$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/P_pTTRiOnGLeRV9m_nQbXhzwTfg.roa File: P_pTTRiOnGLeRV9m_nQbXhzwTfg.roa (raw, json) Hash identifier: BEZheKUyiBQ7dGzN7xKgdn/6Yea4/OeZmD67tcMdDWo= Subject key identifier: 3F:FA:53:4D:18:8E:9C:62:DE:45:5F:66:FE:74:1B:5E:1C:F0:4D:F8 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03A2 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/P_pTTRiOnGLeRV9m_nQbXhzwTfg.roa Signing time: Thu 01 May 2025 01:37:37 +0000 ROA not before: Thu 01 May 2025 01:37:37 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 36.52.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 13:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 930 (0x3a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:37 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=3FFA534D188E9C62DE455F66FE741B5E1CF04DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fa:d7:ad:77:66:2e:6d:51:a3:4d:d5:21:72: 29:c4:ad:30:f0:2f:e8:e9:d1:3c:4b:f3:24:7f:19: ee:71:f9:0c:d1:96:ae:32:12:ac:93:03:6e:01:65: 35:36:d0:8a:b4:21:b9:a8:58:4b:20:cc:a7:e5:51: cc:e8:89:70:31:99:68:b3:fb:2e:a4:67:e0:f0:07: 16:53:45:12:75:b2:34:ea:63:9a:b6:01:26:d7:e7: f4:1b:c5:c7:e8:f5:96:c6:99:1f:a0:3c:c4:47:ae: 9c:c4:1d:5d:fa:4e:19:3b:3f:f0:88:c2:07:9c:21: 1f:99:02:a8:9b:5c:f0:80:2f:92:eb:e7:d2:7e:65: aa:89:be:e7:c1:d0:a8:6d:49:3c:8b:e7:c2:f3:45: 55:f8:2f:98:05:6d:ab:76:cc:8b:3e:da:8b:b7:f2: 26:5f:ac:8c:81:fd:16:f5:0c:4c:3d:6f:39:8d:f1: f3:a6:6b:ec:41:08:15:9c:20:36:7c:5a:5c:af:19: 80:ea:1c:5d:bb:f2:51:50:e2:4b:0e:da:20:c2:62: a0:65:16:88:4b:26:9b:0f:87:a5:32:53:00:75:18: c2:5b:3b:86:be:73:3c:76:31:21:c8:9f:07:cc:41: a1:7f:47:60:0b:1a:58:83:c6:6e:b6:c1:79:b2:91: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FA:53:4D:18:8E:9C:62:DE:45:5F:66:FE:74:1B:5E:1C:F0:4D:F8 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/P_pTTRiOnGLeRV9m_nQbXhzwTfg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.28.0/22 Signature Algorithm: sha256WithRSAEncryption 33:da:a4:9c:43:ab:cc:ec:5e:9a:c3:0e:95:c6:e0:3c:17:90: 60:39:7b:9e:47:aa:d0:f8:4f:a9:cb:db:ad:d1:b6:3e:3d:b4: 62:7f:63:92:46:f1:65:6d:8b:0e:10:c9:bb:3d:03:12:fd:04: 1d:53:32:e1:5d:d8:21:c1:1d:a6:79:d8:13:82:5c:53:8a:8a: ae:fb:82:e1:dc:11:39:3b:da:46:64:e5:4b:8a:f8:fe:54:eb: 8d:a1:3e:67:e4:94:84:a3:ab:3d:c9:d4:85:d2:a7:59:0b:ee: e7:9f:64:a7:b8:a5:cc:7f:a4:ed:c4:2e:fd:ee:8d:c2:6c:51: b6:1b:f8:36:4f:29:eb:d8:a9:e5:fd:53:5a:31:bd:08:92:3b: dd:c1:fa:d9:95:79:37:0c:4e:2b:fe:6d:f2:1d:45:4f:cb:be: 8b:ec:ca:2d:f4:b5:bc:c0:3d:5a:13:58:31:64:75:8d:ce:3a: 35:ad:b0:21:86:33:2d:c8:7e:f5:77:27:9e:b5:56:2f:73:68: e7:dc:88:2e:fc:4d:e8:06:b0:55:00:4f:e7:fd:9e:87:c2:fc: 9d:c3:3d:e7:b4:13:88:b0:d1:bb:06:28:56:09:44:9b:62:74: 53:ef:a4:08:62:45:9e:ad:50:f6:5f:95:89:4c:9a:05:5a:c0: b7:e4:20:db -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MzdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNGRkE1MzREMTg4RTlD NjJERTQ1NUY2NkZFNzQxQjVFMUNGMDRERjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS+tetd2YubVGjTdUhcinErTDwL+jp0TxL8yR/Ge5x+QzRlq4y EqyTA24BZTU20Iq0IbmoWEsgzKflUczoiXAxmWiz+y6kZ+DwBxZTRRJ1sjTqY5q2 ASbX5/Qbxcfo9ZbGmR+gPMRHrpzEHV36Thk7P/CIwgecIR+ZAqibXPCAL5Lr59J+ ZaqJvufB0KhtSTyL58LzRVX4L5gFbat2zIs+2ou38iZfrIyB/Rb1DEw9bzmN8fOm a+xBCBWcIDZ8WlyvGYDqHF278lFQ4ksO2iDCYqBlFohLJpsPh6UyUwB1GMJbO4a+ czx2MSHInwfMQaF/R2ALGliDxm62wXmykclVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUP/pTTRiOnGLeRV9m/nQbXhzwTfgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1BfcFRUUmlPbkdMZVJWOW1fblFiWGh6d1RmZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIkNBwwDQYJKoZIhvcNAQELBQADggEBADPapJxDq8zsXprDDpXG4DwXkGA5 e55HqtD4T6nL263Rtj49tGJ/Y5JG8WVtiw4Qybs9AxL9BB1TMuFd2CHBHaZ52BOC XFOKiq77guHcETk72kZk5UuK+P5U642hPmfklISjqz3J1IXSp1kL7uefZKe4pcx/ pO3ELv3ujcJsUbYb+DZPKevYqeX9U1oxvQiSO93B+tmVeTcMTiv+bfIdRU/Lvovs yi30tbzAPVoTWDFkdY3OOjWtsCGGMy3IfvV3J561Vi9zaOfciC78TegGsFUAT+f9 nofC/J3DPee0E4iw0bsGKFYJRJtidFPvpAhiRZ6tUPZflYlMmgVawLfkINs= -----END CERTIFICATE-----Generated at Sun May 18 15:31:35 2025 by rpki-client