$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ka6K8bxXqt1dODbsh9vecztF3rE.roa File: ka6K8bxXqt1dODbsh9vecztF3rE.roa (raw, json) Hash identifier: djL6Ygwj+blC05x1nBfnd/ttzae66oEMBOvYr/PRYM0= Subject key identifier: 91:AE:8A:F1:BC:57:AA:DD:5D:38:36:EC:87:DB:DE:73:3B:45:DE:B1 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 037C Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ka6K8bxXqt1dODbsh9vecztF3rE.roa Signing time: Thu 01 May 2025 01:33:33 +0000 ROA not before: Thu 01 May 2025 01:33:33 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 175.104.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 May 2025 06:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:33 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=91AE8AF1BC57AADD5D3836EC87DBDE733B45DEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ce:99:fc:5e:a3:18:7b:d7:69:9a:65:f3:9a: 4f:2c:a5:3f:3f:54:02:90:f4:5b:fb:01:41:ee:d0: 20:ca:3f:c4:09:4d:d9:9f:b3:f9:a9:1f:51:61:83: 81:f3:41:27:13:a4:f3:d0:b1:bb:51:98:14:06:b7: 77:78:45:14:38:b2:7f:86:de:bc:27:2d:d9:03:5a: b7:07:0d:86:d1:8c:12:f1:de:aa:75:1f:39:26:44: d9:6d:11:51:43:74:a3:c0:34:25:59:52:06:1b:91: a6:30:4b:40:24:e7:97:48:6f:63:46:ac:b3:35:fe: dd:0d:5a:f7:45:e9:29:c5:bd:b4:d7:d7:a0:03:05: f5:73:5c:ab:46:8a:99:ae:17:c1:08:29:9d:3c:d6: d3:09:2e:22:fe:95:e0:51:5f:b4:57:23:48:e1:4d: 85:7c:3f:4a:34:21:3f:28:98:c4:64:3d:fe:b0:6e: bc:fb:2f:96:79:5b:0b:13:6d:1e:60:d2:5c:55:92: dd:cc:65:a3:48:29:2b:cc:b4:71:67:97:12:fb:56: 37:d4:01:54:0d:3d:76:6f:52:db:de:39:05:60:e2: 28:40:d9:0b:15:f4:11:6b:a6:32:2a:5d:67:6e:18: 06:76:aa:fb:b7:00:e8:2a:07:5a:4f:94:84:20:93: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AE:8A:F1:BC:57:AA:DD:5D:38:36:EC:87:DB:DE:73:3B:45:DE:B1 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ka6K8bxXqt1dODbsh9vecztF3rE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.104.0.0/15 Signature Algorithm: sha256WithRSAEncryption 42:9a:93:d3:19:2e:79:7d:ad:23:38:d7:84:89:20:e7:c5:94: 81:b9:fc:70:16:2a:e0:f9:36:4e:82:61:06:cb:f3:c8:07:a9: 88:2e:02:af:d0:76:d0:0e:92:b7:ff:ba:eb:4f:c5:fb:43:bb: 74:73:a6:81:d0:e7:19:de:02:f4:41:fe:57:3a:84:b7:51:29: aa:60:4f:46:69:c8:de:33:d2:d5:3e:aa:e4:58:bc:f9:8c:7e: 0e:44:9d:ae:cb:7a:ef:41:c2:03:f8:01:25:55:e6:b4:c1:82: 58:fb:75:bf:4f:9d:6d:ac:a9:0f:1c:e6:d6:55:d3:dd:81:cc: 25:5f:37:8f:93:79:ae:ee:b6:6b:a6:01:53:6d:41:eb:34:fe: 2f:ff:36:0c:70:66:89:35:9b:8d:22:40:3b:64:6e:9f:79:f7: 6f:8a:65:17:cf:6a:c6:de:66:70:7c:62:ef:13:e5:39:7e:4b: 5d:2a:c3:50:4c:e6:31:f0:11:16:39:a7:ff:28:d0:f8:4a:9f: 64:a0:b5:8c:0d:67:f0:fa:c1:ce:1b:90:a7:67:bc:2a:6a:73: 6c:f7:98:87:fd:a6:ea:cf:28:de:8b:32:f6:ac:fa:03:66:56: 8e:d0:9f:55:be:75:ce:38:a6:42:f8:50:f2:db:a3:fe:04:6b: bf:52:83:a9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMzNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkxQUU4QUYxQkM1N0FB REQ1RDM4MzZFQzg3REJERTczM0I0NURFQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwzpn8XqMYe9dpmmXzmk8spT8/VAKQ9Fv7AUHu0CDKP8QJTdmf s/mpH1Fhg4HzQScTpPPQsbtRmBQGt3d4RRQ4sn+G3rwnLdkDWrcHDYbRjBLx3qp1 HzkmRNltEVFDdKPANCVZUgYbkaYwS0Ak55dIb2NGrLM1/t0NWvdF6SnFvbTX16AD BfVzXKtGipmuF8EIKZ081tMJLiL+leBRX7RXI0jhTYV8P0o0IT8omMRkPf6wbrz7 L5Z5WwsTbR5g0lxVkt3MZaNIKSvMtHFnlxL7VjfUAVQNPXZvUtveOQVg4ihA2QsV 9BFrpjIqXWduGAZ2qvu3AOgqB1pPlIQgk5s9AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUka6K8bxXqt1dODbsh9vecztF3rEwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2thNks4YnhYcXQxZE9EYnNoOXZlY3p0RjNyRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwGvaDANBgkqhkiG9w0BAQsFAAOCAQEAQpqT0xkueX2tIzjXhIkg58WUgbn8 cBYq4Pk2ToJhBsvzyAepiC4Cr9B20A6St/+660/F+0O7dHOmgdDnGd4C9EH+VzqE t1EpqmBPRmnI3jPS1T6q5Fi8+Yx+DkSdrst670HCA/gBJVXmtMGCWPt1v0+dbayp Dxzm1lXT3YHMJV83j5N5ru62a6YBU21B6zT+L/82DHBmiTWbjSJAO2Run3n3b4pl F89qxt5mcHxi7xPlOX5LXSrDUEzmMfARFjmn/yjQ+EqfZKC1jA1n8PrBzhuQp2e8 KmpzbPeYh/2m6s8o3osy9qz6A2ZWjtCfVb51zjimQvhQ8tuj/gRrv1KDqQ== -----END CERTIFICATE-----Generated at Mon May 19 11:19:27 2025 by rpki-client