$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/C9mc4kGSwUz5FSJ0gu1HsY_AWZk.roa File: C9mc4kGSwUz5FSJ0gu1HsY_AWZk.roa (raw, json) Hash identifier: okQYjLQWd5+INcOq4/0FrxS9A9P9CWL36dnprxaHp8o= Subject key identifier: 0B:D9:9C:E2:41:92:C1:4C:F9:15:22:74:82:ED:47:B1:8F:C0:59:99 Certificate issuer: /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31 Certificate serial: 55 Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/C9mc4kGSwUz5FSJ0gu1HsY_AWZk.roa Signing time: Thu 01 May 2025 01:34:26 +0000 ROA not before: Thu 01 May 2025 01:34:26 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131965 IP address blocks: 220.158.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31 Validity Not Before: May 1 01:34:26 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=0BD99CE24192C14CF915227482ED47B18FC05999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:95:a4:1a:c6:5b:20:19:c1:44:96:ff:c1: 42:b2:f8:1e:e3:0f:4f:a4:ce:dd:32:5d:31:9b:e2: d7:1b:a5:c5:70:7d:4d:27:d7:6f:51:bc:fa:a9:62: 1e:3b:a2:a9:3a:23:bd:ec:08:0f:67:12:2f:d3:1c: a1:25:87:b0:5c:9c:83:1c:42:cf:b5:1f:cb:d9:1c: d7:e0:e7:81:49:f7:9c:df:65:ac:4a:92:23:3f:fa: a1:65:1b:3f:83:94:5b:94:a4:b2:98:6f:48:d9:5d: a8:03:5c:58:d8:93:1b:76:0c:c8:ce:c9:bf:10:eb: e3:e4:35:87:d1:d2:ee:bb:85:8f:69:71:5c:b6:0e: ac:8a:d9:ee:fe:00:e4:79:65:c9:82:df:2e:4e:2e: d8:1b:84:9c:26:eb:a4:b7:9a:fd:93:a1:4e:70:22: 37:f6:c1:fc:10:cc:9c:3f:59:98:24:15:b4:92:c0: 9a:ec:16:66:03:c1:88:ea:3c:a6:5c:4c:6b:5b:ad: 68:11:7f:e9:4a:a2:d4:54:77:7d:0e:a2:b2:a8:58: 22:c6:60:bf:8f:10:16:af:21:b7:ce:4a:b5:9c:e6: de:34:be:85:48:3e:94:0a:eb:94:03:d5:78:e0:bd: 0f:aa:21:14:5b:fd:dd:a0:af:a7:f9:7b:73:86:1b: 09:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D9:9C:E2:41:92:C1:4C:F9:15:22:74:82:ED:47:B1:8F:C0:59:99 X509v3 Authority Key Identifier: keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/C9mc4kGSwUz5FSJ0gu1HsY_AWZk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.158.16.0/20 Signature Algorithm: sha256WithRSAEncryption 5d:53:d0:04:ef:23:06:6e:35:a5:d1:6b:ab:15:04:2f:22:43: f9:74:bd:4a:de:9c:32:61:de:99:27:ac:a4:3a:cb:2b:51:a8: 58:ae:fe:bc:34:83:0e:be:9a:ea:54:d8:46:90:67:ad:47:b7: 94:91:3e:92:33:a4:82:f9:84:0e:be:f6:d5:b1:71:a1:cb:1b: e3:f8:57:32:08:7d:90:46:fa:e7:58:be:69:c7:d4:c2:59:65: 88:37:96:ff:d5:4e:8e:ea:f5:08:dc:2a:b4:a4:a4:d9:a3:ea: 0f:b7:cc:13:b9:05:36:b3:11:47:a8:57:b1:20:87:8a:55:a9: 73:4e:4e:5e:57:20:95:9f:32:82:0c:dd:7f:5f:4b:c5:3d:aa: 89:6b:8d:0d:28:c6:1c:18:d3:47:03:ac:9b:31:ac:d5:04:09: be:db:70:80:f2:56:60:92:81:e7:85:93:57:50:18:8d:eb:55: 02:e2:3d:b9:d9:9b:db:e1:e7:c8:39:62:b6:3e:83:77:7c:b8: da:42:dd:5c:b1:e4:ca:9d:3a:aa:d5:79:bb:31:49:76:b3:a0: 62:54:a6:50:83:c1:6a:c3:97:8c:d4:03:a7:54:c6:cd:16:2e: 81:22:d8:8c:8f:38:8c:c6:60:2d:4b:81:3f:8b:07:c6:40:91: 8d:ce:35:51 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MkUz MjQ1N0MxNkJBODc0MjE2QThGNURCQjBEMzM1QkQxNDhDQjMxMB4XDTI1MDUwMTAx MzQyNloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMEJEOTlDRTI0MTkyQzE0 Q0Y5MTUyMjc0ODJFRDQ3QjE4RkMwNTk5OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALZXlaQaxlsgGcFElv/BQrL4HuMPT6TO3TJdMZvi1xulxXB9TSfX b1G8+qliHjuiqTojvewID2cSL9McoSWHsFycgxxCz7Ufy9kc1+DngUn3nN9lrEqS Iz/6oWUbP4OUW5SksphvSNldqANcWNiTG3YMyM7JvxDr4+Q1h9HS7ruFj2lxXLYO rIrZ7v4A5HllyYLfLk4u2BuEnCbrpLea/ZOhTnAiN/bB/BDMnD9ZmCQVtJLAmuwW ZgPBiOo8plxMa1utaBF/6Uqi1FR3fQ6isqhYIsZgv48QFq8ht85KtZzm3jS+hUg+ lArrlAPVeOC9D6ohFFv93aCvp/l7c4YbCTcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQL2ZziQZLBTPkVInSC7Uexj8BZmTAfBgNVHSMEGDAWgBRC4yRXwWuodCFqj127 DTNb0UjLMTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlGSXl6RS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlG SXl6RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvQzltYzRrR1N3VXo1RlNKMGd1MUhzWV9BV1prLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNyeEDANBgkqhkiG9w0BAQsFAAOCAQEAXVPQBO8jBm41pdFrqxUELyJD+XS9 St6cMmHemSespDrLK1GoWK7+vDSDDr6a6lTYRpBnrUe3lJE+kjOkgvmEDr721bFx ocsb4/hXMgh9kEb651i+acfUwllliDeW/9VOjur1CNwqtKSk2aPqD7fME7kFNrMR R6hXsSCHilWpc05OXlcglZ8yggzdf19LxT2qiWuNDSjGHBjTRwOsmzGs1QQJvttw gPJWYJKB54WTV1AYjetVAuI9udmb2+HnyDlitj6Dd3y42kLdXLHkyp06qtV5uzFJ drOgYlSmUIPBasOXjNQDp1TGzRYugSLYjI84jMZgLUuBP4sHxkCRjc41UQ== -----END CERTIFICATE-----Generated at Sun May 18 11:17:58 2025 by rpki-client