$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30059/2GF01kDgrVv18tnq6aOmxLmnVgg.roa File: 2GF01kDgrVv18tnq6aOmxLmnVgg.roa (raw, json) Hash identifier: b3+sYbzZz7iTw6qZ+D30zgWV9gPDbsggaAm/rK2y3JE= Subject key identifier: D8:61:74:D6:40:E0:AD:5B:F5:F2:D9:EA:E9:A3:A6:C4:B9:A7:56:08 Certificate issuer: /CN=3FCE5741A48139453D71F293D0FBE6DC8126A421 Certificate serial: 13 Authority key identifier: 3F:CE:57:41:A4:81:39:45:3D:71:F2:93:D0:FB:E6:DC:81:26:A4:21 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P85XQaSBOUU9cfKT0Pvm3IEmpCE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/2GF01kDgrVv18tnq6aOmxLmnVgg.roa Signing time: Sat 29 Mar 2025 05:48:50 +0000 ROA not before: Sat 29 Mar 2025 05:48:50 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 23775 IP address blocks: 2001:f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P85XQaSBOUU9cfKT0Pvm3IEmpCE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCE5741A48139453D71F293D0FBE6DC8126A421 Validity Not Before: Mar 29 05:48:50 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D86174D640E0AD5BF5F2D9EAE9A3A6C4B9A75608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:5d:c0:47:9e:10:d7:8c:37:7b:c7:6c:f6: 0b:94:29:07:95:93:a4:ec:1e:9c:5a:54:e6:cf:22: 8c:4c:f3:48:de:b3:73:d5:05:31:cf:cd:15:b3:b2: f1:85:de:b6:03:d2:b3:5c:6f:b6:67:cb:7c:dd:6c: fc:8e:47:1e:82:8a:ac:8e:8c:fe:8f:2b:c3:39:67: b3:3b:e0:fe:27:8e:09:5a:08:cd:bf:bb:bc:1d:e0: 79:39:62:fb:2e:ac:c9:3b:8d:b6:e4:5c:9b:70:de: ce:96:e1:6a:7f:aa:8c:b2:21:bd:0d:e3:06:79:86: d0:84:2f:26:3a:61:3e:5b:d0:02:ed:ac:f7:a0:4a: 3e:7f:81:d4:b2:b5:9d:19:80:27:3b:35:7d:f9:3d: 20:44:b5:26:38:45:57:8b:4a:30:96:fe:0b:0d:38: c4:5d:43:84:c1:b5:02:44:62:d7:81:6d:7b:22:6c: 63:20:9e:b5:c0:9b:2a:15:98:76:ff:9b:e1:51:d6: 44:1a:9a:a3:65:3f:98:77:19:8f:f8:c9:3c:0f:c2: 20:8b:85:1c:62:74:0c:73:44:41:a5:5b:35:4d:16: bd:0f:3e:73:62:fb:0c:fe:36:74:db:49:a8:06:c4: f8:58:ce:28:d1:05:0e:4a:ce:e8:e8:68:37:18:cf: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:61:74:D6:40:E0:AD:5B:F5:F2:D9:EA:E9:A3:A6:C4:B9:A7:56:08 X509v3 Authority Key Identifier: keyid:3F:CE:57:41:A4:81:39:45:3D:71:F2:93:D0:FB:E6:DC:81:26:A4:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P85XQaSBOUU9cfKT0Pvm3IEmpCE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/2GF01kDgrVv18tnq6aOmxLmnVgg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:f80::/32 