$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/N2q2eT0U7nNFFkwmmn_yZmsFclw.roa File: N2q2eT0U7nNFFkwmmn_yZmsFclw.roa (raw, json) Hash identifier: cV91z710afVIVLROgcxyairYIhbiKMUSA4kh1jYmUnw= Subject key identifier: 37:6A:B6:79:3D:14:EE:73:45:16:4C:26:9A:7F:F2:66:6B:05:72:5C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 039F Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N2q2eT0U7nNFFkwmmn_yZmsFclw.roa Signing time: Thu 01 May 2025 01:37:35 +0000 ROA not before: Thu 01 May 2025 01:37:35 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.195.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:35 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=376AB6793D14EE7345164C269A7FF2666B05725C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6a:e7:90:e0:6d:28:34:21:d1:2b:05:52:e8: e7:b8:18:5e:67:95:5a:1e:99:80:81:13:4b:62:c8: be:51:92:ab:ca:68:9b:a8:4d:01:78:9f:fe:fc:8d: 53:17:b9:97:5a:4f:dd:57:0b:67:bd:b7:bc:45:0b: 1c:23:d3:a3:8a:b7:57:85:f2:2f:74:84:ca:fe:68: c5:01:62:13:dd:68:54:11:f7:76:90:58:5f:94:e9: 7f:e9:b3:85:be:c1:6c:ad:9a:d0:d4:cd:cb:12:eb: 45:9a:9f:6c:fe:07:6c:e9:65:2b:c9:65:cc:a8:f2: 2a:34:a4:b9:52:ce:8f:39:a1:dd:32:86:fa:cb:21: dc:26:fb:88:0c:46:2d:ce:ea:83:c7:fc:60:64:60: fd:dc:41:10:a7:e6:89:58:88:2e:9e:48:86:14:70: 72:c8:91:a4:d6:39:d3:ac:08:98:7f:b4:11:f8:e0: 02:0f:05:0f:d7:0d:08:80:74:b4:1f:95:c9:70:42: d5:4d:33:8b:c0:55:f8:77:49:b2:5e:19:6b:96:e5: 62:aa:a6:00:bc:31:ec:b1:5d:26:7e:13:18:89:da: 89:dd:f5:e1:1d:98:1a:45:6d:da:d2:95:cb:6d:63: 1b:db:2c:07:06:ca:8e:eb:5a:8c:bb:c7:2d:cd:cf: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6A:B6:79:3D:14:EE:73:45:16:4C:26:9A:7F:F2:66:6B:05:72:5C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N2q2eT0U7nNFFkwmmn_yZmsFclw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.0.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:5f:da:dd:0b:8c:c1:ea:34:4c:f6:5d:01:56:cb:94:e4:3e: a3:bf:12:d1:49:69:aa:9b:9d:bf:71:31:01:a6:0c:0a:f6:c3: 15:f3:b2:fb:b5:ec:26:13:09:ab:f6:3d:0a:15:bb:27:a2:99: 2d:09:a0:08:24:2b:9c:db:6a:72:ed:e2:b7:4d:00:03:1d:36: a0:cc:3b:85:09:19:aa:e5:86:9d:3b:c2:9f:a4:83:68:f4:fa: 1a:44:af:c1:f7:25:58:bc:e5:9d:ba:9e:4d:37:b2:8c:cd:a4: 15:0e:97:7a:78:a1:54:54:41:a9:0c:4e:22:9e:e1:8f:69:ef: ea:c4:0c:90:80:88:94:f9:b1:39:6e:0b:9c:d0:b3:cf:82:fb: 2b:bb:89:3f:75:35:f9:3d:72:c2:c0:10:71:ec:a2:01:64:64: d8:ad:ce:71:24:b9:8a:ec:47:48:20:7a:87:0f:3b:1b:8c:80: d6:20:19:4c:cc:af:f8:86:e2:6c:bf:42:80:b3:ec:f1:50:39: df:78:21:d6:4d:52:9a:16:cc:b3:17:f7:91:b2:89:c8:a0:27: 9a:85:da:24:fc:e7:1a:cc:d5:da:86:8e:d1:7f:74:fa:c4:17: 62:04:3d:ac:dc:c1:08:3f:08:ec:24:8f:0a:f9:29:af:f0:4f: 33:b3:cb:19 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MzVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM3NkFCNjc5M0QxNEVF NzM0NTE2NEMyNjlBN0ZGMjY2NkIwNTcyNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5aueQ4G0oNCHRKwVS6Oe4GF5nlVoemYCBE0tiyL5RkqvKaJuo TQF4n/78jVMXuZdaT91XC2e9t7xFCxwj06OKt1eF8i90hMr+aMUBYhPdaFQR93aQ WF+U6X/ps4W+wWytmtDUzcsS60Wan2z+B2zpZSvJZcyo8io0pLlSzo85od0yhvrL Idwm+4gMRi3O6oPH/GBkYP3cQRCn5olYiC6eSIYUcHLIkaTWOdOsCJh/tBH44AIP BQ/XDQiAdLQflclwQtVNM4vAVfh3SbJeGWuW5WKqpgC8MeyxXSZ+ExiJ2ond9eEd mBpFbdrSlcttYxvbLAcGyo7rWoy7xy3Nz3E1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUN2q2eT0U7nNFFkwmmn/yZmsFclwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L04ycTJlVDBVN25ORkZrd21tbl95Wm1zRmNsdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9wwAwDQYJKoZIhvcNAQELBQADggEBABtf2t0LjMHqNEz2XQFWy5TkPqO/ EtFJaaqbnb9xMQGmDAr2wxXzsvu17CYTCav2PQoVuyeimS0JoAgkK5zbanLt4rdN AAMdNqDMO4UJGarlhp07wp+kg2j0+hpEr8H3JVi85Z26nk03sozNpBUOl3p4oVRU QakMTiKe4Y9p7+rEDJCAiJT5sTluC5zQs8+C+yu7iT91Nfk9csLAEHHsogFkZNit znEkuYrsR0ggeocPOxuMgNYgGUzMr/iG4my/QoCz7PFQOd94IdZNUpoWzLMX95Gy icigJ5qF2iT85xrM1dqGjtF/dPrEF2IEPazcwQg/COwkjwr5Ka/wTzOzyxk= -----END CERTIFICATE-----Generated at Sat May 17 23:27:02 2025 by rpki-client