$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UT3o6-He5WL9sAlDLYrt6Mxfcis.roa File: UT3o6-He5WL9sAlDLYrt6Mxfcis.roa (raw, json) Hash identifier: AWmYwHrXbzBFvvg+N0OoCOrvt44k7ZZB9CGKgZsV+qs= Subject key identifier: 51:3D:E8:EB:E1:DE:E5:62:FD:B0:09:43:2D:8A:ED:E8:CC:5F:72:2B Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 03C8 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UT3o6-He5WL9sAlDLYrt6Mxfcis.roa Signing time: Tue 01 Apr 2025 01:28:48 +0000 ROA not before: Tue 01 Apr 2025 01:28:48 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:5400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:28:48 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=513DE8EBE1DEE562FDB009432D8AEDE8CC5F722B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:e0:4f:14:2e:a3:26:71:08:ce:24:f2:28: e9:fc:3a:0f:43:53:80:70:0c:75:5c:d8:0f:82:98: 85:27:2c:e2:4b:dc:1a:2c:d5:02:26:a7:29:44:6c: ef:70:d6:03:db:0d:05:bc:0f:51:c3:8b:30:a1:1e: b3:8b:0c:2b:8f:bf:a9:35:c3:a8:64:fe:06:6e:31: 1c:9a:77:c1:fa:50:2b:00:f9:72:25:4f:ba:e7:61: 0c:16:5a:77:f0:8d:b1:5f:04:fb:e4:5e:c5:88:f4: 68:03:9a:e9:5d:7e:e1:e2:9b:38:7a:a1:62:cd:60: c8:bd:52:44:b7:e8:3c:30:ad:fb:ba:62:3f:61:fc: 52:a0:0a:89:6f:ab:a4:b6:a1:97:cd:e0:77:77:a3: 61:3b:9e:36:ff:64:5f:71:2c:3d:34:f2:13:c1:83: ba:3b:26:cf:d9:15:81:6e:a2:ce:9b:5d:23:60:20: d0:e5:47:09:56:81:07:2b:01:a7:64:da:ad:85:c9: af:b1:13:c8:aa:52:3a:4f:12:09:ce:7b:a2:d0:e8: 59:9a:0c:6f:7a:ee:12:f0:02:65:1c:53:ba:c5:92: ac:bc:88:25:ce:0e:73:f9:02:0a:41:7a:92:94:36: 42:25:ac:61:6e:83:04:89:c3:dc:d2:65:32:07:01: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3D:E8:EB:E1:DE:E5:62:FD:B0:09:43:2D:8A:ED:E8:CC:5F:72:2B X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UT3o6-He5WL9sAlDLYrt6Mxfcis.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:5400::/40 Signature Algorithm: sha256WithRSAEncryption 94:4a:bc:53:1a:19:53:8d:75:eb:03:79:90:54:f2:db:c6:4c: ee:b9:53:9d:ca:2b:4d:35:66:ec:d0:8a:79:2f:65:c6:ac:e4: f2:c1:43:3b:25:e9:eb:00:42:67:d7:80:e6:a9:6b:7e:f3:d0: 05:18:fe:09:52:c5:fb:bc:dd:bf:d3:89:57:23:05:b5:a2:fb: fb:4e:47:f2:fe:33:67:2c:a5:8d:07:51:17:1d:07:60:e1:71: d5:03:71:f2:ce:4b:14:2a:01:07:19:5e:4f:40:1c:6f:14:5f: cf:05:9a:86:87:39:2d:a5:e4:75:5c:95:03:d8:16:2b:d5:ac: d2:b0:af:cb:b0:b1:32:e4:bd:e7:b1:e1:60:4d:5f:2e:06:4f: ee:e6:83:22:f9:90:a7:98:d3:ce:0f:db:b3:b8:bd:b9:95:71: 72:12:3e:32:b0:2e:18:bc:dd:dc:1e:c3:07:bc:cd:59:a8:67: 16:42:9d:7f:eb:81:91:63:1c:29:b2:cb:7b:92:43:2a:eb:dd: 82:06:2b:8b:d7:28:66:7c:b1:39:71:55:cb:0d:e5:18:38:16: bd:03:db:49:98:56:08:cd:2d:c9:5c:80:a2:89:00:30:30:6b: a1:54:c1:63:a9:d8:6e:9a:7e:09:32:17:2a:56:43:14:17:79: c1:d9:1c:3b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTI4NDhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDUxM0RFOEVCRTFERUU1 NjJGREIwMDk0MzJEOEFFREU4Q0M1RjcyMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI8+BPFC6jJnEIziTyKOn8Og9DU4BwDHVc2A+CmIUnLOJL3Bos 1QImpylEbO9w1gPbDQW8D1HDizChHrOLDCuPv6k1w6hk/gZuMRyad8H6UCsA+XIl T7rnYQwWWnfwjbFfBPvkXsWI9GgDmuldfuHimzh6oWLNYMi9UkS36Dwwrfu6Yj9h /FKgColvq6S2oZfN4Hd3o2E7njb/ZF9xLD008hPBg7o7Js/ZFYFuos6bXSNgINDl RwlWgQcrAadk2q2Fya+xE8iqUjpPEgnOe6LQ6FmaDG967hLwAmUcU7rFkqy8iCXO DnP5AgpBepKUNkIlrGFugwSJw9zSZTIHAfCXAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUUT3o6+He5WL9sAlDLYrt6MxfciswHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9VVDNvNi1IZTVXTDlzQWxETFlydDZNeGZjaXMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa1QwDQYJKoZIhvcNAQELBQADggEBAJRKvFMaGVONdesDeZBU 8tvGTO65U53KK001ZuzQinkvZcas5PLBQzsl6esAQmfXgOapa37z0AUY/glSxfu8 3b/TiVcjBbWi+/tOR/L+M2cspY0HURcdB2DhcdUDcfLOSxQqAQcZXk9AHG8UX88F moaHOS2l5HVclQPYFivVrNKwr8uwsTLkveex4WBNXy4GT+7mgyL5kKeY084P27O4 vbmVcXISPjKwLhi83dwewwe8zVmoZxZCnX/rgZFjHCmyy3uSQyrr3YIGK4vXKGZ8 sTlxVcsN5Rg4Fr0D20mYVgjNLclcgKKJADAwa6FUwWOp2G6afgkyFypWQxQXecHZ HDs= -----END CERTIFICATE-----Generated at Mon Apr 7 08:05:51 2025 by rpki-client