$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/966/Tg8PZoIof4hdUds-IDtG1hUkS00.roa File: Tg8PZoIof4hdUds-IDtG1hUkS00.roa (raw, json) Hash identifier: ldRLfdb6OpaYh66+YzS4YAigBY/X0ERDxfS7i/EYylg= Subject key identifier: 4E:0F:0F:66:82:28:7F:88:5D:51:DB:3E:20:3B:46:D6:15:24:4B:4D Certificate issuer: /CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5 Certificate serial: 14 Authority key identifier: 0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/Tg8PZoIof4hdUds-IDtG1hUkS00.roa Signing time: Thu 01 May 2025 01:30:22 +0000 ROA not before: Thu 01 May 2025 01:30:22 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131921 IP address blocks: 210.158.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 May 2025 00:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5 Validity Not Before: May 1 01:30:22 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=4E0F0F6682287F885D51DB3E203B46D615244B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:48:c7:85:3d:cd:c2:0a:7e:67:1d:41:10:34: 63:68:af:60:33:49:81:fc:eb:92:70:09:58:67:6c: 18:d0:93:46:5a:3b:77:25:48:07:ff:dc:6d:53:c7: da:df:ae:51:8a:ce:af:d5:4d:8d:4e:c0:7d:5a:3f: 49:b1:54:ed:c8:2a:59:fe:d6:77:2c:5b:c4:27:97: 1f:7d:f4:4d:3e:e0:af:58:5c:8c:4c:a4:21:48:0e: 16:f4:00:4b:37:3c:fb:7c:8e:51:35:a7:fd:9d:95: 33:7a:49:c9:22:52:2a:bc:50:a1:68:61:d9:2f:3e: 12:c7:0b:d5:75:db:e4:47:e8:d0:d8:7f:c5:88:0f: 4c:b5:01:36:76:94:25:84:e0:1d:45:e2:74:16:3d: ed:00:3b:97:14:33:23:89:db:62:a3:61:5a:a3:7d: 99:1c:f0:ac:64:a3:e3:8c:3f:73:df:43:ff:d2:4a: 9e:eb:1f:a6:53:a6:22:83:e6:1b:9f:21:33:ef:7f: bf:eb:eb:dc:6f:60:72:37:23:3b:2a:a1:77:ec:0c: 97:fe:07:3c:49:92:2c:92:57:24:f4:45:34:87:b9: f4:93:60:99:cc:0d:eb:82:1a:68:cd:d1:d2:3d:7d: b2:78:7d:ba:a0:6f:6d:ac:e5:58:74:08:3d:64:df: 85:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0F:0F:66:82:28:7F:88:5D:51:DB:3E:20:3B:46:D6:15:24:4B:4D X509v3 Authority Key Identifier: keyid:0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/Tg8PZoIof4hdUds-IDtG1hUkS00.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.158.32.0/20 Signature Algorithm: sha256WithRSAEncryption 04:cf:9f:87:c7:e6:70:ed:cc:ce:2c:53:c2:9d:27:3f:8d:83: 86:2c:67:7e:03:46:5e:46:64:b1:de:5a:2b:07:db:9c:20:2d: 25:e8:94:ce:19:e3:f5:53:13:80:53:02:e6:95:02:0d:94:e7: 5c:17:0d:71:e5:cd:af:94:89:f0:9b:ab:88:d8:31:6f:49:ef: a1:e8:9c:88:dd:7b:a1:26:0d:99:65:61:50:45:c5:b3:74:fa: 3f:10:3d:31:61:18:d0:5f:61:73:1f:da:05:56:58:74:8a:6a: 24:45:05:54:a2:c2:bf:3a:e9:bf:9d:b2:be:3f:49:95:e4:12: 92:54:66:ff:bd:12:68:f7:83:12:31:47:54:d7:76:0a:74:8e: 94:6f:52:80:d4:93:27:0b:bc:bb:c1:75:71:06:6b:16:ef:cc: 95:48:f9:07:7c:52:d2:97:f1:6f:59:e4:c9:52:e5:6f:36:f4: 0c:d3:1a:4a:b8:93:1c:c5:39:9d:0b:ed:3c:ad:8b:e5:43:bf: dd:5e:f5:68:e3:90:66:9b:0e:88:3d:00:71:ab:77:f9:eb:16: be:f3:de:75:c0:a5:d7:78:58:09:f2:d4:24:97:37:36:51:d4: c0:49:13:18:28:52:61:f9:63:82:d0:33:73:c7:d4:57:ab:15: 36:d3:69:a6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDI2 NkRCODRGREM2OUIzNDJDMjdBRjExNjhFRjg3QTk1QTA3MEY1MB4XDTI1MDUwMTAx MzAyMloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNEUwRjBGNjY4MjI4N0Y4 ODVENTFEQjNFMjAzQjQ2RDYxNTI0NEI0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPFIx4U9zcIKfmcdQRA0Y2ivYDNJgfzrknAJWGdsGNCTRlo7dyVI B//cbVPH2t+uUYrOr9VNjU7AfVo/SbFU7cgqWf7WdyxbxCeXH330TT7gr1hcjEyk IUgOFvQASzc8+3yOUTWn/Z2VM3pJySJSKrxQoWhh2S8+EscL1XXb5Efo0Nh/xYgP TLUBNnaUJYTgHUXidBY97QA7lxQzI4nbYqNhWqN9mRzwrGSj44w/c99D/9JKnusf plOmIoPmG58hM+9/v+vr3G9gcjcjOyqhd+wMl/4HPEmSLJJXJPRFNIe59JNgmcwN 64IaaM3R0j19snh9uqBvbazlWHQIPWTfhaUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRODw9mgih/iF1R2z4gO0bWFSRLTTAfBgNVHSMEGDAWgBQNJm24T9xps0LCevEW jvh6laBw9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTY2L0RTWnR1RV9jYWJOQ3ducnhGbzc0ZXBXZ2NQVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RTWnR1RV9jYWJOQ3ducnhGbzc0ZXBX Z2NQVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NjYvVGc4UFpvSW9mNGhkVWRzLUlEdEcxaFVrUzAwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNKeIDANBgkqhkiG9w0BAQsFAAOCAQEABM+fh8fmcO3MzixTwp0nP42Dhixn fgNGXkZksd5aKwfbnCAtJeiUzhnj9VMTgFMC5pUCDZTnXBcNceXNr5SJ8JuriNgx b0nvoeiciN17oSYNmWVhUEXFs3T6PxA9MWEY0F9hcx/aBVZYdIpqJEUFVKLCvzrp v52yvj9JleQSklRm/70SaPeDEjFHVNd2CnSOlG9SgNSTJwu8u8F1cQZrFu/MlUj5 B3xS0pfxb1nkyVLlbzb0DNMaSriTHMU5nQvtPK2L5UO/3V71aOOQZpsOiD0Acat3 +esWvvPedcCl13hYCfLUJJc3NlHUwEkTGChSYfljgtAzc8fUV6sVNtNppg== -----END CERTIFICATE-----Generated at Mon May 19 03:05:54 2025 by rpki-client