$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/niC0kwVUE_552D03yxkPtimCDgk.roa File: niC0kwVUE_552D03yxkPtimCDgk.roa (raw, json) Hash identifier: Ei6iOcDH3G/M4h4iCjaZzqB7jHM9AxpU1Mls2/Hn93A= Subject key identifier: 9E:20:B4:93:05:54:13:FE:79:D8:3D:37:CB:19:0F:B6:29:82:0E:09 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03AA Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/niC0kwVUE_552D03yxkPtimCDgk.roa Signing time: Thu 01 May 2025 01:40:25 +0000 ROA not before: Thu 01 May 2025 01:40:25 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 122.152.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:25 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=9E20B493055413FE79D83D37CB190FB629820E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:89:c1:e3:41:a4:55:d1:8c:29:ea:bc:88: 1f:6a:a7:e4:da:b0:22:9d:1d:63:a7:c5:c2:44:93: 2f:2c:55:57:af:8f:d9:23:f6:a8:f1:25:51:69:ac: ae:75:12:79:e8:af:3f:56:69:4b:22:b1:ca:c0:96: f2:96:ee:3b:e4:e0:23:76:59:6e:28:4c:cb:24:6d: 30:98:b6:5c:a3:38:08:7e:46:54:d7:32:5e:76:09: f4:c7:27:da:36:4c:26:b2:31:a9:35:b5:4e:d6:55: 66:7b:f3:02:27:68:ee:1b:74:70:31:6a:68:cd:1c: a9:71:0e:ab:fd:a8:de:e8:57:97:d5:4b:59:74:6d: 3f:c6:47:55:b7:87:45:3c:27:f3:1f:18:5d:78:17: 9d:35:45:eb:52:fd:18:ea:6a:9a:6e:10:a7:68:2c: da:2a:e5:fa:59:36:94:bc:ca:ef:c4:6a:59:34:f0: e6:e6:f4:15:e1:4e:a0:04:57:b2:73:cc:42:9c:ec: b7:d3:f9:d9:3b:39:a2:8f:0f:2f:b6:2e:7e:d9:c2: 81:bc:f6:70:2a:d8:33:90:95:05:fb:09:2c:6a:c4: a5:0e:d8:ec:36:a1:e5:f6:94:bd:f4:c5:26:4c:db: eb:6f:df:cd:56:63:ec:75:4e:84:4d:01:4a:6a:3d: 0f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:20:B4:93:05:54:13:FE:79:D8:3D:37:CB:19:0F:B6:29:82:0E:09 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/niC0kwVUE_552D03yxkPtimCDgk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.152.0.0/20 Signature Algorithm: sha256WithRSAEncryption 01:70:2c:66:d0:a5:00:51:63:a5:f4:dd:f9:9f:91:04:fc:ef: db:90:aa:45:59:17:6b:df:d5:1b:dd:b5:63:0e:da:80:61:55: fa:7c:5d:c6:48:cd:18:60:53:3a:10:b5:83:d2:58:76:a3:1f: 9e:7c:ae:f1:a2:30:95:4c:27:23:fa:dd:00:0c:1d:7e:c0:02: a3:bd:a2:ed:ff:40:d1:02:99:1a:1a:5b:e2:df:da:9f:1d:1b: 92:d9:c9:51:5d:be:27:63:1c:f5:d8:88:49:33:2e:75:5b:6e: a3:f0:5d:aa:d1:9a:a3:1d:2a:bb:9a:fa:74:4e:24:8a:01:20: af:46:53:be:31:96:1f:91:3c:3a:a8:f7:81:20:49:f3:91:58: db:31:67:10:56:a5:e2:8c:77:11:f8:bc:9d:09:8f:5b:31:1b: 14:b5:7a:38:ca:d2:14:f6:20:a2:de:56:09:18:ef:ba:3e:02: 9c:4d:df:45:d3:c2:f5:a6:23:4e:6b:2e:c7:8c:2f:09:c1:98: 0c:11:06:81:c0:e0:97:ce:10:fb:6f:15:b9:d8:bf:ab:7b:e9: ee:3f:01:01:de:f5:71:bb:b6:18:e0:0f:e6:0d:76:8e:9c:1d: b0:b7:e2:a2:7e:60:fe:e8:ac:f6:57:94:ef:9e:c1:a1:86:29: 1f:84:58:cb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMjVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlFMjBCNDkzMDU1NDEz RkU3OUQ4M0QzN0NCMTkwRkI2Mjk4MjBFMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8s4nB40GkVdGMKeq8iB9qp+TasCKdHWOnxcJEky8sVVevj9kj 9qjxJVFprK51Ennorz9WaUsiscrAlvKW7jvk4CN2WW4oTMskbTCYtlyjOAh+RlTX Ml52CfTHJ9o2TCayMak1tU7WVWZ78wInaO4bdHAxamjNHKlxDqv9qN7oV5fVS1l0 bT/GR1W3h0U8J/MfGF14F501RetS/RjqappuEKdoLNoq5fpZNpS8yu/Ealk08Obm 9BXhTqAEV7JzzEKc7LfT+dk7OaKPDy+2Ln7ZwoG89nAq2DOQlQX7CSxqxKUO2Ow2 oeX2lL30xSZM2+tv381WY+x1ToRNAUpqPQ/lAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUniC0kwVUE/552D03yxkPtimCDgkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L25pQzBrd1ZVRV81NTJEMDN5eGtQdGltQ0Rnay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR6mAAwDQYJKoZIhvcNAQELBQADggEBAAFwLGbQpQBRY6X03fmfkQT879uQ qkVZF2vf1RvdtWMO2oBhVfp8XcZIzRhgUzoQtYPSWHajH558rvGiMJVMJyP63QAM HX7AAqO9ou3/QNECmRoaW+Lf2p8dG5LZyVFdvidjHPXYiEkzLnVbbqPwXarRmqMd Krua+nROJIoBIK9GU74xlh+RPDqo94EgSfORWNsxZxBWpeKMdxH4vJ0Jj1sxGxS1 ejjK0hT2IKLeVgkY77o+ApxN30XTwvWmI05rLseMLwnBmAwRBoHA4JfOEPtvFbnY v6t76e4/AQHe9XG7thjgD+YNdo6cHbC34qJ+YP7orPZXlO+ewaGGKR+EWMs= -----END CERTIFICATE-----Generated at Sun May 18 10:00:36 2025 by rpki-client