$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lq6_PF9W6Jq4VYx6Y-1eVSo51ck.roa File: lq6_PF9W6Jq4VYx6Y-1eVSo51ck.roa (raw, json) Hash identifier: QjJ3KzO/1fYO7uwgcE4e11+vRjOYoLkaWkuNJJ2NYi4= Subject key identifier: 96:AE:BF:3C:5F:56:E8:9A:B8:55:8C:7A:63:ED:5E:55:2A:39:D5:C9 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03A8 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lq6_PF9W6Jq4VYx6Y-1eVSo51ck.roa Signing time: Thu 01 May 2025 01:40:24 +0000 ROA not before: Thu 01 May 2025 01:40:24 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.205.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 10:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:24 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=96AEBF3C5F56E89AB8558C7A63ED5E552A39D5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:fa:43:9c:19:64:c7:9b:4d:1a:35:4c:1c: 95:46:d0:e6:03:9c:05:5b:a1:27:20:50:75:e2:dd: 37:8a:f2:91:12:49:c6:4a:a9:43:d2:b0:7c:b1:1e: e6:b3:ec:00:79:98:d0:a8:ba:03:88:8f:a3:09:93: f1:d0:11:f2:40:2c:8e:34:4d:50:6b:24:5d:a5:e5: c5:93:11:1a:19:48:38:d9:10:be:94:03:ed:96:2c: 37:35:bc:4a:41:0a:83:6a:c9:81:59:d1:88:04:0b: d9:de:2d:48:65:c1:35:9a:11:d0:de:9f:fb:3e:ec: 22:8a:28:e9:86:c1:d9:f4:17:a4:f7:67:1e:cb:fb: 22:96:a4:4d:19:b7:1e:e3:cc:35:8f:8e:ac:21:5f: 39:f3:9b:bc:6c:19:4e:52:02:3c:9c:e8:df:20:30: 6f:3c:0a:7f:65:2f:c5:cc:7c:bb:2a:9f:1a:c6:4e: 35:ce:eb:9b:9c:b4:8b:40:93:7a:b1:5d:2d:ae:f2: 8c:b0:77:fd:58:05:c2:8b:b4:0d:7b:99:1f:9f:55: 1a:59:3b:e6:b5:e9:77:c5:33:09:4a:c3:11:26:6b: 11:2d:e1:7a:25:a2:97:0e:90:09:d9:13:c1:ce:63: 5a:87:84:cf:fc:f8:7d:92:d1:d8:3e:e6:43:56:79: 71:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AE:BF:3C:5F:56:E8:9A:B8:55:8C:7A:63:ED:5E:55:2A:39:D5:C9 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lq6_PF9W6Jq4VYx6Y-1eVSo51ck.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.205.60.0/22 Signature Algorithm: sha256WithRSAEncryption 59:b2:5a:01:eb:d4:aa:47:da:18:c5:8d:4b:eb:16:43:c5:84: a0:d1:9e:63:55:43:dc:c0:fc:5d:f0:65:ed:21:0a:99:a6:9f: cd:33:68:6c:70:5e:e3:f1:96:82:7b:ad:e6:a3:6f:a8:07:de: dc:6b:16:a4:fc:63:5d:3c:1f:23:03:ab:78:6c:80:73:0f:b0: 4f:b0:d2:cd:3d:42:90:18:18:90:2b:47:ce:db:c8:a7:45:54: 2a:0c:bb:85:68:d9:24:ed:09:a2:c2:0a:72:ac:62:a8:eb:a1: 1d:16:c5:ee:80:04:fc:0e:a8:cc:28:ea:cf:44:4e:84:0c:c9: f1:d0:12:f6:0e:1c:05:da:cd:88:73:c0:5d:ca:3d:54:af:c1: 39:e2:87:c5:2f:12:37:85:05:2c:57:77:5a:11:8c:28:bb:4e: 7c:5f:5f:79:19:dc:64:9b:ea:0a:6c:9f:f0:52:13:a9:99:d2: b8:23:82:4c:38:53:ce:50:c8:08:92:3c:8d:6f:74:24:43:d8: 7a:9b:04:f2:9c:7e:31:96:80:54:40:31:09:b3:d7:71:f1:34: 4a:06:d1:32:5c:4f:3f:8d:37:55:ae:ff:93:63:a2:29:5c:b9: 6c:c7:64:2b:9f:e7:9e:74:00:5d:81:de:7e:0e:4d:ef:23:3f: d3:e8:b9:2e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMjRaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk2QUVCRjNDNUY1NkU4 OUFCODU1OEM3QTYzRUQ1RTU1MkEzOUQ1QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC42vpDnBlkx5tNGjVMHJVG0OYDnAVboScgUHXi3TeK8pESScZK qUPSsHyxHuaz7AB5mNCougOIj6MJk/HQEfJALI40TVBrJF2l5cWTERoZSDjZEL6U A+2WLDc1vEpBCoNqyYFZ0YgEC9neLUhlwTWaEdDen/s+7CKKKOmGwdn0F6T3Zx7L +yKWpE0Ztx7jzDWPjqwhXznzm7xsGU5SAjyc6N8gMG88Cn9lL8XMfLsqnxrGTjXO 65uctItAk3qxXS2u8oywd/1YBcKLtA17mR+fVRpZO+a16XfFMwlKwxEmaxEt4Xol opcOkAnZE8HOY1qHhM/8+H2S0dg+5kNWeXEzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlq6/PF9W6Jq4VYx6Y+1eVSo51ckwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2xxNl9QRjlXNkpxNFZZeDZZLTFlVlNvNTFjay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI9zTwwDQYJKoZIhvcNAQELBQADggEBAFmyWgHr1KpH2hjFjUvrFkPFhKDR nmNVQ9zA/F3wZe0hCpmmn80zaGxwXuPxloJ7reajb6gH3txrFqT8Y108HyMDq3hs gHMPsE+w0s09QpAYGJArR87byKdFVCoMu4Vo2STtCaLCCnKsYqjroR0Wxe6ABPwO qMwo6s9EToQMyfHQEvYOHAXazYhzwF3KPVSvwTnih8UvEjeFBSxXd1oRjCi7Tnxf X3kZ3GSb6gpsn/BSE6mZ0rgjgkw4U85QyAiSPI1vdCRD2HqbBPKcfjGWgFRAMQmz 13HxNEoG0TJcTz+NN1Wu/5NjoilcuWzHZCuf5550AF2B3n4OTe8jP9PouS4= -----END CERTIFICATE-----Generated at Sun May 18 12:30:17 2025 by rpki-client