$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/aD14VKO1DVCQFRzsfYPQJdr7hok.roa File: aD14VKO1DVCQFRzsfYPQJdr7hok.roa (raw, json) Hash identifier: Pd3HyDaekallkgws1R8u99E2rxc+XBgu8LQ0WePLKmY= Subject key identifier: 68:3D:78:54:A3:B5:0D:50:90:15:1C:EC:7D:83:D0:25:DA:FB:86:89 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 01A6 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/aD14VKO1DVCQFRzsfYPQJdr7hok.roa Signing time: Thu 01 May 2025 01:32:03 +0000 ROA not before: Thu 01 May 2025 01:32:03 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 2497 IP address blocks: 203.180.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: May 1 01:32:03 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=683D7854A3B50D5090151CEC7D83D025DAFB8689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:86:32:8c:65:37:5e:a1:7b:56:c3:3c:f7: ff:ad:e8:8a:6f:b3:f3:c5:c6:74:6c:af:13:2c:8f: 28:4b:49:e5:7d:00:0a:d9:b2:c0:fd:0b:3c:7b:bb: 3e:eb:7d:4a:5b:4a:01:ef:b7:7f:4e:4b:19:d2:5b: b5:89:a4:55:db:d8:70:29:c7:d3:b3:26:57:d2:fe: ad:dd:69:78:23:d5:52:01:5f:07:36:41:23:cc:30: d6:e1:aa:12:25:90:07:39:53:c5:09:d3:6d:dc:95: f5:6e:8d:55:da:9c:32:2d:41:e8:db:b5:db:be:97: fb:f9:c2:d0:a9:ce:a6:7b:95:3b:10:9e:72:77:ec: 7f:99:f5:5c:65:97:a1:85:85:1d:b2:f3:32:ee:68: ca:0a:c2:4c:99:02:d7:b7:c2:ae:68:98:f9:69:a7: 87:49:1f:8b:e7:d3:fb:c9:70:f9:b4:45:39:3b:10: d9:2c:74:74:c8:3d:2c:61:05:0d:81:0b:b1:9e:af: bf:54:fa:0a:f2:16:fc:2c:f7:2d:4b:45:31:e4:46: 82:5b:09:e2:10:01:47:90:cd:ea:3d:61:2f:4b:c0: e6:21:6d:7c:c7:68:24:61:00:30:c8:1a:77:b2:8d: 86:e9:4e:d2:95:01:e1:18:38:bf:d6:cc:e7:6d:fc: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3D:78:54:A3:B5:0D:50:90:15:1C:EC:7D:83:D0:25:DA:FB:86:89 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/aD14VKO1DVCQFRzsfYPQJdr7hok.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.180.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4f:67:2d:d0:af:93:01:14:b5:6c:67:a8:02:93:b1:16:cb:8e: 42:96:8e:8e:09:6a:ea:1c:d7:d9:dc:cb:64:9a:27:79:aa:ad: 18:ff:58:39:8b:89:2c:e7:83:a6:99:ff:b2:e7:9c:bf:a1:1a: 16:db:df:ac:2d:fe:a6:e6:e3:a9:be:15:cf:a9:ff:10:34:b6: a0:bc:a0:c3:be:96:f4:3c:c6:52:b2:a3:e6:7f:73:db:6d:23: bf:d0:82:c9:2c:25:56:68:4b:78:8b:08:a9:1b:06:df:b6:61: 39:a0:b9:fc:ed:e5:fe:eb:f6:2e:43:36:ae:a0:c8:92:ea:1b: 6e:00:e9:53:c4:73:19:73:ff:fe:cd:7a:27:4d:2a:c4:ad:6e: a4:98:ce:38:30:c6:f0:cc:58:38:81:2b:f6:22:78:18:6c:e7: d1:63:ee:45:08:cd:7d:00:21:2d:5a:b1:22:95:7e:66:db:56: 81:fe:1e:9c:57:1f:d3:71:73:8d:74:ed:f3:51:34:18:66:80: 1a:82:79:b5:05:d4:07:0f:fa:3b:39:8d:05:2a:0d:51:c0:57: 82:02:1a:68:7d:f4:5b:71:8b:c5:b9:85:48:02:be:99:5e:38: 0a:c7:11:9c:d8:3e:01:09:c8:e6:9d:9b:db:bd:60:f5:3e:8b: 95:0e:f2:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA1MDEw MTMyMDNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY4M0Q3ODU0QTNCNTBE NTA5MDE1MUNFQzdEODNEMDI1REFGQjg2ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqo4YyjGU3XqF7VsM89/+t6Ipvs/PFxnRsrxMsjyhLSeV9AArZ ssD9Czx7uz7rfUpbSgHvt39OSxnSW7WJpFXb2HApx9OzJlfS/q3daXgj1VIBXwc2 QSPMMNbhqhIlkAc5U8UJ023clfVujVXanDItQejbtdu+l/v5wtCpzqZ7lTsQnnJ3 7H+Z9Vxll6GFhR2y8zLuaMoKwkyZAte3wq5omPlpp4dJH4vn0/vJcPm0RTk7ENks dHTIPSxhBQ2BC7Ger79U+gryFvws9y1LRTHkRoJbCeIQAUeQzeo9YS9LwOYhbXzH aCRhADDIGneyjYbpTtKVAeEYOL/WzOdt/EJXAgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUaD14VKO1DVCQFRzsfYPQJdr7hokwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvYUQxNFZLTzFEVkNRRlJ6c2ZZUFFKZHI3aG9rLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AMu0MA0GCSqGSIb3DQEBCwUAA4IBAQBPZy3Qr5MBFLVsZ6gCk7EWy45Clo6OCWrq HNfZ3Mtkmid5qq0Y/1g5i4ks54Ommf+y55y/oRoW29+sLf6m5uOpvhXPqf8QNLag vKDDvpb0PMZSsqPmf3PbbSO/0ILJLCVWaEt4iwipGwbftmE5oLn87eX+6/YuQzau oMiS6htuAOlTxHMZc//+zXonTSrErW6kmM44MMbwzFg4gSv2IngYbOfRY+5FCM19 ACEtWrEilX5m21aB/h6cVx/TcXONdO3zUTQYZoAagnm1BdQHD/o7OY0FKg1RwFeC AhpoffRbcYvFuYVIAr6ZXjgKxxGc2D4BCcjmnZvbvWD1PouVDvIs -----END CERTIFICATE-----Generated at Sun May 18 08:26:03 2025 by rpki-client