$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/HvWnacQnL42g-6p6ddyo3sURHuQ.roa File: HvWnacQnL42g-6p6ddyo3sURHuQ.roa (raw, json) Hash identifier: zVxO3hB2/Pei7/41WUwuKliv6m24XNpgpjqkEBF4/LA= Subject key identifier: 1E:F5:A7:69:C4:27:2F:8D:A0:FB:AA:7A:75:DC:A8:DE:C5:11:1E:E4 Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4 Certificate serial: D9 Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/HvWnacQnL42g-6p6ddyo3sURHuQ.roa Signing time: Thu 01 May 2025 01:29:11 +0000 ROA not before: Thu 01 May 2025 01:29:11 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 2518 IP address blocks: 219.107.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4 Validity Not Before: May 1 01:29:11 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=1EF5A769C4272F8DA0FBAA7A75DCA8DEC5111EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:38:eb:ef:ee:1e:41:39:46:9a:4a:71:d4:80: 9b:a5:5e:1f:ed:23:ca:59:7b:5a:84:21:8c:ac:49: 3e:bf:cd:10:de:da:5c:6c:8e:d6:10:64:c2:8a:d0: 05:be:7e:6c:7a:21:15:d6:b0:d9:a5:45:f7:e4:f3: d6:8e:d5:a2:f2:e5:dc:14:72:0a:fe:2b:40:07:a3: dc:92:83:2c:3b:54:a4:61:21:b7:13:cb:cd:92:62: d4:83:70:66:67:cf:d4:95:cd:84:ee:5b:14:0c:19: 57:6d:53:2d:e2:26:76:8c:d2:14:21:5e:76:f4:a5: f2:10:77:62:67:9e:ff:59:29:ca:e9:13:3f:26:36: 90:69:90:1c:9d:66:27:4b:70:05:91:b7:ce:c9:09: 7c:d8:64:ad:23:7f:4a:15:6f:f8:47:8b:44:96:13: ff:ed:0f:54:bd:a3:40:ab:d9:5f:11:e8:98:f6:e5: b4:f7:d5:b1:5b:cd:3d:38:78:4c:c2:2c:3c:15:d6: 63:8b:52:bb:e8:68:aa:f7:b1:d2:34:7d:de:2d:13: c3:4b:9f:7b:f3:8d:7e:e0:8a:54:de:7e:75:8f:d7: 68:9d:67:97:b3:1e:00:ee:93:25:ce:b1:3c:59:f7: c7:ae:c2:fa:58:5d:9c:34:b7:14:de:7a:2a:8f:84: bc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F5:A7:69:C4:27:2F:8D:A0:FB:AA:7A:75:DC:A8:DE:C5:11:1E:E4 X509v3 Authority Key Identifier: keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/HvWnacQnL42g-6p6ddyo3sURHuQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.107.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:d1:d3:bc:a1:78:37:de:c8:86:d5:84:9d:68:c9:29:19:3f: ac:68:9b:9d:4f:39:4e:c3:bb:74:73:50:ba:b7:cd:09:77:c0: dd:74:b5:56:16:a3:60:79:e0:42:78:2e:f4:ef:f8:16:29:53: 30:64:bc:6c:c5:9d:1c:ae:82:1b:9d:93:24:9a:a2:8f:40:38: 5c:c8:27:e1:4e:f2:0d:74:1b:81:f8:58:68:ba:9e:02:38:ce: 46:df:15:53:3c:31:6d:45:45:3c:65:0e:a7:ae:e7:20:dc:29: 87:8d:b6:a0:8e:46:d3:bd:e3:f9:fa:de:2e:08:cd:d6:a7:82: 63:85:3c:da:98:7d:93:5d:44:e0:85:24:f8:39:1b:01:9d:5a: 52:2f:c4:89:67:80:33:eb:79:29:02:b4:4f:7e:90:50:a6:b2: cc:e5:db:fd:10:1f:40:73:de:da:bd:71:45:26:42:8b:0f:ea: 9c:57:16:51:d2:31:52:80:07:8a:24:98:4e:d0:e5:fe:2e:84: d0:2f:ee:d1:dd:c4:ec:6e:34:50:ee:04:65:2c:7b:18:33:b9: 47:4c:af:2f:bd:5b:45:48:66:ba:f1:c7:b8:40:a7:c5:93:c8: 56:8d:77:60:41:da:80:12:5a:51:16:62:e7:65:2b:92:2f:14: a0:24:d0:39 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICANkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2 MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNTA1MDEw MTI5MTFaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFFRjVBNzY5QzQyNzJG OERBMEZCQUE3QTc1RENBOERFQzUxMTFFRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcOOvv7h5BOUaaSnHUgJulXh/tI8pZe1qEIYysST6/zRDe2lxs jtYQZMKK0AW+fmx6IRXWsNmlRffk89aO1aLy5dwUcgr+K0AHo9ySgyw7VKRhIbcT y82SYtSDcGZnz9SVzYTuWxQMGVdtUy3iJnaM0hQhXnb0pfIQd2Jnnv9ZKcrpEz8m NpBpkBydZidLcAWRt87JCXzYZK0jf0oVb/hHi0SWE//tD1S9o0Cr2V8R6Jj25bT3 1bFbzT04eEzCLDwV1mOLUrvoaKr3sdI0fd4tE8NLn3vzjX7gilTefnWP12idZ5ez HgDukyXOsTxZ98euwvpYXZw0txTeeiqPhLynAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUHvWnacQnL42g+6p6ddyo3sURHuQwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3 LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTM5L0h2V25hY1FuTDQyZy02cDZkZHlvM3NVUkh1US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDbazANBgkqhkiG9w0BAQsFAAOCAQEAHNHTvKF4N97IhtWEnWjJKRk/rGib nU85TsO7dHNQurfNCXfA3XS1VhajYHngQngu9O/4FilTMGS8bMWdHK6CG52TJJqi j0A4XMgn4U7yDXQbgfhYaLqeAjjORt8VUzwxbUVFPGUOp67nINwph422oI5G073j +freLgjN1qeCY4U82ph9k11E4IUk+DkbAZ1aUi/EiWeAM+t5KQK0T36QUKayzOXb /RAfQHPe2r1xRSZCiw/qnFcWUdIxUoAHiiSYTtDl/i6E0C/u0d3E7G40UO4EZSx7 GDO5R0yvL71bRUhmuvHHuECnxZPIVo13YEHagBJaURZi52Urki8UoCTQOQ== -----END CERTIFICATE-----Generated at Sun May 18 23:52:55 2025 by rpki-client