$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_D6bKvsEToYGZS73boGveP5AVEI.roa File: _D6bKvsEToYGZS73boGveP5AVEI.roa (raw, json) Hash identifier: 1EXgTiMST2vGvQRqR/GIR8yimWu47TijwGckyZ+dj64= Subject key identifier: FC:3E:9B:2A:FB:04:4E:86:06:65:2E:F7:6E:81:AF:78:FE:40:54:42 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 045F Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_D6bKvsEToYGZS73boGveP5AVEI.roa Signing time: Tue 01 Apr 2025 01:42:28 +0000 ROA not before: Tue 01 Apr 2025 01:42:28 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:2e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 22:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:42:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=FC3E9B2AFB044E8606652EF76E81AF78FE405442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:05:0b:7b:7a:94:44:a5:7f:11:9e:7d:68: 66:52:72:2c:37:17:c1:da:af:63:b4:50:3f:ae:5a: fd:0d:35:a6:bf:20:c8:da:28:10:bf:e0:0d:51:d4: a4:af:04:0d:3e:5e:02:a8:3f:2d:a2:2b:55:b7:6d: ae:ad:78:36:5a:0b:96:6c:d4:14:1d:aa:d9:b3:d6: a5:0c:d6:6d:b5:48:01:74:b3:87:71:ff:5e:23:69: ff:88:25:17:ce:21:5c:89:bd:df:ca:30:32:f6:38: 9d:40:ba:fa:b6:ff:9a:24:b4:b7:d4:63:97:0f:16: e0:37:63:ca:9e:c0:19:43:37:40:da:b3:d6:d2:29: 3a:62:6e:5d:ee:d9:a0:f3:01:3a:ea:e9:8b:ac:72: 21:d1:22:fe:71:75:cc:ea:6a:c2:12:b0:5c:58:dd: a4:24:e6:9c:9e:e5:e4:ff:e9:ca:eb:be:8c:c2:86: 1b:87:e7:c3:85:41:33:0c:3e:66:14:7c:6a:ba:56: ab:25:e4:b8:32:27:f9:5a:49:c9:1d:29:a9:cd:e7: b7:9c:db:f5:78:ac:57:30:dc:05:3d:1d:3a:b6:d4: e3:7d:2b:72:43:e7:48:e3:0d:6b:55:4a:e7:81:91: 2e:21:67:0f:e7:14:98:59:1e:92:48:5b:77:7d:2a: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3E:9B:2A:FB:04:4E:86:06:65:2E:F7:6E:81:AF:78:FE:40:54:42 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_D6bKvsEToYGZS73boGveP5AVEI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:2e00::/40 Signature Algorithm: sha256WithRSAEncryption 2b:9c:62:3c:82:88:db:67:8a:04:b9:b8:53:c8:73:f9:96:f5: bf:17:c8:5b:5f:ce:af:62:9b:c9:1b:9c:c1:06:fe:0b:e4:fd: d1:ac:92:d0:cc:9f:11:17:dd:ae:8e:e0:9c:0e:3d:3f:25:16: 76:78:e9:48:5a:51:16:99:08:9b:30:a6:5a:fc:d8:67:f1:74: e9:ea:d9:97:6b:fa:f4:80:f0:b7:79:ae:1e:10:8d:98:27:11: 9f:fb:8e:77:f9:ff:a4:d6:c1:39:3b:4c:9e:16:a5:5b:f5:10: 1c:fb:6e:1e:5e:3b:67:00:f9:4d:b6:fe:23:09:c2:21:7a:b9: ac:3f:cb:d1:eb:72:88:dc:be:87:d6:8f:50:76:af:a0:9d:36: a6:4c:86:db:7f:85:40:12:04:7a:aa:f9:04:be:82:b5:ef:4e: 77:ad:10:26:86:a4:b7:d2:36:36:3f:c1:56:30:1f:47:a7:b8: bc:39:61:54:bc:90:c8:45:68:79:36:4e:b1:d2:8b:09:a1:bb: 71:5f:ba:84:f9:a5:c6:9a:fe:a4:e0:d9:9d:29:67:35:94:2c: f2:18:f2:89:52:ba:44:4e:35:e6:bb:8f:2b:9c:73:8e:50:df: 2e:be:bb:8e:bd:6d:81:e5:fe:f7:06:b5:9c:06:db:ed:ad:0b: 52:9d:9e:f5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTQyMjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZDM0U5QjJBRkIwNDRF ODYwNjY1MkVGNzZFODFBRjc4RkU0MDU0NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAxgULe3qURKV/EZ59aGZSciw3F8Har2O0UD+uWv0NNaa/IMja KBC/4A1R1KSvBA0+XgKoPy2iK1W3ba6teDZaC5Zs1BQdqtmz1qUM1m21SAF0s4dx /14jaf+IJRfOIVyJvd/KMDL2OJ1Auvq2/5oktLfUY5cPFuA3Y8qewBlDN0Das9bS KTpibl3u2aDzATrq6YusciHRIv5xdczqasISsFxY3aQk5pye5eT/6crrvozChhuH 58OFQTMMPmYUfGq6Vqsl5LgyJ/laSckdKanN57ec2/V4rFcw3AU9HTq21ON9K3JD 50jjDWtVSueBkS4hZw/nFJhZHpJIW3d9KnY5AgMBAAGjggIqMIICJjAdBgNVHQ4E FgQU/D6bKvsEToYGZS73boGveP5AVEIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9fRDZiS3ZzRVRvWUdaUzczYm9HdmVQNUFWRUku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAay4wDQYJKoZIhvcNAQELBQADggEBACucYjyCiNtnigS5uFPI c/mW9b8XyFtfzq9im8kbnMEG/gvk/dGsktDMnxEX3a6O4JwOPT8lFnZ46UhaURaZ CJswplr82GfxdOnq2Zdr+vSA8Ld5rh4QjZgnEZ/7jnf5/6TWwTk7TJ4WpVv1EBz7 bh5eO2cA+U22/iMJwiF6uaw/y9HrcojcvofWj1B2r6CdNqZMhtt/hUASBHqq+QS+ grXvTnetECaGpLfSNjY/wVYwH0enuLw5YVS8kMhFaHk2TrHSiwmhu3FfuoT5pcaa /qTg2Z0pZzWULPIY8olSukRONea7jyucc45Q3y6+u469bYHl/vcGtZwG2+2tC1Kd nvU= -----END CERTIFICATE-----Generated at Mon Apr 14 04:27:12 2025 by rpki-client