$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/poNz5vp0u6Y1qdBidYfyQ8OeyJg.roa File: poNz5vp0u6Y1qdBidYfyQ8OeyJg.roa (raw, json) Hash identifier: 0k4FJyMy/n+VDzQIccgEMzQU50GCmx1DVQaJA+LmfNU= Subject key identifier: A6:83:73:E6:FA:74:BB:A6:35:A9:D0:62:75:87:F2:43:C3:9E:C8:98 Certificate issuer: /CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Certificate serial: 23 Authority key identifier: 8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/poNz5vp0u6Y1qdBidYfyQ8OeyJg.roa Signing time: Thu 01 May 2025 01:34:18 +0000 ROA not before: Thu 01 May 2025 01:34:18 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131965 IP address blocks: 157.112.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 May 2025 06:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Validity Not Before: May 1 01:34:18 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=A68373E6FA74BBA635A9D0627587F243C39EC898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:be:b2:6f:40:75:4e:31:b6:d5:1e:3a:7d: f1:dd:1d:91:36:b1:c8:9b:f6:86:be:4f:4e:26:28: bb:1a:ea:27:dd:01:2b:3f:b5:ad:d2:08:20:91:f0: c0:62:02:47:e0:3f:7f:92:f2:6c:42:f6:d9:fb:d5: 24:e0:d3:03:8a:ba:85:1a:a0:ff:46:f0:12:1a:7e: a8:df:67:05:72:68:68:a1:93:8a:f7:50:1e:dd:20: 34:d5:34:a8:ac:f7:ee:38:d2:f9:46:28:bd:0f:58: 40:7f:f2:c8:7b:c3:f1:18:d8:29:9c:f9:ee:36:2a: 11:c1:dc:9f:85:f6:e7:e6:1e:01:dc:73:0f:14:40: 2c:5e:c8:8d:68:66:23:df:34:85:b4:36:cf:c7:2b: 7d:6b:ec:f9:c1:36:11:ae:fe:2f:e1:b0:d5:4f:b4: d5:82:ac:29:d2:77:07:c1:e9:2d:8c:8a:cf:b3:9c: 1a:79:df:56:ff:6e:dd:dd:ac:02:f1:49:b2:88:30: 8d:01:96:1f:8b:33:04:99:09:6a:47:9f:fe:43:b1: 87:15:59:e1:0d:f4:dc:7f:4e:52:fa:55:e1:82:35: a0:47:71:93:46:12:c5:f3:ad:95:4b:01:b8:3c:8f: b5:43:36:7e:65:5a:41:a1:64:bf:0e:48:48:c4:40: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:83:73:E6:FA:74:BB:A6:35:A9:D0:62:75:87:F2:43:C3:9E:C8:98 X509v3 Authority Key Identifier: keyid:8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/poNz5vp0u6Y1qdBidYfyQ8OeyJg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.112.176.0/20 Signature Algorithm: sha256WithRSAEncryption 04:0c:65:96:e1:d2:cb:ad:2b:f0:0c:7b:8e:73:d8:0a:b2:0a: c2:b4:c9:26:69:5c:7f:e7:5f:d9:bc:e9:fa:9d:c3:87:4e:10: 27:d5:92:0c:3f:77:31:13:69:ec:84:a7:e3:b8:8a:50:b4:d2: d0:9d:44:5c:5c:39:e4:0a:8e:6d:8e:62:07:2d:a7:c3:4f:ed: a2:35:49:c8:b7:08:58:1f:16:f1:a6:95:42:92:47:aa:e8:d1: e9:ee:3b:cd:13:cd:89:c5:65:7e:a1:d0:cc:0e:64:64:5d:e2: 44:26:e3:37:ab:94:e2:8a:23:78:bd:0e:2a:e8:77:c6:6b:9b: 15:aa:3b:b0:c4:56:2e:05:d9:67:1c:c4:c9:0d:6a:f9:19:e8: 5f:e4:63:75:dc:dc:51:4c:52:4c:db:d1:0a:db:f1:60:f1:6d: 08:6c:1f:b2:d3:c2:ec:29:91:14:55:0a:b7:a2:91:55:62:39: e2:ae:80:05:6e:79:4d:69:4e:cd:2e:f4:12:4a:7c:6b:da:d3: 95:9a:2a:08:d3:65:fe:85:20:2a:54:94:c0:79:d4:3c:4f:e7: d1:a6:73:6f:ad:34:bc:64:ca:77:15:2e:55:81:51:98:32:10: fb:0a:17:30:93:a6:75:c8:fc:8b:43:07:9c:f9:b4:06:ab:5b: a1:b4:87:04 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RTM2 REU3NkFFMUIyNTlEMTJGNTRFRUI5QzZCRkNGMERFNDUzQzA0MB4XDTI1MDUwMTAx MzQxOFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQTY4MzczRTZGQTc0QkJB NjM1QTlEMDYyNzU4N0YyNDNDMzlFQzg5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL4bvrJvQHVOMbbVHjp98d0dkTaxyJv2hr5PTiYouxrqJ90BKz+1 rdIIIJHwwGICR+A/f5LybEL22fvVJODTA4q6hRqg/0bwEhp+qN9nBXJoaKGTivdQ Ht0gNNU0qKz37jjS+UYovQ9YQH/yyHvD8RjYKZz57jYqEcHcn4X25+YeAdxzDxRA LF7IjWhmI980hbQ2z8crfWvs+cE2Ea7+L+Gw1U+01YKsKdJ3B8HpLYyKz7OcGnnf Vv9u3d2sAvFJsogwjQGWH4szBJkJakef/kOxhxVZ4Q303H9OUvpV4YI1oEdxk0YS xfOtlUsBuDyPtUM2fmVaQaFkvw5ISMRA0kkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSmg3Pm+nS7pjWp0GJ1h/JDw57ImDAfBgNVHSMEGDAWgBSONt52rhslnRL1Tuuc a/zw3kU8BDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41RlBBUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41 RlBBUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvcG9OejV2cDB1NlkxcWRCaWRZZnlROE9leUpnLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ1wsDANBgkqhkiG9w0BAQsFAAOCAQEABAxlluHSy60r8Ax7jnPYCrIKwrTJ Jmlcf+df2bzp+p3Dh04QJ9WSDD93MRNp7ISn47iKULTS0J1EXFw55AqObY5iBy2n w0/tojVJyLcIWB8W8aaVQpJHqujR6e47zRPNicVlfqHQzA5kZF3iRCbjN6uU4ooj eL0OKuh3xmubFao7sMRWLgXZZxzEyQ1q+RnoX+RjddzcUUxSTNvRCtvxYPFtCGwf stPC7CmRFFUKt6KRVWI54q6ABW55TWlOzS70Ekp8a9rTlZoqCNNl/oUgKlSUwHnU PE/n0aZzb600vGTKdxUuVYFRmDIQ+woXMJOmdcj8i0MHnPm0BqtbobSHBA== -----END CERTIFICATE-----Generated at Mon May 19 11:31:46 2025 by rpki-client