$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WlIeqMznWMoK8pIDHydEM06B_10.roa File: WlIeqMznWMoK8pIDHydEM06B_10.roa (raw, json) Hash identifier: syG6RQCu53xlzD+FMTZa6spoRApmIfdK6IUxS8vGK8g= Subject key identifier: 5A:52:1E:A8:CC:E7:58:CA:0A:F2:92:03:1F:27:44:33:4E:81:FF:5D Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 03CA Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WlIeqMznWMoK8pIDHydEM06B_10.roa Signing time: Tue 01 Apr 2025 01:28:49 +0000 ROA not before: Tue 01 Apr 2025 01:28:49 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:9300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:28:49 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=5A521EA8CCE758CA0AF292031F2744334E81FF5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d0:62:89:25:1a:59:d2:dc:91:df:a6:95:bd: 81:74:10:75:ef:61:97:7e:ae:19:b7:89:3b:b2:3e: 4a:d5:63:19:ba:4f:7d:59:8b:4c:69:66:dc:68:28: 16:14:bf:23:84:00:a3:36:1c:86:a3:d8:99:28:e0: 52:09:04:bb:1d:e5:0e:e8:0f:b3:2c:02:6d:49:97: d9:ec:58:49:4f:a0:4f:04:ae:68:12:ea:2b:d3:45: 0a:18:ab:0a:47:fa:ca:72:70:e6:09:ed:16:b1:af: 7b:02:28:9a:61:4d:6e:41:b8:31:e9:4b:09:b1:bc: 8d:cb:24:e4:da:c6:79:c1:1f:a2:12:0b:f3:29:9c: da:58:e1:d3:cc:bf:7e:e0:67:16:14:ea:27:aa:4d: 6b:80:4c:85:65:ee:4b:ad:fa:58:19:16:ee:8e:78: b7:24:97:d9:c2:1d:22:45:2b:48:a0:5e:cf:f5:19: 6d:5a:63:a7:55:e2:f4:e5:7d:26:8c:6c:36:cd:fe: 7a:25:33:12:48:4c:d1:83:ff:dd:7a:67:a1:d4:bc: cf:bd:e0:2b:da:e8:7e:5a:fc:07:25:1b:58:b6:4f: 55:f2:b0:76:ea:23:79:7d:a2:e2:bc:b1:50:df:87: ae:7b:ba:3e:a9:c1:f3:54:db:fc:fe:96:62:63:c3: 82:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:52:1E:A8:CC:E7:58:CA:0A:F2:92:03:1F:27:44:33:4E:81:FF:5D X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WlIeqMznWMoK8pIDHydEM06B_10.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:9300::/40 Signature Algorithm: sha256WithRSAEncryption aa:10:e4:a5:09:26:82:34:45:28:09:0a:0b:83:72:e2:7d:b3: d3:ac:92:69:36:16:a2:04:c8:1c:13:2e:ef:7c:e7:d2:a8:52: 37:96:1b:2b:44:c1:b5:a6:ca:79:91:ea:25:b9:f6:4d:95:38: 9d:4c:c5:52:e9:20:8c:8a:12:80:47:bb:a3:8a:25:19:e3:2a: 4d:b2:67:ad:82:72:4b:cb:e9:5e:ac:f9:95:ed:ba:c5:80:56: 86:96:2f:42:94:80:88:87:24:90:a9:9c:cb:a8:89:5f:ea:f9: 33:19:30:8f:ff:0d:32:25:9f:7a:4e:33:95:4a:e4:d2:7a:e6: f7:ae:89:7f:ed:a2:2d:f1:17:fe:b6:02:4a:c5:04:8f:ac:d4: 6a:28:1f:00:c9:dd:15:5e:af:8d:ec:d2:e4:7b:d0:96:83:b4: 39:cd:02:66:6c:6b:cb:0b:5b:f3:0b:e9:e7:58:05:54:7e:c4: 6e:fd:4f:01:a7:16:7a:d9:fd:f5:28:66:8e:d8:19:e2:6d:c9: 53:61:83:11:0e:87:72:0c:ed:f2:4e:f2:c0:fb:d7:4d:21:30: b9:84:da:38:fe:af:b6:c0:59:92:0a:60:94:88:dd:29:c5:9c: 87:d2:0b:47:5b:a0:2e:0d:83:ca:22:64:d7:e9:2c:18:59:df: e0:c2:9f:4b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICA8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTI4NDlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVBNTIxRUE4Q0NFNzU4 Q0EwQUYyOTIwMzFGMjc0NDMzNEU4MUZGNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf0GKJJRpZ0tyR36aVvYF0EHXvYZd+rhm3iTuyPkrVYxm6T31Z i0xpZtxoKBYUvyOEAKM2HIaj2Jko4FIJBLsd5Q7oD7MsAm1Jl9nsWElPoE8ErmgS 6ivTRQoYqwpH+spycOYJ7Raxr3sCKJphTW5BuDHpSwmxvI3LJOTaxnnBH6ISC/Mp nNpY4dPMv37gZxYU6ieqTWuATIVl7kut+lgZFu6OeLckl9nCHSJFK0igXs/1GW1a Y6dV4vTlfSaMbDbN/nolMxJITNGD/916Z6HUvM+94Cva6H5a/AclG1i2T1XysHbq I3l9ouK8sVDfh657uj6pwfNU2/z+lmJjw4IBAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUWlIeqMznWMoK8pIDHydEM06B/10wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9XbEllcU16bldNb0s4cElESHlkRU0wNkJfMTAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa5MwDQYJKoZIhvcNAQELBQADggEBAKoQ5KUJJoI0RSgJCguD cuJ9s9Oskmk2FqIEyBwTLu9859KoUjeWGytEwbWmynmR6iW59k2VOJ1MxVLpIIyK EoBHu6OKJRnjKk2yZ62CckvL6V6s+ZXtusWAVoaWL0KUgIiHJJCpnMuoiV/q+TMZ MI//DTIln3pOM5VK5NJ65veuiX/toi3xF/62AkrFBI+s1GooHwDJ3RVer43s0uR7 0JaDtDnNAmZsa8sLW/ML6edYBVR+xG79TwGnFnrZ/fUoZo7YGeJtyVNhgxEOh3IM 7fJO8sD7100hMLmE2jj+r7bAWZIKYJSI3SnFnIfSC0dboC4Ng8oiZNfpLBhZ3+DC n0s= -----END CERTIFICATE-----Generated at Mon Apr 7 08:01:44 2025 by rpki-client