$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/d099VNYenxsE8scOg71s0mZjmb8.roa File: d099VNYenxsE8scOg71s0mZjmb8.roa (raw, json) Hash identifier: Aw1pmIR/05VEuQJK/aKsWkiqG6lHTxLtKP8Eu/5vmfg= Subject key identifier: 77:4F:7D:54:D6:1E:9F:1B:04:F2:C7:0E:83:BD:6C:D2:66:63:99:BF Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 040D Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/d099VNYenxsE8scOg71s0mZjmb8.roa Signing time: Thu 01 May 2025 01:45:28 +0000 ROA not before: Thu 01 May 2025 01:45:28 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 122.145.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1037 (0x40d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:45:28 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=774F7D54D61E9F1B04F2C70E83BD6CD2666399BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:ec:33:04:cd:37:5c:50:72:fc:a0:be:54: e1:2e:f4:8b:4c:34:dd:d2:b6:42:26:a3:cb:a5:19: 7c:a1:16:16:bd:24:84:f3:2d:28:59:15:2c:72:35: d5:87:4e:e1:18:19:e0:ca:fe:ec:0a:1c:9a:de:48: 98:ad:1f:40:d4:b6:53:a1:9a:0a:45:4b:a4:e4:fa: 04:7e:19:0a:1e:c1:dd:12:65:fc:7b:1d:3b:22:86: ee:67:59:0f:b2:a4:cb:70:90:04:3c:57:7e:7d:38: 27:d1:62:48:bb:31:05:49:fe:84:82:50:d3:65:13: 44:14:a2:84:db:23:dd:98:c7:d6:48:19:4b:22:16: d8:b6:d0:b4:e8:ce:59:8b:5e:5b:a1:d2:ef:96:29: 22:85:13:a2:2e:4f:25:a2:39:cd:a5:bf:b0:64:8c: 0e:58:45:39:4f:2a:a8:3c:b4:21:98:7f:c3:ac:13: 8c:d4:d4:aa:90:52:c8:f8:2e:4b:d0:1f:e7:3e:69: 28:85:31:0e:ab:c8:56:76:21:29:9c:45:f2:39:d4: d5:c0:09:b0:29:a8:a0:ce:75:80:d0:ec:55:20:f4: 41:86:85:98:f0:fc:b9:43:5d:9e:89:3a:66:d2:84: 9b:0c:d4:91:86:97:4c:6d:8b:49:b9:0c:4f:46:07: 38:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4F:7D:54:D6:1E:9F:1B:04:F2:C7:0E:83:BD:6C:D2:66:63:99:BF X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/d099VNYenxsE8scOg71s0mZjmb8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.145.132.0/22 Signature Algorithm: sha256WithRSAEncryption 65:8b:13:b5:23:cd:75:14:bb:8a:ec:d3:a5:01:6c:b3:b6:8e: 4e:81:7e:85:59:cd:ee:92:23:1a:dd:60:3d:a9:34:d5:ec:12: aa:bb:9b:c3:e7:d1:48:7d:2d:6d:75:a3:59:6c:be:24:72:a1: 2e:d4:8b:f6:11:ed:ca:37:96:db:c0:00:a2:25:c4:ec:ef:ac: 82:af:26:8e:05:3b:31:69:50:30:cf:d6:6c:05:d4:52:1b:58: cf:f8:8d:e9:ba:f0:aa:61:cb:e8:a6:50:d9:7f:65:07:51:19: 09:d7:2c:30:61:dc:4f:64:6b:1b:a1:00:19:29:73:1f:ad:f7: 49:92:aa:ad:4b:d5:43:14:a1:0b:cd:a2:3e:30:00:6b:eb:f1: 9a:2b:13:08:c6:ad:9c:3a:82:6d:b2:36:97:31:20:8f:f1:55: 95:5f:9a:2a:12:8a:56:bf:8e:89:bf:4d:20:83:b7:5e:0f:03: 0f:db:5f:a1:9c:a1:fe:ac:8f:bc:dc:17:98:52:5b:5b:15:3b: e1:75:e7:e2:d9:12:6c:3c:25:c4:f0:a5:e8:56:f1:8c:3b:8a: d1:e9:38:e0:74:44:af:03:cf:33:2d:09:72:73:8a:3d:ea:13: ec:59:f8:be:cc:ee:92:69:0a:53:73:c0:4e:3b:aa:76:0f:40: 0f:ea:fb:58 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBA0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ1MjhaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc3NEY3RDU0RDYxRTlG MUIwNEYyQzcwRTgzQkQ2Q0QyNjY2Mzk5QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC05ewzBM03XFBy/KC+VOEu9ItMNN3StkImo8ulGXyhFha9JITz LShZFSxyNdWHTuEYGeDK/uwKHJreSJitH0DUtlOhmgpFS6Tk+gR+GQoewd0SZfx7 HTsihu5nWQ+ypMtwkAQ8V359OCfRYki7MQVJ/oSCUNNlE0QUooTbI92Yx9ZIGUsi Fti20LTozlmLXluh0u+WKSKFE6IuTyWiOc2lv7BkjA5YRTlPKqg8tCGYf8OsE4zU 1KqQUsj4LkvQH+c+aSiFMQ6ryFZ2ISmcRfI51NXACbApqKDOdYDQ7FUg9EGGhZjw /LlDXZ6JOmbShJsM1JGGl0xti0m5DE9GBzgJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUd099VNYenxsE8scOg71s0mZjmb8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2QwOTlWTlllbnhzRThzY09nNzFzMG1aam1iOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ6kYQwDQYJKoZIhvcNAQELBQADggEBAGWLE7UjzXUUu4rs06UBbLO2jk6B foVZze6SIxrdYD2pNNXsEqq7m8Pn0Uh9LW11o1lsviRyoS7Ui/YR7co3ltvAAKIl xOzvrIKvJo4FOzFpUDDP1mwF1FIbWM/4jem68Kphy+imUNl/ZQdRGQnXLDBh3E9k axuhABkpcx+t90mSqq1L1UMUoQvNoj4wAGvr8ZorEwjGrZw6gm2yNpcxII/xVZVf mioSila/jom/TSCDt14PAw/bX6Gcof6sj7zcF5hSW1sVO+F15+LZEmw8JcTwpehW 8Yw7itHpOOB0RK8DzzMtCXJzij3qE+xZ+L7M7pJpClNzwE47qnYPQA/q+1g= -----END CERTIFICATE-----Generated at Mon May 19 00:20:19 2025 by rpki-client