$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/sjrMzfKYLUzJidXVGnv3tQdluqc.roa File: sjrMzfKYLUzJidXVGnv3tQdluqc.roa (raw, json) Hash identifier: B4r78Jy5/HPZxfRjky0tQ6OQT+zqWnDP3RYUdhUKZPk= Subject key identifier: B2:3A:CC:CD:F2:98:2D:4C:C9:89:D5:D5:1A:7B:F7:B5:07:65:BA:A7 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03E0 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sjrMzfKYLUzJidXVGnv3tQdluqc.roa Signing time: Thu 01 May 2025 01:42:50 +0000 ROA not before: Thu 01 May 2025 01:42:50 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 110.74.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:50 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=B23ACCCDF2982D4CC989D5D51A7BF7B50765BAA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:08:ef:f3:40:03:cd:ee:83:da:b7:4f:af: 49:6a:70:e1:68:c7:10:62:34:b3:7e:27:94:36:6f: cc:30:ca:3d:28:1f:e8:0c:db:29:22:06:bc:90:22: 26:51:22:7e:26:e6:0d:20:2b:4a:71:18:fe:71:90: 8d:1d:c7:a6:d6:15:05:f5:d7:e6:dd:2f:c8:66:35: 23:ac:b2:f8:b6:16:7c:53:b2:34:ce:76:b4:8d:18: ec:c1:46:a7:40:df:19:bb:9a:6c:d7:43:d8:37:98: fe:48:7c:2d:f7:fd:5a:07:79:9d:cd:43:10:f9:d5: 20:cc:11:0b:71:ea:11:be:fc:63:52:43:7f:52:5b: ee:ac:b5:ba:1f:0d:7b:fe:ba:56:4d:ad:3a:d1:a1: 6a:b4:d6:83:49:be:78:4b:0c:89:c0:26:d6:ea:13: d0:a6:ae:3f:74:7e:06:4e:98:16:c8:3b:45:5e:6d: 56:01:7b:c7:cf:f7:ac:2e:41:72:e8:e5:7a:d4:43: 5d:a9:bc:4e:c9:c1:28:12:0c:ba:00:0e:ff:e3:f5: f4:fe:38:40:c3:8a:92:57:25:7b:a5:f9:e9:53:7b: aa:6e:43:eb:7d:de:39:06:a5:d9:2f:f8:a2:a0:77: f3:83:43:96:41:2a:24:0d:fb:0d:19:43:6c:10:4b: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3A:CC:CD:F2:98:2D:4C:C9:89:D5:D5:1A:7B:F7:B5:07:65:BA:A7 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sjrMzfKYLUzJidXVGnv3tQdluqc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.74.232.0/21 Signature Algorithm: sha256WithRSAEncryption 40:c6:94:95:64:2e:cb:5d:d3:95:d1:b6:4f:d3:c6:00:08:42: 8d:dc:d9:23:38:79:2d:e5:4d:bd:48:ab:d6:ec:2c:93:6b:d1: 9c:30:fa:fe:f5:b7:4a:de:b9:be:9a:47:90:89:e7:00:e0:c0: 14:67:fa:e4:7a:bb:71:0d:d9:b8:31:c1:03:bf:e0:19:25:52: c0:ce:9e:57:b8:96:25:24:9a:9e:91:11:db:02:03:eb:47:a1: ab:34:ed:91:31:8e:67:59:dd:79:08:8c:fa:d2:76:b0:6b:83: ee:ab:4b:85:35:06:61:e6:af:3c:c0:83:ca:2c:60:0d:b7:10: ba:eb:bb:d7:08:01:33:2b:6d:59:5d:1b:04:2f:79:f1:29:16: 5f:4e:af:27:c9:9b:d7:97:ff:e3:76:cd:a2:43:46:03:a5:32: 81:b7:3c:87:d2:a9:ef:26:7d:68:0a:30:7e:28:00:b1:28:c3: 79:4d:0f:75:fe:55:4e:4d:30:5a:f2:3b:4d:d7:91:40:8d:b5: a9:00:2e:6c:76:ae:2b:48:78:95:b4:1c:d3:e9:c3:1b:1d:ed: 9e:0a:b9:01:f9:e7:f6:84:3c:e3:43:36:07:33:f1:c4:84:84: 45:4e:7e:98:89:74:85:c4:c2:0d:f4:2f:b0:a4:d8:b1:bb:22: 65:fc:e3:9e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNTBaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIyM0FDQ0NERjI5ODJE NENDOTg5RDVENTFBN0JGN0I1MDc2NUJBQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/Xgjv80ADze6D2rdPr0lqcOFoxxBiNLN+J5Q2b8wwyj0oH+gM 2ykiBryQIiZRIn4m5g0gK0pxGP5xkI0dx6bWFQX11+bdL8hmNSOssvi2FnxTsjTO drSNGOzBRqdA3xm7mmzXQ9g3mP5IfC33/VoHeZ3NQxD51SDMEQtx6hG+/GNSQ39S W+6stbofDXv+ulZNrTrRoWq01oNJvnhLDInAJtbqE9Cmrj90fgZOmBbIO0VebVYB e8fP96wuQXLo5XrUQ12pvE7JwSgSDLoADv/j9fT+OEDDipJXJXul+elTe6puQ+t9 3jkGpdkv+KKgd/ODQ5ZBKiQN+w0ZQ2wQSyEBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsjrMzfKYLUzJidXVGnv3tQdluqcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3Nqck16ZktZTFV6SmlkWFZHbnYzdFFkbHVxYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANuSugwDQYJKoZIhvcNAQELBQADggEBAEDGlJVkLstd05XRtk/TxgAIQo3c 2SM4eS3lTb1Iq9bsLJNr0Zww+v71t0reub6aR5CJ5wDgwBRn+uR6u3EN2bgxwQO/ 4BklUsDOnle4liUkmp6REdsCA+tHoas07ZExjmdZ3XkIjPrSdrBrg+6rS4U1BmHm rzzAg8osYA23ELrru9cIATMrbVldGwQvefEpFl9OryfJm9eX/+N2zaJDRgOlMoG3 PIfSqe8mfWgKMH4oALEow3lND3X+VU5NMFryO03XkUCNtakALmx2ritIeJW0HNPp wxsd7Z4KuQH55/aEPONDNgcz8cSEhEVOfpiJdIXEwg30L7Ck2LG7ImX8454= -----END CERTIFICATE-----Generated at Sun May 18 09:13:37 2025 by rpki-client