$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a5MBv2KZv9rU3h1A5obrylt_p6I.roa File: a5MBv2KZv9rU3h1A5obrylt_p6I.roa (raw, json) Hash identifier: RQqcYkZepKbCZdqaVW8gvmV+uA6dXnmW4HAp6Jkut84= Subject key identifier: 6B:93:01:BF:62:99:BF:DA:D4:DE:1D:40:E6:86:EB:CA:5B:7F:A7:A2 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 047D Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a5MBv2KZv9rU3h1A5obrylt_p6I.roa Signing time: Tue 01 Apr 2025 01:45:35 +0000 ROA not before: Tue 01 Apr 2025 01:45:35 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:2:c90::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 06:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:45:35 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6B9301BF6299BFDAD4DE1D40E686EBCA5B7FA7A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:32:ef:88:6d:81:47:4c:a8:08:f0:44:b1: e6:5a:2f:db:a1:8f:4f:98:a8:eb:9d:8a:93:04:60: c6:3b:89:3d:cb:c6:54:95:f2:22:ea:7a:3a:ff:4c: ff:9a:02:c7:70:39:66:85:87:f9:34:0b:c9:bb:a1: 9a:be:05:73:be:7e:5f:7e:42:e4:69:37:b5:86:7b: 66:f2:2b:ba:09:5b:5e:5e:55:c0:75:68:58:d9:c3: ef:b7:f1:a9:29:38:1e:7b:ce:81:51:c1:c1:b9:af: e3:38:e5:cf:f3:0d:56:64:82:c7:44:f4:f6:fb:d4: 0f:20:64:49:b5:ea:e0:e8:8f:59:b4:99:f4:76:7f: 7d:ab:14:1e:14:ff:09:82:04:f4:64:2d:dc:88:ac: 4e:66:82:04:ff:4a:7b:14:c3:c9:6e:5c:8d:f5:f2: ea:87:14:3d:b7:df:e1:fc:80:47:13:f1:a8:29:87: 6d:0d:df:eb:b0:13:16:63:b3:7f:e6:35:2c:aa:ea: 27:24:6a:da:2f:c1:bf:07:f3:ed:f1:b6:f3:d6:e6: 25:a8:eb:81:38:76:7a:1a:7b:29:40:8c:6b:48:85: 5e:07:22:e5:b3:7f:aa:de:44:95:8e:50:67:74:18: 97:a7:b6:ad:2f:0d:91:94:1f:b2:89:98:b4:52:95: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:93:01:BF:62:99:BF:DA:D4:DE:1D:40:E6:86:EB:CA:5B:7F:A7:A2 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a5MBv2KZv9rU3h1A5obrylt_p6I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:2:c90::/44 Signature Algorithm: sha256WithRSAEncryption 67:f5:4e:6a:c6:c6:f6:bf:5f:12:32:8f:8a:18:06:d2:21:5e: 6a:63:64:07:2c:fa:09:98:27:2e:40:a9:7d:a8:62:a7:25:79: 75:2b:ab:01:98:3f:18:3e:e0:c5:5c:45:14:15:7d:a8:94:f0: f5:69:b2:fb:55:16:0b:f2:2d:2c:e0:15:e5:0b:8f:3f:44:e3: 16:0b:88:d9:6d:d1:6c:51:0b:11:c4:82:de:5b:6c:8e:23:b2: 7a:e4:11:b6:c1:9a:8c:86:65:09:91:a4:da:6a:14:3c:9c:03: 57:42:16:75:7e:90:d5:35:5e:ab:1e:69:58:81:67:03:87:02: d6:95:ab:c5:4e:b5:3f:04:69:c3:00:bf:b6:25:62:f4:b9:f0: 20:0c:6f:d0:8b:6f:ce:fa:25:9a:71:c8:ff:a4:ff:0c:05:3f: 85:f4:e9:91:6f:ec:0f:23:05:55:a0:82:ee:2d:a7:27:db:13: 48:0a:1e:da:ad:0c:7c:34:b2:ad:4b:60:2a:2c:b2:cc:7d:9a: 43:cf:3c:d4:a7:ba:f4:b3:7c:b1:4d:17:65:03:95:2d:a9:08: 63:e6:76:77:fa:27:51:c6:74:ca:ed:a6:cd:82:ed:4d:e7:67: 76:35:aa:75:17:65:f0:dd:9b:33:4f:2e:9a:81:da:71:09:52: 69:66:a1:4f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTQ1MzVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZCOTMwMUJGNjI5OUJG REFENERFMUQ0MEU2ODZFQkNBNUI3RkE3QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCykzLviG2BR0yoCPBEseZaL9uhj0+YqOudipMEYMY7iT3LxlSV 8iLqejr/TP+aAsdwOWaFh/k0C8m7oZq+BXO+fl9+QuRpN7WGe2byK7oJW15eVcB1 aFjZw++38akpOB57zoFRwcG5r+M45c/zDVZkgsdE9Pb71A8gZEm16uDoj1m0mfR2 f32rFB4U/wmCBPRkLdyIrE5mggT/SnsUw8luXI318uqHFD233+H8gEcT8agph20N 3+uwExZjs3/mNSyq6ickatovwb8H8+3xtvPW5iWo64E4dnoaeylAjGtIhV4HIuWz f6reRJWOUGd0GJentq0vDZGUH7KJmLRSlXcJAgMBAAGjggIrMIICJzAdBgNVHQ4E FgQUa5MBv2KZv9rU3h1A5obrylt/p6IwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9hNU1CdjJLWnY5clUzaDFBNW9icnlsdF9wNkku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcEJAoAAgyQMA0GCSqGSIb3DQEBCwUAA4IBAQBn9U5qxsb2v18SMo+K GAbSIV5qY2QHLPoJmCcuQKl9qGKnJXl1K6sBmD8YPuDFXEUUFX2olPD1abL7VRYL 8i0s4BXlC48/ROMWC4jZbdFsUQsRxILeW2yOI7J65BG2wZqMhmUJkaTaahQ8nANX QhZ1fpDVNV6rHmlYgWcDhwLWlavFTrU/BGnDAL+2JWL0ufAgDG/Qi2/O+iWaccj/ pP8MBT+F9OmRb+wPIwVVoILuLacn2xNICh7arQx8NLKtS2AqLLLMfZpDzzzUp7r0 s3yxTRdlA5UtqQhj5nZ3+idRxnTK7abNgu1N52d2Nap1F2Xw3ZszTy6agdpxCVJp ZqFP -----END CERTIFICATE-----Generated at Mon Apr 7 08:08:08 2025 by rpki-client