$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/op9Nnk5aI-N8djDjvzxpqNfEjYQ.roa File: op9Nnk5aI-N8djDjvzxpqNfEjYQ.roa (raw, json) Hash identifier: +lMcLSq1kaU9TaHrutFmcdWmHzUvVduu8YuQudrh3A0= Subject key identifier: A2:9F:4D:9E:4E:5A:23:E3:7C:76:30:E3:BF:3C:69:A8:D7:C4:8D:84 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0380 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/op9Nnk5aI-N8djDjvzxpqNfEjYQ.roa Signing time: Thu 01 May 2025 01:33:35 +0000 ROA not before: Thu 01 May 2025 01:33:35 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 220.150.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:35 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=A29F4D9E4E5A23E37C7630E3BF3C69A8D7C48D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:f2:f9:f4:2a:69:d5:8e:77:f8:87:cb:f0: 4e:c4:96:6d:64:10:23:e1:fc:3a:4b:46:f0:68:24: 27:ec:e7:55:48:50:3f:83:be:50:28:69:fe:13:91: e9:76:da:e6:43:d4:bf:2a:f0:df:fe:b7:15:5c:45: f4:85:2d:8f:6b:54:58:52:02:9f:75:1f:4f:1f:08: c2:0f:36:98:58:d4:58:07:30:3d:4b:31:62:a3:5c: 5f:e6:ac:91:75:2e:d1:4c:ed:57:ad:bf:4f:bb:b9: 86:b3:bc:57:c2:00:96:31:c4:f4:d3:01:ec:68:1c: 81:a5:20:61:c8:cf:3a:7c:f7:ce:9e:ca:58:b7:b6: c8:a6:e3:e5:cd:e4:a6:a9:f2:de:bd:7d:5c:29:ee: 42:b7:92:e6:9d:40:57:fc:70:4f:86:d8:fa:a6:10: 5d:ec:fd:45:fd:1e:17:89:b4:4b:e6:9b:3c:88:9e: 6c:40:25:a3:64:16:2f:04:69:08:c2:cb:73:1d:c2: 37:e9:e8:10:02:59:ab:34:ac:bf:87:ba:cc:f1:c8: cd:2f:59:75:6c:54:30:16:17:6b:23:72:92:9e:50: 54:61:15:f0:74:6b:b3:08:a8:9a:e5:9b:34:f9:78: 37:e5:53:bc:dd:87:bc:8c:06:d5:8a:62:fd:49:1b: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9F:4D:9E:4E:5A:23:E3:7C:76:30:E3:BF:3C:69:A8:D7:C4:8D:84 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/op9Nnk5aI-N8djDjvzxpqNfEjYQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.150.72.0/21 Signature Algorithm: sha256WithRSAEncryption 80:92:f3:c6:91:ce:b7:e3:04:98:c9:50:b3:c0:b5:70:d2:ce: 0d:a4:69:f9:e4:ee:34:20:6e:96:d2:49:47:46:25:37:27:8c: 0e:61:f1:86:e3:cf:ed:04:8b:cc:c5:14:a8:d4:4a:aa:a4:db: 9d:6e:39:72:c8:88:bf:e3:44:c0:e7:cf:76:7d:c9:88:f6:62: 56:73:60:52:4d:ba:e1:40:5a:60:7b:23:58:39:ff:56:3e:5f: 6a:7e:53:f4:85:ec:10:a3:6a:49:35:c8:a2:30:74:b5:a9:10: 41:78:1d:9e:70:af:9a:56:d6:fb:e2:28:b9:8c:91:96:ad:c3: cc:53:14:b7:b9:e1:33:ca:bd:34:86:3f:40:92:e2:e3:a8:cb: c1:ad:36:8a:54:8e:3f:7b:bc:d1:c3:1d:c0:9e:ff:00:d0:ca: 57:b8:e8:84:5b:d5:49:e6:a0:ef:22:38:9b:0e:45:9a:fc:0b: 90:49:60:b0:ea:1b:dd:dc:f5:b4:43:aa:53:e9:58:80:0a:45: cf:f2:b8:c8:bd:4e:e4:95:92:11:5f:d9:87:15:85:20:8a:87: ec:71:79:7e:0d:e3:0c:44:0d:fa:05:a1:91:5d:d1:31:fd:2d: 4c:e0:0c:e8:13:a1:39:4c:12:ad:f3:ef:da:bc:52:17:5f:0d: 11:87:db:74 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMzVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEyOUY0RDlFNEU1QTIz RTM3Qzc2MzBFM0JGM0M2OUE4RDdDNDhEODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwxfL59Cpp1Y53+IfL8E7Elm1kECPh/DpLRvBoJCfs51VIUD+D vlAoaf4Tkel22uZD1L8q8N/+txVcRfSFLY9rVFhSAp91H08fCMIPNphY1FgHMD1L MWKjXF/mrJF1LtFM7Vetv0+7uYazvFfCAJYxxPTTAexoHIGlIGHIzzp8986eyli3 tsim4+XN5Kap8t69fVwp7kK3kuadQFf8cE+G2PqmEF3s/UX9HheJtEvmmzyInmxA JaNkFi8EaQjCy3Mdwjfp6BACWas0rL+HuszxyM0vWXVsVDAWF2sjcpKeUFRhFfB0 a7MIqJrlmzT5eDflU7zdh7yMBtWKYv1JG73zAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUop9Nnk5aI+N8djDjvzxpqNfEjYQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L29wOU5uazVhSS1OOGRqRGp2enhwcU5mRWpZUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPclkgwDQYJKoZIhvcNAQELBQADggEBAICS88aRzrfjBJjJULPAtXDSzg2k afnk7jQgbpbSSUdGJTcnjA5h8Ybjz+0Ei8zFFKjUSqqk251uOXLIiL/jRMDnz3Z9 yYj2YlZzYFJNuuFAWmB7I1g5/1Y+X2p+U/SF7BCjakk1yKIwdLWpEEF4HZ5wr5pW 1vviKLmMkZatw8xTFLe54TPKvTSGP0CS4uOoy8GtNopUjj97vNHDHcCe/wDQyle4 6IRb1UnmoO8iOJsORZr8C5BJYLDqG93c9bRDqlPpWIAKRc/yuMi9TuSVkhFf2YcV hSCKh+xxeX4N4wxEDfoFoZFd0TH9LUzgDOgToTlMEq3z79q8UhdfDRGH23Q= -----END CERTIFICATE-----Generated at Sat May 17 21:24:48 2025 by rpki-client