$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/BVl20lOZp9DNAYV_y5BP4ndq770.roa File: BVl20lOZp9DNAYV_y5BP4ndq770.roa (raw, json) Hash identifier: 5oWHCLU+ERFJhL6yvsSyIqfxnSfG+e8QLhMKUAEsCfw= Subject key identifier: 05:59:76:D2:53:99:A7:D0:CD:01:85:7F:CB:90:4F:E2:77:6A:EF:BD Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D Certificate serial: 35 Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/BVl20lOZp9DNAYV_y5BP4ndq770.roa Signing time: Sat 01 Mar 2025 01:29:34 +0000 ROA not before: Sat 01 Mar 2025 01:29:34 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 18071 IP address blocks: 202.244.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D Validity Not Before: Mar 1 01:29:34 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=055976D25399A7D0CD01857FCB904FE2776AEFBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:79:6f:fc:42:46:25:37:37:c9:c3:e4:63: 04:bd:36:0f:ea:24:5b:7d:6a:52:49:7a:6b:73:1c: 6b:7f:08:ba:18:01:ab:70:18:17:ff:d2:74:ad:94: bc:62:5b:6d:7a:e2:63:46:ba:3e:52:4f:9b:54:86: 86:0d:32:4a:00:f4:d4:ce:a4:b2:09:de:b8:97:21: 20:34:66:86:a5:97:19:18:ef:3a:ab:b1:40:5d:92: 23:5b:48:18:c8:43:e6:86:6c:ca:e2:7d:46:7f:e8: 5d:fe:9e:d0:6d:97:8b:b4:e3:8a:82:0f:ed:be:21: 2c:3c:5d:be:a2:7c:fb:22:a6:f4:5a:b4:7a:86:97: 52:08:5a:05:ad:10:c2:02:a4:3f:48:6b:5a:07:0f: e8:39:3c:4c:e7:05:ef:a0:ab:1e:86:e2:ee:e2:e4: 06:37:a6:96:04:00:30:ae:e2:0a:fb:21:72:8d:4e: ff:86:c3:93:a1:2e:56:58:d8:af:a5:a7:5c:5d:68: 4e:fc:31:23:31:35:48:e9:0a:f6:04:50:54:4a:08: 69:be:22:9c:9e:0a:1d:48:1e:40:c8:74:51:6a:f3: 32:3c:65:c2:30:68:ad:82:a0:44:07:17:5b:e8:e3: b5:09:2f:ee:08:96:1f:12:0b:a4:fb:cb:73:c8:c0: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:59:76:D2:53:99:A7:D0:CD:01:85:7F:CB:90:4F:E2:77:6A:EF:BD X509v3 Authority Key Identifier: keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/BVl20lOZp9DNAYV_y5BP4ndq770.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.244.202.0/23 Signature Algorithm: sha256WithRSAEncryption 96:46:19:f2:2c:d2:a5:b3:12:f6:06:ad:e9:25:1d:a6:cc:cc: 58:09:9c:2b:8d:bd:29:91:11:1e:8e:6a:b7:bd:cc:be:7d:d9: fd:06:91:15:69:09:d6:d7:dc:ed:c8:7f:45:77:1d:63:3b:2d: e5:76:b3:83:e4:0f:69:c6:1f:e1:25:28:e9:dc:34:70:13:92: 67:cb:9c:ed:cf:7a:50:45:48:2e:2d:4f:f6:f0:55:3f:8e:05: bd:ee:c3:14:1e:4c:ce:fd:3a:1f:6c:77:67:f0:dd:40:d1:eb: ad:10:b9:15:4f:61:c9:a8:39:de:7f:9e:d1:3d:f6:ab:ee:51: df:27:85:b3:8f:64:7c:f4:98:cb:46:2b:ba:1d:43:83:c5:71: 81:0a:04:79:0f:d8:d7:96:20:f0:9f:70:5a:62:89:d0:c9:74: 25:c4:03:81:d0:1d:12:66:30:81:ba:6f:a8:60:02:e3:9a:86: cf:91:2a:a6:81:aa:97:1d:83:68:7a:aa:15:40:3a:30:d8:b4: 24:7f:66:aa:6c:eb:c7:f5:b2:9f:72:f4:08:e1:54:6b:b1:24: 7a:aa:3c:5c:46:6a:86:de:90:e3:b8:ae:96:fd:3e:05:2b:09: b3:2c:1c:a0:7e:41:ae:bb:bf:5d:7e:ec:7d:da:70:6e:83:c0: 1d:c9:d7:a2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI1MDMwMTAx MjkzNFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMDU1OTc2RDI1Mzk5QTdE MENEMDE4NTdGQ0I5MDRGRTI3NzZBRUZCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANUseW/8QkYlNzfJw+RjBL02D+okW31qUkl6a3Mca38IuhgBq3AY F//SdK2UvGJbbXriY0a6PlJPm1SGhg0ySgD01M6ksgneuJchIDRmhqWXGRjvOqux QF2SI1tIGMhD5oZsyuJ9Rn/oXf6e0G2Xi7TjioIP7b4hLDxdvqJ8+yKm9Fq0eoaX UghaBa0QwgKkP0hrWgcP6Dk8TOcF76CrHobi7uLkBjemlgQAMK7iCvshco1O/4bD k6EuVljYr6WnXF1oTvwxIzE1SOkK9gRQVEoIab4inJ4KHUgeQMh0UWrzMjxlwjBo rYKgRAcXW+jjtQkv7giWHxILpPvLc8jAhdcCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQFWXbSU5mn0M0BhX/LkE/id2rvvTAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTkzNy9CVmwyMGxPWnA5RE5BWVZfeTVCUDRuZHE3NzAucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQByvTKMA0GCSqGSIb3DQEBCwUAA4IBAQCWRhnyLNKlsxL2Bq3pJR2mzMxY CZwrjb0pkREejmq3vcy+fdn9BpEVaQnW19ztyH9Fdx1jOy3ldrOD5A9pxh/hJSjp 3DRwE5Jny5ztz3pQRUguLU/28FU/jgW97sMUHkzO/TofbHdn8N1A0eutELkVT2HJ qDnef57RPfar7lHfJ4Wzj2R89JjLRiu6HUODxXGBCgR5D9jXliDwn3BaYonQyXQl xAOB0B0SZjCBum+oYALjmobPkSqmgaqXHYNoeqoVQDow2LQkf2aqbOvH9bKfcvQI 4VRrsSR6qjxcRmqG3pDjuK6W/T4FKwmzLBygfkGuu79dfux92nBug8Adydei -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:10 2025 by rpki-client