$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/593z62S30HDpehk1iiCt7z5vTH0.roa File: 593z62S30HDpehk1iiCt7z5vTH0.roa (raw, json) Hash identifier: Xjs13ngxQ/Xb7X15iecIBaioEklqx/dohQ6AOqLuwhU= Subject key identifier: E7:DD:F3:EB:64:B7:D0:70:E9:7A:19:35:8A:20:AD:EF:3E:6F:4C:7D Certificate issuer: /CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Certificate serial: 22 Authority key identifier: 8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/593z62S30HDpehk1iiCt7z5vTH0.roa Signing time: Thu 01 May 2025 01:34:18 +0000 ROA not before: Thu 01 May 2025 01:34:18 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131965 IP address blocks: 157.112.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Validity Not Before: May 1 01:34:18 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=E7DDF3EB64B7D070E97A19358A20ADEF3E6F4C7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:03:78:75:15:6e:d2:fe:96:a1:e7:25:68:e4: 27:62:60:45:ae:dd:1e:20:c9:e1:76:80:0b:c9:5a: 55:d6:56:3f:88:f3:4b:d9:23:bb:b9:e3:eb:60:aa: 8c:ed:c0:9a:70:80:36:98:ad:02:8e:a7:d5:55:e7: 63:45:eb:23:bd:a8:21:d7:f0:7e:47:3c:33:7a:27: da:b2:51:c6:27:54:92:a9:df:2b:59:ad:15:52:37: 7c:f9:88:94:fb:41:7d:8a:74:1c:7e:44:e7:74:f4: f1:29:cb:b5:35:a2:38:dd:8e:8f:f3:c3:73:13:d0: c4:90:d3:10:3f:f4:58:05:73:26:73:c4:81:81:66: ca:54:ff:5f:d2:99:62:57:64:27:b1:c4:28:a6:b3: 78:2c:07:d0:11:ff:5c:a7:86:5b:c0:db:0d:d0:11: 19:4a:12:63:79:76:2e:22:b9:16:1a:e9:b2:a4:1c: 45:07:a1:13:a0:ce:e6:e9:dc:00:5b:c2:75:e0:9a: eb:3f:cb:5c:b0:87:cf:dc:b7:b2:ba:ab:e1:d1:79: 19:8a:54:6b:13:ef:10:8f:27:74:a2:1c:71:a8:ab: 59:b3:13:25:1a:70:c1:c2:49:ae:f1:91:33:d1:db: 91:74:d5:15:1b:ca:55:1a:69:e4:1a:92:86:5a:66: 40:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DD:F3:EB:64:B7:D0:70:E9:7A:19:35:8A:20:AD:EF:3E:6F:4C:7D X509v3 Authority Key Identifier: keyid:8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/593z62S30HDpehk1iiCt7z5vTH0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.112.144.0/20 Signature Algorithm: sha256WithRSAEncryption b3:b0:bc:59:5d:29:4a:eb:e0:b0:53:4f:ab:55:cf:77:be:23: 02:7b:ac:2f:28:b7:14:89:5c:4e:b6:50:58:ac:fa:bd:a1:77: 04:f0:e8:4b:5b:e7:8b:12:a3:aa:3b:be:53:f5:9d:ac:eb:84: ff:f4:05:a5:d2:1c:f9:37:0e:62:1d:13:be:45:8a:25:76:08: 9f:47:22:0e:1b:5f:57:e9:55:35:b5:74:40:8d:66:22:61:d3: 0e:71:77:86:00:88:45:da:b0:6b:37:70:46:1c:28:4e:e1:e6: c7:3d:9a:a2:6c:5b:d9:3b:47:33:f8:ce:41:8a:61:68:7b:d3: f0:fe:e7:8b:99:61:d0:1f:23:63:c8:11:b2:51:9f:24:de:2b: f4:49:04:d0:ec:2a:af:09:62:62:b2:ab:ac:6a:83:28:5d:39: df:3b:c2:84:6b:7c:49:e7:83:dd:91:7a:ab:54:05:31:de:6b: 57:0e:a5:a3:12:3b:b8:d2:22:c1:b4:e8:09:03:6e:b8:50:d5: 33:5b:0d:24:9b:83:98:9a:e4:1f:c3:21:07:97:59:f1:68:16: 81:1b:87:7e:e3:c7:0a:e9:6b:e1:f3:d2:24:5c:d3:4e:e6:10: 17:22:23:58:15:db:c9:76:38:bc:2a:be:af:26:f6:c6:e3:f0: 60:8d:02:05 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RTM2 REU3NkFFMUIyNTlEMTJGNTRFRUI5QzZCRkNGMERFNDUzQzA0MB4XDTI1MDUwMTAx MzQxOFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRTdEREYzRUI2NEI3RDA3 MEU5N0ExOTM1OEEyMEFERUYzRTZGNEM3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANMDeHUVbtL+lqHnJWjkJ2JgRa7dHiDJ4XaAC8laVdZWP4jzS9kj u7nj62CqjO3AmnCANpitAo6n1VXnY0XrI72oIdfwfkc8M3on2rJRxidUkqnfK1mt FVI3fPmIlPtBfYp0HH5E53T08SnLtTWiON2Oj/PDcxPQxJDTED/0WAVzJnPEgYFm ylT/X9KZYldkJ7HEKKazeCwH0BH/XKeGW8DbDdARGUoSY3l2LiK5FhrpsqQcRQeh E6DO5uncAFvCdeCa6z/LXLCHz9y3srqr4dF5GYpUaxPvEI8ndKIccairWbMTJRpw wcJJrvGRM9HbkXTVFRvKVRpp5BqShlpmQDMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTn3fPrZLfQcOl6GTWKIK3vPm9MfTAfBgNVHSMEGDAWgBSONt52rhslnRL1Tuuc a/zw3kU8BDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41RlBBUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41 RlBBUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvNTkzejYyUzMwSERwZWhrMWlpQ3Q3ejV2VEgwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ1wkDANBgkqhkiG9w0BAQsFAAOCAQEAs7C8WV0pSuvgsFNPq1XPd74jAnus Lyi3FIlcTrZQWKz6vaF3BPDoS1vnixKjqju+U/WdrOuE//QFpdIc+TcOYh0TvkWK JXYIn0ciDhtfV+lVNbV0QI1mImHTDnF3hgCIRdqwazdwRhwoTuHmxz2aomxb2TtH M/jOQYphaHvT8P7ni5lh0B8jY8gRslGfJN4r9EkE0OwqrwliYrKrrGqDKF053zvC hGt8SeeD3ZF6q1QFMd5rVw6loxI7uNIiwbToCQNuuFDVM1sNJJuDmJrkH8MhB5dZ 8WgWgRuHfuPHCulr4fPSJFzTTuYQFyIjWBXbyXY4vCq+ryb2xuPwYI0CBQ== -----END CERTIFICATE-----Generated at Sun May 18 19:55:50 2025 by rpki-client