$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZKkKceGKzgdeEeQU0X8mN9txhgw.roa File: ZKkKceGKzgdeEeQU0X8mN9txhgw.roa (raw, json) Hash identifier: sjWXiQlFcmNHjR16O1G8m8tTt0DVOM8VJ7Vv6+Qcors= Subject key identifier: 64:A9:0A:71:E1:8A:CE:07:5E:11:E4:14:D1:7F:26:37:DB:71:86:0C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0427 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZKkKceGKzgdeEeQU0X8mN9txhgw.roa Signing time: Thu 01 May 2025 01:48:49 +0000 ROA not before: Thu 01 May 2025 01:48:49 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 210.159.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:48:49 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=64A90A71E18ACE075E11E414D17F2637DB71860C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3b:d8:80:75:b7:b8:e7:af:1d:da:6e:5e:39: 86:d9:66:a7:80:92:a0:cd:59:9d:4f:5b:7f:f5:28: 92:8b:51:5f:b6:44:6a:aa:c8:26:0d:7b:fb:e8:0a: 1f:d8:4d:de:ec:33:66:c8:97:63:fa:db:27:05:f6: 93:8c:63:98:c6:a3:4e:de:1c:aa:4b:80:86:c2:92: d2:66:38:4a:af:36:91:bf:ba:9d:18:c0:4d:4c:5f: ea:c9:6e:16:7e:00:ce:44:56:ba:de:bf:07:9b:46: f0:45:16:fe:87:be:e4:60:55:e1:70:56:78:73:61: e8:60:e6:fb:09:9b:a7:7e:b8:d2:de:20:30:0e:e2: 13:e4:aa:a5:81:f5:e1:5f:36:d8:f4:0f:29:54:a4: 22:7a:58:e3:46:b6:09:c9:fe:21:9e:ed:62:b8:0f: 99:7c:92:6e:37:fc:9c:af:2d:97:b5:fc:6f:b5:4c: 0c:fc:3e:f0:fa:42:5d:de:dd:af:65:f5:c6:4a:ad: da:ad:b3:ec:c8:3a:f8:32:92:3d:76:c0:e1:04:ec: e1:8f:c9:4b:bf:63:70:d0:59:36:e1:b9:bc:da:61: 99:6a:d1:64:4c:7a:e7:ed:30:ea:77:bc:36:1a:2d: a9:88:89:c2:17:5c:ba:4e:13:87:50:f1:ef:25:3f: a2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A9:0A:71:E1:8A:CE:07:5E:11:E4:14:D1:7F:26:37:DB:71:86:0C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZKkKceGKzgdeEeQU0X8mN9txhgw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.159.142.0/23 Signature Algorithm: sha256WithRSAEncryption 48:18:9d:2c:a9:94:3a:2b:98:75:16:6e:2b:f7:88:86:e0:fb: 2e:e9:52:5a:9d:12:c5:1a:3e:7b:1e:36:df:52:38:05:f6:41: ca:79:a4:4c:2c:6b:3f:98:fa:62:aa:5d:e6:87:06:8c:21:26: 6f:f8:a0:25:a2:03:69:fe:bc:5f:3c:48:f6:ef:06:ea:24:c4: f7:2c:b3:b6:25:73:1f:e2:ff:47:01:2c:0a:9c:38:31:c3:9c: a0:e9:44:9b:a1:43:f5:01:89:28:bf:9d:03:2f:d5:19:51:cf: 57:a6:15:2b:c2:24:ff:3e:94:73:8b:f7:6c:f2:f8:2e:b1:cc: d1:6b:2a:c5:f0:8b:14:87:8a:cb:ed:bb:cd:37:90:94:c4:cb: fb:72:f4:4a:e2:44:c7:3c:10:3d:b6:2b:10:b3:dc:d2:7b:59: 50:fb:9f:4e:a3:d5:d8:cb:95:13:f7:9a:aa:a9:23:37:c1:9e: 35:0d:bc:7b:a1:5d:fc:40:79:32:1a:2a:7c:d3:6f:48:ac:46: 9d:2f:52:ed:86:01:55:62:d7:0f:2a:77:c6:63:76:43:dd:4c: 12:55:f9:85:e6:2a:8a:36:77:71:a7:71:6f:ce:97:de:58:82: de:04:86:91:07:5b:28:d2:06:c5:ff:a8:f4:33:50:ea:f9:ce: fe:8d:f9:57 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ4NDlaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY0QTkwQTcxRTE4QUNF MDc1RTExRTQxNEQxN0YyNjM3REI3MTg2MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcO9iAdbe4568d2m5eOYbZZqeAkqDNWZ1PW3/1KJKLUV+2RGqq yCYNe/voCh/YTd7sM2bIl2P62ycF9pOMY5jGo07eHKpLgIbCktJmOEqvNpG/up0Y wE1MX+rJbhZ+AM5EVrrevwebRvBFFv6HvuRgVeFwVnhzYehg5vsJm6d+uNLeIDAO 4hPkqqWB9eFfNtj0DylUpCJ6WONGtgnJ/iGe7WK4D5l8km43/JyvLZe1/G+1TAz8 PvD6Ql3e3a9l9cZKrdqts+zIOvgykj12wOEE7OGPyUu/Y3DQWTbhubzaYZlq0WRM euftMOp3vDYaLamIicIXXLpOE4dQ8e8lP6I/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZKkKceGKzgdeEeQU0X8mN9txhgwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1pLa0tjZUdLemdkZUVlUVUwWDhtTjl0eGhndy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHSn44wDQYJKoZIhvcNAQELBQADggEBAEgYnSyplDormHUWbiv3iIbg+y7p UlqdEsUaPnseNt9SOAX2Qcp5pEwsaz+Y+mKqXeaHBowhJm/4oCWiA2n+vF88SPbv BuokxPcss7Ylcx/i/0cBLAqcODHDnKDpRJuhQ/UBiSi/nQMv1RlRz1emFSvCJP8+ lHOL92zy+C6xzNFrKsXwixSHisvtu803kJTEy/ty9EriRMc8ED22KxCz3NJ7WVD7 n06j1djLlRP3mqqpIzfBnjUNvHuhXfxAeTIaKnzTb0isRp0vUu2GAVVi1w8qd8Zj dkPdTBJV+YXmKoo2d3GncW/Ol95Ygt4EhpEHWyjSBsX/qPQzUOr5zv6N+Vc= -----END CERTIFICATE-----Generated at Sun May 18 01:00:29 2025 by rpki-client