$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PYjIMO7WaIu6EDBSfxrRYj3G6S4.roa File: PYjIMO7WaIu6EDBSfxrRYj3G6S4.roa (raw, json) Hash identifier: EOQSg7xxolH76xoYYDD6rGPx4BYu73fGflHAU4qNRtk= Subject key identifier: 3D:88:C8:30:EE:D6:68:8B:BA:10:30:52:7F:1A:D1:62:3D:C6:E9:2E Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 04E0 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PYjIMO7WaIu6EDBSfxrRYj3G6S4.roa Signing time: Tue 01 Apr 2025 01:55:50 +0000 ROA not before: Tue 01 Apr 2025 01:55:50 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:8b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:55:50 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=3D88C830EED6688BBA1030527F1AD1623DC6E92E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:4c:1e:57:45:2e:77:f8:08:e3:86:e0:b4: 9f:a5:c6:79:14:b3:ca:e6:b6:20:92:2e:fa:41:3b: 0f:04:ca:cf:f9:5d:a9:ff:b7:fc:f4:69:ee:77:a7: dc:ca:a9:e9:c5:cd:b1:1f:4d:df:e9:9e:1a:be:0f: 76:35:27:00:ec:4f:5d:05:f2:fe:c8:fc:85:0f:55: df:80:c9:f0:25:92:4d:08:50:9d:9e:ba:cc:e1:f3: ff:e9:67:a5:9a:3d:40:26:19:13:72:e3:09:c4:e4: bb:92:82:54:73:4f:ac:ad:b5:5b:f9:6e:2c:9d:82: 35:c0:9f:e4:59:86:93:49:4c:e0:0f:fe:24:f7:3c: 1e:39:65:2d:2a:ff:14:cf:79:f3:8f:8a:65:76:08: 77:21:9b:6d:0f:0c:5f:65:17:dd:ad:bd:17:d8:5a: b1:a9:33:bd:6b:bc:01:12:28:84:ef:db:7b:aa:2e: 01:72:bc:70:9a:7f:2a:c7:df:9f:3f:92:ad:af:9e: 11:c4:34:e2:2e:d6:8c:3b:ec:31:55:78:c5:25:8d: c7:62:18:4c:cc:d3:53:d7:fd:0c:ed:e1:81:dc:1a: 28:13:90:e0:29:47:c0:ce:43:dc:e7:91:1c:dc:ef: bb:4c:ec:92:4d:4f:18:9a:a8:e7:db:29:67:f9:0f: 03:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:88:C8:30:EE:D6:68:8B:BA:10:30:52:7F:1A:D1:62:3D:C6:E9:2E X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PYjIMO7WaIu6EDBSfxrRYj3G6S4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:8b00::/40 Signature Algorithm: sha256WithRSAEncryption 16:6d:8f:69:a1:94:40:22:53:30:5d:03:09:d4:cd:99:08:e0: cc:92:7b:0b:98:03:5b:4f:a4:e6:4b:45:60:88:f0:88:72:67: 71:23:07:29:fa:e3:0d:e4:c8:78:1e:4e:93:7d:1b:7b:ca:10: 49:f1:e4:c1:44:2f:79:b6:31:00:c9:99:33:22:4a:91:fa:71: cc:f6:e9:b2:37:74:fc:86:ef:56:17:7e:25:e6:7e:46:6f:89: 4a:78:41:e6:c7:f7:1a:95:c3:d2:6f:82:d8:be:a1:88:d6:42: de:d7:79:3b:d9:b8:79:5b:78:3f:00:7e:16:23:48:e2:27:82: aa:c7:4b:f0:22:64:30:d5:3b:c6:c7:91:cb:51:1c:62:45:14: 98:91:ff:50:a6:a6:45:8c:83:e8:da:ee:d4:00:cf:d7:13:0e: d5:c5:4f:45:b0:6f:2b:36:0c:34:7f:56:d4:72:b2:2c:f8:cd: 15:b3:43:01:93:e6:31:ea:4b:3e:50:86:96:04:08:61:f1:19: 2b:df:c6:f0:97:23:37:2f:2a:5a:f4:de:9a:de:20:b8:2e:31: 67:d7:8c:fa:3a:14:e2:e7:9e:d4:c3:11:57:92:13:f8:1e:e1: a9:16:2e:d9:a1:85:e9:db:e6:14:f7:00:5e:27:74:3a:81:9b: b5:79:fe:dc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTU1NTBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNEODhDODMwRUVENjY4 OEJCQTEwMzA1MjdGMUFEMTYyM0RDNkU5MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxrEweV0Uud/gI44bgtJ+lxnkUs8rmtiCSLvpBOw8Eys/5Xan/ t/z0ae53p9zKqenFzbEfTd/pnhq+D3Y1JwDsT10F8v7I/IUPVd+AyfAlkk0IUJ2e uszh8//pZ6WaPUAmGRNy4wnE5LuSglRzT6yttVv5biydgjXAn+RZhpNJTOAP/iT3 PB45ZS0q/xTPefOPimV2CHchm20PDF9lF92tvRfYWrGpM71rvAESKITv23uqLgFy vHCafyrH358/kq2vnhHENOIu1ow77DFVeMUljcdiGEzM01PX/Qzt4YHcGigTkOAp R8DOQ9znkRzc77tM7JJNTxiaqOfbKWf5DwN3AgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUPYjIMO7WaIu6EDBSfxrRYj3G6S4wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9QWWpJTU83V2FJdTZFREJTZnhyUllqM0c2UzQu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa4swDQYJKoZIhvcNAQELBQADggEBABZtj2mhlEAiUzBdAwnU zZkI4MySewuYA1tPpOZLRWCI8IhyZ3EjByn64w3kyHgeTpN9G3vKEEnx5MFEL3m2 MQDJmTMiSpH6ccz26bI3dPyG71YXfiXmfkZviUp4QebH9xqVw9Jvgti+oYjWQt7X eTvZuHlbeD8AfhYjSOIngqrHS/AiZDDVO8bHkctRHGJFFJiR/1CmpkWMg+ja7tQA z9cTDtXFT0Wwbys2DDR/VtRysiz4zRWzQwGT5jHqSz5QhpYECGHxGSvfxvCXIzcv Klr03preILguMWfXjPo6FOLnntTDEVeSE/ge4akWLtmhhenb5hT3AF4ndDqBm7V5 /tw= -----END CERTIFICATE-----Generated at Mon Apr 7 08:01:35 2025 by rpki-client