$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UcZnKaskGX9dli5hQW0I6_4AzE0.roa File: UcZnKaskGX9dli5hQW0I6_4AzE0.roa (raw, json) Hash identifier: +CsDYKbaef7nbw6jdbP1Sm8iQfh82rtMZCNPygcwcPw= Subject key identifier: 51:C6:67:29:AB:24:19:7F:5D:96:2E:61:41:6D:08:EB:FE:00:CC:4D Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0393 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UcZnKaskGX9dli5hQW0I6_4AzE0.roa Signing time: Thu 01 May 2025 01:37:31 +0000 ROA not before: Thu 01 May 2025 01:37:31 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 27.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:31 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=51C66729AB24197F5D962E61416D08EBFE00CC4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:29:1c:6e:fe:b0:e5:b1:00:56:ff:39:f4: 94:34:88:75:7e:29:13:fc:87:06:f9:72:c7:ff:6d: 3c:95:2b:b6:89:85:df:c5:57:38:8b:df:5c:b9:ac: 76:cb:11:e2:1e:99:46:1a:90:bb:63:94:72:e6:66: 8b:f0:7f:38:f0:f8:5e:8d:f7:cd:93:62:e9:35:07: fd:20:6b:21:73:5a:08:25:e3:d2:4f:36:cc:97:5c: d0:12:fc:6c:6c:25:b3:f4:56:2f:4a:31:d5:2a:de: d9:77:50:04:62:47:22:19:31:f0:75:a5:12:61:11: ba:ef:5e:6c:5e:82:72:43:41:55:41:fc:60:c6:66: 6f:00:aa:68:4e:07:fe:2e:7d:f0:ca:4c:9a:d3:cb: ef:ed:38:97:3e:76:28:7f:17:e3:17:39:55:30:4c: e6:2f:bd:53:95:7b:02:3f:75:db:ed:2f:07:95:01: 29:6d:1d:b7:9f:02:2e:8b:4a:81:59:00:0b:59:19: e5:20:5b:8b:d1:d0:92:bf:a1:cd:21:b4:4a:ed:4c: 7c:e0:84:26:4b:56:7e:4d:12:63:ec:50:2f:ac:0a: 88:ac:2e:8e:c2:b0:a1:a5:95:ab:a2:3a:a8:6b:36: ee:dd:76:07:41:4c:b1:07:dd:91:f9:9e:b7:d5:95: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C6:67:29:AB:24:19:7F:5D:96:2E:61:41:6D:08:EB:FE:00:CC:4D X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UcZnKaskGX9dli5hQW0I6_4AzE0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.134.0.0/20 Signature Algorithm: sha256WithRSAEncryption 15:11:32:39:2e:a2:4c:0c:25:ca:a0:5f:6c:09:26:74:b4:c0: 76:a6:c1:2d:55:90:25:ac:78:5f:33:27:5f:57:8d:ed:3d:d2: 1a:2e:27:c9:94:aa:ab:4a:89:5c:14:6d:64:3c:2a:fc:ee:af: 43:98:6e:aa:d4:ac:cb:d9:47:d6:23:b5:ea:c4:75:3b:81:e0: ad:5c:bf:93:0d:a5:9f:b3:f2:9f:f4:48:7e:bb:9a:22:80:41: 5a:15:c6:eb:06:37:6a:f1:5d:a2:e7:98:aa:4d:3d:26:7c:65: 68:ec:3a:a0:f9:1d:92:b5:13:8c:f8:f1:2f:5d:8c:63:b8:89: 4f:18:0e:4f:ee:71:01:72:67:87:28:f8:09:f7:e1:58:31:56: 3f:d6:30:b2:30:30:40:07:5d:48:78:c4:c1:82:bf:d4:9d:98: a5:fd:a7:52:7a:40:6c:5e:7f:11:1b:d0:08:ed:79:46:f7:2b: 12:a4:f0:a7:5e:ae:7f:ce:ea:50:8a:4b:af:88:6a:16:4f:bd: aa:8a:2e:34:d5:5e:68:c1:3c:fc:e4:95:4a:62:0a:11:77:5a: 9a:62:77:3f:ba:51:c0:b2:c1:ad:48:1b:0d:ac:af:f5:b0:92: 20:5c:5c:7a:1e:ab:f7:66:d6:d2:80:65:09:05:7d:ae:65:d6: 14:20:f6:3f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MzFaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDUxQzY2NzI5QUIyNDE5 N0Y1RDk2MkU2MTQxNkQwOEVCRkUwMENDNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYTCkcbv6w5bEAVv859JQ0iHV+KRP8hwb5csf/bTyVK7aJhd/F VziL31y5rHbLEeIemUYakLtjlHLmZovwfzjw+F6N982TYuk1B/0gayFzWggl49JP NsyXXNAS/GxsJbP0Vi9KMdUq3tl3UARiRyIZMfB1pRJhEbrvXmxegnJDQVVB/GDG Zm8AqmhOB/4uffDKTJrTy+/tOJc+dih/F+MXOVUwTOYvvVOVewI/ddvtLweVASlt HbefAi6LSoFZAAtZGeUgW4vR0JK/oc0htErtTHzghCZLVn5NEmPsUC+sCoisLo7C sKGllauiOqhrNu7ddgdBTLEH3ZH5nrfVlYtFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUcZnKaskGX9dli5hQW0I6/4AzE0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1VjWm5LYXNrR1g5ZGxpNWhRVzBJNl80QXpFMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQbhgAwDQYJKoZIhvcNAQELBQADggEBABURMjkuokwMJcqgX2wJJnS0wHam wS1VkCWseF8zJ19Xje090houJ8mUqqtKiVwUbWQ8Kvzur0OYbqrUrMvZR9YjterE dTuB4K1cv5MNpZ+z8p/0SH67miKAQVoVxusGN2rxXaLnmKpNPSZ8ZWjsOqD5HZK1 E4z48S9djGO4iU8YDk/ucQFyZ4co+An34VgxVj/WMLIwMEAHXUh4xMGCv9SdmKX9 p1J6QGxefxEb0AjteUb3KxKk8Kdern/O6lCKS6+IahZPvaqKLjTVXmjBPPzklUpi ChF3Wppidz+6UcCywa1IGw2sr/WwkiBcXHoeq/dm1tKAZQkFfa5l1hQg9j8= -----END CERTIFICATE-----Generated at Sun May 18 05:56:41 2025 by rpki-client