$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20060/IwELpmB_-EhQXWdKH6sQ_qDoCR4.roa File: IwELpmB_-EhQXWdKH6sQ_qDoCR4.roa (raw, json) Hash identifier: ulc05Tu4WIGiIgONjyAtrnHnh80I0NJWLdVaQPgc8eE= Subject key identifier: 23:01:0B:A6:60:7F:F8:48:50:5D:67:4A:1F:AB:10:FE:A0:E8:09:1E Certificate issuer: /CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D Certificate serial: 19 Authority key identifier: C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/IwELpmB_-EhQXWdKH6sQ_qDoCR4.roa Signing time: Tue 01 Apr 2025 01:31:10 +0000 ROA not before: Tue 01 Apr 2025 01:31:10 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 131928 IP address blocks: 133.226.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D Validity Not Before: Apr 1 01:31:10 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=23010BA6607FF848505D674A1FAB10FEA0E8091E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:48:ec:d5:9d:ac:9a:66:ce:a7:73:54:ea: 6f:a1:58:dc:0b:9d:0d:8d:bb:20:fe:23:3f:3b:ec: 88:1b:27:a1:7e:26:b4:52:1d:2d:07:ad:8d:66:30: 81:19:07:74:9b:97:1e:cc:c4:11:e1:22:ac:e6:d6: 24:ca:ed:45:60:61:36:e4:f2:8a:ed:8a:f3:0d:63: d3:13:57:ef:c6:d3:a4:b5:8c:1a:40:8c:b5:59:03: 82:05:10:76:97:6e:d1:52:97:d0:7e:bd:7a:f3:0f: 58:85:6a:dc:41:65:8e:22:90:a9:3d:d8:30:ec:97: bd:c7:2b:d9:15:ad:04:f7:ec:47:21:62:92:78:1f: af:12:35:5b:e0:84:85:a9:a6:b4:14:cb:c8:35:ab: 43:88:a5:81:b6:a5:dd:d7:86:3d:d4:0f:2b:e5:d2: 86:84:85:9f:c8:88:f2:82:7a:f1:69:00:79:a8:fd: a0:91:13:72:40:6e:38:00:b5:2e:ac:99:ca:8f:05: 33:a8:cc:7b:20:58:46:af:a8:a4:08:11:24:be:8b: 5a:75:10:ea:8e:41:3f:01:63:8c:24:18:ee:34:36: 31:b1:c3:04:9c:4f:22:e0:07:0c:cb:4a:e3:22:b0: b8:63:fe:e7:b0:72:f9:f4:ec:f2:45:9a:72:cd:e0: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:01:0B:A6:60:7F:F8:48:50:5D:67:4A:1F:AB:10:FE:A0:E8:09:1E X509v3 Authority Key Identifier: keyid:C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/IwELpmB_-EhQXWdKH6sQ_qDoCR4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.226.130.0/23 Signature Algorithm: sha256WithRSAEncryption b0:ac:c6:b4:13:49:bf:6c:e5:8f:4d:e7:30:a1:54:03:5a:ec: 5c:3e:45:33:fa:26:44:59:94:3b:d9:bf:ce:45:a7:24:74:a6: d2:6a:dc:63:bb:f3:36:90:89:b4:4d:53:d8:4c:40:3a:92:44: 70:a4:ef:e9:15:cf:ad:2a:0d:cd:99:c1:a6:d7:65:20:44:b9: 71:e5:db:40:fa:23:fa:cd:ac:05:89:a9:e1:81:cb:b7:69:ff: 96:cb:77:16:1d:c7:ae:de:39:c9:9e:7b:0b:09:f8:bb:17:9d: 8c:34:32:8c:94:81:b2:2a:4c:8d:69:1c:33:eb:49:d1:49:61: 54:08:d4:26:56:60:50:85:5c:f5:82:ac:17:85:b8:13:97:a0: de:07:d8:6d:30:ab:ab:65:d5:99:15:9a:21:35:83:2e:93:62: bd:ad:d8:88:e7:20:12:4a:76:96:f3:10:b5:6e:7f:61:0c:b5: e9:03:ba:ca:4c:19:28:aa:3c:71:09:74:34:0b:3e:6a:2d:63: 50:89:46:da:4a:9e:ef:9b:42:ff:e4:c0:12:d2:80:15:5f:a9: 9b:83:d1:0c:9b:b4:0d:73:d2:ba:5c:22:cb:01:c6:1c:dc:5c: 59:a9:97:2d:1c:0d:fe:e8:36:ca:7f:6d:d3:b9:58:23:b4:a0: 7e:ec:98:31 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMTYz QTMzODc1OTJGOTZCMUJDQzc3RjhBQ0ZDRjRGMUYxMUZBOTlEMB4XDTI1MDQwMTAx MzExMFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMjMwMTBCQTY2MDdGRjg0 ODUwNUQ2NzRBMUZBQjEwRkVBMEU4MDkxRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANKZSOzVnayaZs6nc1Tqb6FY3AudDY27IP4jPzvsiBsnoX4mtFId LQetjWYwgRkHdJuXHszEEeEirObWJMrtRWBhNuTyiu2K8w1j0xNX78bTpLWMGkCM tVkDggUQdpdu0VKX0H69evMPWIVq3EFljiKQqT3YMOyXvccr2RWtBPfsRyFikngf rxI1W+CEhammtBTLyDWrQ4ilgbal3deGPdQPK+XShoSFn8iI8oJ68WkAeaj9oJET ckBuOAC1LqyZyo8FM6jMeyBYRq+opAgRJL6LWnUQ6o5BPwFjjCQY7jQ2MbHDBJxP IuAHDMtK4yKwuGP+57By+fTs8kWacs3g4dsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQjAQumYH/4SFBdZ0ofqxD+oOgJHjAfBgNVHSMEGDAWgBTBY6M4dZL5axvMd/is /PTx8R+pnTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNjAvd1dPak9IV1MtV3NiekhmNHJQejA4ZkVmcVowLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvd1dPak9IV1MtV3NiekhmNHJQejA4 ZkVmcVowLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDYwL0l3RUxwbUJfLUVoUVhXZEtINnNRX3FEb0NSNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGF4oIwDQYJKoZIhvcNAQELBQADggEBALCsxrQTSb9s5Y9N5zChVANa 7Fw+RTP6JkRZlDvZv85FpyR0ptJq3GO78zaQibRNU9hMQDqSRHCk7+kVz60qDc2Z wabXZSBEuXHl20D6I/rNrAWJqeGBy7dp/5bLdxYdx67eOcmeewsJ+LsXnYw0MoyU gbIqTI1pHDPrSdFJYVQI1CZWYFCFXPWCrBeFuBOXoN4H2G0wq6tl1ZkVmiE1gy6T Yr2t2IjnIBJKdpbzELVuf2EMtekDuspMGSiqPHEJdDQLPmotY1CJRtpKnu+bQv/k wBLSgBVfqZuD0QybtA1z0rpcIssBxhzcXFmply0cDf7oNsp/bdO5WCO0oH7smDE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:56:29 2025 by rpki-client