$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KBFNK3SGpk42Necca17aQBzZRPA.roa File: KBFNK3SGpk42Necca17aQBzZRPA.roa (raw, json) Hash identifier: xurTw0pYanLquA7EmEAsSorq67DVSOMbAmFUhyty5K0= Subject key identifier: 28:11:4D:2B:74:86:A6:4E:36:35:E7:1C:6B:5E:DA:40:1C:D9:44:F0 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 04AF Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KBFNK3SGpk42Necca17aQBzZRPA.roa Signing time: Tue 01 Apr 2025 01:49:29 +0000 ROA not before: Tue 01 Apr 2025 01:49:29 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:d600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 07:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:49:29 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=28114D2B7486A64E3635E71C6B5EDA401CD944F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:1b:f4:3e:ec:40:76:39:70:31:94:c0:25: d5:8e:73:5d:9d:f0:61:bb:da:6a:96:ec:73:7e:ef: e3:9e:dd:bb:25:7a:f2:ce:0f:0c:d2:f1:f5:62:77: 2d:99:93:ba:9f:b5:f1:64:73:6a:ac:58:fd:03:f2: d5:f3:25:fd:60:e6:83:c2:8d:be:24:38:6d:b1:5c: bb:1f:eb:d3:74:e1:bb:5e:f5:14:47:27:22:54:a0: 68:c5:fc:c4:2b:68:75:d2:42:5b:8a:0e:62:e8:3d: b4:aa:0f:8a:eb:54:36:03:5a:8a:cb:c4:4e:3b:1a: 95:b0:42:12:8b:3c:64:72:0d:26:63:41:e7:ad:3e: 78:86:6e:1a:6f:c0:3f:ce:7b:7a:b1:32:2b:be:68: e9:90:2d:0f:29:7e:d8:3f:5c:85:2f:5d:6b:58:46: 91:52:68:2f:b2:6a:ef:e9:0b:15:98:68:c0:5d:4d: 82:13:19:ee:71:13:4d:75:44:fa:b1:5c:c0:73:ef: ab:28:53:10:20:88:77:c8:d2:39:1c:19:c7:04:9f: 90:63:5f:6a:aa:fd:be:21:d1:a8:ad:1b:be:02:d8: df:a4:db:2d:17:5e:59:3f:d4:41:68:44:45:5b:48: e7:9b:2a:20:66:ee:f3:e4:d4:97:50:54:c5:57:7b: 0d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:11:4D:2B:74:86:A6:4E:36:35:E7:1C:6B:5E:DA:40:1C:D9:44:F0 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KBFNK3SGpk42Necca17aQBzZRPA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:d600::/40 Signature Algorithm: sha256WithRSAEncryption 1e:17:04:3e:47:fa:08:5d:1a:3c:1e:74:23:b2:df:73:3e:4d: d8:fe:11:02:b7:10:ea:45:13:bb:28:9c:86:89:54:c8:ac:8e: 54:bc:fa:46:e9:85:1a:4d:68:04:71:c6:fc:93:2f:75:71:e7: b2:d5:ab:39:e8:05:e2:33:f2:2a:b4:d9:3b:f7:69:91:8f:90: 4d:c2:93:28:c7:02:6e:fe:c3:76:93:d3:a1:87:6b:50:96:99: 2e:ae:09:88:41:a1:68:13:33:81:82:b6:ee:96:2d:40:c3:87: 38:75:d6:95:f9:a0:22:f7:4c:21:61:4e:a5:69:34:e6:52:c2: dd:94:84:e1:aa:13:eb:85:92:ad:93:79:69:92:59:59:64:d7: 27:21:48:e8:bb:e6:32:7f:6a:15:08:7a:8c:9e:27:20:93:ad: 12:38:5a:42:9d:52:c7:fd:ee:c5:13:7e:f3:5a:c6:0f:b3:4f: 46:de:84:2b:6a:4d:54:92:71:62:15:21:11:de:06:f6:a7:1e: 43:7d:a9:8a:cb:09:2a:42:1c:90:01:6d:14:68:7d:a0:55:16: 2e:d4:f3:fc:a6:36:d3:05:14:b6:bd:df:f3:75:0b:e5:d4:d8: 1b:f9:59:2b:58:fd:8d:7f:8d:08:71:d0:67:0f:4f:8c:be:4d: 16:7d:a2:90 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTQ5MjlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI4MTE0RDJCNzQ4NkE2 NEUzNjM1RTcxQzZCNUVEQTQwMUNEOTQ0RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyyRv0PuxAdjlwMZTAJdWOc12d8GG72mqW7HN+7+Oe3bslevLO DwzS8fVidy2Zk7qftfFkc2qsWP0D8tXzJf1g5oPCjb4kOG2xXLsf69N04bte9RRH JyJUoGjF/MQraHXSQluKDmLoPbSqD4rrVDYDWorLxE47GpWwQhKLPGRyDSZjQeet PniGbhpvwD/Oe3qxMiu+aOmQLQ8pftg/XIUvXWtYRpFSaC+yau/pCxWYaMBdTYIT Ge5xE011RPqxXMBz76soUxAgiHfI0jkcGccEn5BjX2qq/b4h0aitG74C2N+k2y0X Xlk/1EFoREVbSOebKiBm7vPk1JdQVMVXew1NAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUKBFNK3SGpk42Necca17aQBzZRPAwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9LQkZOSzNTR3BrNDJOZWNjYTE3YVFCelpSUEEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa9YwDQYJKoZIhvcNAQELBQADggEBAB4XBD5H+ghdGjwedCOy 33M+Tdj+EQK3EOpFE7sonIaJVMisjlS8+kbphRpNaARxxvyTL3Vx57LVqznoBeIz 8iq02Tv3aZGPkE3CkyjHAm7+w3aT06GHa1CWmS6uCYhBoWgTM4GCtu6WLUDDhzh1 1pX5oCL3TCFhTqVpNOZSwt2UhOGqE+uFkq2TeWmSWVlk1ychSOi75jJ/ahUIeoye JyCTrRI4WkKdUsf97sUTfvNaxg+zT0behCtqTVSScWIVIRHeBvanHkN9qYrLCSpC HJABbRRofaBVFi7U8/ymNtMFFLa93/N1C+XU2Bv5WStY/Y1/jQhx0GcPT4y+TRZ9 opA= -----END CERTIFICATE-----Generated at Mon Apr 7 11:30:30 2025 by rpki-client