$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SqNSlGEXnWchds4KNl1BDDnJ7JQ.roa File: SqNSlGEXnWchds4KNl1BDDnJ7JQ.roa (raw, json) Hash identifier: llhlVRkMgsKvgYM4C0zaR7QmldVWIBsxEV5p+R8fLMo= Subject key identifier: 4A:A3:52:94:61:17:9D:67:21:76:CE:0A:36:5D:41:0C:39:C9:EC:94 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 03EA Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SqNSlGEXnWchds4KNl1BDDnJ7JQ.roa Signing time: Tue 01 Apr 2025 01:32:03 +0000 ROA not before: Tue 01 Apr 2025 01:32:03 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:c500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:32:03 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4AA3529461179D672176CE0A365D410C39C9EC94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cc:a3:4b:55:20:eb:a7:d9:2e:24:b6:87:e2: 40:14:4b:21:a2:71:a3:5f:16:9a:74:86:1c:47:ca: da:83:7c:de:7b:b1:b2:e3:78:e6:dc:ff:dc:6c:a7: 4f:ec:ed:ab:7a:40:e6:ab:45:e4:05:d6:d9:78:e0: 69:fa:23:2a:79:c7:85:83:1a:e5:79:87:fa:81:f4: 37:2a:db:b9:a7:1a:db:53:b3:cd:b0:e6:60:32:db: c5:11:12:4e:c0:0d:37:e0:5c:9f:68:ae:a2:20:0c: 0e:80:0e:ee:1e:2d:63:f3:44:7a:c4:b1:3b:69:4e: 2a:cf:29:23:8b:9b:b0:ee:41:90:6b:57:1d:aa:63: e5:c1:c9:e0:78:71:43:ac:96:c5:4a:70:23:29:6e: a6:f0:7a:7e:3f:72:18:34:c5:8e:24:db:8a:3f:2a: 46:8d:f4:2a:fd:a4:8f:c6:d7:e6:bd:0f:ea:c0:66: d1:a7:42:57:f8:b4:6f:c3:47:c1:35:7e:8a:62:4b: 19:8c:85:d4:4c:9a:e9:56:12:84:29:57:04:eb:5f: d7:a5:b8:3a:42:7e:75:aa:e4:84:62:d3:0e:f0:0e: f9:38:09:57:9a:50:05:8f:e5:b6:48:91:48:65:a4: 53:1b:65:db:73:fe:18:2b:1e:3f:eb:b2:c5:a2:2c: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A3:52:94:61:17:9D:67:21:76:CE:0A:36:5D:41:0C:39:C9:EC:94 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SqNSlGEXnWchds4KNl1BDDnJ7JQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:c500::/40 Signature Algorithm: sha256WithRSAEncryption 26:a2:01:1a:3f:f0:42:3e:71:43:c3:85:1b:4d:f0:f8:42:6e: f0:6e:4f:14:82:d1:91:74:eb:71:ba:7a:ae:69:f6:61:3c:6c: 8e:23:5e:3e:4e:31:db:16:d8:62:eb:00:20:d9:f3:1a:49:cb: 0d:a0:b8:f7:23:b4:cd:7b:f4:85:d6:c1:27:f4:46:17:47:01: 5b:f8:bf:df:0d:fc:81:4e:c6:f7:cc:44:07:2d:f4:ba:83:0a: 1c:cb:e9:2e:50:13:f9:5e:51:bc:00:4c:63:f4:46:24:4e:6b: 21:ae:2f:65:34:a5:f3:01:22:68:e2:0d:07:89:cc:83:93:34: 1e:c9:18:d0:09:2d:89:db:c8:11:c5:ee:a6:74:e5:12:4a:2f: 2c:dc:2c:cd:2d:01:b6:54:76:cf:df:3a:f6:52:de:b4:d2:b4: 17:6a:f8:c0:d6:c6:3f:47:17:cb:bc:09:ec:dd:8f:a8:2e:22: 3c:69:58:f8:8b:7e:70:1c:d2:d6:15:a9:6c:6c:f8:14:1b:bd: 14:8f:6b:99:a0:cd:f7:72:65:60:ce:34:9a:00:a2:6b:19:b1: 5f:25:2e:c5:2f:b0:08:83:e6:fb:8d:e2:23:65:00:b2:ea:16: d3:d6:f2:ae:55:a7:59:24:49:bf:65:ab:46:7d:86:de:94:60: 80:ae:f6:66 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICA+owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTMyMDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRBQTM1Mjk0NjExNzlE NjcyMTc2Q0UwQTM2NUQ0MTBDMzlDOUVDOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDizKNLVSDrp9kuJLaH4kAUSyGicaNfFpp0hhxHytqDfN57sbLj eObc/9xsp0/s7at6QOarReQF1tl44Gn6Iyp5x4WDGuV5h/qB9Dcq27mnGttTs82w 5mAy28UREk7ADTfgXJ9orqIgDA6ADu4eLWPzRHrEsTtpTirPKSOLm7DuQZBrVx2q Y+XByeB4cUOslsVKcCMpbqbwen4/chg0xY4k24o/KkaN9Cr9pI/G1+a9D+rAZtGn Qlf4tG/DR8E1fopiSxmMhdRMmulWEoQpVwTrX9eluDpCfnWq5IRi0w7wDvk4CVea UAWP5bZIkUhlpFMbZdtz/hgrHj/rssWiLGiJAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUSqNSlGEXnWchds4KNl1BDDnJ7JQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9TcU5TbEdFWG5XY2hkczRLTmwxQkREbko3SlEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa8UwDQYJKoZIhvcNAQELBQADggEBACaiARo/8EI+cUPDhRtN 8PhCbvBuTxSC0ZF063G6eq5p9mE8bI4jXj5OMdsW2GLrACDZ8xpJyw2guPcjtM17 9IXWwSf0RhdHAVv4v98N/IFOxvfMRAct9LqDChzL6S5QE/leUbwATGP0RiROayGu L2U0pfMBImjiDQeJzIOTNB7JGNAJLYnbyBHF7qZ05RJKLyzcLM0tAbZUds/fOvZS 3rTStBdq+MDWxj9HF8u8Cezdj6guIjxpWPiLfnAc0tYVqWxs+BQbvRSPa5mgzfdy ZWDONJoAomsZsV8lLsUvsAiD5vuN4iNlALLqFtPW8q5Vp1kkSb9lq0Z9ht6UYICu 9mY= -----END CERTIFICATE-----Generated at Mon Apr 7 08:02:42 2025 by rpki-client