$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bgfmj8yWSavquI9TSpxVTAUyUYs.roa File: bgfmj8yWSavquI9TSpxVTAUyUYs.roa (raw, json) Hash identifier: 0ZBrbAKFF5aetoI1x+xRA9qkTiO5MmGdPtFk11eRkyk= Subject key identifier: 6E:07:E6:8F:CC:96:49:AB:EA:B8:8F:53:4A:9C:55:4C:05:32:51:8B Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03E6 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bgfmj8yWSavquI9TSpxVTAUyUYs.roa Signing time: Thu 01 May 2025 01:42:52 +0000 ROA not before: Thu 01 May 2025 01:42:52 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 111.234.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:52 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=6E07E68FCC9649ABEAB88F534A9C554C0532518B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:8d:94:8d:c2:46:cd:8e:8b:ca:0d:1f:9c: c7:d0:fc:ed:9b:99:ec:98:23:f8:4d:2b:6b:ee:72: aa:ad:82:c9:4b:86:71:ce:03:cc:cb:9f:f1:93:63: 1d:32:50:81:5e:4c:6e:68:fb:3d:af:d8:35:a5:91: f8:6f:6c:81:c5:7a:af:81:67:86:c1:bd:a2:19:1c: e9:d2:36:cb:e0:bd:23:e1:b7:22:f2:b6:e4:07:7d: ef:f4:e8:bb:56:50:88:79:47:c7:7b:b5:89:d3:bf: 50:f6:e0:b7:bb:9b:23:d0:45:e9:e3:a2:4b:51:a4: 57:0a:21:83:d6:78:cb:93:f7:15:28:3a:3e:41:ab: a9:17:e8:40:6e:f6:49:25:dd:c3:9a:0a:0c:03:9f: ad:79:d5:19:bd:7c:7c:71:88:b5:43:ff:c8:b8:e7: 9c:ba:46:53:4b:99:c0:33:dc:06:74:78:84:a2:e6: cb:7f:8b:83:a7:5b:19:35:7b:82:8e:1b:b6:c4:a8: 84:26:52:dd:1b:4a:e6:6d:f8:22:35:61:26:4a:c4: 7f:f5:a5:3a:92:25:6a:3a:de:46:3d:3d:95:4f:d1: df:70:63:c0:78:01:11:3c:2e:89:eb:90:6a:ea:0d: a8:64:b4:d5:7a:51:7f:3c:37:74:e5:d4:27:72:bc: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:07:E6:8F:CC:96:49:AB:EA:B8:8F:53:4A:9C:55:4C:05:32:51:8B X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bgfmj8yWSavquI9TSpxVTAUyUYs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.234.56.0/21 Signature Algorithm: sha256WithRSAEncryption 51:72:52:be:92:a7:b0:ab:2f:52:56:47:aa:27:cb:9e:0a:53: 3d:d7:eb:ab:0b:bb:78:74:fa:51:83:d6:a3:2f:22:3f:4e:c2: a3:c9:04:d6:a9:b6:35:a0:1c:1f:93:18:f8:b9:17:8c:52:83: 2c:6c:36:ff:94:c9:70:62:0c:3c:b0:02:27:2f:ee:e0:b4:bd: 97:11:43:01:0e:3a:de:6d:27:ce:f4:34:29:f3:02:10:3f:0f: c6:48:a0:93:74:68:dd:43:dd:bf:b0:ac:e7:35:86:91:17:b1: dc:94:5f:8c:38:d6:10:10:86:0b:81:be:eb:84:2e:53:3f:de: a1:d3:90:17:3f:77:f0:7a:e1:81:48:b8:4a:d0:22:cf:6e:25: 55:7a:2e:a0:5f:45:f8:99:54:3e:30:4e:e3:59:ff:5d:cb:f3: e2:0d:59:b4:91:ad:68:44:56:29:56:dc:0b:2a:be:d7:4d:e0: 8f:58:f1:43:db:2d:7c:7d:1f:44:a8:47:bf:29:f0:6e:d8:e3: 66:4b:58:89:e3:29:fa:0d:ca:f3:d2:d5:9b:91:50:c4:9e:a2: 69:4b:05:e7:6f:02:26:91:a1:c8:88:17:9a:7c:68:ed:13:3a: cd:bf:26:63:22:9b:63:fb:1d:55:25:3f:3a:88:76:f0:65:ca: 96:cd:b4:32 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNTJaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZFMDdFNjhGQ0M5NjQ5 QUJFQUI4OEY1MzRBOUM1NTRDMDUzMjUxOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCou42UjcJGzY6Lyg0fnMfQ/O2bmeyYI/hNK2vucqqtgslLhnHO A8zLn/GTYx0yUIFeTG5o+z2v2DWlkfhvbIHFeq+BZ4bBvaIZHOnSNsvgvSPhtyLy tuQHfe/06LtWUIh5R8d7tYnTv1D24Le7myPQRenjoktRpFcKIYPWeMuT9xUoOj5B q6kX6EBu9kkl3cOaCgwDn6151Rm9fHxxiLVD/8i455y6RlNLmcAz3AZ0eISi5st/ i4OnWxk1e4KOG7bEqIQmUt0bSuZt+CI1YSZKxH/1pTqSJWo63kY9PZVP0d9wY8B4 ARE8LonrkGrqDahktNV6UX88N3Tl1CdyvCN/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbgfmj8yWSavquI9TSpxVTAUyUYswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2JnZm1qOHlXU2F2cXVJOVRTcHhWVEFVeVVZcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANv6jgwDQYJKoZIhvcNAQELBQADggEBAFFyUr6Sp7CrL1JWR6ony54KUz3X 66sLu3h0+lGD1qMvIj9OwqPJBNaptjWgHB+TGPi5F4xSgyxsNv+UyXBiDDywAicv 7uC0vZcRQwEOOt5tJ870NCnzAhA/D8ZIoJN0aN1D3b+wrOc1hpEXsdyUX4w41hAQ hguBvuuELlM/3qHTkBc/d/B64YFIuErQIs9uJVV6LqBfRfiZVD4wTuNZ/13L8+IN WbSRrWhEVilW3AsqvtdN4I9Y8UPbLXx9H0SoR78p8G7Y42ZLWInjKfoNyvPS1ZuR UMSeomlLBedvAiaRociIF5p8aO0TOs2/JmMim2P7HVUlPzqIdvBlypbNtDI= -----END CERTIFICATE-----Generated at Sun May 18 19:30:03 2025 by rpki-client