$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/PUsaO9TTDXp7ccA1vIfEexG4pXo.roa File: PUsaO9TTDXp7ccA1vIfEexG4pXo.roa (raw, json) Hash identifier: vAPm1Uv4zDV1P2czT9gErbvHLvAVBym32EWeNjW97fM= Subject key identifier: 3D:4B:1A:3B:D4:D3:0D:7A:7B:71:C0:35:BC:87:C4:7B:11:B8:A5:7A Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 037B Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PUsaO9TTDXp7ccA1vIfEexG4pXo.roa Signing time: Thu 01 May 2025 01:33:33 +0000 ROA not before: Thu 01 May 2025 01:33:33 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 220.150.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:33 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=3D4B1A3BD4D30D7A7B71C035BC87C47B11B8A57A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:79:b4:5e:f2:bc:73:81:52:72:7b:fa:b1:a6: b0:db:8b:e7:e8:bc:74:8d:2e:b1:85:44:f6:9d:c6: a1:34:62:8c:1a:88:6c:37:06:8a:f7:96:2e:5a:4c: 10:01:59:5b:be:14:f3:5a:90:f5:05:b3:53:93:ae: 01:72:bf:ae:79:50:57:54:f4:2c:39:b6:2b:2e:90: 07:44:23:fa:6f:72:a5:26:4f:97:31:80:90:d9:c2: ad:2b:4c:e1:5d:dc:95:35:1f:31:cb:ee:e7:42:aa: 63:9c:24:f2:a2:88:26:a2:79:df:05:cc:e0:b8:d0: f1:53:fc:a3:30:69:20:55:94:c7:be:1b:3c:ff:21: e6:5e:ef:55:25:e0:85:c9:b6:73:68:8b:2e:24:57: f7:b8:8a:a4:dd:7e:f5:66:ba:3b:6d:50:a2:9f:27: 8f:8b:63:5d:5f:29:32:d2:83:25:f0:43:60:d6:f6: 3e:3b:d9:f7:4e:9f:b4:36:b4:e7:02:3c:33:93:86: 2c:f8:75:3b:97:12:36:77:da:c2:28:3d:b8:1d:bd: 20:30:6d:0d:c3:7a:a7:11:4c:3b:6c:51:5f:c3:a8: 09:20:82:64:b4:49:52:80:f4:75:82:d7:9e:d5:9d: 6e:3e:ee:b3:60:67:59:7d:f4:82:68:eb:72:84:de: b9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4B:1A:3B:D4:D3:0D:7A:7B:71:C0:35:BC:87:C4:7B:11:B8:A5:7A X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PUsaO9TTDXp7ccA1vIfEexG4pXo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.150.90.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:8f:36:a4:bd:66:fa:aa:54:e2:a3:a8:19:69:b1:a8:ad:2d: f0:10:73:84:7b:5b:80:82:3f:df:f6:1c:eb:5c:fc:8f:99:0e: 87:85:3f:91:a2:55:7f:17:4d:b4:f6:30:60:5d:ac:55:d3:ee: 86:46:e3:f7:91:be:82:84:a9:98:48:8e:db:07:f9:a2:6e:07: 3d:ed:51:9b:6d:35:e5:f9:80:7c:e8:c9:08:59:e2:3e:df:09: 44:56:46:cb:62:43:c9:18:28:b5:78:fa:3b:24:ed:19:c8:a0: 80:21:72:ee:1a:30:af:9d:36:e5:db:63:f5:ef:cf:0e:09:33: 9f:bf:b8:a1:50:c0:e8:2c:48:0d:81:38:f6:68:2a:f8:30:84: bf:bc:f2:7d:27:c6:68:2f:05:d7:d5:88:25:b8:0a:18:a9:a8: 1f:cc:0c:94:b4:28:97:8d:d7:43:bc:a5:aa:5c:d3:56:14:fd: a3:e6:cb:78:c6:57:5a:71:16:c3:5d:8a:41:6b:2b:88:67:c3: c9:f0:87:91:5f:e4:a5:01:25:df:71:45:40:71:f7:84:64:d4: 91:88:c9:03:5c:85:f7:f4:67:a6:d0:ea:6b:ab:97:f8:76:e7: 86:65:54:b3:85:e5:20:27:d1:17:1c:d1:77:b4:e4:e4:86:a4: b2:a2:95:67 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA3swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMzNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNENEIxQTNCRDREMzBE N0E3QjcxQzAzNUJDODdDNDdCMTFCOEE1N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkebRe8rxzgVJye/qxprDbi+fovHSNLrGFRPadxqE0YowaiGw3 Bor3li5aTBABWVu+FPNakPUFs1OTrgFyv655UFdU9Cw5tisukAdEI/pvcqUmT5cx gJDZwq0rTOFd3JU1HzHL7udCqmOcJPKiiCaied8FzOC40PFT/KMwaSBVlMe+Gzz/ IeZe71Ul4IXJtnNoiy4kV/e4iqTdfvVmujttUKKfJ4+LY11fKTLSgyXwQ2DW9j47 2fdOn7Q2tOcCPDOThiz4dTuXEjZ32sIoPbgdvSAwbQ3DeqcRTDtsUV/DqAkggmS0 SVKA9HWC157VnW4+7rNgZ1l99IJo63KE3rmhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPUsaO9TTDXp7ccA1vIfEexG4pXowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1BVc2FPOVRURFhwN2NjQTF2SWZFZXhHNHBYby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcllowDQYJKoZIhvcNAQELBQADggEBAG2PNqS9ZvqqVOKjqBlpsaitLfAQ c4R7W4CCP9/2HOtc/I+ZDoeFP5GiVX8XTbT2MGBdrFXT7oZG4/eRvoKEqZhIjtsH +aJuBz3tUZttNeX5gHzoyQhZ4j7fCURWRstiQ8kYKLV4+jsk7RnIoIAhcu4aMK+d NuXbY/Xvzw4JM5+/uKFQwOgsSA2BOPZoKvgwhL+88n0nxmgvBdfViCW4ChipqB/M DJS0KJeN10O8papc01YU/aPmy3jGV1pxFsNdikFrK4hnw8nwh5Ff5KUBJd9xRUBx 94Rk1JGIyQNchff0Z6bQ6murl/h254ZlVLOF5SAn0Rcc0Xe05OSGpLKilWc= -----END CERTIFICATE-----Generated at Sat May 17 22:38:16 2025 by rpki-client