$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JbQKruXr8KK4yYt50tkk-Uia3F4.roa File: JbQKruXr8KK4yYt50tkk-Uia3F4.roa (raw, json) Hash identifier: IXEqJC5UxjpvC1LFQVOND+uCt2vsc3kDzz955fnX2E8= Subject key identifier: 25:B4:0A:AE:E5:EB:F0:A2:B8:C9:8B:79:D2:D9:24:F9:48:9A:DC:5E Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03CE Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JbQKruXr8KK4yYt50tkk-Uia3F4.roa Signing time: Thu 01 May 2025 01:42:41 +0000 ROA not before: Thu 01 May 2025 01:42:41 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.44.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:41 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=25B40AAEE5EBF0A2B8C98B79D2D924F9489ADC5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:af:75:e4:0c:37:d8:e3:1b:0b:a8:a1:d0: 44:51:4c:7b:f1:f3:8d:40:73:c4:66:e2:02:54:1a: bb:9f:7c:a3:35:65:f9:27:f2:87:f9:4f:b2:ec:ca: b6:a4:62:8b:9d:ee:43:1e:ac:74:47:8d:b4:4a:86: 36:bc:12:e6:16:43:fc:95:8e:9f:b9:8c:51:54:3f: 08:7b:75:c3:6a:52:18:30:db:57:43:a3:a1:fc:f0: 26:39:f1:c8:f8:79:49:9d:2c:86:54:e1:10:93:72: 36:ca:f6:bf:a1:e5:8d:e9:b5:9f:cb:9e:cc:2d:e4: 5a:8c:56:b3:77:c9:73:aa:77:dc:1d:2c:d3:39:f8: 79:44:a0:fd:0e:b7:0b:df:4e:cc:07:5b:c7:db:4a: 76:d2:4c:f4:7d:11:40:23:49:ee:94:a8:74:e8:0a: 44:f0:19:7d:6f:f0:45:88:18:76:e0:f8:fe:4c:49: b9:18:68:9f:ba:9f:52:ca:79:bb:e0:c7:a0:cb:23: a3:48:1b:ef:4e:05:ac:2d:f9:15:d9:9c:24:05:f2: 3e:d2:8d:98:72:68:a4:3c:32:11:26:c3:44:61:39: 5c:19:a2:30:76:bf:93:e8:bd:f1:c4:94:ec:e2:02: 8c:dd:fa:b3:e8:fa:a0:7f:7d:06:86:b5:0e:bb:1f: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B4:0A:AE:E5:EB:F0:A2:B8:C9:8B:79:D2:D9:24:F9:48:9A:DC:5E X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JbQKruXr8KK4yYt50tkk-Uia3F4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.44.64.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:2b:0c:1e:c6:d3:c0:37:df:4b:be:0e:00:c6:d0:ef:ab:8d: 45:79:bb:a4:33:56:4b:a5:6e:4c:46:39:fa:68:11:b9:1e:e8: a7:96:9f:1a:0a:eb:0c:c7:a4:60:31:53:eb:67:2f:19:b3:33: 96:7b:01:e5:8d:43:72:49:e9:d2:6c:81:e1:80:13:de:ef:b7: 0d:0b:f6:f5:b1:dc:db:d5:89:c6:c6:50:04:c0:e6:79:23:68: 4b:74:05:7b:7e:0c:60:49:7d:94:04:d8:aa:40:bf:b0:84:b7: 14:60:40:20:a9:a2:5d:91:f6:34:7a:2d:fe:a9:66:48:cf:27: 5a:2a:6c:72:6c:d1:28:4f:be:d3:74:2b:a7:83:e6:cc:e7:62: cc:f3:a0:9e:98:e1:30:d6:65:af:b9:1d:21:6b:85:1b:97:a9: a9:33:f2:06:d4:df:43:2c:10:4a:57:57:5a:96:f0:15:99:09: f5:61:2f:d4:92:d6:1a:d5:f3:29:c9:57:15:5f:e8:fa:0d:8e: 58:e7:cf:dd:65:3e:b9:32:f0:78:15:cb:7f:50:92:9d:93:ba: c3:30:93:00:4e:20:66:c9:98:1d:ee:f7:ef:90:90:6a:03:56: 57:c3:e7:cb:c2:02:9d:90:ae:bf:01:44:e7:4a:82:25:b5:f6: c2:4c:78:9d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNDFaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI1QjQwQUFFRTVFQkYw QTJCOEM5OEI3OUQyRDkyNEY5NDg5QURDNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQZq915Aw32OMbC6ih0ERRTHvx841Ac8Rm4gJUGruffKM1Zfkn 8of5T7LsyrakYoud7kMerHRHjbRKhja8EuYWQ/yVjp+5jFFUPwh7dcNqUhgw21dD o6H88CY58cj4eUmdLIZU4RCTcjbK9r+h5Y3ptZ/Lnswt5FqMVrN3yXOqd9wdLNM5 +HlEoP0OtwvfTswHW8fbSnbSTPR9EUAjSe6UqHToCkTwGX1v8EWIGHbg+P5MSbkY aJ+6n1LKebvgx6DLI6NIG+9OBawt+RXZnCQF8j7SjZhyaKQ8MhEmw0RhOVwZojB2 v5PovfHElOziAozd+rPo+qB/fQaGtQ67H6UXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJbQKruXr8KK4yYt50tkk+Uia3F4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0piUUtydVhyOEtLNHlZdDUwdGtrLVVpYTNGNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE9LEAwDQYJKoZIhvcNAQELBQADggEBADorDB7G08A330u+DgDG0O+rjUV5 u6QzVkulbkxGOfpoEbke6KeWnxoK6wzHpGAxU+tnLxmzM5Z7AeWNQ3JJ6dJsgeGA E97vtw0L9vWx3NvVicbGUATA5nkjaEt0BXt+DGBJfZQE2KpAv7CEtxRgQCCpol2R 9jR6Lf6pZkjPJ1oqbHJs0ShPvtN0K6eD5sznYszzoJ6Y4TDWZa+5HSFrhRuXqakz 8gbU30MsEEpXV1qW8BWZCfVhL9SS1hrV8ynJVxVf6PoNjljnz91lPrky8HgVy39Q kp2TusMwkwBOIGbJmB3u9++QkGoDVlfD58vCAp2Qrr8BROdKgiW19sJMeJ0= -----END CERTIFICATE-----Generated at Sun May 18 19:57:22 2025 by rpki-client