$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/rZbfrPq3mHpnzLlX-DsdaijfNKk.roa File: rZbfrPq3mHpnzLlX-DsdaijfNKk.roa (raw, json) Hash identifier: YCzcrzqaESbRlDTv6+l9CfyMOucrnORVuVNrbsWLHE0= Subject key identifier: AD:96:DF:AC:FA:B7:98:7A:67:CC:B9:57:F8:3B:1D:6A:28:DF:34:A9 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03D6 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rZbfrPq3mHpnzLlX-DsdaijfNKk.roa Signing time: Thu 01 May 2025 01:42:45 +0000 ROA not before: Thu 01 May 2025 01:42:45 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.5.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 982 (0x3d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:45 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=AD96DFACFAB7987A67CCB957F83B1D6A28DF34A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:6f:51:2b:e7:d7:a1:46:b9:1d:5b:45:10: e0:17:c4:d0:85:17:48:17:f3:9e:46:b1:d1:d2:c7: 84:c6:cf:bb:89:10:6f:9d:09:09:d6:49:b7:80:93: aa:72:0b:0f:29:08:2a:aa:41:eb:99:30:60:6d:ff: ec:12:b4:0e:84:1f:8b:2e:52:9b:43:1d:df:52:14: 0f:f1:bc:2f:e9:89:01:d5:27:c5:cc:ea:cb:18:f5: d5:e6:a0:76:84:54:d5:c6:79:71:fe:87:e6:23:d1: b4:a3:0c:92:be:76:d7:75:2b:ae:28:6a:55:25:28: b4:94:b5:9e:62:59:33:71:fc:8e:34:e8:d9:3e:9c: c8:03:6f:6c:7d:a0:1a:8e:eb:c8:74:18:58:d2:77: ec:5e:af:2a:fa:d6:3a:ee:ed:80:13:a4:64:cd:76: 41:df:0f:69:90:7c:a0:1f:3a:9f:03:60:d0:80:8a: 13:24:4e:38:44:ce:e9:50:1d:7a:45:72:99:21:bc: e4:1e:8b:89:15:74:5c:fd:ee:8c:3f:f4:48:96:89: 78:81:32:cb:3c:56:58:85:63:fb:35:8b:2e:fb:66: 13:2a:13:8a:69:29:25:1e:cb:8c:b8:f7:96:81:7b: 80:8e:a0:f3:c3:2a:58:4e:6b:e5:3d:34:82:58:61: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:96:DF:AC:FA:B7:98:7A:67:CC:B9:57:F8:3B:1D:6A:28:DF:34:A9 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rZbfrPq3mHpnzLlX-DsdaijfNKk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.5.246.0/23 Signature Algorithm: sha256WithRSAEncryption 76:08:15:df:b3:4c:ce:d3:33:41:94:f2:ad:02:65:12:da:05: c3:fc:81:eb:a5:9f:1a:39:b1:f0:c0:43:d7:7c:67:0d:e8:88: 7a:97:20:c9:25:e4:19:ed:4c:48:00:a7:2d:df:43:74:f8:d1: 7f:36:32:02:e5:da:2a:5b:cd:b0:82:f7:e4:1d:ce:e5:ce:a0: 8b:63:86:d4:ce:b1:71:5c:5f:8f:73:fa:0d:17:f5:0b:0d:e6: f0:7d:e3:dd:54:10:20:2b:7f:3f:a6:15:bc:2f:cc:37:7b:0a: b3:00:a4:50:9c:f2:7d:ae:e3:6f:de:6a:bb:94:3a:d9:e6:7f: 8d:98:6b:5d:39:df:7e:c7:34:bc:bb:d3:3a:55:98:4b:e2:e2: e3:9c:a6:2e:35:03:47:61:c8:e7:f1:6e:9a:51:8f:da:23:59: 95:30:61:bf:13:18:26:18:c9:7f:2d:52:9a:6d:bb:dd:4c:ef: 94:67:f0:6d:fe:74:6f:07:49:d2:56:8d:c7:3f:e4:7d:2c:c4: cc:b5:b8:be:f7:67:be:dc:f3:8d:eb:9a:8f:bf:09:84:6e:7c: 73:9b:4b:8f:2f:a8:26:8d:65:1a:3d:77:03:61:46:27:dd:12: b9:53:d4:9e:70:a7:ff:5d:1d:b4:e9:d6:88:bf:52:0c:a1:5e: f7:bb:0f:84 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNDVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFEOTZERkFDRkFCNzk4 N0E2N0NDQjk1N0Y4M0IxRDZBMjhERjM0QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBJm9RK+fXoUa5HVtFEOAXxNCFF0gX855GsdHSx4TGz7uJEG+d CQnWSbeAk6pyCw8pCCqqQeuZMGBt/+wStA6EH4suUptDHd9SFA/xvC/piQHVJ8XM 6ssY9dXmoHaEVNXGeXH+h+Yj0bSjDJK+dtd1K64oalUlKLSUtZ5iWTNx/I406Nk+ nMgDb2x9oBqO68h0GFjSd+xeryr61jru7YATpGTNdkHfD2mQfKAfOp8DYNCAihMk TjhEzulQHXpFcpkhvOQei4kVdFz97ow/9EiWiXiBMss8VliFY/s1iy77ZhMqE4pp KSUey4y495aBe4COoPPDKlhOa+U9NIJYYdYfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrZbfrPq3mHpnzLlX+DsdaijfNKkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3JaYmZyUHEzbUhwbnpMbFgtRHNkYWlqZk5Lay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE9BfYwDQYJKoZIhvcNAQELBQADggEBAHYIFd+zTM7TM0GU8q0CZRLaBcP8 geulnxo5sfDAQ9d8Zw3oiHqXIMkl5BntTEgApy3fQ3T40X82MgLl2ipbzbCC9+Qd zuXOoItjhtTOsXFcX49z+g0X9QsN5vB9491UECArfz+mFbwvzDd7CrMApFCc8n2u 42/earuUOtnmf42Ya105337HNLy70zpVmEvi4uOcpi41A0dhyOfxbppRj9ojWZUw Yb8TGCYYyX8tUpptu91M75Rn8G3+dG8HSdJWjcc/5H0sxMy1uL73Z77c843rmo+/ CYRufHObS48vqCaNZRo9dwNhRifdErlT1J5wp/9dHbTp1oi/UgyhXve7D4Q= -----END CERTIFICATE-----Generated at Sun May 18 04:52:58 2025 by rpki-client