$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/jT708c93izjTE7YwuYIdx4L_yZI.roa File: jT708c93izjTE7YwuYIdx4L_yZI.roa (raw, json) Hash identifier: +v832gGM0cj7wxw0Uw0NULAZDYaPDloWgrFvyhW7R4E= Subject key identifier: 8D:3E:F4:F1:CF:77:8B:38:D3:13:B6:30:B9:82:1D:C7:82:FF:C9:92 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0425 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jT708c93izjTE7YwuYIdx4L_yZI.roa Signing time: Thu 01 May 2025 01:48:48 +0000 ROA not before: Thu 01 May 2025 01:48:48 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 210.229.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:48:48 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=8D3EF4F1CF778B38D313B630B9821DC782FFC992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:08:6e:8e:5e:40:0c:d9:c7:f1:cc:6e:85: 91:3d:bb:31:be:81:65:5d:e0:01:05:9c:4a:bd:c9: 16:d7:25:f2:ed:58:f0:d3:38:47:48:dc:73:b7:99: 60:05:a2:b4:ee:d7:56:41:11:0d:44:3c:2a:04:06: 4f:2a:de:72:29:23:a8:46:b5:7e:6b:47:b1:e1:d0: 51:88:4d:3f:03:fe:5b:b8:ae:98:67:b3:ef:82:c3: 4a:f9:a6:11:ef:61:b6:1a:85:25:dd:fd:a9:4f:cc: 9c:09:f8:97:41:8e:2e:e1:66:ca:62:2f:a5:f3:2f: da:ff:d9:c3:4d:3c:eb:75:9c:88:f9:8b:91:fb:4d: 7c:23:d1:18:26:0f:1a:80:ba:b0:a8:90:c7:ea:a8: 17:0c:cc:5f:95:66:ae:af:19:d9:b7:fb:38:9a:4b: 2a:57:5e:86:f6:fa:a3:97:dc:6e:ee:71:55:52:89: 5c:37:20:8d:d6:f2:05:d0:60:d3:94:bb:91:68:31: 2b:b9:bc:35:fa:09:a6:bb:2a:61:26:58:d1:e0:4f: 1c:45:94:c9:00:90:62:f1:46:7b:19:2c:5d:d9:df: bd:b5:e9:54:6a:bf:2d:12:14:fd:c8:d5:94:ff:61: 3b:b7:e4:e3:33:0b:c6:6c:be:02:80:e5:19:64:72: 94:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3E:F4:F1:CF:77:8B:38:D3:13:B6:30:B9:82:1D:C7:82:FF:C9:92 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jT708c93izjTE7YwuYIdx4L_yZI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.229.72.0/21 Signature Algorithm: sha256WithRSAEncryption 44:7e:bc:54:3d:69:a2:3f:7e:62:d2:c4:df:dc:25:b7:4e:40: 05:6f:aa:1a:8c:7c:ac:9a:0a:36:86:c8:ee:66:dd:ef:22:4f: 22:54:bb:6d:2f:b6:3d:40:1d:af:aa:6b:92:ae:6c:55:21:7a: 72:89:e5:8f:e7:ea:29:23:5b:ea:0e:21:f4:b9:30:99:8b:ab: b2:31:34:19:a6:e0:93:e0:3c:4b:89:cc:98:cf:bd:eb:a1:d1: 39:81:41:20:f4:43:d3:25:f3:e5:d0:a0:63:e8:eb:e2:0c:11: d3:e1:bf:bc:1a:16:f0:05:2a:c9:00:91:5d:03:f4:68:1a:e3: 22:20:c1:10:74:0a:f4:e9:f3:94:04:d3:06:03:f7:e9:1f:9b: f4:db:4f:a0:ca:41:3e:2d:83:39:6e:e0:d0:33:fa:4f:5b:83: e6:5c:23:26:e4:79:5b:c0:8b:30:24:e0:6f:28:99:44:28:f3: c3:f1:88:16:ff:3c:bc:f4:46:42:b5:8f:86:4d:ac:4d:16:f8: f8:ef:34:fd:19:20:5f:7c:bd:d6:e7:4f:a6:82:dd:96:b4:b1: 73:8e:73:9b:60:f0:79:17:f5:d9:30:27:49:d1:4c:19:ea:22: 87:c8:89:c9:28:ac:49:eb:6a:11:5e:bf:24:f8:8d:7f:e7:5c: 00:2c:2a:28 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ4NDhaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhEM0VGNEYxQ0Y3NzhC MzhEMzEzQjYzMEI5ODIxREM3ODJGRkM5OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAxwhujl5ADNnH8cxuhZE9uzG+gWVd4AEFnEq9yRbXJfLtWPDT OEdI3HO3mWAForTu11ZBEQ1EPCoEBk8q3nIpI6hGtX5rR7Hh0FGITT8D/lu4rphn s++Cw0r5phHvYbYahSXd/alPzJwJ+JdBji7hZspiL6XzL9r/2cNNPOt1nIj5i5H7 TXwj0RgmDxqAurCokMfqqBcMzF+VZq6vGdm3+ziaSypXXob2+qOX3G7ucVVSiVw3 II3W8gXQYNOUu5FoMSu5vDX6Caa7KmEmWNHgTxxFlMkAkGLxRnsZLF3Z37216VRq vy0SFP3I1ZT/YTu35OMzC8ZsvgKA5RlkcpSTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjT708c93izjTE7YwuYIdx4L/yZIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2pUNzA4YzkzaXpqVEU3WXd1WUlkeDRMX3laSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPS5UgwDQYJKoZIhvcNAQELBQADggEBAER+vFQ9aaI/fmLSxN/cJbdOQAVv qhqMfKyaCjaGyO5m3e8iTyJUu20vtj1AHa+qa5KubFUhenKJ5Y/n6ikjW+oOIfS5 MJmLq7IxNBmm4JPgPEuJzJjPveuh0TmBQSD0Q9Ml8+XQoGPo6+IMEdPhv7waFvAF KskAkV0D9Gga4yIgwRB0CvTp85QE0wYD9+kfm/TbT6DKQT4tgzlu4NAz+k9bg+Zc IybkeVvAizAk4G8omUQo88PxiBb/PLz0RkK1j4ZNrE0W+PjvNP0ZIF98vdbnT6aC 3Za0sXOOc5tg8HkX9dkwJ0nRTBnqIofIickorEnrahFevyT4jX/nXAAsKig= -----END CERTIFICATE-----Generated at Sun May 18 20:23:06 2025 by rpki-client