$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/hD5TQWYeCGyUk7IqrCvmjkD4-eY.roa File: hD5TQWYeCGyUk7IqrCvmjkD4-eY.roa (raw, json) Hash identifier: pWT7dRyMr2O4W9Gcd9zLQogQWCDkY1qDgkuA7DkvaPU= Subject key identifier: 84:3E:53:41:66:1E:08:6C:94:93:B2:2A:AC:2B:E6:8E:40:F8:F9:E6 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 020E Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/hD5TQWYeCGyUk7IqrCvmjkD4-eY.roa Signing time: Sat 01 Mar 2025 01:31:09 +0000 ROA not before: Sat 01 Mar 2025 01:31:09 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 124.84.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:31:09 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=843E5341661E086C9493B22AAC2BE68E40F8F9E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:d9:dc:a1:30:e7:db:58:43:e7:82:f9:1f: 7d:04:8d:66:51:5d:9b:17:2a:cd:05:44:a0:39:a8: eb:54:0d:55:d8:4e:c7:1b:a6:1f:5e:a9:99:9b:d1: 40:14:f2:dd:f9:f9:86:ca:12:f5:f8:22:56:c9:1a: 11:30:6a:22:e8:a7:97:61:ac:08:02:1f:be:a5:ae: 3a:af:e2:9f:83:cc:37:53:36:fd:4d:98:b2:94:fb: 57:db:81:56:97:35:43:f7:c2:78:80:9a:84:99:93: 5a:7d:f2:86:03:2b:70:c7:f2:dc:7f:b4:ca:9d:a2: 55:66:ea:cb:d8:f4:cf:7e:ee:9c:e7:e6:c7:ed:4e: ac:4c:c0:c7:dd:af:d0:4e:74:f1:1d:7d:a2:9e:46: 0b:17:5f:1d:ef:18:a2:e1:f3:78:83:35:54:0b:02: 7e:34:ff:30:88:af:85:ca:03:7d:96:42:9a:79:25: 40:0d:5f:01:b6:1a:e9:7f:2e:1f:a8:f8:69:47:01: 88:cd:a8:2e:86:cd:a8:cf:58:5a:94:03:fe:59:5a: f3:8c:ea:0d:b5:82:c6:43:2a:d2:aa:01:4f:9e:3a: 2b:53:62:d8:47:94:8e:bf:39:e8:b9:b5:c9:db:1c: 1d:4f:84:e6:4c:41:a8:78:09:04:6a:e8:5c:13:21: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3E:53:41:66:1E:08:6C:94:93:B2:2A:AC:2B:E6:8E:40:F8:F9:E6 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/hD5TQWYeCGyUk7IqrCvmjkD4-eY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.84.0.0/14 Signature Algorithm: sha256WithRSAEncryption 35:e8:ba:2f:20:65:84:56:10:dd:fc:b2:f7:84:47:ec:38:a4: dc:f4:a1:10:a3:9e:f4:d2:39:07:11:30:d8:18:96:be:b9:39: 73:17:9c:91:d9:32:a2:09:f5:9f:27:fd:fa:e6:29:3a:21:ab: df:ed:d1:5a:85:8d:ef:c8:f0:06:24:1b:d3:f2:5d:60:39:01: be:31:c6:8b:e7:19:f3:46:ae:44:d2:93:6e:59:e6:fe:99:00: cf:82:1d:59:d1:4e:88:2e:6d:be:9b:53:b8:ff:0b:c2:d6:58: 3f:6e:22:19:b7:93:b2:2e:18:a6:f5:70:65:e4:2f:2a:8c:5a: 3b:02:b9:a2:03:09:24:f3:41:be:18:2a:c5:1e:c2:e3:d4:bc: d3:6b:d6:40:b6:d0:25:71:5f:bf:33:b8:65:df:3c:9d:52:a6: c7:30:79:4a:49:ff:e1:e8:de:40:32:5d:d3:0f:97:00:4f:d5: 8a:52:90:eb:0d:a9:52:29:28:ed:9e:44:fb:0f:ee:d9:70:08: 67:14:cd:2b:bb:61:63:79:82:aa:42:de:b2:0d:73:14:e8:5a: 83:9c:9b:60:94:1c:92:82:d0:46:1d:43:6a:ef:7f:c5:38:72: ea:36:44:e2:bd:c7:3b:38:f5:52:4b:65:f2:79:32:2e:aa:1c: f0:96:18:ad -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMxMDlaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg0M0U1MzQxNjYxRTA4 NkM5NDkzQjIyQUFDMkJFNjhFNDBGOEY5RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAZ9ncoTDn21hD54L5H30EjWZRXZsXKs0FRKA5qOtUDVXYTscb ph9eqZmb0UAU8t35+YbKEvX4IlbJGhEwaiLop5dhrAgCH76lrjqv4p+DzDdTNv1N mLKU+1fbgVaXNUP3wniAmoSZk1p98oYDK3DH8tx/tMqdolVm6svY9M9+7pzn5sft TqxMwMfdr9BOdPEdfaKeRgsXXx3vGKLh83iDNVQLAn40/zCIr4XKA32WQpp5JUAN XwG2Gul/Lh+o+GlHAYjNqC6GzajPWFqUA/5ZWvOM6g21gsZDKtKqAU+eOitTYthH lI6/Oei5tcnbHB1PhOZMQah4CQRq6FwTIUxRAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUhD5TQWYeCGyUk7IqrCvmjkD4+eYwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL2hENVRRV1llQ0d5VWs3SXFyQ3ZtamtENC1lWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJ8VDANBgkqhkiG9w0BAQsFAAOCAQEANei6LyBlhFYQ3fyy94RH7Dik3PSh EKOe9NI5BxEw2BiWvrk5cxeckdkyogn1nyf9+uYpOiGr3+3RWoWN78jwBiQb0/Jd YDkBvjHGi+cZ80auRNKTblnm/pkAz4IdWdFOiC5tvptTuP8LwtZYP24iGbeTsi4Y pvVwZeQvKoxaOwK5ogMJJPNBvhgqxR7C49S802vWQLbQJXFfvzO4Zd88nVKmxzB5 Skn/4ejeQDJd0w+XAE/VilKQ6w2pUiko7Z5E+w/u2XAIZxTNK7thY3mCqkLesg1z FOhag5ybYJQckoLQRh1Dau9/xThy6jZE4r3HOzj1Uktl8nkyLqoc8JYYrQ== -----END CERTIFICATE-----Generated at Sat Apr 5 17:42:35 2025 by rpki-client