$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/YaayRfsuw8zxI3A3_qO8OMy-ndc.roa File: YaayRfsuw8zxI3A3_qO8OMy-ndc.roa (raw, json) Hash identifier: Hs6uFKaZSGG5YvWZ+vUV77BjTd0dCFZxX7wlxVI6Lrs= Subject key identifier: 61:A6:B2:45:FB:2E:C3:CC:F1:23:70:37:FE:A3:BC:38:CC:BE:9D:D7 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03C7 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/YaayRfsuw8zxI3A3_qO8OMy-ndc.roa Signing time: Thu 01 May 2025 01:40:38 +0000 ROA not before: Thu 01 May 2025 01:40:38 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.205.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 967 (0x3c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:38 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=61A6B245FB2EC3CCF1237037FEA3BC38CCBE9DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2e:f9:5b:6b:c3:91:df:1c:1b:d8:d7:2e:5e: 1c:97:76:dc:21:db:a4:94:5a:dd:a9:b7:b4:ff:1a: b9:d6:bd:6b:a1:0e:bb:bf:42:f1:7b:37:70:7b:09: b8:70:82:be:dc:16:74:39:60:9d:47:f5:ff:7b:76: 8e:71:82:30:92:0b:22:e9:f0:16:11:ec:f6:51:13: 92:a2:ac:8e:9f:e4:99:54:39:69:cf:fd:b1:5e:d6: 61:6d:01:66:ce:80:86:0c:e2:10:13:57:07:ed:38: 15:4b:67:84:2e:79:51:0b:d0:93:9b:6c:dc:bf:11: de:d7:74:05:d8:24:86:c4:db:80:1f:4c:e8:23:09: 13:28:62:af:fc:d4:1a:9e:23:d6:5f:b4:3f:21:62: 5d:b3:f4:84:06:98:f0:2b:f6:f2:0e:e5:40:c4:0a: 66:ac:45:d5:c7:0f:ec:f8:1b:c1:5d:55:d5:47:d7: e2:99:59:0b:ce:a3:32:f9:52:e8:0f:e4:98:4b:cd: b3:b8:0d:3e:38:ac:fc:38:af:61:a4:ef:ee:14:16: 73:ac:b3:64:4f:20:38:65:4b:99:a7:f0:8b:7a:c7: 97:fd:a5:84:9d:bc:54:90:2c:ad:a3:50:d8:a8:0e: d3:a3:12:df:8f:9a:64:67:59:8b:7b:c4:82:7d:2c: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A6:B2:45:FB:2E:C3:CC:F1:23:70:37:FE:A3:BC:38:CC:BE:9D:D7 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/YaayRfsuw8zxI3A3_qO8OMy-ndc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.205.48.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:42:de:1d:c5:f6:b5:bf:12:f6:eb:7b:a3:ba:90:62:3c:ef: 3e:c9:fa:51:71:a3:03:9e:04:3d:87:f5:26:ad:3f:b5:c4:19: d5:d2:04:96:96:b1:83:cb:b8:75:9d:3f:f4:be:89:40:79:ec: 71:d6:93:6e:4c:7f:61:b3:be:26:de:30:cd:41:45:5a:1e:ea: cb:66:aa:c1:c2:14:0d:e1:59:7a:ec:97:82:c2:be:ad:51:df: 8b:d4:51:c9:57:63:e6:f3:9e:f3:c0:4e:b0:e9:ca:a3:4b:c1: 8b:3f:9e:6d:81:e2:5b:0f:d5:8e:7e:e7:e5:24:0a:41:fe:3f: 72:be:3e:66:8c:e7:25:3f:ce:1b:1f:a0:f5:21:0e:2e:db:f6: 09:47:0d:35:a9:e2:70:4f:45:ec:bf:81:db:f1:b5:42:c7:d9: 0f:ba:bf:bc:20:aa:56:cc:8e:cb:b4:2c:47:6b:bf:a2:33:de: b5:78:54:8a:f7:46:5c:9e:56:50:6d:8b:a5:65:3c:5c:f5:18: fe:7c:9d:76:72:6e:9d:50:87:a4:7b:48:a9:8e:6e:58:1e:f8: 6e:82:4a:a7:15:de:b8:27:d7:70:d2:54:a8:86:14:d4:30:1f: 21:2b:11:95:4b:8d:61:77:34:b6:ae:a3:94:f1:d1:d7:b6:05: d7:92:6d:1d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMzhaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYxQTZCMjQ1RkIyRUMz Q0NGMTIzNzAzN0ZFQTNCQzM4Q0NCRTlERDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfLvlba8OR3xwb2NcuXhyXdtwh26SUWt2pt7T/GrnWvWuhDru/ QvF7N3B7Cbhwgr7cFnQ5YJ1H9f97do5xgjCSCyLp8BYR7PZRE5KirI6f5JlUOWnP /bFe1mFtAWbOgIYM4hATVwftOBVLZ4QueVEL0JObbNy/Ed7XdAXYJIbE24AfTOgj CRMoYq/81BqeI9ZftD8hYl2z9IQGmPAr9vIO5UDECmasRdXHD+z4G8FdVdVH1+KZ WQvOozL5UugP5JhLzbO4DT44rPw4r2Gk7+4UFnOss2RPIDhlS5mn8It6x5f9pYSd vFSQLK2jUNioDtOjEt+PmmRnWYt7xIJ9LMsBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYaayRfsuw8zxI3A3/qO8OMy+ndcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1lhYXlSZnN1dzh6eEkzQTNfcU84T015LW5kYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9zTAwDQYJKoZIhvcNAQELBQADggEBAE1C3h3F9rW/Evbre6O6kGI87z7J +lFxowOeBD2H9SatP7XEGdXSBJaWsYPLuHWdP/S+iUB57HHWk25Mf2GzvibeMM1B RVoe6stmqsHCFA3hWXrsl4LCvq1R34vUUclXY+bznvPATrDpyqNLwYs/nm2B4lsP 1Y5+5+UkCkH+P3K+PmaM5yU/zhsfoPUhDi7b9glHDTWp4nBPRey/gdvxtULH2Q+6 v7wgqlbMjsu0LEdrv6Iz3rV4VIr3RlyeVlBti6VlPFz1GP58nXZybp1Qh6R7SKmO blge+G6CSqcV3rgn13DSVKiGFNQwHyErEZVLjWF3NLauo5Tx0de2BdeSbR0= -----END CERTIFICATE-----Generated at Sun May 18 23:57:31 2025 by rpki-client