$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/pxeYngF_hZObAc7jQ8uXIYKcuWM.roa File: pxeYngF_hZObAc7jQ8uXIYKcuWM.roa (raw, json) Hash identifier: 7sOmnTl16zYrlnGUZ3SfSTk9hEPsfX46xD2/O0ERkco= Subject key identifier: A7:17:98:9E:01:7F:85:93:9B:01:CE:E3:43:CB:97:21:82:9C:B9:63 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 01C7 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/pxeYngF_hZObAc7jQ8uXIYKcuWM.roa Signing time: Tue 01 Jul 2025 01:42:21 +0000 ROA not before: Tue 01 Jul 2025 01:42:21 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2497 IP address blocks: 125.30.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Jul 1 01:42:21 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=A717989E017F85939B01CEE343CB9721829CB963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:4a:aa:cd:0a:e7:ff:f9:f2:09:40:9b:c1: 89:6d:26:69:d0:af:10:13:70:ea:58:fc:db:bf:c3: 6f:b5:5b:88:56:e3:9a:41:3c:5c:07:c5:31:8c:e9: ac:81:45:fb:c9:ea:39:9c:8b:c5:61:f7:9f:01:64: f9:d0:ca:d4:b8:23:b4:ea:14:b5:ae:c3:7f:89:fe: f2:ce:e9:d9:08:b4:86:f7:cb:38:3c:f5:a4:93:bf: 21:42:9a:42:61:7c:2a:60:f3:30:09:28:56:1f:cd: 0c:36:d4:f3:2e:88:cc:d6:06:f2:b5:ca:52:20:fd: 5a:b7:5f:4d:84:de:b4:95:3b:fb:10:43:ba:2e:a5: cc:93:c9:cc:e5:32:5e:ce:e8:16:50:0a:9c:6d:7f: 68:e2:21:aa:71:97:82:5a:9d:d2:fe:49:56:88:e5: 82:e0:50:22:d5:de:19:74:e4:35:de:e9:e3:02:2b: bf:bf:6c:f8:73:00:f5:ae:ad:c8:dd:88:f4:72:69: 98:c7:c3:6f:da:47:69:7a:70:43:d2:7d:2b:7a:d5: df:37:bf:74:a9:ee:10:fe:e8:b6:e9:fc:0b:0e:ae: 62:c4:86:26:2b:e7:0f:c9:b0:f2:8d:b7:33:d1:c7: dd:8a:5b:85:43:49:b0:ff:f4:7f:44:2a:3c:ae:b4: 1e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:17:98:9E:01:7F:85:93:9B:01:CE:E3:43:CB:97:21:82:9C:B9:63 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/pxeYngF_hZObAc7jQ8uXIYKcuWM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.30.0.0/16 Signature Algorithm: sha256WithRSAEncryption 13:26:d3:68:25:73:d5:52:58:b2:53:d2:2b:a7:56:0c:31:c0: 2c:77:43:7a:d5:fc:00:9a:fd:94:a0:05:af:ed:99:01:05:44: 9a:ca:67:80:e3:09:a1:9f:ae:59:0c:4c:06:60:2c:a3:9a:c5: 14:f7:cd:b6:55:25:82:44:7f:82:b8:28:55:10:1a:bd:f2:ba: 43:28:02:9b:92:02:b6:b6:2f:b1:55:c2:c7:62:fd:1a:2c:c6: 3a:08:14:d4:76:db:f7:db:df:f1:e4:0c:cc:99:d0:82:d4:df: 53:12:7f:2b:b4:43:28:a2:eb:8b:ba:1c:29:1f:df:c1:dc:d3: 8f:9e:df:40:72:eb:ac:10:d1:27:f7:50:45:42:20:73:f8:ff: c7:cf:03:77:6b:60:e5:19:7a:ac:1d:0b:d6:a0:2a:af:02:ed: 85:f0:4e:a1:e4:f9:fb:78:15:fc:ce:f8:0f:52:83:d0:51:db: 9d:65:ce:1c:67:46:4e:a4:13:aa:15:91:69:54:a7:93:8e:fd: b4:49:b4:c6:ea:e2:63:ef:8f:bd:60:3a:80:7f:23:fd:b8:f8: f6:87:98:d9:69:b6:f2:a6:a5:53:93:13:fe:63:c5:61:f1:67: ca:51:4b:15:e6:7d:43:f7:60:79:4e:1b:00:b6:cd:6c:f4:76: 15:69:f0:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICAccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA3MDEw MTQyMjFaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE3MTc5ODlFMDE3Rjg1 OTM5QjAxQ0VFMzQzQ0I5NzIxODI5Q0I5NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkrUqqzQrn//nyCUCbwYltJmnQrxATcOpY/Nu/w2+1W4hW45pB PFwHxTGM6ayBRfvJ6jmci8Vh958BZPnQytS4I7TqFLWuw3+J/vLO6dkItIb3yzg8 9aSTvyFCmkJhfCpg8zAJKFYfzQw21PMuiMzWBvK1ylIg/Vq3X02E3rSVO/sQQ7ou pcyTyczlMl7O6BZQCpxtf2jiIapxl4JandL+SVaI5YLgUCLV3hl05DXe6eMCK7+/ bPhzAPWurcjdiPRyaZjHw2/aR2l6cEPSfSt61d83v3Sp7hD+6Lbp/AsOrmLEhiYr 5w/JsPKNtzPRx92KW4VDSbD/9H9EKjyutB55AgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUpxeYngF/hZObAc7jQ8uXIYKcuWMwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvcHhlWW5nRl9oWk9iQWM3alE4dVhJWUtjdVdNLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AH0eMA0GCSqGSIb3DQEBCwUAA4IBAQATJtNoJXPVUliyU9Irp1YMMcAsd0N61fwA mv2UoAWv7ZkBBUSaymeA4wmhn65ZDEwGYCyjmsUU9822VSWCRH+CuChVEBq98rpD KAKbkgK2ti+xVcLHYv0aLMY6CBTUdtv329/x5AzMmdCC1N9TEn8rtEMoouuLuhwp H9/B3NOPnt9AcuusENEn91BFQiBz+P/HzwN3a2DlGXqsHQvWoCqvAu2F8E6h5Pn7 eBX8zvgPUoPQUdudZc4cZ0ZOpBOqFZFpVKeTjv20SbTG6uJj74+9YDqAfyP9uPj2 h5jZabbypqVTkxP+Y8Vh8WfKUUsV5n1D92B5ThsAts1s9HYVafDw -----END CERTIFICATE-----Generated at Thu Jul 3 08:08:49 2025 by rpki-client