$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/rnU4MOSMeTRq6I4M15fwM2gdSTM.roa File: rnU4MOSMeTRq6I4M15fwM2gdSTM.roa (raw, json) Hash identifier: nH5ktC104XfTttp4Ly4WAX3r6wJT7Ka5zKl4y2IVC90= Subject key identifier: AE:75:38:30:E4:8C:79:34:6A:E8:8E:0C:D7:97:F0:33:68:1D:49:33 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0361 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rnU4MOSMeTRq6I4M15fwM2gdSTM.roa Signing time: Thu 01 May 2025 01:33:21 +0000 ROA not before: Thu 01 May 2025 01:33:21 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 27.134.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:21 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=AE753830E48C79346AE88E0CD797F033681D4933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:2b:51:e3:9e:d6:d0:5f:3b:3b:0e:2c:77: af:37:f3:fd:8b:f1:42:af:a7:df:73:74:32:e3:60: 7d:f9:8a:bb:69:c0:06:4f:c6:e4:61:1d:8f:48:d4: 12:b1:06:46:52:5a:8a:a3:06:db:93:63:91:f3:db: 68:17:37:43:19:1e:2e:22:37:92:4d:fb:49:a5:7d: b3:78:9c:4d:dd:35:25:31:59:5c:8e:83:02:86:de: 45:39:38:70:87:8f:c0:fd:b1:fc:c7:ad:c0:6a:a7: f7:f1:cf:fa:37:5d:18:d9:ca:ef:07:04:e4:0a:c1: ac:be:b0:23:04:7d:8f:1f:53:51:08:2b:6b:a7:25: 99:c7:58:37:ab:98:af:28:0d:50:4d:4f:17:58:9a: 44:61:f6:78:cc:00:55:cb:fd:90:e6:b3:44:3f:8e: 78:82:eb:a3:5a:96:ec:0d:55:cd:10:8b:9f:5a:f2: 3b:aa:2e:65:f7:76:44:0a:1a:c2:cb:08:54:53:8b: 71:ae:51:ba:f7:d8:b1:70:7f:98:f8:24:85:b2:2e: 32:9d:d7:2a:bf:6a:39:e1:7c:ea:6b:19:8a:8b:88: 3d:aa:a2:1f:90:1d:55:aa:83:d7:2a:65:8d:b8:90: 7d:9d:5c:58:f5:72:47:dc:77:32:d0:78:96:8a:d1: f7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:75:38:30:E4:8C:79:34:6A:E8:8E:0C:D7:97:F0:33:68:1D:49:33 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rnU4MOSMeTRq6I4M15fwM2gdSTM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.134.188.0/24 Signature Algorithm: sha256WithRSAEncryption 59:9e:e5:46:d5:50:b1:61:1f:fd:ef:a8:d1:da:aa:cb:ba:e1: 2f:05:7a:f3:56:5d:4f:f2:70:07:27:cf:1d:6b:9d:08:3b:0b: 15:41:d9:ee:35:63:e1:d5:1a:9d:e4:12:a0:e1:59:c7:53:bc: 8d:14:84:16:74:4a:f5:72:0a:95:3f:0a:8a:41:cc:a6:c1:37: 75:6b:c4:30:67:3c:d9:70:a5:b7:11:40:d4:5d:d1:f5:a7:dc: e8:76:1b:5f:b6:8d:6b:56:85:15:f1:60:9b:2a:9a:d2:2c:ed: 57:97:59:2a:9f:5c:ee:06:09:4a:73:2d:7a:5d:29:b7:bb:79: 53:7e:47:4c:b3:98:9c:4e:22:f3:ec:3a:e2:ba:e5:fe:dd:93: 46:eb:62:37:ca:2d:86:0b:21:3f:11:39:25:12:48:57:5b:03: c3:49:de:f8:12:28:c0:74:18:2b:69:b0:df:95:62:55:5e:e1: 80:94:8b:16:37:7c:45:72:f8:bd:a4:f5:f4:ef:c5:9d:60:af: d3:ef:4c:4d:63:c5:e3:18:85:12:57:a0:e3:f1:0e:98:75:c6: fe:c9:9f:45:de:91:cf:4e:ac:1e:3d:97:26:35:6f:fb:a2:c4: 2b:78:0a:7f:83:2f:6d:12:b5:25:7a:a5:72:89:01:83:d0:e3: 12:3a:9c:c3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMjFaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFFNzUzODMwRTQ4Qzc5 MzQ2QUU4OEUwQ0Q3OTdGMDMzNjgxRDQ5MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDacCtR457W0F87Ow4sd6838/2L8UKvp99zdDLjYH35irtpwAZP xuRhHY9I1BKxBkZSWoqjBtuTY5Hz22gXN0MZHi4iN5JN+0mlfbN4nE3dNSUxWVyO gwKG3kU5OHCHj8D9sfzHrcBqp/fxz/o3XRjZyu8HBOQKway+sCMEfY8fU1EIK2un JZnHWDermK8oDVBNTxdYmkRh9njMAFXL/ZDms0Q/jniC66NaluwNVc0Qi59a8juq LmX3dkQKGsLLCFRTi3GuUbr32LFwf5j4JIWyLjKd1yq/ajnhfOprGYqLiD2qoh+Q HVWqg9cqZY24kH2dXFj1ckfcdzLQeJaK0fenAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrnU4MOSMeTRq6I4M15fwM2gdSTMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3JuVTRNT1NNZVRScTZJNE0xNWZ3TTJnZFNUTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAbhrwwDQYJKoZIhvcNAQELBQADggEBAFme5UbVULFhH/3vqNHaqsu64S8F evNWXU/ycAcnzx1rnQg7CxVB2e41Y+HVGp3kEqDhWcdTvI0UhBZ0SvVyCpU/CopB zKbBN3VrxDBnPNlwpbcRQNRd0fWn3Oh2G1+2jWtWhRXxYJsqmtIs7VeXWSqfXO4G CUpzLXpdKbe7eVN+R0yzmJxOIvPsOuK65f7dk0brYjfKLYYLIT8ROSUSSFdbA8NJ 3vgSKMB0GCtpsN+VYlVe4YCUixY3fEVy+L2k9fTvxZ1gr9PvTE1jxeMYhRJXoOPx Dph1xv7Jn0Xekc9OrB49lyY1b/uixCt4Cn+DL20StSV6pXKJAYPQ4xI6nMM= -----END CERTIFICATE-----Generated at Sat May 17 19:51:34 2025 by rpki-client