$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/axtXisW1KxOuYXs7xj-4VozRnZI.roa File: axtXisW1KxOuYXs7xj-4VozRnZI.roa (raw, json) Hash identifier: 4yS+zmNIHSKd+4+oJDMgMAnIF4+Ck7iNwVjhF5DWGVs= Subject key identifier: 6B:1B:57:8A:C5:B5:2B:13:AE:61:7B:3B:C6:3F:B8:56:8C:D1:9D:92 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 039B Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/axtXisW1KxOuYXs7xj-4VozRnZI.roa Signing time: Thu 01 May 2025 01:37:34 +0000 ROA not before: Thu 01 May 2025 01:37:34 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 220.150.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 923 (0x39b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:34 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=6B1B578AC5B52B13AE617B3BC63FB8568CD19D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:28:5e:9c:50:a0:45:27:61:03:09:dc:c5:16: 5f:c7:eb:f9:10:dc:a4:a5:d0:51:6a:89:26:a2:9b: e7:55:1a:ae:f9:8b:2c:b1:09:12:fd:f5:29:c4:b4: e8:8b:64:43:b9:28:83:c2:66:44:6f:85:b5:ef:c6: e1:f2:64:c3:8c:a3:fc:be:3d:07:04:f2:57:04:31: 85:df:11:b9:d8:93:12:e9:c4:ac:4f:9b:e5:e1:72: e2:80:c5:3b:1a:1c:e8:76:26:a9:27:06:e4:1f:b8: 97:35:fd:eb:db:a4:05:5b:34:06:f4:17:c0:83:ac: ec:a5:f9:87:9d:bc:26:d3:4b:5f:39:b4:ef:9c:b2: 58:70:83:83:b9:69:c1:ef:6a:6d:5c:68:99:53:45: cf:09:3d:1e:b6:45:68:fd:11:78:55:ff:21:24:03: 5f:79:aa:f6:ac:49:b7:45:e8:bb:c4:9d:5b:0d:e8: e2:af:f8:95:a3:2f:e1:fa:31:7d:3e:40:29:3c:ca: 33:5b:df:8b:03:42:ab:ad:01:ee:15:5b:e2:81:0e: 2a:0c:f4:a3:1d:17:b6:db:a6:fe:76:ae:cc:1d:6c: e6:4a:4e:61:bf:2c:0a:4a:fb:c3:43:53:37:82:ab: 9d:0f:8e:13:1c:2a:ed:45:53:37:a1:c9:e6:60:b6: 6b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1B:57:8A:C5:B5:2B:13:AE:61:7B:3B:C6:3F:B8:56:8C:D1:9D:92 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/axtXisW1KxOuYXs7xj-4VozRnZI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.150.92.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:22:37:db:d1:02:a2:ff:c9:18:8f:da:39:64:b8:55:c3:10: f3:24:8a:96:0d:72:70:7b:cc:45:81:1c:4f:dd:cb:f5:49:c3: 38:08:4c:1a:14:ec:67:83:68:9e:d0:90:74:0c:7b:77:07:db: b7:dc:4f:a1:ea:c4:e3:b5:d7:8c:b3:64:5e:73:f0:6e:ea:fe: 0f:cb:ad:72:b5:63:58:f7:1e:1e:5e:40:4b:03:d2:6e:f5:11: ec:21:d2:dd:ec:0b:bf:35:0f:d6:7b:f8:80:2d:4a:b8:b2:78: c7:ab:f0:30:53:3c:46:11:c7:ee:00:0f:f5:fd:65:b0:b3:02: 7b:d2:95:f0:d6:d3:6a:57:40:11:1e:37:0e:60:a6:10:63:e3: 64:37:5a:fb:f7:94:93:9e:8f:7e:20:eb:cc:49:2a:5a:41:8b: 51:ae:0e:8b:32:45:4d:ab:8b:22:3e:d5:f5:a5:40:ed:e7:7c: b7:5f:23:88:a9:93:76:9d:be:ad:98:77:12:97:52:70:d1:b2: d6:97:63:8b:40:d6:9d:b0:43:3b:74:bd:d0:f0:09:a4:9e:3a: f6:44:7a:a3:95:a9:2f:2d:bc:8d:bb:38:f5:c2:b0:8b:8e:60: 7c:b1:e6:8a:3f:fb:21:1b:52:7a:b8:05:fc:45:58:11:54:51: f3:08:60:28 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MzRaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZCMUI1NzhBQzVCNTJC MTNBRTYxN0IzQkM2M0ZCODU2OENEMTlEOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaKF6cUKBFJ2EDCdzFFl/H6/kQ3KSl0FFqiSaim+dVGq75iyyx CRL99SnEtOiLZEO5KIPCZkRvhbXvxuHyZMOMo/y+PQcE8lcEMYXfEbnYkxLpxKxP m+XhcuKAxTsaHOh2JqknBuQfuJc1/evbpAVbNAb0F8CDrOyl+YedvCbTS185tO+c slhwg4O5acHvam1caJlTRc8JPR62RWj9EXhV/yEkA195qvasSbdF6LvEnVsN6OKv +JWjL+H6MX0+QCk8yjNb34sDQqutAe4VW+KBDioM9KMdF7bbpv52rswdbOZKTmG/ LApK+8NDUzeCq50PjhMcKu1FUzehyeZgtmvTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUaxtXisW1KxOuYXs7xj+4VozRnZIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2F4dFhpc1cxS3hPdVlYczd4ai00Vm96Um5aSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALcllwwDQYJKoZIhvcNAQELBQADggEBAB4iN9vRAqL/yRiP2jlkuFXDEPMk ipYNcnB7zEWBHE/dy/VJwzgITBoU7GeDaJ7QkHQMe3cH27fcT6HqxOO114yzZF5z 8G7q/g/LrXK1Y1j3Hh5eQEsD0m71Eewh0t3sC781D9Z7+IAtSriyeMer8DBTPEYR x+4AD/X9ZbCzAnvSlfDW02pXQBEeNw5gphBj42Q3Wvv3lJOej34g68xJKlpBi1Gu DosyRU2riyI+1fWlQO3nfLdfI4ipk3advq2YdxKXUnDRstaXY4tA1p2wQzt0vdDw CaSeOvZEeqOVqS8tvI27OPXCsIuOYHyx5oo/+yEbUnq4BfxFWBFUUfMIYCg= -----END CERTIFICATE-----Generated at Sun May 18 17:26:33 2025 by rpki-client