$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vQlRyKVUFOHGr_8QhvEwiQpt0f8.roa File: vQlRyKVUFOHGr_8QhvEwiQpt0f8.roa (raw, json) Hash identifier: Ppr2LOUgaVze1g7LeFdgW/6g10vtK1w8SZt9DiG2ojQ= Subject key identifier: BD:09:51:C8:A5:54:14:E1:C6:AF:FF:10:86:F1:30:89:0A:6D:D1:FF Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03E1 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vQlRyKVUFOHGr_8QhvEwiQpt0f8.roa Signing time: Thu 01 May 2025 01:42:50 +0000 ROA not before: Thu 01 May 2025 01:42:50 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 110.74.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:50 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=BD0951C8A55414E1C6AFFF1086F130890A6DD1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:91:dd:5f:13:f7:a4:34:bd:cc:ee:e9:f7: c9:af:c1:ca:39:d8:14:c4:fe:17:29:e8:ac:79:6d: 39:c4:a5:c6:bf:ae:43:10:62:0f:fb:64:57:51:f7: 90:11:3d:57:3f:cd:c5:9e:05:6e:aa:24:a4:2f:90: aa:c2:2f:5b:12:5e:b5:9d:9d:49:33:75:ed:d3:87: 1d:a3:80:c6:d5:7e:3c:7a:2a:49:90:5b:27:cd:f2: 2f:fd:5f:94:1c:df:a4:62:da:08:37:d6:b2:07:4f: 41:a9:bb:6f:51:2f:99:7b:73:76:ae:1a:92:b7:52: 3b:13:49:ec:8e:61:58:2c:46:fa:74:e4:0e:56:7f: b1:cc:23:19:19:11:e0:c6:b9:af:5f:3e:7b:68:8a: af:4f:a4:c1:63:f9:1d:68:42:f7:a8:12:bb:9d:ee: a1:91:26:62:b5:4b:8b:14:37:d7:a9:27:92:b4:10: a6:c3:5f:7e:c7:8e:f3:c3:cc:a3:7a:a1:0a:c2:06: ec:63:b0:2e:1e:76:3c:ed:b0:5e:c2:db:fa:37:f5: 94:87:1e:31:48:19:c0:7b:10:be:ca:e4:4e:3e:dc: fe:69:da:21:62:2b:6b:58:42:39:2d:6d:c2:8b:7f: b1:ba:b7:cd:87:cb:bf:d8:0b:80:7a:57:ba:0f:92: f2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:09:51:C8:A5:54:14:E1:C6:AF:FF:10:86:F1:30:89:0A:6D:D1:FF X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vQlRyKVUFOHGr_8QhvEwiQpt0f8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.74.240.0/20 Signature Algorithm: sha256WithRSAEncryption 25:b2:95:b6:fc:e9:9c:8e:bb:00:a5:ba:4a:d4:40:46:eb:a2: b7:bd:7c:e1:55:c4:8f:7c:eb:56:c1:63:f6:94:67:d9:36:74: 38:b7:49:64:62:81:3f:fa:a6:8a:b1:88:d5:c6:81:1e:e7:10: 57:65:c8:52:73:3b:1d:e0:b0:1d:04:90:e1:8d:d4:2b:85:4d: 08:fb:93:81:63:78:7e:2b:1a:5e:de:07:f2:45:c5:95:44:4c: b4:b3:3c:de:a3:a2:a1:14:8e:f8:6a:4a:52:f2:2c:4c:93:9e: 25:9a:a1:1f:56:ba:87:cd:95:e5:73:6c:5d:2c:55:49:41:3d: 23:83:83:f7:7d:de:07:04:66:ac:e1:cb:62:39:89:ce:1d:7e: 34:90:0b:1a:da:a3:b8:c3:22:54:cb:a0:b8:88:6d:12:53:5f: df:3a:85:52:85:84:ce:73:d4:84:e5:af:70:ca:76:c5:bd:be: e3:a6:05:b5:c1:c3:13:f6:d0:b6:ce:8a:72:1e:40:9a:d9:7e: 93:9c:55:76:5a:82:1c:42:4a:1f:c0:7d:e5:ed:06:92:92:66: b8:bc:04:00:f5:09:17:52:20:91:95:19:4b:32:74:cc:29:ff: 06:50:ee:4b:86:7d:78:7b:93:79:5c:13:ee:19:43:01:8c:bf: 92:63:f2:c3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNTBaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEJEMDk1MUM4QTU1NDE0 RTFDNkFGRkYxMDg2RjEzMDg5MEE2REQxRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCiZHdXxP3pDS9zO7p98mvwco52BTE/hcp6Kx5bTnEpca/rkMQ Yg/7ZFdR95ARPVc/zcWeBW6qJKQvkKrCL1sSXrWdnUkzde3Thx2jgMbVfjx6KkmQ WyfN8i/9X5Qc36Ri2gg31rIHT0Gpu29RL5l7c3auGpK3UjsTSeyOYVgsRvp05A5W f7HMIxkZEeDGua9fPntoiq9PpMFj+R1oQveoErud7qGRJmK1S4sUN9epJ5K0EKbD X37HjvPDzKN6oQrCBuxjsC4edjztsF7C2/o39ZSHHjFIGcB7EL7K5E4+3P5p2iFi K2tYQjktbcKLf7G6t82Hy7/YC4B6V7oPkvIRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUvQlRyKVUFOHGr/8QhvEwiQpt0f8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3ZRbFJ5S1ZVRk9IR3JfOFFodkV3aVFwdDBmOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARuSvAwDQYJKoZIhvcNAQELBQADggEBACWylbb86ZyOuwClukrUQEbrore9 fOFVxI9861bBY/aUZ9k2dDi3SWRigT/6poqxiNXGgR7nEFdlyFJzOx3gsB0EkOGN 1CuFTQj7k4FjeH4rGl7eB/JFxZVETLSzPN6joqEUjvhqSlLyLEyTniWaoR9WuofN leVzbF0sVUlBPSODg/d93gcEZqzhy2I5ic4dfjSQCxrao7jDIlTLoLiIbRJTX986 hVKFhM5z1ITlr3DKdsW9vuOmBbXBwxP20LbOinIeQJrZfpOcVXZaghxCSh/AfeXt BpKSZri8BAD1CRdSIJGVGUsydMwp/wZQ7kuGfXh7k3lcE+4ZQwGMv5Jj8sM= -----END CERTIFICATE-----Generated at Sat May 17 20:49:29 2025 by rpki-client