$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/fQ5uzkYzyYEZ8InNc_BBSaOeNAY.roa File: fQ5uzkYzyYEZ8InNc_BBSaOeNAY.roa (raw, json) Hash identifier: xg1T0JS5ErHz3L+L7ZcZPYFz1AoRUFsPD8NR9U4Vz3Y= Subject key identifier: 7D:0E:6E:CE:46:33:C9:81:19:F0:89:CD:73:F0:41:49:A3:9E:34:06 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0385 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fQ5uzkYzyYEZ8InNc_BBSaOeNAY.roa Signing time: Thu 01 May 2025 01:37:26 +0000 ROA not before: Thu 01 May 2025 01:37:26 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 36.52.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:26 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=7D0E6ECE4633C98119F089CD73F04149A39E3406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:86:d7:62:b0:f9:70:80:18:f5:b2:76:d8: 74:cd:63:84:a5:9c:4e:2f:f7:08:8d:13:e9:3b:bd: 4b:2d:f8:05:62:09:92:30:bb:30:be:2d:e1:6e:bf: 66:cf:02:00:61:91:82:cc:c0:9a:b5:33:5a:50:77: 16:45:e0:a0:c8:ec:08:f5:ef:11:0c:d6:d2:d6:c5: 68:95:58:b1:95:af:a5:fd:d1:a9:cc:fa:fa:0e:19: 2e:14:2d:91:f4:c9:f5:7a:9f:05:62:d5:14:ea:fa: a3:7d:a5:ca:f8:45:f5:2f:4f:24:20:be:86:fd:c3: f4:f4:4d:9a:59:aa:53:6c:00:94:54:14:74:6b:5a: aa:95:b2:2a:e7:56:67:2b:0c:9b:65:8f:db:e5:60: 9b:ff:37:9d:b5:be:01:15:bb:de:8a:60:40:9e:ff: 6a:00:5d:10:f6:c3:9b:14:f3:ab:c4:ff:0d:85:d2: c7:9f:fb:31:10:f8:a6:79:8e:ed:01:80:1c:49:8d: 31:7c:ec:9f:b1:ae:9c:cc:3b:d2:28:18:4b:2b:2b: 59:a2:93:7e:ed:59:98:d2:27:ed:5b:23:c2:33:94: 7c:0f:56:74:f7:b8:9e:8a:48:cd:bb:a8:1f:18:e2: 4e:2f:26:10:e3:a6:41:e2:c9:48:4f:e1:78:3c:d5: ef:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0E:6E:CE:46:33:C9:81:19:F0:89:CD:73:F0:41:49:A3:9E:34:06 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fQ5uzkYzyYEZ8InNc_BBSaOeNAY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.192.0/20 Signature Algorithm: sha256WithRSAEncryption 4d:3b:fb:91:bb:32:ac:7c:51:cb:4b:9c:cd:3d:69:4e:1e:4f: c8:d6:3c:86:37:87:4d:4b:48:40:14:38:42:58:05:5a:ec:04: d6:72:29:cf:aa:95:bd:f6:fb:78:26:d6:25:20:60:d0:f4:c7: 30:95:3e:ea:7c:08:ac:30:33:db:4a:dc:f7:c7:1e:20:ff:c5: 1b:0c:21:fb:ce:35:f8:ef:6b:12:5a:53:4e:a7:18:96:75:74: 7a:80:cb:9f:b8:23:60:ca:59:45:82:48:97:c7:d3:ce:c0:29: a4:e7:b1:9f:42:cc:d3:a7:29:d6:89:12:31:c7:ea:e9:49:25: 8a:75:fd:9c:fc:26:55:c5:be:25:14:d8:0f:4b:c0:f5:e9:a9: 74:1f:77:81:dc:ac:45:43:ec:17:23:18:21:18:4c:9a:7e:8e: 47:ba:ed:e5:96:68:bf:5e:3a:18:19:ac:2a:38:1b:40:05:d2: b8:b3:20:4a:04:29:d8:9b:b6:7b:d4:6d:bf:17:40:e4:c2:91: 84:1f:b5:2f:5b:e6:4a:b2:9e:7f:b9:f4:f5:8f:57:44:24:d3: cb:4f:5a:5a:d1:45:3d:18:8e:1a:85:2a:70:c4:10:fd:8f:60: 11:53:bd:16:02:39:41:08:b5:a5:73:c4:e2:08:14:18:5c:1d: 54:0d:a0:fd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MjZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdEMEU2RUNFNDYzM0M5 ODExOUYwODlDRDczRjA0MTQ5QTM5RTM0MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEAIbXYrD5cIAY9bJ22HTNY4SlnE4v9wiNE+k7vUst+AViCZIw uzC+LeFuv2bPAgBhkYLMwJq1M1pQdxZF4KDI7Aj17xEM1tLWxWiVWLGVr6X90anM +voOGS4ULZH0yfV6nwVi1RTq+qN9pcr4RfUvTyQgvob9w/T0TZpZqlNsAJRUFHRr WqqVsirnVmcrDJtlj9vlYJv/N521vgEVu96KYECe/2oAXRD2w5sU86vE/w2F0sef +zEQ+KZ5ju0BgBxJjTF87J+xrpzMO9IoGEsrK1mik37tWZjSJ+1bI8IzlHwPVnT3 uJ6KSM27qB8Y4k4vJhDjpkHiyUhP4Xg81e8bAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfQ5uzkYzyYEZ8InNc/BBSaOeNAYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2ZRNXV6a1l6eVlFWjhJbk5jX0JCU2FPZU5BWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQkNMAwDQYJKoZIhvcNAQELBQADggEBAE07+5G7Mqx8UctLnM09aU4eT8jW PIY3h01LSEAUOEJYBVrsBNZyKc+qlb32+3gm1iUgYND0xzCVPup8CKwwM9tK3PfH HiD/xRsMIfvONfjvaxJaU06nGJZ1dHqAy5+4I2DKWUWCSJfH087AKaTnsZ9CzNOn KdaJEjHH6ulJJYp1/Zz8JlXFviUU2A9LwPXpqXQfd4HcrEVD7BcjGCEYTJp+jke6 7eWWaL9eOhgZrCo4G0AF0rizIEoEKdibtnvUbb8XQOTCkYQftS9b5kqynn+59PWP V0Qk08tPWlrRRT0YjhqFKnDEEP2PYBFTvRYCOUEItaVzxOIIFBhcHVQNoP0= -----END CERTIFICATE-----Generated at Sat May 17 23:27:21 2025 by rpki-client