$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JzHc6M9WsGYNfo4C-nqGeTF2nRk.roa File: JzHc6M9WsGYNfo4C-nqGeTF2nRk.roa (raw, json) Hash identifier: byMBY8F0Wy3EmCNngvIZf0xv7tulu+JGVW94FWBXxYI= Subject key identifier: 27:31:DC:E8:CF:56:B0:66:0D:7E:8E:02:FA:7A:86:79:31:76:9D:19 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0429 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JzHc6M9WsGYNfo4C-nqGeTF2nRk.roa Signing time: Thu 01 May 2025 01:48:50 +0000 ROA not before: Thu 01 May 2025 01:48:50 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 210.159.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 16:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:48:50 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=2731DCE8CF56B0660D7E8E02FA7A867931769D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:07:84:d3:f9:90:cf:82:ff:50:53:dd:19: e5:f6:54:34:c6:31:e7:21:dd:0e:41:53:96:25:4e: bd:f2:c3:21:58:8c:81:c9:00:b7:ba:a2:d5:48:d7: 35:80:fe:dc:59:86:06:91:cf:16:2c:2a:26:fb:dd: 81:16:a2:25:4d:86:a4:1d:74:15:20:a4:54:6b:dc: c9:0c:69:9e:f7:af:6e:ca:87:41:12:5f:61:c1:aa: 60:38:c3:66:8b:27:d5:a3:98:4b:c5:c5:0b:2d:ea: e1:15:08:29:bf:c1:6d:17:e6:5b:f1:32:17:54:7b: 7c:12:d6:df:4e:71:f3:75:f1:25:9b:94:70:8d:8b: 53:74:61:3c:1c:46:42:19:f9:70:be:78:11:dd:a4: 63:6c:89:f2:3e:f2:9e:55:d7:82:41:a5:74:0f:47: 49:7b:67:46:d0:aa:76:fa:82:c0:ff:73:7c:07:af: 22:ac:ce:e0:23:76:3a:83:74:23:70:93:d9:5d:3b: a7:20:cf:e1:12:87:d6:60:15:7f:62:fc:20:2c:a4: 8e:e0:ac:af:08:ca:d4:bf:c2:cc:0d:72:17:19:2c: be:7c:83:1f:b0:f8:17:93:9b:a0:c4:78:47:fd:06: 38:29:af:7c:3f:1a:1f:87:19:13:18:69:fc:fe:56: 0d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:31:DC:E8:CF:56:B0:66:0D:7E:8E:02:FA:7A:86:79:31:76:9D:19 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JzHc6M9WsGYNfo4C-nqGeTF2nRk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.159.136.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:a6:b2:51:2f:f2:e0:52:ef:59:b8:8f:b8:e3:f5:bc:9c:2f: 05:84:66:28:89:5f:a8:dd:80:08:e6:51:49:6e:1f:3b:68:62: c2:44:6d:b2:76:38:35:9f:3c:4c:2b:f1:ee:c2:d9:f4:2b:76: 8c:3d:3c:f0:9c:11:20:be:d3:4b:3d:64:c8:50:fd:06:f5:e0: 4a:0c:52:e4:e1:42:0e:a4:be:25:2d:1a:78:a3:fe:91:36:8f: 9d:68:b7:c3:e7:6f:0e:db:67:3e:10:73:dd:f7:34:88:c9:94: 30:99:15:32:78:ee:17:88:fb:d1:69:fe:38:26:b4:f7:e0:7e: 19:f3:1c:70:32:70:21:37:4c:61:35:9f:e2:fd:1d:19:78:ff: 98:31:a5:73:67:2b:cf:ea:65:59:92:4e:bc:9d:7d:ff:bd:7f: 42:3d:69:28:f6:2f:29:38:bf:d0:9a:ac:5f:c7:6d:63:37:d3: 38:9e:db:9d:54:12:31:fe:08:2d:81:8d:a3:c8:52:9d:f3:6d: 48:da:19:a0:2c:8d:c1:34:0e:a9:be:57:bf:ec:ec:f6:62:97: b7:71:63:7e:4c:e0:e4:8b:3f:83:79:a0:f9:bb:a2:10:a9:8d: e4:86:de:df:8c:7e:53:4e:0c:3e:56:67:4b:89:17:25:98:88: 92:06:39:d8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ4NTBaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI3MzFEQ0U4Q0Y1NkIw NjYwRDdFOEUwMkZBN0E4Njc5MzE3NjlEMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEUgeE0/mQz4L/UFPdGeX2VDTGMech3Q5BU5YlTr3ywyFYjIHJ ALe6otVI1zWA/txZhgaRzxYsKib73YEWoiVNhqQddBUgpFRr3MkMaZ73r27Kh0ES X2HBqmA4w2aLJ9WjmEvFxQst6uEVCCm/wW0X5lvxMhdUe3wS1t9OcfN18SWblHCN i1N0YTwcRkIZ+XC+eBHdpGNsifI+8p5V14JBpXQPR0l7Z0bQqnb6gsD/c3wHryKs zuAjdjqDdCNwk9ldO6cgz+ESh9ZgFX9i/CAspI7grK8IytS/wswNchcZLL58gx+w +BeTm6DEeEf9Bjgpr3w/Gh+HGRMYafz+Vg29AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJzHc6M9WsGYNfo4C+nqGeTF2nRkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0p6SGM2TTlXc0dZTmZvNEMtbnFHZVRGMm5Say5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALSn4gwDQYJKoZIhvcNAQELBQADggEBAA6mslEv8uBS71m4j7jj9bycLwWE ZiiJX6jdgAjmUUluHztoYsJEbbJ2ODWfPEwr8e7C2fQrdow9PPCcESC+00s9ZMhQ /Qb14EoMUuThQg6kviUtGnij/pE2j51ot8Pnbw7bZz4Qc933NIjJlDCZFTJ47heI +9Fp/jgmtPfgfhnzHHAycCE3TGE1n+L9HRl4/5gxpXNnK8/qZVmSTrydff+9f0I9 aSj2Lyk4v9CarF/HbWM30zie251UEjH+CC2BjaPIUp3zbUjaGaAsjcE0Dqm+V7/s 7PZil7dxY35M4OSLP4N5oPm7ohCpjeSG3t+MflNODD5WZ0uJFyWYiJIGOdg= -----END CERTIFICATE-----Generated at Sat May 17 19:36:40 2025 by rpki-client