$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yVwZcz4rNhlqJRZnnN3CvJcgKEw.roa File: yVwZcz4rNhlqJRZnnN3CvJcgKEw.roa (raw, json) Hash identifier: xKwEtMctqrJsLatDxCPWwy0VPj6Ji/7UxbiMI3NQjQU= Subject key identifier: C9:5C:19:73:3E:2B:36:19:6A:25:16:67:9C:DD:C2:BC:97:20:28:4C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03CA Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yVwZcz4rNhlqJRZnnN3CvJcgKEw.roa Signing time: Thu 01 May 2025 01:42:39 +0000 ROA not before: Thu 01 May 2025 01:42:39 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.120.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:39 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=C95C19733E2B36196A2516679CDDC2BC9720284C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:c5:8f:53:57:3a:aa:ca:f7:87:f5:b6:a0: 2e:63:5d:44:1f:47:6b:c4:fa:ee:7b:44:0c:77:2b: 4a:c7:3c:62:bd:be:18:98:c1:ff:7f:d9:fc:21:dc: 41:1c:84:f8:e8:87:cf:7c:be:53:07:3c:f4:9e:f2: db:67:7e:79:54:08:7f:a5:b9:95:38:54:ae:dc:c1: 9c:5f:d0:40:19:99:3d:30:02:3f:4b:95:0b:09:22: 2c:b6:4a:5f:fb:0d:e2:38:7a:b9:45:fd:65:59:96: 08:00:85:9d:44:dd:ca:22:71:97:2d:ed:26:87:c8: a6:e5:02:41:77:04:47:92:ca:a7:47:bd:59:3a:8e: e3:ac:9e:30:33:47:94:2e:87:cd:b8:96:0a:8d:74: 0a:b0:30:1a:88:02:82:df:6e:ae:d8:3b:f9:5f:b4: ec:f8:c3:37:9c:ad:dd:f9:68:b6:c1:a0:7c:88:89: 09:49:7a:56:51:12:fb:39:21:e1:58:b1:0d:06:2a: c2:bb:2b:d1:08:52:7d:33:2c:31:0a:5e:cf:09:7f: 2f:0b:3e:8b:1a:1b:4f:a1:4f:e5:5d:41:74:bc:91: 0b:66:b6:24:41:9c:fa:7e:93:0a:cf:4c:4e:27:0d: 16:d6:ca:8c:5e:46:59:33:11:82:f0:ab:7a:ab:2e: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5C:19:73:3E:2B:36:19:6A:25:16:67:9C:DD:C2:BC:97:20:28:4C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yVwZcz4rNhlqJRZnnN3CvJcgKEw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.120.214.0/23 Signature Algorithm: sha256WithRSAEncryption 49:ac:2a:ca:79:73:ef:81:77:67:ba:85:2a:af:38:49:14:a3: 35:2b:7d:74:ec:c8:72:a3:94:78:55:15:0b:0c:ec:d4:b9:16: 14:a6:dd:82:c4:9b:e1:f8:90:34:e7:4b:0f:10:8a:b2:85:d0: af:8c:ea:48:fb:ec:8f:14:fb:75:c0:6b:6e:a5:97:b3:09:eb: 41:d1:1d:3d:fe:ea:71:80:16:6e:49:6c:98:28:56:2f:ca:a2: e8:f4:54:8f:bc:ee:cf:31:51:4f:5c:ab:7c:09:4f:11:76:ce: 43:1b:cb:84:7b:ba:98:f8:81:75:e5:ce:b2:66:c3:56:dd:7a: 7c:53:59:23:b6:ef:c4:dc:62:b1:3a:53:a8:ee:f7:e9:0d:8a: a5:f0:70:13:f8:53:61:1c:7f:11:1d:f7:86:bf:2a:f2:e3:90: f1:ae:31:b4:f3:1e:c1:50:f0:b6:9f:30:02:b8:dd:99:c5:60: 93:7e:b7:a3:0e:50:56:bf:81:9b:3a:8e:80:34:09:6c:17:83: 95:2a:c4:e3:47:e7:ee:a0:bc:d8:37:33:2f:c4:68:1c:7e:98: f3:47:a9:2c:39:d6:98:d7:d5:76:41:65:42:f2:25:86:c8:6f: 2a:fd:82:26:8c:15:3e:04:e6:32:26:96:e0:7f:e6:55:56:e2: 5a:47:4d:f7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyMzlaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM5NUMxOTczM0UyQjM2 MTk2QTI1MTY2NzlDRERDMkJDOTcyMDI4NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYlcWPU1c6qsr3h/W2oC5jXUQfR2vE+u57RAx3K0rHPGK9vhiY wf9/2fwh3EEchPjoh898vlMHPPSe8ttnfnlUCH+luZU4VK7cwZxf0EAZmT0wAj9L lQsJIiy2Sl/7DeI4erlF/WVZlggAhZ1E3coicZct7SaHyKblAkF3BEeSyqdHvVk6 juOsnjAzR5Quh824lgqNdAqwMBqIAoLfbq7YO/lftOz4wzecrd35aLbBoHyIiQlJ elZREvs5IeFYsQ0GKsK7K9EIUn0zLDEKXs8Jfy8LPosaG0+hT+VdQXS8kQtmtiRB nPp+kwrPTE4nDRbWyoxeRlkzEYLwq3qrLicHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyVwZcz4rNhlqJRZnnN3CvJcgKEwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3lWd1pjejRyTmhscUpSWm5uTjNDdkpjZ0tFdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE9eNYwDQYJKoZIhvcNAQELBQADggEBAEmsKsp5c++Bd2e6hSqvOEkUozUr fXTsyHKjlHhVFQsM7NS5FhSm3YLEm+H4kDTnSw8QirKF0K+M6kj77I8U+3XAa26l l7MJ60HRHT3+6nGAFm5JbJgoVi/Kouj0VI+87s8xUU9cq3wJTxF2zkMby4R7upj4 gXXlzrJmw1bdenxTWSO278TcYrE6U6ju9+kNiqXwcBP4U2EcfxEd94a/KvLjkPGu MbTzHsFQ8LafMAK43ZnFYJN+t6MOUFa/gZs6joA0CWwXg5UqxONH5+6gvNg3My/E aBx+mPNHqSw51pjX1XZBZULyJYbIbyr9giaMFT4E5jImluB/5lVW4lpHTfc= -----END CERTIFICATE-----Generated at Sat May 17 21:30:27 2025 by rpki-client