$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/SpCB2ZSywSeeThoaTlPEH7zEJhM.roa File: SpCB2ZSywSeeThoaTlPEH7zEJhM.roa (raw, json) Hash identifier: F8cbhLZycqxZmeY3681GMzrL123ILg9mi5BT7ll24VQ= Subject key identifier: 4A:90:81:D9:94:B2:C1:27:9E:4E:1A:1A:4E:53:C4:1F:BC:C4:26:13 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03ED Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SpCB2ZSywSeeThoaTlPEH7zEJhM.roa Signing time: Thu 01 May 2025 01:45:15 +0000 ROA not before: Thu 01 May 2025 01:45:15 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 119.150.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1005 (0x3ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:45:15 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=4A9081D994B2C1279E4E1A1A4E53C41FBCC42613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:c2:a6:f0:c7:41:a2:da:17:5a:fe:ce:0e: a1:98:0d:35:1a:1d:98:ca:b4:5f:15:ae:5a:15:17: 18:56:04:ff:66:86:60:09:ee:8f:68:4a:81:0e:d8: 7a:4d:e8:a0:10:71:f5:48:f2:1a:31:e0:d4:fb:1d: 8f:bb:c9:12:18:15:0f:39:f6:e4:5a:79:1b:70:a7: 16:21:e5:f1:fe:ba:29:28:fe:f1:f4:7f:f6:60:9e: d5:f0:a3:54:a2:b2:8a:30:9d:28:f3:1e:64:1d:02: e8:a0:b8:3b:52:f6:79:5e:6a:ff:7a:bf:f9:6f:37: f3:89:14:d9:a3:69:f6:8a:db:72:ba:da:68:10:fc: 1b:29:07:57:b2:76:16:90:85:45:99:78:e3:c0:7e: e5:eb:4c:24:79:3c:3f:66:7b:85:7e:99:e4:7e:6e: 7d:57:bc:69:dc:26:07:8c:b8:8c:90:05:c9:a2:89: 26:60:26:9c:d6:3f:dd:50:a9:11:1f:2b:9a:d7:7a: 54:92:42:0b:7a:77:92:45:a2:44:06:94:e5:fd:7a: e4:c0:d5:cc:17:d8:dd:89:df:a3:ed:77:0d:67:d4: 49:3f:31:bd:a7:4a:9f:8b:90:1c:d7:bf:da:82:2f: 99:e6:23:13:58:d3:01:77:45:90:6d:f1:6c:8d:82: 1c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:90:81:D9:94:B2:C1:27:9E:4E:1A:1A:4E:53:C4:1F:BC:C4:26:13 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SpCB2ZSywSeeThoaTlPEH7zEJhM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.150.192.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:ff:f0:b1:16:b3:f8:ce:92:3e:32:d6:50:86:dc:8c:16:4f: 33:de:d1:9d:8c:6d:a0:8b:38:c6:d6:e5:07:b1:69:fc:a1:75: 21:5b:be:e5:8d:8d:b1:d0:2c:65:e6:f3:7b:76:41:01:72:e2: 79:7d:f9:84:42:f3:04:da:22:54:5b:6d:fd:b5:b3:ad:d6:ca: 76:d8:2d:66:dd:da:4a:93:32:a0:40:c3:b5:d9:29:1d:72:0e: ee:6c:6d:4c:6c:99:df:a1:a4:59:73:e8:0a:de:c6:83:41:4e: 8e:81:54:63:75:83:dc:1c:5b:40:f5:43:13:fa:e0:78:a2:d0: d5:c3:95:59:5d:c9:22:e2:26:fc:d1:bd:86:10:5b:25:33:c2: db:69:08:40:6f:74:cd:1f:06:24:39:68:5e:ee:aa:62:e3:c5: aa:bd:0b:0e:40:50:0a:be:4e:92:b7:99:ee:fb:8c:99:87:de: 1b:b6:b6:26:41:eb:63:a2:67:d1:cf:14:ca:43:74:6d:91:fc: 48:66:99:84:be:55:b6:21:c1:4d:6c:b6:00:69:da:ad:0f:79: c0:0a:11:5e:6d:c4:ff:c4:c2:b3:15:fb:75:5e:81:e1:7f:56: 27:19:55:89:62:9b:9d:e0:bc:3d:bd:74:10:bc:38:54:a2:36: 5c:76:2c:82 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ1MTVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRBOTA4MUQ5OTRCMkMx Mjc5RTRFMUExQTRFNTNDNDFGQkNDNDI2MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3NcKm8MdBotoXWv7ODqGYDTUaHZjKtF8VrloVFxhWBP9mhmAJ 7o9oSoEO2HpN6KAQcfVI8hox4NT7HY+7yRIYFQ859uRaeRtwpxYh5fH+uiko/vH0 f/ZgntXwo1SisoownSjzHmQdAuiguDtS9nleav96v/lvN/OJFNmjafaK23K62mgQ /BspB1eydhaQhUWZeOPAfuXrTCR5PD9me4V+meR+bn1XvGncJgeMuIyQBcmiiSZg JpzWP91QqREfK5rXelSSQgt6d5JFokQGlOX9euTA1cwX2N2J36Ptdw1n1Ek/Mb2n Sp+LkBzXv9qCL5nmIxNY0wF3RZBt8WyNghyxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSpCB2ZSywSeeThoaTlPEH7zEJhMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1NwQ0IyWlN5d1NlZVRob2FUbFBFSDd6RUpoTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN3lsAwDQYJKoZIhvcNAQELBQADggEBAH7/8LEWs/jOkj4y1lCG3IwWTzPe 0Z2MbaCLOMbW5QexafyhdSFbvuWNjbHQLGXm83t2QQFy4nl9+YRC8wTaIlRbbf21 s63WynbYLWbd2kqTMqBAw7XZKR1yDu5sbUxsmd+hpFlz6ArexoNBTo6BVGN1g9wc W0D1QxP64Hii0NXDlVldySLiJvzRvYYQWyUzwttpCEBvdM0fBiQ5aF7uqmLjxaq9 Cw5AUAq+TpK3me77jJmH3hu2tiZB62OiZ9HPFMpDdG2R/EhmmYS+VbYhwU1stgBp 2q0PecAKEV5txP/EwrMV+3VegeF/VicZVYlim53gvD29dBC8OFSiNlx2LII= -----END CERTIFICATE-----Generated at Sun May 18 02:03:55 2025 by rpki-client