$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FCSsRgPsHFQfizMujDW42oUDY3Y.roa File: FCSsRgPsHFQfizMujDW42oUDY3Y.roa (raw, json) Hash identifier: T7ZRxikc02M/Qpz5cjWELlbvG5BIxYs7cawTD1ocJtA= Subject key identifier: 14:24:AC:46:03:EC:1C:54:1F:8B:33:2E:8C:35:B8:DA:85:03:63:76 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0454 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FCSsRgPsHFQfizMujDW42oUDY3Y.roa Signing time: Tue 01 Apr 2025 01:42:23 +0000 ROA not before: Tue 01 Apr 2025 01:42:23 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 06:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:42:23 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1424AC4603EC1C541F8B332E8C35B8DA85036376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:4b:ef:a8:ad:c5:d2:59:82:7a:3d:98:9a: 1e:c3:e2:f7:a3:eb:be:b4:5f:2a:10:6b:80:e2:ae: 58:68:89:0f:fd:46:4d:64:e5:c5:33:00:d3:cb:d7: dd:e7:29:99:3d:55:0a:0d:b2:fd:02:34:90:7a:b3: b7:d6:3b:51:15:b0:1b:57:80:1c:62:0b:b0:5a:bc: af:3c:48:8b:16:46:5b:e7:75:3b:f5:d6:72:2e:6e: 6d:b6:b1:d1:88:6b:94:a7:07:a0:50:d1:c3:1f:f8: d1:9c:f2:b3:dd:ae:52:38:82:d7:3e:a2:74:2f:4c: 17:08:5a:29:87:78:df:70:d2:ee:c1:96:59:18:41: a1:2e:cc:71:62:6e:9e:64:2a:3b:21:3a:e3:64:70: 04:34:42:8f:0c:07:1b:c7:90:9d:c4:53:e8:ea:62: 69:db:52:74:04:09:4e:87:75:3b:c0:fe:83:ba:34: 8f:6e:98:5c:5f:2a:14:a4:9f:7b:59:98:a3:b6:b6: 92:44:a8:06:15:c2:8e:db:36:4a:1b:cc:01:44:7e: ba:0f:72:0f:f8:7c:fc:4b:d1:0d:9f:25:57:f5:fc: 01:bc:0f:a6:3f:cb:72:b4:c2:a2:cb:26:0e:18:fa: 04:c9:ea:08:c7:97:93:9d:11:4b:11:2d:5c:02:e4: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:24:AC:46:03:EC:1C:54:1F:8B:33:2E:8C:35:B8:DA:85:03:63:76 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FCSsRgPsHFQfizMujDW42oUDY3Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:0:200::/40 Signature Algorithm: sha256WithRSAEncryption 27:ab:bc:f9:47:b7:89:12:0c:67:77:93:5b:5a:d1:57:ab:0f: 04:57:3f:0c:39:c0:b7:d9:e2:b3:91:77:4d:03:3d:0e:ca:5d: f5:38:cc:c2:6f:46:d2:c4:3b:ed:c3:7a:18:36:ab:3b:7e:8b: ec:e6:cf:ec:42:ba:d8:4d:3b:15:e3:98:61:b5:b4:10:2e:b6: 05:10:cf:bd:94:26:c2:41:6e:e5:08:ef:3e:4d:2c:d5:cb:bc: 00:96:84:b3:90:5d:eb:c9:85:c0:64:8e:48:9d:6d:21:15:e6: 52:50:ef:b6:b6:1a:f6:25:e3:d3:94:3c:aa:31:88:4d:35:6e: 55:d2:dc:a3:a0:b4:28:50:d2:6e:4e:d5:c1:18:e0:db:34:b0: 6c:39:02:fb:7a:c8:a5:b7:58:1f:5a:bf:2b:cb:8a:78:62:d3: 12:63:13:86:eb:e5:6b:43:e8:0f:84:d8:59:bf:e7:00:e3:d2: bc:7d:f2:f7:a5:bf:43:79:22:93:b3:74:5f:ac:01:c7:7c:45: e4:94:ee:60:b7:29:c7:ec:3f:07:36:99:7a:d4:86:99:a4:b7: 66:c3:fe:e5:19:d9:1d:bc:5b:ca:50:23:14:6d:27:3e:1c:04: ee:35:9b:01:3f:98:3f:d1:c0:3f:6a:aa:68:73:f3:c6:dc:e2: 99:3f:fd:b9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTQyMjNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE0MjRBQzQ2MDNFQzFD NTQxRjhCMzMyRThDMzVCOERBODUwMzYzNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0XEvvqK3F0lmCej2Ymh7D4vej6760XyoQa4DirlhoiQ/9Rk1k 5cUzANPL193nKZk9VQoNsv0CNJB6s7fWO1EVsBtXgBxiC7BavK88SIsWRlvndTv1 1nIubm22sdGIa5SnB6BQ0cMf+NGc8rPdrlI4gtc+onQvTBcIWimHeN9w0u7BllkY QaEuzHFibp5kKjshOuNkcAQ0Qo8MBxvHkJ3EU+jqYmnbUnQECU6HdTvA/oO6NI9u mFxfKhSkn3tZmKO2tpJEqAYVwo7bNkobzAFEfroPcg/4fPxL0Q2fJVf1/AG8D6Y/ y3K0wqLLJg4Y+gTJ6gjHl5OdEUsRLVwC5L+7AgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUFCSsRgPsHFQfizMujDW42oUDY3YwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9GQ1NzUmdQc0hGUWZpek11akRXNDJvVURZM1ku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAAAIwDQYJKoZIhvcNAQELBQADggEBACervPlHt4kSDGd3k1ta 0VerDwRXPww5wLfZ4rORd00DPQ7KXfU4zMJvRtLEO+3Dehg2qzt+i+zmz+xCuthN OxXjmGG1tBAutgUQz72UJsJBbuUI7z5NLNXLvACWhLOQXevJhcBkjkidbSEV5lJQ 77a2GvYl49OUPKoxiE01blXS3KOgtChQ0m5O1cEY4Ns0sGw5Avt6yKW3WB9avyvL inhi0xJjE4br5WtD6A+E2Fm/5wDj0rx98velv0N5IpOzdF+sAcd8ReSU7mC3Kcfs Pwc2mXrUhpmkt2bD/uUZ2R28W8pQIxRtJz4cBO41mwE/mD/RwD9qqmhz88bc4pk/ /bk= -----END CERTIFICATE-----Generated at Mon Apr 7 08:09:19 2025 by rpki-client