$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/PBhWXJK2gKrjAfTMHMN1C95CxF0.roa File: PBhWXJK2gKrjAfTMHMN1C95CxF0.roa (raw, json) Hash identifier: Eof0kE3unSoVBXnoIS/fm7jh/qNewUbUaTfMe/gu7SY= Subject key identifier: 3C:18:56:5C:92:B6:80:AA:E3:01:F4:CC:1C:C3:75:0B:DE:42:C4:5D Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 042A Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PBhWXJK2gKrjAfTMHMN1C95CxF0.roa Signing time: Thu 01 May 2025 01:48:50 +0000 ROA not before: Thu 01 May 2025 01:48:50 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 210.159.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:48:50 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=3C18565C92B680AAE301F4CC1CC3750BDE42C45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:ca:9f:0d:2d:c8:9a:f7:de:af:fc:f7:ca: d2:cf:05:f9:3e:fc:91:cc:90:85:39:e6:62:08:54: 25:bc:20:a2:6a:cd:b4:8a:cd:14:63:3f:3f:4a:77: 1e:ae:40:06:fc:80:12:66:a5:5c:20:b1:88:16:4d: 86:8c:8e:e9:95:5b:8d:24:18:37:b6:9c:f3:61:d6: b7:45:6e:aa:dc:21:f6:bb:23:d5:0a:e9:20:2a:5d: 6f:4a:d5:d9:ec:5d:8b:db:4b:44:29:e5:26:d9:8d: e9:e7:8b:df:76:70:0e:f7:58:88:36:59:31:61:14: 39:25:ae:1e:fd:aa:7b:74:8b:91:23:c7:cd:d0:1a: 42:02:28:2b:3c:8f:31:64:96:57:37:7d:bb:75:72: f0:c1:dd:a5:2a:94:f9:68:c3:eb:77:33:e2:b0:15: cd:30:36:43:c8:90:87:cd:04:af:5a:22:f3:af:9f: 63:c9:57:27:fe:9e:b4:1e:b7:dd:13:5c:00:78:64: 18:c9:5d:aa:67:b1:e1:94:10:61:61:4d:bd:4a:83: f5:e2:4a:fa:ed:9c:5c:3e:9f:3f:d1:f8:8a:c1:03: fb:98:76:f2:23:a6:48:c3:2d:ef:7f:40:b6:5b:a3: b1:6f:c4:ac:ae:3f:13:51:e4:a4:93:c7:56:e4:f9: ea:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:18:56:5C:92:B6:80:AA:E3:01:F4:CC:1C:C3:75:0B:DE:42:C4:5D X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PBhWXJK2gKrjAfTMHMN1C95CxF0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.159.140.0/24 Signature Algorithm: sha256WithRSAEncryption 15:63:5a:18:22:2c:6d:30:e7:86:7d:27:b9:86:af:d8:6a:28: 62:0a:8f:2c:35:fa:3c:1f:c0:a4:81:72:74:1c:30:9c:c6:67: f0:9e:f5:5f:a0:60:58:dc:a8:ec:ae:57:ed:95:e6:a9:7b:ce: de:cb:3a:d0:b7:9e:28:b4:49:ce:ac:1d:50:43:e1:ab:81:e4: d6:ae:7a:d8:2a:06:48:11:d8:2e:5a:f9:4a:00:70:f2:ec:c6: 5c:be:0b:d0:94:66:83:59:05:d2:af:57:67:78:a9:da:fb:27: 6d:ab:d0:f1:28:4e:af:07:54:2e:41:f2:be:fa:9f:3d:6f:93: 13:bd:82:d3:4c:35:0c:a2:6b:34:75:dd:a4:4a:d4:4b:9b:56: 9b:e9:29:12:a7:8b:3a:5f:ac:6b:96:fd:7d:de:d3:18:9d:30: 58:43:b0:cb:69:c3:de:4f:51:15:d1:43:09:dd:e3:60:7e:38: c5:b0:b9:e8:5c:27:3e:09:08:c6:28:0c:b1:ec:e9:bd:bd:98: d5:bb:fb:80:b6:c0:50:a5:67:09:25:9e:39:3c:f0:2b:d7:81: 99:6b:56:de:b4:61:1e:d4:8e:b1:aa:de:ea:c7:76:eb:ac:99: cd:94:be:65:03:c4:72:94:fa:9b:c5:76:92:e1:12:0c:d5:27: 63:b7:77:d5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBCowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ4NTBaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNDMTg1NjVDOTJCNjgw QUFFMzAxRjRDQzFDQzM3NTBCREU0MkM0NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIvMqfDS3Imvfer/z3ytLPBfk+/JHMkIU55mIIVCW8IKJqzbSK zRRjPz9Kdx6uQAb8gBJmpVwgsYgWTYaMjumVW40kGDe2nPNh1rdFbqrcIfa7I9UK 6SAqXW9K1dnsXYvbS0Qp5SbZjenni992cA73WIg2WTFhFDklrh79qnt0i5Ejx83Q GkICKCs8jzFkllc3fbt1cvDB3aUqlPlow+t3M+KwFc0wNkPIkIfNBK9aIvOvn2PJ Vyf+nrQet90TXAB4ZBjJXapnseGUEGFhTb1Kg/XiSvrtnFw+nz/R+IrBA/uYdvIj pkjDLe9/QLZbo7FvxKyuPxNR5KSTx1bk+erdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPBhWXJK2gKrjAfTMHMN1C95CxF0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1BCaFdYSksyZ0tyakFmVE1ITU4xQzk1Q3hGMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADSn4wwDQYJKoZIhvcNAQELBQADggEBABVjWhgiLG0w54Z9J7mGr9hqKGIK jyw1+jwfwKSBcnQcMJzGZ/Ce9V+gYFjcqOyuV+2V5ql7zt7LOtC3nii0Sc6sHVBD 4auB5NauetgqBkgR2C5a+UoAcPLsxly+C9CUZoNZBdKvV2d4qdr7J22r0PEoTq8H VC5B8r76nz1vkxO9gtNMNQyiazR13aRK1EubVpvpKRKnizpfrGuW/X3e0xidMFhD sMtpw95PURXRQwnd42B+OMWwuehcJz4JCMYoDLHs6b29mNW7+4C2wFClZwklnjk8 8CvXgZlrVt60YR7UjrGq3urHduusmc2UvmUDxHKU+pvFdpLhEgzVJ2O3d9U= -----END CERTIFICATE-----Generated at Sat May 17 23:39:32 2025 by rpki-client