$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/MV0ayCUkbZERrINvvfdt9SK1Wqo.roa File: MV0ayCUkbZERrINvvfdt9SK1Wqo.roa (raw, json) Hash identifier: auRDiRJgEgaXxI3NXTVrh6uE7yLVtLecpJuiRRUpxpw= Subject key identifier: 31:5D:1A:C8:25:24:6D:91:11:AC:83:6F:BD:F7:6D:F5:22:B5:5A:AA Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03D5 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MV0ayCUkbZERrINvvfdt9SK1Wqo.roa Signing time: Thu 01 May 2025 01:42:45 +0000 ROA not before: Thu 01 May 2025 01:42:45 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.5.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 981 (0x3d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:45 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=315D1AC825246D9111AC836FBDF76DF522B55AAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:3d:e3:83:b6:7b:74:e6:38:5c:db:c2:d4: b8:f6:b3:a0:bd:4f:d9:df:20:de:ca:4e:6e:c3:57: c7:65:98:93:9c:dc:cd:8f:f9:4c:9d:dc:a0:ad:c8: 47:33:5b:6f:5d:9e:ca:41:1d:6b:ca:a8:22:2b:80: f9:bb:fa:70:e3:e3:db:82:e8:bc:c6:56:fd:ec:64: 8d:ff:5f:84:61:fb:a4:f0:3d:67:b5:b7:0b:f7:10: 10:07:1c:d1:51:1e:53:9f:4e:1f:ce:27:62:0c:e7: db:f5:cc:28:47:53:a8:25:ac:f5:f8:30:6d:62:fa: 22:1f:8c:bf:a8:fe:1d:74:95:c8:de:c3:d3:0f:f8: a6:1e:17:c5:d7:24:a8:e2:e6:77:77:8f:e5:69:e2: 98:c0:0e:12:24:0e:8c:10:18:3a:84:1d:39:52:41: d4:7b:77:36:6d:f3:32:8e:be:fd:5b:14:23:26:86: 57:83:f8:a7:0c:88:42:16:3a:c9:e3:4f:a3:52:97: 69:03:95:a3:85:e8:37:f3:04:bf:55:ef:8f:8d:8d: cb:db:c7:c8:b2:e9:7e:0d:79:c7:89:0e:82:99:23: 8d:5b:c8:9c:b2:26:4b:9a:8d:76:e0:31:ce:ea:32: 5a:84:ca:4a:d3:9c:5f:17:a1:46:ba:9d:ea:97:f6: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5D:1A:C8:25:24:6D:91:11:AC:83:6F:BD:F7:6D:F5:22:B5:5A:AA X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MV0ayCUkbZERrINvvfdt9SK1Wqo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.5.245.0/24 Signature Algorithm: sha256WithRSAEncryption 95:5e:5c:be:2c:ba:2a:d3:fd:e9:43:a7:6e:19:48:31:32:e7: 87:d3:1b:6b:f2:39:1c:c4:d9:5d:df:2a:a9:f5:97:a7:91:86: 18:fe:c2:2d:5b:30:4c:f4:24:68:16:82:5a:b2:f8:bd:c7:7b: 98:ba:1a:aa:14:f4:25:54:cc:b9:99:90:96:b4:fc:b2:35:aa: e2:0e:82:b1:95:7c:1d:cb:59:e6:1e:f7:09:0d:66:68:fd:b7: 40:3a:1f:1f:19:43:4a:b0:c4:c0:38:2c:3d:f9:41:9c:4d:f2: e4:70:8c:2a:f9:be:b3:5e:c7:c4:81:4d:f1:2a:1d:21:cc:91: ac:35:e0:b5:cb:48:09:a1:d1:69:38:bb:da:19:bf:89:0e:36: 7c:d8:6b:f7:e7:fa:29:64:f0:3a:b8:51:0d:c5:14:1b:a3:e2: e5:d2:d6:52:35:13:8f:de:d5:a2:04:f6:59:dc:2d:ee:8e:38: 64:ae:40:6a:e1:54:51:64:7a:9b:52:2a:02:44:44:30:de:17: db:d2:5c:8a:b2:88:de:41:97:4c:17:a4:7e:f9:d4:b8:e4:cb: 50:20:e5:59:f8:f7:3d:b0:75:be:dc:b7:55:ff:21:85:63:0c: d8:2b:b3:f5:80:27:10:f6:96:90:cc:26:59:f1:60:b1:05:fb: d5:0f:c5:f5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNDVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMxNUQxQUM4MjUyNDZE OTExMUFDODM2RkJERjc2REY1MjJCNTVBQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwUj3jg7Z7dOY4XNvC1Lj2s6C9T9nfIN7KTm7DV8dlmJOc3M2P +Uyd3KCtyEczW29dnspBHWvKqCIrgPm7+nDj49uC6LzGVv3sZI3/X4Rh+6TwPWe1 twv3EBAHHNFRHlOfTh/OJ2IM59v1zChHU6glrPX4MG1i+iIfjL+o/h10lcjew9MP +KYeF8XXJKji5nd3j+Vp4pjADhIkDowQGDqEHTlSQdR7dzZt8zKOvv1bFCMmhleD +KcMiEIWOsnjT6NSl2kDlaOF6DfzBL9V74+Njcvbx8iy6X4NeceJDoKZI41byJyy JkuajXbgMc7qMlqEykrTnF8XoUa6neqX9qkdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMV0ayCUkbZERrINvvfdt9SK1WqowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L01WMGF5Q1VrYlpFUnJJTnZ2ZmR0OVNLMVdxby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA9BfUwDQYJKoZIhvcNAQELBQADggEBAJVeXL4suirT/elDp24ZSDEy54fT G2vyORzE2V3fKqn1l6eRhhj+wi1bMEz0JGgWglqy+L3He5i6GqoU9CVUzLmZkJa0 /LI1quIOgrGVfB3LWeYe9wkNZmj9t0A6Hx8ZQ0qwxMA4LD35QZxN8uRwjCr5vrNe x8SBTfEqHSHMkaw14LXLSAmh0Wk4u9oZv4kONnzYa/fn+ilk8Dq4UQ3FFBuj4uXS 1lI1E4/e1aIE9lncLe6OOGSuQGrhVFFkeptSKgJERDDeF9vSXIqyiN5Bl0wXpH75 1Ljky1Ag5Vn49z2wdb7ct1X/IYVjDNgrs/WAJxD2lpDMJlnxYLEF+9UPxfU= -----END CERTIFICATE-----Generated at Sun May 18 19:30:05 2025 by rpki-client