$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/NIb1hQNcr5N2UhaSApc4J8BI4jg.roa File: NIb1hQNcr5N2UhaSApc4J8BI4jg.roa (raw, json) Hash identifier: eCMuaUGknLxhoDW5h4gSx6tZYKi6kabo9D6g0RiBM6A= Subject key identifier: 34:86:F5:85:03:5C:AF:93:76:52:16:92:02:97:38:27:C0:48:E2:38 Certificate issuer: /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31 Certificate serial: 51 Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/NIb1hQNcr5N2UhaSApc4J8BI4jg.roa Signing time: Thu 01 May 2025 01:34:23 +0000 ROA not before: Thu 01 May 2025 01:34:23 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131965 IP address blocks: 202.254.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31 Validity Not Before: May 1 01:34:23 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=3486F585035CAF937652169202973827C048E238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:2c:34:a6:09:56:f6:a9:05:31:48:37:fa: 8e:98:ed:5c:a0:16:f8:72:43:c8:ec:d4:8a:56:fc: 1e:cc:ca:0b:2e:62:90:c3:10:39:10:e8:44:3c:b1: c7:5c:40:43:7b:60:3f:2a:47:36:64:aa:c4:23:13: 4a:84:16:65:b0:1d:97:71:7a:a5:a5:05:d0:a7:bc: 46:84:fc:63:71:7e:87:df:cd:26:bd:e9:73:c7:a5: dc:0e:cb:91:4d:af:a0:b1:17:dd:b9:69:b7:3a:33: dc:11:ee:49:09:21:a7:42:3f:e8:27:87:d1:14:35: ed:eb:a8:0e:f1:2b:95:07:c2:5c:9c:14:39:75:5d: 7e:d9:6e:a1:a5:c5:53:41:e8:76:bc:a5:02:0f:d2: 1d:60:25:d9:dd:24:e5:d1:23:67:28:7a:7a:d4:88: a3:cf:fa:32:04:27:18:64:06:9a:d5:64:68:76:66: 8f:9c:a7:b1:78:5d:5e:36:57:3d:54:9f:fc:bb:4d: 64:6d:71:a4:68:95:da:98:3f:fa:06:51:e6:db:3e: e7:53:f5:64:42:69:4c:ef:5a:74:e8:20:e9:8c:21: d4:28:40:5c:3d:8d:c1:12:4b:8b:a1:50:06:12:bf: f2:62:e4:26:79:f1:9c:c2:5c:24:06:66:03:54:d0: c2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:86:F5:85:03:5C:AF:93:76:52:16:92:02:97:38:27:C0:48:E2:38 X509v3 Authority Key Identifier: keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/NIb1hQNcr5N2UhaSApc4J8BI4jg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.254.232.0/21 Signature Algorithm: sha256WithRSAEncryption a2:10:f0:da:e0:4a:db:8b:b8:67:c5:03:8a:fc:30:cf:f3:b3: 92:da:ea:ca:cd:5e:67:40:62:ae:1c:9f:c1:f4:6b:18:24:86: f9:19:20:9b:f5:74:e8:2a:1e:6f:13:54:a0:c3:14:c3:d2:48: dc:db:c6:e2:41:5b:66:04:74:29:b4:21:6f:11:3e:46:33:d3: 97:29:f9:a4:63:23:39:11:3f:80:9b:63:8b:1b:0d:15:0b:30: 6b:ea:15:15:7f:14:d2:9c:44:12:06:11:63:63:ae:d1:0a:bd: f5:85:dd:db:b7:b9:fa:89:e0:13:92:55:a5:39:a8:3a:58:2f: 30:53:39:30:81:2c:b3:73:58:a5:f7:b7:15:fc:f4:de:ec:a6: 5a:dc:a9:c2:de:65:dc:34:84:06:70:cf:c7:ad:5a:52:30:99: 87:03:9c:55:b9:00:7c:c4:26:1a:b6:60:74:8b:b9:bb:fc:38: cd:48:1c:fb:a1:83:d6:85:0b:7d:d9:f6:1e:03:8c:4a:89:6f: 52:d9:47:84:eb:6a:09:cf:49:dd:95:be:26:8e:8a:bf:3e:77: ca:48:92:6c:18:c4:d4:e8:04:db:e5:28:1b:af:d8:07:f6:56: 88:04:15:42:3b:cb:b0:88:d9:8f:e4:6f:b2:6c:de:5d:b5:54: c1:26:2c:db -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MkUz MjQ1N0MxNkJBODc0MjE2QThGNURCQjBEMzM1QkQxNDhDQjMxMB4XDTI1MDUwMTAx MzQyM1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMzQ4NkY1ODUwMzVDQUY5 Mzc2NTIxNjkyMDI5NzM4MjdDMDQ4RTIzODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMrPLDSmCVb2qQUxSDf6jpjtXKAW+HJDyOzUilb8HszKCy5ikMMQ ORDoRDyxx1xAQ3tgPypHNmSqxCMTSoQWZbAdl3F6paUF0Ke8RoT8Y3F+h9/NJr3p c8el3A7LkU2voLEX3blptzoz3BHuSQkhp0I/6CeH0RQ17euoDvErlQfCXJwUOXVd ftluoaXFU0HodrylAg/SHWAl2d0k5dEjZyh6etSIo8/6MgQnGGQGmtVkaHZmj5yn sXhdXjZXPVSf/LtNZG1xpGiV2pg/+gZR5ts+51P1ZEJpTO9adOgg6Ywh1ChAXD2N wRJLi6FQBhK/8mLkJnnxnMJcJAZmA1TQwnsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ0hvWFA1yvk3ZSFpIClzgnwEjiODAfBgNVHSMEGDAWgBRC4yRXwWuodCFqj127 DTNb0UjLMTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlGSXl6RS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlG SXl6RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvTkliMWhRTmNyNU4yVWhhU0FwYzRKOEJJNGpnLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8r+6DANBgkqhkiG9w0BAQsFAAOCAQEAohDw2uBK24u4Z8UDivwwz/Ozktrq ys1eZ0BirhyfwfRrGCSG+Rkgm/V06CoebxNUoMMUw9JI3NvG4kFbZgR0KbQhbxE+ RjPTlyn5pGMjORE/gJtjixsNFQswa+oVFX8U0pxEEgYRY2Ou0Qq99YXd27e5+ong E5JVpTmoOlgvMFM5MIEss3NYpfe3Ffz03uymWtypwt5l3DSEBnDPx61aUjCZhwOc VbkAfMQmGrZgdIu5u/w4zUgc+6GD1oULfdn2HgOMSolvUtlHhOtqCc9J3ZW+Jo6K vz53ykiSbBjE1OgE2+UoG6/YB/ZWiAQVQjvLsIjZj+RvsmzeXbVUwSYs2w== -----END CERTIFICATE-----Generated at Sun May 18 10:48:11 2025 by rpki-client