$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/mi3kOR2JttZYOW6bgy_DUmGNZAw.roa File: mi3kOR2JttZYOW6bgy_DUmGNZAw.roa (raw, json) Hash identifier: Q3jpUM3vBn3kUYUkArp4Li9S3A7aYClRrP34cUMW1FQ= Subject key identifier: 9A:2D:E4:39:1D:89:B6:D6:58:39:6E:9B:83:2F:C3:52:61:8D:64:0C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03C4 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mi3kOR2JttZYOW6bgy_DUmGNZAw.roa Signing time: Thu 01 May 2025 01:40:37 +0000 ROA not before: Thu 01 May 2025 01:40:37 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 59.156.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 964 (0x3c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:37 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=9A2DE4391D89B6D658396E9B832FC352618D640C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:c2:c5:19:40:0b:13:d3:f7:aa:56:77:77: 1e:05:07:9a:8d:fa:04:7a:1e:da:0a:a8:0f:15:c4: 14:37:df:10:c7:ef:87:0f:c0:ad:00:15:8a:58:ad: 83:42:da:b8:e6:fc:d7:5d:7d:c4:b6:d8:e2:ea:4a: 77:31:3a:a0:ac:03:ec:42:3d:96:75:f6:5f:40:5d: 2c:58:ed:6c:18:bc:cd:ac:62:04:e6:43:98:b8:a3: 44:57:01:07:36:72:00:81:5a:88:ff:ad:ee:67:be: bb:eb:90:e1:c7:81:b1:74:14:ed:af:9f:90:95:5c: 9a:e5:2f:0f:63:55:97:3e:c8:27:be:c0:55:4e:0a: 5a:45:30:05:d0:a8:a7:4f:f2:ef:ac:89:54:9f:4a: a5:dd:7e:33:56:45:51:8c:22:d2:d5:35:c1:68:0f: e5:c3:ae:20:c3:5b:3a:87:05:df:0b:ca:8b:b0:f3: 3e:8f:56:a3:8f:5d:27:0f:14:c8:f4:0e:74:1f:9f: f1:e6:4c:75:3b:81:d2:d2:ac:94:7f:1b:2e:ec:5f: 7d:d4:52:e3:22:7b:d3:2d:8c:7d:84:4a:1e:34:d1: 29:aa:58:0e:40:48:b4:6e:86:e9:cc:c7:58:e4:59: 6c:0e:08:bb:62:3e:28:5c:b4:d1:4a:77:72:d7:4c: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2D:E4:39:1D:89:B6:D6:58:39:6E:9B:83:2F:C3:52:61:8D:64:0C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mi3kOR2JttZYOW6bgy_DUmGNZAw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.156.132.0/23 Signature Algorithm: sha256WithRSAEncryption 45:2d:f4:d1:8f:a1:58:aa:6f:54:b9:24:4d:2a:6d:b9:84:d7: 35:73:ef:9a:21:79:54:77:b7:f1:3a:57:63:82:3f:d3:b4:83: 0c:1e:a8:f3:1f:ec:5d:64:15:a9:89:0f:cc:f4:7f:67:ca:22: 6e:ce:45:70:e8:f8:33:5b:7f:37:53:86:5d:22:be:64:40:5b: a0:68:af:31:cd:28:23:99:93:02:29:3e:6e:4f:19:fe:5a:e6: b5:f6:e6:26:68:a9:41:9c:80:3a:0d:f4:9b:36:93:e4:f5:b2: f2:b8:f4:c0:25:07:6c:db:ed:29:4c:3a:4c:5b:41:94:1a:d9: f0:45:b3:9f:a1:09:aa:6d:63:c4:34:3b:91:a8:37:5e:c0:42: 46:23:98:4f:06:3a:1d:19:59:d0:ec:fb:95:8d:b9:39:23:e6: 83:ed:d5:d0:dc:7f:0c:f2:c4:86:8b:0a:f4:5a:de:45:75:d9: 1c:6c:ea:43:e9:22:89:ed:df:39:ee:04:a6:4e:b7:e3:19:b6: 25:9e:0e:04:9d:b1:4f:13:5d:34:86:3b:ec:ea:09:9f:0f:06: ba:38:85:0e:43:d5:e6:db:8f:08:be:6c:b4:b1:d8:54:5c:4f: 99:2c:68:15:8a:91:dc:13:5d:38:17:63:16:a4:d7:9f:07:3f: 5d:84:5a:ef -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMzdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlBMkRFNDM5MUQ4OUI2 RDY1ODM5NkU5QjgzMkZDMzUyNjE4RDY0MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuxMLFGUALE9P3qlZ3dx4FB5qN+gR6HtoKqA8VxBQ33xDH74cP wK0AFYpYrYNC2rjm/NddfcS22OLqSncxOqCsA+xCPZZ19l9AXSxY7WwYvM2sYgTm Q5i4o0RXAQc2cgCBWoj/re5nvrvrkOHHgbF0FO2vn5CVXJrlLw9jVZc+yCe+wFVO ClpFMAXQqKdP8u+siVSfSqXdfjNWRVGMItLVNcFoD+XDriDDWzqHBd8Lyouw8z6P VqOPXScPFMj0DnQfn/HmTHU7gdLSrJR/Gy7sX33UUuMie9MtjH2ESh400SmqWA5A SLRuhunMx1jkWWwOCLtiPihctNFKd3LXTCWLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmi3kOR2JttZYOW6bgy/DUmGNZAwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L21pM2tPUjJKdHRaWU9XNmJneV9EVW1HTlpBdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE7nIQwDQYJKoZIhvcNAQELBQADggEBAEUt9NGPoViqb1S5JE0qbbmE1zVz 75oheVR3t/E6V2OCP9O0gwweqPMf7F1kFamJD8z0f2fKIm7ORXDo+DNbfzdThl0i vmRAW6BorzHNKCOZkwIpPm5PGf5a5rX25iZoqUGcgDoN9Js2k+T1svK49MAlB2zb 7SlMOkxbQZQa2fBFs5+hCaptY8Q0O5GoN17AQkYjmE8GOh0ZWdDs+5WNuTkj5oPt 1dDcfwzyxIaLCvRa3kV12Rxs6kPpIont3znuBKZOt+MZtiWeDgSdsU8TXTSGO+zq CZ8PBro4hQ5D1ebbjwi+bLSx2FRcT5ksaBWKkdwTXTgXYxak158HP12EWu8= -----END CERTIFICATE-----Generated at Sun May 18 03:58:53 2025 by rpki-client