$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/pdPf4TEB6BrMRMGZRbFurWJ62NE.roa File: pdPf4TEB6BrMRMGZRbFurWJ62NE.roa (raw, json) Hash identifier: EkWgdVIHmVww6qPP9UKXSRDc1ccUhJqh7EFNm1o2l/M= Subject key identifier: A5:D3:DF:E1:31:01:E8:1A:CC:44:C1:99:45:B1:6E:AD:62:7A:D8:D1 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03E7 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pdPf4TEB6BrMRMGZRbFurWJ62NE.roa Signing time: Thu 01 May 2025 01:42:52 +0000 ROA not before: Thu 01 May 2025 01:42:52 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 111.234.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:52 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=A5D3DFE13101E81ACC44C19945B16EAD627AD8D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:0c:4e:f5:92:45:fd:a4:fa:c2:47:c4:a6: 5c:62:d2:c9:12:bb:93:3c:50:b5:68:6c:92:c1:7a: c8:81:5d:95:bf:db:1e:88:8d:13:8f:d3:98:58:8d: ad:2b:6a:c9:b9:82:64:61:58:4a:c7:3f:c6:be:8a: d1:d6:2f:18:59:d4:3c:4c:a1:67:a2:e7:bd:85:20: 60:e0:cd:cf:b9:5b:fa:82:a4:f4:41:79:c0:32:ab: e5:d5:c8:91:a0:f1:10:8e:74:99:ad:45:cb:47:c4: 17:d3:2f:1f:33:88:4a:19:c0:fa:dc:99:67:92:e0: 65:40:d2:82:81:4e:f0:b1:c8:07:22:b6:8c:59:cc: 77:1a:32:01:57:69:93:b6:a9:a4:67:f1:fe:b3:27: 9e:2b:da:8e:a2:bf:fc:89:7d:37:fc:84:41:d0:cd: df:54:fe:9d:42:02:20:0b:50:fb:30:3c:f7:2f:2b: 5b:fd:90:f3:71:e1:83:bb:f4:52:2c:fa:77:dd:ad: f0:25:c4:70:3f:12:2d:17:d0:6c:95:a2:2b:67:c8: bd:fe:73:85:b6:be:fa:e0:08:2e:18:78:57:44:e7: da:93:06:8f:7d:20:b5:ea:4b:88:4a:7b:2c:98:03: 5d:34:cc:e5:c2:9b:d3:e9:62:76:5d:5a:f9:b3:95: c0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D3:DF:E1:31:01:E8:1A:CC:44:C1:99:45:B1:6E:AD:62:7A:D8:D1 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pdPf4TEB6BrMRMGZRbFurWJ62NE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.234.64.0/19 Signature Algorithm: sha256WithRSAEncryption 79:a4:f9:bb:2d:fa:81:f8:aa:32:03:71:68:44:41:86:9b:f5: 4b:a0:3a:22:94:db:ec:21:ff:9d:0b:3b:dd:6b:d8:ac:2b:14: c7:76:4a:60:d1:f1:55:ad:5f:29:c8:96:5c:20:12:c8:eb:06: 53:46:cd:11:90:fe:12:79:7b:7a:61:82:00:ed:c2:52:44:49: 49:81:25:be:02:ca:1b:c6:d7:89:35:2a:80:20:a8:a4:81:8f: 17:33:9e:cc:7b:02:c5:2f:7d:cd:42:2f:5e:9f:14:69:e2:29: 4b:79:f9:01:6b:67:50:83:e5:0c:22:07:76:77:86:25:79:4e: 80:ae:52:94:c0:a1:00:0b:88:1f:32:e2:10:11:b3:da:9b:bc: 8c:b0:12:ce:15:83:80:3a:7f:cc:d5:56:46:ca:9a:e2:2c:5f: e3:6f:c7:14:4f:2b:94:6f:a4:e0:3f:57:1a:73:a5:15:65:e1: 16:b1:1e:23:22:7c:e0:fa:de:e1:6a:fa:9b:14:9c:1e:29:3c: a1:b1:4f:fa:3e:40:6f:f5:5f:c8:60:f0:9f:eb:c3:8d:46:71: 44:3f:70:13:f9:41:cc:75:af:04:91:76:15:41:92:bf:56:bb: 18:1b:48:31:6c:81:8c:d9:d2:f6:09:b0:80:4e:63:bb:64:f1: a1:11:58:79 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNTJaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE1RDNERkUxMzEwMUU4 MUFDQzQ0QzE5OTQ1QjE2RUFENjI3QUQ4RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgnAxO9ZJF/aT6wkfEplxi0skSu5M8ULVobJLBesiBXZW/2x6I jROP05hYja0rasm5gmRhWErHP8a+itHWLxhZ1DxMoWei572FIGDgzc+5W/qCpPRB ecAyq+XVyJGg8RCOdJmtRctHxBfTLx8ziEoZwPrcmWeS4GVA0oKBTvCxyAcitoxZ zHcaMgFXaZO2qaRn8f6zJ54r2o6iv/yJfTf8hEHQzd9U/p1CAiALUPswPPcvK1v9 kPNx4YO79FIs+nfdrfAlxHA/Ei0X0GyVoitnyL3+c4W2vvrgCC4YeFdE59qTBo99 ILXqS4hKeyyYA100zOXCm9PpYnZdWvmzlcBFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUpdPf4TEB6BrMRMGZRbFurWJ62NEwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3BkUGY0VEVCNkJyTVJNR1pSYkZ1cldKNjJORS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVv6kAwDQYJKoZIhvcNAQELBQADggEBAHmk+bst+oH4qjIDcWhEQYab9Uug OiKU2+wh/50LO91r2KwrFMd2SmDR8VWtXynIllwgEsjrBlNGzRGQ/hJ5e3phggDt wlJESUmBJb4CyhvG14k1KoAgqKSBjxcznsx7AsUvfc1CL16fFGniKUt5+QFrZ1CD 5QwiB3Z3hiV5ToCuUpTAoQALiB8y4hARs9qbvIywEs4Vg4A6f8zVVkbKmuIsX+Nv xxRPK5RvpOA/VxpzpRVl4RaxHiMifOD63uFq+psUnB4pPKGxT/o+QG/1X8hg8J/r w41GcUQ/cBP5Qcx1rwSRdhVBkr9WuxgbSDFsgYzZ0vYJsIBOY7tk8aERWHk= -----END CERTIFICATE-----Generated at Sun May 18 03:05:22 2025 by rpki-client