$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/w2bDWPTHqZwTKNlz4yOhMsgMSCg.roa File: w2bDWPTHqZwTKNlz4yOhMsgMSCg.roa (raw, json) Hash identifier: RdXbW6C4JwWRuiCsQFcOyFsrxxnNBDRXjUUNkgDvVac= Subject key identifier: C3:66:C3:58:F4:C7:A9:9C:13:28:D9:73:E3:23:A1:32:C8:0C:48:28 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03BE Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/w2bDWPTHqZwTKNlz4yOhMsgMSCg.roa Signing time: Thu 01 May 2025 01:40:34 +0000 ROA not before: Thu 01 May 2025 01:40:34 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 59.156.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 21:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:34 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=C366C358F4C7A99C1328D973E323A132C80C4828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:89:56:8f:53:84:48:e5:5f:8b:48:13:6c: 1f:bf:e9:21:e6:08:34:b5:a6:a8:24:bd:92:e0:af: b8:30:dc:10:c9:47:08:e2:f2:21:b6:50:1f:c2:83: ac:aa:4a:6c:70:50:c6:4b:9d:e9:bf:63:af:ae:a5: 84:6b:77:8c:7b:4e:d5:dd:cf:06:bd:ff:42:5e:55: b7:8d:b1:9b:ec:66:b9:84:e2:c1:86:6e:27:71:1e: 28:9a:ac:43:14:0d:d0:4d:ba:9f:91:48:35:65:88: cc:fe:71:37:ee:44:18:85:fb:9c:c3:57:fd:b5:1c: 25:eb:78:d8:c4:7c:f8:22:0d:02:9c:20:8e:a8:6a: 2a:08:83:0e:8e:71:06:0e:13:8e:6c:4f:75:53:17: 79:96:99:82:ba:48:97:8a:b4:93:43:0f:81:b9:ca: 19:c5:05:60:d8:09:67:35:82:9c:19:76:38:ce:48: d3:20:9b:a2:2b:5b:e2:54:08:c9:18:a6:a3:eb:11: 42:6f:8d:1a:69:eb:a2:82:73:e6:ef:1c:34:c9:70: 6f:05:b0:f3:bb:f6:2c:5f:30:62:8f:f5:68:75:7a: 58:26:2f:b7:7a:16:0b:be:c6:01:aa:89:65:aa:ce: b4:50:7d:83:1b:34:7b:7f:12:d1:5a:dc:ea:4c:3e: 69:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:66:C3:58:F4:C7:A9:9C:13:28:D9:73:E3:23:A1:32:C8:0C:48:28 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/w2bDWPTHqZwTKNlz4yOhMsgMSCg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.156.20.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:ba:d4:bc:cd:1c:33:a2:3f:83:70:4d:7a:d8:05:e6:69:0b: e4:94:bd:9d:5a:13:11:40:cc:61:dd:22:6b:03:67:9a:40:25: cb:67:13:fc:f6:60:c8:04:8f:75:75:98:ab:42:9c:2a:d3:6b: 6e:84:34:e1:be:38:9c:18:58:49:e4:12:1c:3f:f0:53:46:8d: e6:fa:f3:ed:9a:49:8b:c4:60:74:3c:40:31:72:93:25:d6:2a: 3a:e7:3e:0b:77:99:00:9a:96:70:33:b9:eb:a9:01:ea:ee:00: e6:7e:e9:cb:06:07:9c:2d:60:d2:fc:f9:e5:a9:c2:5e:45:48: 2f:22:93:a8:3e:29:f6:f8:13:c9:f6:f7:4a:e9:7c:e9:74:18: 4c:4e:0f:1d:e1:d4:df:2c:b7:d1:4a:5d:83:b6:b7:13:62:f8: d4:41:ee:26:ec:6e:d3:59:68:ab:31:9e:d9:45:57:63:ca:87: ae:7a:0d:6a:37:39:3d:af:9d:ea:06:92:46:2c:05:f9:d7:15: ef:68:dd:4c:9a:2c:07:b7:59:8a:a5:4c:02:a4:9a:c3:47:20: 8d:f0:24:da:c6:71:a9:cb:ad:92:17:4f:b2:91:04:64:e7:07: b1:9b:8b:e0:e1:db:1d:da:64:b8:91:26:a6:1c:dd:17:40:af: a7:c3:c0:f2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA74wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMzRaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEMzNjZDMzU4RjRDN0E5 OUMxMzI4RDk3M0UzMjNBMTMyQzgwQzQ4MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC38YlWj1OESOVfi0gTbB+/6SHmCDS1pqgkvZLgr7gw3BDJRwji 8iG2UB/Cg6yqSmxwUMZLnem/Y6+upYRrd4x7TtXdzwa9/0JeVbeNsZvsZrmE4sGG bidxHiiarEMUDdBNup+RSDVliMz+cTfuRBiF+5zDV/21HCXreNjEfPgiDQKcII6o aioIgw6OcQYOE45sT3VTF3mWmYK6SJeKtJNDD4G5yhnFBWDYCWc1gpwZdjjOSNMg m6IrW+JUCMkYpqPrEUJvjRpp66KCc+bvHDTJcG8FsPO79ixfMGKP9Wh1elgmL7d6 Fgu+xgGqiWWqzrRQfYMbNHt/EtFa3OpMPmkpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUw2bDWPTHqZwTKNlz4yOhMsgMSCgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3cyYkRXUFRIcVp3VEtObHo0eU9oTXNnTVNDZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA7nBQwDQYJKoZIhvcNAQELBQADggEBAIy61LzNHDOiP4NwTXrYBeZpC+SU vZ1aExFAzGHdImsDZ5pAJctnE/z2YMgEj3V1mKtCnCrTa26ENOG+OJwYWEnkEhw/ 8FNGjeb68+2aSYvEYHQ8QDFykyXWKjrnPgt3mQCalnAzueupAeruAOZ+6csGB5wt YNL8+eWpwl5FSC8ik6g+Kfb4E8n290rpfOl0GExODx3h1N8st9FKXYO2txNi+NRB 7ibsbtNZaKsxntlFV2PKh656DWo3OT2vneoGkkYsBfnXFe9o3UyaLAe3WYqlTAKk msNHII3wJNrGcanLrZIXT7KRBGTnB7Gbi+Dh2x3aZLiRJqYc3RdAr6fDwPI= -----END CERTIFICATE-----Generated at Sun May 18 04:52:11 2025 by rpki-client