$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/QnDnc70SEId4YX9wGwGI30pp2ww.roa File: QnDnc70SEId4YX9wGwGI30pp2ww.roa (raw, json) Hash identifier: bSBM4xrJp8X0xG7Z3SyvRtsYysO5sAt419sQoyExPJs= Subject key identifier: 42:70:E7:73:BD:12:10:87:78:61:7F:70:1B:01:88:DF:4A:69:DB:0C Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0212 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/QnDnc70SEId4YX9wGwGI30pp2ww.roa Signing time: Sat 01 Mar 2025 01:31:10 +0000 ROA not before: Sat 01 Mar 2025 01:31:10 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 125.200.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:31:10 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=4270E773BD12108778617F701B0188DF4A69DB0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:6f:8d:e2:83:22:fe:d9:22:67:79:dc:bc: 36:a2:aa:d7:c3:85:3a:b7:4d:13:69:ba:59:13:d7: a8:b9:0f:6a:49:a1:43:e8:c6:78:14:c2:d3:f4:3e: 9d:11:1f:18:c8:51:48:57:3f:94:81:1f:c5:53:6a: e4:82:96:ed:66:6e:b0:a0:71:d4:39:f0:48:2f:8e: 1f:fe:03:98:3c:4a:b9:00:c0:5d:45:40:0b:22:12: 9a:b4:77:74:ab:8d:aa:21:0f:f7:54:40:60:85:7f: 43:55:17:63:6d:24:5b:5e:c2:20:c3:a6:87:6d:c7: 90:11:ed:4a:27:eb:42:d8:10:ac:ab:e9:2f:79:25: 43:b4:2b:73:b8:66:74:dc:72:cc:a6:dc:99:20:ca: 31:04:31:f3:59:94:2b:f6:15:11:91:42:85:2e:48: 37:9e:e7:66:1b:3e:2c:58:c3:55:92:c1:4c:59:33: 7a:d3:d1:fb:71:bc:10:ae:23:48:dd:ad:97:2c:71: a8:75:5a:4f:c7:7c:55:41:c9:ce:c1:4a:05:3b:04: a8:b4:38:bc:55:78:71:a2:b9:ca:05:0d:3e:29:d9: a7:d1:42:26:6a:a4:7e:9d:18:35:71:c1:27:2a:d7: 9a:e6:e7:5d:f6:c0:25:cc:35:47:c0:85:54:c1:f2: 87:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:70:E7:73:BD:12:10:87:78:61:7F:70:1B:01:88:DF:4A:69:DB:0C X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/QnDnc70SEId4YX9wGwGI30pp2ww.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption c9:bc:ca:21:5e:e1:d4:ab:2a:6a:66:cb:67:0c:d9:d4:7b:a3: 20:15:67:d3:90:e8:9d:9f:c3:82:68:43:97:da:d8:c7:d8:14: 65:9e:1e:d6:c1:0a:d7:d5:a4:cb:86:c6:31:88:dc:1f:48:74: 63:56:f7:d2:2d:9b:80:af:1f:5c:24:ce:0d:76:22:7f:43:7b: 47:81:a5:1b:a2:0f:94:3b:e9:90:a0:7e:9d:2f:58:f6:95:9b: 7c:f0:e4:16:10:c7:a9:e4:24:e1:20:ef:2d:dd:13:af:f7:4f: 86:e8:3e:c1:98:03:10:05:59:93:85:b2:85:33:ad:06:38:21: 07:ac:9d:6f:6f:04:60:bf:a3:43:1c:7f:9b:84:55:fe:5d:be: 8b:fe:61:9f:f5:26:db:7d:96:43:4e:28:7d:06:f2:80:70:6c: 65:8e:9c:ac:d8:e5:1c:6d:7c:5b:ef:9b:2c:06:df:9e:05:33: 2b:05:22:cf:fd:3d:5e:58:d3:7c:8c:bd:82:64:c5:c9:0a:f3: 61:5e:d7:c6:19:83:db:ca:5b:50:cd:b7:2b:81:50:86:ab:b4: 8e:7b:ab:0c:6a:05:d8:4f:41:22:4a:28:43:d9:7d:e7:7f:62: cd:94:61:f3:27:21:56:d8:b3:f5:1c:0a:8b:e0:41:31:47:9e: 9a:68:bf:00 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMxMTBaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQyNzBFNzczQkQxMjEw ODc3ODYxN0Y3MDFCMDE4OERGNEE2OURCMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf82+N4oMi/tkiZ3ncvDaiqtfDhTq3TRNpulkT16i5D2pJoUPo xngUwtP0Pp0RHxjIUUhXP5SBH8VTauSClu1mbrCgcdQ58Egvjh/+A5g8SrkAwF1F QAsiEpq0d3SrjaohD/dUQGCFf0NVF2NtJFtewiDDpodtx5AR7Uon60LYEKyr6S95 JUO0K3O4ZnTccsym3JkgyjEEMfNZlCv2FRGRQoUuSDee52YbPixYw1WSwUxZM3rT 0ftxvBCuI0jdrZcscah1Wk/HfFVByc7BSgU7BKi0OLxVeHGiucoFDT4p2afRQiZq pH6dGDVxwScq15rm5132wCXMNUfAhVTB8oeLAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUQnDnc70SEId4YX9wGwGI30pp2wwwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL1FuRG5jNzBTRUlkNFlYOXdHd0dJMzBwcDJ3dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwN9yDANBgkqhkiG9w0BAQsFAAOCAQEAybzKIV7h1KsqambLZwzZ1HujIBVn 05DonZ/DgmhDl9rYx9gUZZ4e1sEK19Wky4bGMYjcH0h0Y1b30i2bgK8fXCTODXYi f0N7R4GlG6IPlDvpkKB+nS9Y9pWbfPDkFhDHqeQk4SDvLd0Tr/dPhug+wZgDEAVZ k4WyhTOtBjghB6ydb28EYL+jQxx/m4RV/l2+i/5hn/Um232WQ04ofQbygHBsZY6c rNjlHG18W++bLAbfngUzKwUiz/09XljTfIy9gmTFyQrzYV7XxhmD28pbUM23K4FQ hqu0jnurDGoF2E9BIkooQ9l9539izZRh8ychVtiz9RwKi+BBMUeemmi/AA== -----END CERTIFICATE-----Generated at Sat Apr 5 17:42:38 2025 by rpki-client