Signature Algorithm: sha256WithRSAEncryption 1c:23:62:fd:e9:5b:c0:12:69:29:98:1b:8f:b4:4e:47:ed:e0: eb:45:4d:84:28:03:b2:c3:7b:7e:4a:c2:e1:59:77:c3:3d:fa: 6a:15:60:18:d3:23:20:ae:d9:eb:b8:15:00:c4:3c:af:89:bc: 57:d7:d6:4f:f7:bd:61:aa:9e:e5:6f:1c:67:43:5f:98:42:7e: 6e:df:5b:da:9a:46:f3:e8:35:f7:f0:ee:32:aa:92:7f:1d:c4: a6:68:2a:04:8c:ab:ec:c6:cf:60:0f:6f:f8:be:ad:45:ee:91: 1d:5e:ba:c5:f1:fb:2d:de:65:65:53:de:91:27:57:0c:b6:9b: db:37:30:59:0d:10:e7:22:d0:f7:52:7f:d0:cc:f5:d0:12:0e: fe:28:7e:74:72:a9:d5:b7:4a:bd:8f:8c:5c:ac:b4:36:32:e4: 9f:b4:e8:25:d7:b9:06:cf:09:cc:2b:d1:50:7a:3c:63:dc:0a: 86:3a:ec:06:36:30:a0:b8:83:75:10:8c:db:f6:8b:3e:ac:e6: 80:ea:bc:0a:5d:1b:b1:f9:6f:85:18:f6:1f:30:7d:9e:8d:83: ff:06:75:2a:4e:55:34:3d:34:cf:3f:4a:7f:6c:cc:28:8e:ef: 86:cb:55:72:69:d4:6d:7d:fb:e0:b4:76:22:ed:23:8e:b9:a1: 4a:f9:a7:60 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRkNF NTc0MUE0ODEzOTQ1M0Q3MUYyOTNEMEZCRTZEQzgxMjZBNDIxMB4XDTI1MDMyOTA1 NDg1MFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRDg2MTc0RDY0MEUwQUQ1 QkY1RjJEOUVBRTlBM0E2QzRCOUE3NTYwODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMK8XcBHnhDXjDd7x2z2C5QpB5WTpOwenFpU5s8ijEzzSN6zc9UF Mc/NFbOy8YXetgPSs1xvtmfLfN1s/I5HHoKKrI6M/o8rwzlnszvg/ieOCVoIzb+7 vB3geTli+y6syTuNtuRcm3Dezpbhan+qjLIhvQ3jBnmG0IQvJjphPlvQAu2s96BK Pn+B1LK1nRmAJzs1ffk9IES1JjhFV4tKMJb+Cw04xF1DhMG1AkRi14FteyJsYyCe tcCbKhWYdv+b4VHWRBqao2U/mHcZj/jJPA/CIIuFHGJ0DHNEQaVbNU0WvQ8+c2L7 DP42dNtJqAbE+FjOKNEFDkrO6OhoNxjPN9ECAwEAAaOCAikwggIlMB0GA1UdDgQW BBTYYXTWQOCtW/Xy2erpo6bEuadWCDAfBgNVHSMEGDAWgBQ/zldBpIE5RT1x8pPQ ++bcgSakITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNTkvUDg1WFFhU0JPVVU5Y2ZLVDBQdm0zSUVtcENFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUDg1WFFhU0JPVVU5Y2ZLVDBQdm0z SUVtcENFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDU5LzJHRjAxa0RnclZ2MTh0bnE2YU9teExtblZnZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQ+AMA0GCSqGSIb3DQEBCwUAA4IBAQAcI2L96VvAEmkpmBuPtE5H 7eDrRU2EKAOyw3t+SsLhWXfDPfpqFWAY0yMgrtnruBUAxDyvibxX19ZP971hqp7l bxxnQ1+YQn5u31vamkbz6DX38O4yqpJ/HcSmaCoEjKvsxs9gD2/4vq1F7pEdXrrF 8fst3mVlU96RJ1cMtpvbNzBZDRDnItD3Un/QzPXQEg7+KH50cqnVt0q9j4xcrLQ2 MuSftOgl17kGzwnMK9FQejxj3AqGOuwGNjCguIN1EIzb9os+rOaA6rwKXRux+W+F GPYfMH2ejYP/BnUqTlU0PTTPP0p/bMwoju+Gy1VyadRtffvgtHYi7SOOuaFK+adg -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:22 2025 by rpki-client