$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2MDkqUsu7aLUpXFc4T1M6AqETNE.roa File: 2MDkqUsu7aLUpXFc4T1M6AqETNE.roa (raw, json) Hash identifier: jfzEbls8IiuCI6foRg+OwKCPrj5Rh616UHhXlJI0cu8= Subject key identifier: D8:C0:E4:A9:4B:2E:ED:A2:D4:A5:71:5C:E1:3D:4C:E8:0A:84:4C:D1 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 04D2 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2MDkqUsu7aLUpXFc4T1M6AqETNE.roa Signing time: Tue 01 Apr 2025 01:53:01 +0000 ROA not before: Tue 01 Apr 2025 01:53:01 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:fa00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1234 (0x4d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:53:01 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D8C0E4A94B2EEDA2D4A5715CE13D4CE80A844CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:8e:07:bf:a1:b0:1e:df:5b:a5:90:88:b7: f7:41:d8:10:cf:12:97:28:80:5a:f0:0f:6c:e0:9b: b8:e1:24:8f:c2:70:33:e1:75:9c:65:61:18:53:3c: 48:d6:ea:46:d0:d2:d2:c9:53:4b:e4:a5:a6:72:a5: 0c:78:92:2a:18:c7:ca:89:fa:e4:66:f4:0e:13:96: dc:87:64:bf:7f:b2:83:1b:48:ab:ad:2d:fd:90:96: b9:de:7a:f8:6c:45:d5:ab:03:ee:c1:1e:98:4e:3e: cf:a2:48:a3:12:75:bc:0f:7f:f6:7c:dd:a2:ad:2e: 09:b9:e5:d4:90:57:d1:56:ff:24:57:85:d3:41:82: 42:30:77:54:4a:e1:75:e0:c9:93:ae:d1:49:79:8b: b2:46:89:79:e3:2c:61:09:3c:07:5b:1c:f8:3e:26: 51:9b:5a:b1:a9:3c:62:0a:81:4c:47:b2:80:84:c8: 27:ef:4a:15:21:23:a9:fb:3b:51:4f:c3:0d:e9:dc: 21:88:29:2d:cd:2f:00:c2:64:27:d4:5a:75:71:e1: 3f:09:b0:21:d8:c6:99:ae:40:cc:f6:61:5a:05:3e: 54:98:b7:93:65:c1:2b:ec:d2:93:b4:19:98:e8:d2: c9:27:3f:77:ed:62:72:99:c7:52:7f:70:d0:73:ba: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C0:E4:A9:4B:2E:ED:A2:D4:A5:71:5C:E1:3D:4C:E8:0A:84:4C:D1 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2MDkqUsu7aLUpXFc4T1M6AqETNE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:fa00::/40 Signature Algorithm: sha256WithRSAEncryption 51:cd:05:cf:79:5c:84:72:66:20:8d:e1:c0:a0:a1:1d:70:9c: 04:23:8f:32:29:c1:2c:e8:a0:57:5e:1a:74:9f:5d:f1:89:1c: 60:00:ac:36:ac:8a:00:e2:ad:1a:cd:e8:bf:08:e9:c0:cd:36: c7:7a:9a:cb:06:07:31:9e:5f:71:7f:72:5a:e6:df:99:e6:04: b6:db:ec:ec:2a:a0:0a:67:8e:8e:98:24:94:a2:c2:e7:2d:c1: 79:d4:53:8e:ff:92:5b:72:f2:47:44:e6:54:d9:5e:37:7f:76: c5:a1:0b:90:10:8e:e4:f1:ab:43:05:b0:7d:48:d5:4b:d6:a8: 3b:96:55:06:be:c2:ec:be:e4:a4:31:46:e5:16:86:9b:bc:0a: 31:db:19:92:00:26:08:b0:1e:ef:87:c6:3f:d2:b8:f3:7d:fc: eb:04:36:ae:15:35:25:e0:e0:58:fe:b5:b3:28:e2:dc:86:e0: 1d:68:6b:f6:b0:01:e2:5e:fd:5c:05:45:0e:8d:1a:ed:39:44: c9:7a:91:f7:31:f5:99:94:6c:14:a8:e4:35:18:3b:70:e1:eb: fe:01:d4:27:18:7b:ae:9f:b2:2b:90:ab:77:0d:cf:5f:05:b7: cb:0f:b1:c4:c7:33:f3:45:fb:5c:aa:8b:22:e7:52:5c:1a:37: f9:57:17:1e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTUzMDFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ4QzBFNEE5NEIyRUVE QTJENEE1NzE1Q0UxM0Q0Q0U4MEE4NDRDRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9RY4Hv6GwHt9bpZCIt/dB2BDPEpcogFrwD2zgm7jhJI/CcDPh dZxlYRhTPEjW6kbQ0tLJU0vkpaZypQx4kioYx8qJ+uRm9A4TltyHZL9/soMbSKut Lf2QlrneevhsRdWrA+7BHphOPs+iSKMSdbwPf/Z83aKtLgm55dSQV9FW/yRXhdNB gkIwd1RK4XXgyZOu0Ul5i7JGiXnjLGEJPAdbHPg+JlGbWrGpPGIKgUxHsoCEyCfv ShUhI6n7O1FPww3p3CGIKS3NLwDCZCfUWnVx4T8JsCHYxpmuQMz2YVoFPlSYt5Nl wSvs0pO0GZjo0sknP3ftYnKZx1J/cNBzun0dAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQU2MDkqUsu7aLUpXFc4T1M6AqETNEwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS8yTURrcVVzdTdhTFVwWEZjNFQxTTZBcUVUTkUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa/owDQYJKoZIhvcNAQELBQADggEBAFHNBc95XIRyZiCN4cCg oR1wnAQjjzIpwSzooFdeGnSfXfGJHGAArDasigDirRrN6L8I6cDNNsd6mssGBzGe X3F/clrm35nmBLbb7OwqoApnjo6YJJSiwuctwXnUU47/klty8kdE5lTZXjd/dsWh C5AQjuTxq0MFsH1I1UvWqDuWVQa+wuy+5KQxRuUWhpu8CjHbGZIAJgiwHu+Hxj/S uPN9/OsENq4VNSXg4Fj+tbMo4tyG4B1oa/awAeJe/VwFRQ6NGu05RMl6kfcx9ZmU bBSo5DUYO3Dh6/4B1CcYe66fsiuQq3cNz18Ft8sPscTHM/NF+1yqiyLnUlwaN/lX Fx4= -----END CERTIFICATE-----Generated at Mon Apr 7 08:01:29 2025 by rpki-client