$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q-fWN9mP1n63zuVMgzKkRf32u0w.roa File: Q-fWN9mP1n63zuVMgzKkRf32u0w.roa (raw, json) Hash identifier: zfk72angdzuaNoophrX+FFNfth14W0tsW9Uj3GOeeBI= Subject key identifier: 43:E7:D6:37:D9:8F:D6:7E:B7:CE:E5:4C:83:32:A4:45:FD:F6:BB:4C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03EB Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q-fWN9mP1n63zuVMgzKkRf32u0w.roa Signing time: Thu 01 May 2025 01:45:14 +0000 ROA not before: Thu 01 May 2025 01:45:14 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 119.150.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:45:14 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=43E7D637D98FD67EB7CEE54C8332A445FDF6BB4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:ea:7f:31:ba:45:58:38:5c:cf:37:0e:3a: fa:3f:a9:08:03:f1:8b:ff:59:f2:12:56:21:56:29: 63:04:5f:26:c3:a4:b7:2e:8e:29:de:1c:72:07:71: 0b:08:a1:35:f9:a7:be:e6:34:54:63:48:e6:c5:20: 24:82:86:e0:ff:15:f9:1d:f8:9f:7e:e3:c4:e7:24: db:e1:2c:b3:5e:c5:ac:47:1f:fa:a7:f9:0a:99:a7: 62:81:cb:06:43:7b:23:19:ae:f4:1a:5b:79:ba:3b: 30:33:ce:f6:a5:5e:0d:5c:8d:1c:ac:b6:9c:1e:0f: d8:99:af:96:8b:ef:10:5b:02:c2:da:05:10:92:59: 41:ea:bd:ff:cc:38:5f:7e:c8:a9:71:74:d8:66:ef: bc:67:20:87:39:eb:e7:0d:49:19:b9:f0:d3:9f:e1: 61:ab:50:60:15:df:19:a4:27:7b:38:f8:63:b0:f2: 93:bc:86:a2:bb:64:35:85:2d:44:5d:85:62:1c:55: ff:91:dd:a3:d4:e5:0b:52:53:23:48:32:5d:ac:71: d9:86:e1:39:dc:f8:6e:06:b6:67:6d:62:a7:8a:64: d3:2a:79:2f:4c:fc:f7:e6:ef:54:0d:58:d6:be:48: f3:3f:7f:22:fd:2a:28:31:bc:29:53:ba:a4:4e:02: ef:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E7:D6:37:D9:8F:D6:7E:B7:CE:E5:4C:83:32:A4:45:FD:F6:BB:4C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q-fWN9mP1n63zuVMgzKkRf32u0w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.150.112.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:82:fa:11:8a:8c:78:95:1d:15:21:c4:9e:ad:84:12:b6:f6: 09:c0:0e:ef:86:be:57:77:7e:8c:fc:0d:e8:8e:fd:d6:2a:89: 17:b9:f3:41:2d:e4:0d:91:2b:22:95:49:17:76:8d:74:69:cc: ee:ff:a4:ae:19:e9:28:2a:28:ea:f3:e0:4e:25:3c:35:10:7f: d2:bb:ae:8c:18:0c:f4:dc:a4:33:03:15:97:23:4f:91:65:dd: a3:a3:c8:66:98:76:aa:fb:9f:29:4c:db:6c:8b:48:85:fd:5a: fa:cb:0f:31:65:f5:0a:cc:c4:9d:a1:30:28:5a:b9:c3:ef:97: 42:4d:12:b9:f6:57:6b:4f:5e:d2:29:22:4e:51:8e:27:0b:2f: da:bb:b6:5e:f9:23:87:69:dc:28:36:81:5d:60:e8:a9:fb:15: 3a:66:93:f2:df:c2:6a:9c:50:e0:35:1c:a9:91:88:dd:3f:0a: 2e:49:d0:b7:8b:4c:28:51:14:44:59:a2:8f:56:c9:77:7c:f1: 61:d0:21:ae:e6:96:f5:bd:88:c8:27:23:36:34:11:c7:95:fb: 29:14:50:63:09:ef:5e:85:f3:07:5a:5f:ce:2d:2e:ca:1b:67: 15:69:56:2d:49:e9:1c:a2:3e:2c:90:5a:4f:59:8f:db:41:d6: 2c:0e:a8:e9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ1MTRaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQzRTdENjM3RDk4RkQ2 N0VCN0NFRTU0QzgzMzJBNDQ1RkRGNkJCNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGc+p/MbpFWDhczzcOOvo/qQgD8Yv/WfISViFWKWMEXybDpLcu jineHHIHcQsIoTX5p77mNFRjSObFICSChuD/Ffkd+J9+48TnJNvhLLNexaxHH/qn +QqZp2KBywZDeyMZrvQaW3m6OzAzzvalXg1cjRystpweD9iZr5aL7xBbAsLaBRCS WUHqvf/MOF9+yKlxdNhm77xnIIc56+cNSRm58NOf4WGrUGAV3xmkJ3s4+GOw8pO8 hqK7ZDWFLURdhWIcVf+R3aPU5QtSUyNIMl2scdmG4Tnc+G4GtmdtYqeKZNMqeS9M /Pfm71QNWNa+SPM/fyL9KigxvClTuqROAu9zAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQ+fWN9mP1n63zuVMgzKkRf32u0wwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1EtZldOOW1QMW42M3p1Vk1nektrUmYzMnUwdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR3lnAwDQYJKoZIhvcNAQELBQADggEBABuC+hGKjHiVHRUhxJ6thBK29gnA Du+Gvld3foz8DeiO/dYqiRe580Et5A2RKyKVSRd2jXRpzO7/pK4Z6SgqKOrz4E4l PDUQf9K7rowYDPTcpDMDFZcjT5Fl3aOjyGaYdqr7nylM22yLSIX9WvrLDzFl9QrM xJ2hMChaucPvl0JNErn2V2tPXtIpIk5RjicLL9q7tl75I4dp3Cg2gV1g6Kn7FTpm k/LfwmqcUOA1HKmRiN0/Ci5J0LeLTChRFERZoo9WyXd88WHQIa7mlvW9iMgnIzY0 EceV+ykUUGMJ716F8wdaX84tLsobZxVpVi1J6RyiPiyQWk9Zj9tB1iwOqOk= -----END CERTIFICATE-----Generated at Sun May 18 19:36:07 2025 by rpki-client