:9D:65:31:32:07:D9:1F:70:95:02:DC Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03CB Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JPjLVRHReCQHnWUxMgfZH3CVAtw.roa Signing time: Thu 01 May 2025 01:42:39 +0000 ROA not before: Thu 01 May 2025 01:42:39 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.203.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:39 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=24F8CB5511D17824079D65313207D91F709502DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:3c:9a:74:c4:c1:7e:1e:dd:55:17:d4:c6: 0f:8b:c8:62:0d:1d:b9:47:29:65:55:30:33:e6:e4: 9e:27:e3:fa:97:0e:5c:9f:67:cc:2c:17:a9:ce:0b: 62:a8:22:e0:76:39:d4:cc:96:ad:12:a7:83:2a:08: a8:9f:11:17:9a:a0:63:90:6c:34:93:8b:2e:dd:a8: fa:08:be:18:56:0a:f7:de:3c:a3:cf:3f:e9:cc:27: c2:49:68:61:ae:2c:f9:3d:6b:0c:b3:37:fc:16:41: 31:5d:15:f5:3f:f2:9a:3b:53:6b:6c:0c:d6:46:3b: 1b:4a:ae:f7:7f:ad:f1:1b:92:b3:a4:48:8b:b2:20: b5:a7:22:a0:99:56:bc:0f:0d:65:87:45:fa:b9:be: 79:c2:b0:ed:d7:39:c7:44:c8:33:d2:54:f2:44:40: c1:d3:3d:0e:b7:9f:34:d8:1e:c4:ac:18:d4:93:f7: 35:0d:5a:13:99:d4:54:71:53:94:9f:a5:66:3d:a0: 41:10:50:64:18:a6:d8:bb:b9:44:e6:34:07:69:1e: 51:5a:d8:ad:31:c4:42:5d:d4:dc:c2:8a:0b:f2:5a: 85:8e:e1:c3:57:18:45:b9:78:4a:44:cb:99:9b:74: 41:e7:98:f7:ff:2f:37:b1:04:84:bd:b4:93:e8:d5: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F8:CB:55:11:D1:78:24:07:9D:65:31:32:07:D9:1F:70:95:02:DC X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JPjLVRHReCQHnWUxMgfZH3CVAtw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.203.168.0/21 Signature Algorithm: sha256WithRSAEncryption 4a:f4:8a:8b:99:d6:2a:65:8f:79:47:27:41:47:22:cf:a7:dc: 4e:30:24:54:2d:a6:5c:70:e7:1a:57:72:3b:cc:1b:31:0c:be: b1:27:c3:7c:1f:43:68:3e:ee:4c:4d:21:13:f2:93:c4:7e:cf: f9:c5:3e:33:38:0b:d9:55:69:b8:8a:78:60:c2:c6:3c:4f:21: 5e:97:68:d2:11:83:85:fc:be:4e:41:bd:4f:e4:fe:77:03:88: 53:35:c3:23:c2:a5:e4:f8:a9:da:ff:96:a3:79:17:06:05:69: b3:6e:84:42:89:a1:60:96:0a:c1:f0:41:b4:3d:d5:b5:b4:31: bc:63:b9:1b:94:7f:e5:d1:79:8d:1f:e0:0b:62:e4:83:ee:e1: 30:8c:79:b5:70:51:66:d8:59:1e:a6:2a:7f:fd:53:6e:c7:5d: 1f:5e:23:4f:2a:fd:ee:84:f8:e5:df:de:70:4d:1b:1c:a0:ab: 3a:bc:9c:31:e8:4b:55:aa:9e:13:34:e3:ad:d2:b5:37:7a:e9: 63:1c:af:06:6f:fb:0d:dd:f9:95:5d:4a:af:53:29:04:d6:f5: af:02:30:46:6d:ef:ea:88:1d:87:4a:c4:4a:ac:7c:27:af:e5: 39:60:51:6c:16:8f:06:d4:ef:45:99:fb:23:b0:b3:63:43:b6: 5e:53:22:5e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyMzlaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI0RjhDQjU1MTFEMTc4 MjQwNzlENjUzMTMyMDdEOTFGNzA5NTAyREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuPDyadMTBfh7dVRfUxg+LyGINHblHKWVVMDPm5J4n4/qXDlyf Z8wsF6nOC2KoIuB2OdTMlq0Sp4MqCKifEReaoGOQbDSTiy7dqPoIvhhWCvfePKPP P+nMJ8JJaGGuLPk9awyzN/wWQTFdFfU/8po7U2tsDNZGOxtKrvd/rfEbkrOkSIuy ILWnIqCZVrwPDWWHRfq5vnnCsO3XOcdEyDPSVPJEQMHTPQ63nzTYHsSsGNST9zUN WhOZ1FRxU5SfpWY9oEEQUGQYpti7uUTmNAdpHlFa2K0xxEJd1NzCigvyWoWO4cNX GEW5eEpEy5mbdEHnmPf/LzexBIS9tJPo1acpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJPjLVRHReCQHnWUxMgfZH3CVAtwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0pQakxWUkhSZUNRSG5XVXhNZ2ZaSDNDVkF0dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9y6gwDQYJKoZIhvcNAQELBQADggEBAEr0iouZ1iplj3lHJ0FHIs+n3E4w JFQtplxw5xpXcjvMGzEMvrEnw3wfQ2g+7kxNIRPyk8R+z/nFPjM4C9lVabiKeGDC xjxPIV6XaNIRg4X8vk5BvU/k/ncDiFM1wyPCpeT4qdr/lqN5FwYFabNuhEKJoWCW CsHwQbQ91bW0MbxjuRuUf+XReY0f4Ati5IPu4TCMebVwUWbYWR6mKn/9U27HXR9e I08q/e6E+OXf3nBNGxygqzq8nDHoS1WqnhM0463StTd66WMcrwZv+w3d+ZVdSq9T KQTW9a8CMEZt7+qIHYdKxEqsfCev5TlgUWwWjwbU70WZ+yOws2NDtl5TIl4= -----END CERTIFICATE-----Generated at Sun May 18 09:10:26 2025 by rpki-client