$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hZ9vGBOv-lnPhbQVmZ4SXy5SzaI.roa File: hZ9vGBOv-lnPhbQVmZ4SXy5SzaI.roa (raw, json) Hash identifier: M17CuzQ1FEuVS3rPPwErm3pX43E7cSR3fURVtYfMU+E= Subject key identifier: 85:9F:6F:18:13:AF:FA:59:CF:85:B4:15:99:9E:12:5F:2E:52:CD:A2 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 03EB Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hZ9vGBOv-lnPhbQVmZ4SXy5SzaI.roa Signing time: Tue 01 Apr 2025 01:32:03 +0000 ROA not before: Tue 01 Apr 2025 01:32:03 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:4f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:32:03 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=859F6F1813AFFA59CF85B415999E125F2E52CDA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d2:4c:5a:8f:70:f3:1d:e7:01:c7:43:55:96: 6b:a8:67:02:6c:50:33:28:59:4a:74:cc:1f:e3:0b: d2:fb:00:5e:37:14:51:92:c6:0c:6f:a8:91:07:ec: a2:6a:fa:de:37:89:c7:00:f4:2a:80:30:6b:50:74: 73:78:82:20:72:e7:6c:3b:70:ad:bd:21:cd:65:a3: d0:c0:a5:d3:f9:f1:a6:65:84:00:03:34:e1:89:d9: 11:c7:65:2d:0a:c9:5d:9a:f3:db:95:5f:f8:0b:28: 5a:7b:16:62:e4:1d:0e:05:e7:2b:06:db:1f:0e:bb: 0b:b4:6b:c7:b9:eb:8c:75:69:f9:1c:bd:a0:32:fd: 85:fd:8e:11:bb:ae:d4:d8:f3:27:22:88:43:7c:a5: 32:d4:61:47:43:d9:56:8d:35:2e:70:12:1a:80:40: 38:76:b6:fc:c9:f8:fe:8f:6c:79:94:6e:9c:94:e7: 15:c3:53:fd:1e:ed:8d:0d:bf:50:02:f1:09:1a:01: c3:f3:d4:d9:c6:c1:b6:c8:1b:34:d1:80:93:0f:84: 25:e7:65:44:2b:01:bd:71:ab:0c:20:bf:5e:f3:e4: b7:70:d2:40:b9:a8:f3:3c:07:bc:cb:b7:57:39:c3: f3:00:a9:ae:79:79:be:1a:8c:49:e0:70:c7:02:34: 62:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9F:6F:18:13:AF:FA:59:CF:85:B4:15:99:9E:12:5F:2E:52:CD:A2 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hZ9vGBOv-lnPhbQVmZ4SXy5SzaI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:4f00::/40 Signature Algorithm: sha256WithRSAEncryption ad:2f:3b:6b:cc:25:4d:bd:82:18:82:5b:23:7b:e6:47:d0:26: ef:26:b5:01:b0:ac:42:64:1a:aa:1b:d9:0c:17:95:f2:a0:cf: 74:36:53:a2:a9:9c:10:40:de:94:d2:b7:4b:ed:2a:04:93:09: bb:43:7f:6f:dc:a8:97:90:9d:c2:a5:ad:9e:b6:76:10:e8:d6: e8:26:7b:98:b1:3f:f5:b0:e3:82:14:09:b6:67:00:e2:83:76: cc:2f:ca:86:40:17:fb:4a:34:5b:bc:57:bd:96:d5:39:34:eb: dd:be:bd:87:c2:34:f7:2e:9a:f5:bd:71:ed:c7:d8:3b:57:43: 72:ad:39:43:d7:c9:3e:94:e3:6d:ff:e8:4d:2f:3d:0d:a9:ef: 72:1c:46:89:5f:82:2d:bb:1b:b8:2f:a6:75:13:1d:f7:84:77: d9:52:10:5a:e2:2d:67:0e:df:b1:ca:55:f8:b7:2f:46:c9:57: 32:d3:fe:dd:88:89:a9:d3:3a:06:72:11:0c:1d:00:81:44:e1: bd:a4:d0:f1:0e:4b:5d:22:1a:51:c9:72:e9:cc:b0:71:0c:88: 9e:75:c7:7d:b4:fe:28:ac:41:3f:6b:70:4f:4b:91:88:27:cd: a9:1c:d9:3c:c8:3f:83:6d:6f:52:66:27:d7:3c:7c:d9:7e:ed: d0:ca:d5:81 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICA+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTMyMDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg1OUY2RjE4MTNBRkZB NTlDRjg1QjQxNTk5OUUxMjVGMkU1MkNEQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDx0kxaj3DzHecBx0NVlmuoZwJsUDMoWUp0zB/jC9L7AF43FFGS xgxvqJEH7KJq+t43iccA9CqAMGtQdHN4giBy52w7cK29Ic1lo9DApdP58aZlhAAD NOGJ2RHHZS0KyV2a89uVX/gLKFp7FmLkHQ4F5ysG2x8Ouwu0a8e564x1afkcvaAy /YX9jhG7rtTY8yciiEN8pTLUYUdD2VaNNS5wEhqAQDh2tvzJ+P6PbHmUbpyU5xXD U/0e7Y0Nv1AC8QkaAcPz1NnGwbbIGzTRgJMPhCXnZUQrAb1xqwwgv17z5Ldw0kC5 qPM8B7zLt1c5w/MAqa55eb4ajEngcMcCNGLJAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUhZ9vGBOv+lnPhbQVmZ4SXy5SzaIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9oWjl2R0JPdi1sblBoYlFWbVo0U1h5NVN6YUku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa08wDQYJKoZIhvcNAQELBQADggEBAK0vO2vMJU29ghiCWyN7 5kfQJu8mtQGwrEJkGqob2QwXlfKgz3Q2U6KpnBBA3pTSt0vtKgSTCbtDf2/cqJeQ ncKlrZ62dhDo1ugme5ixP/Ww44IUCbZnAOKDdswvyoZAF/tKNFu8V72W1Tk0692+ vYfCNPcumvW9ce3H2DtXQ3KtOUPXyT6U423/6E0vPQ2p73IcRolfgi27G7gvpnUT HfeEd9lSEFriLWcO37HKVfi3L0bJVzLT/t2IianTOgZyEQwdAIFE4b2k0PEOS10i GlHJcunMsHEMiJ51x320/iisQT9rcE9LkYgnzakc2TzIP4Ntb1JmJ9c8fNl+7dDK 1YE= -----END CERTIFICATE-----Generated at Mon Apr 7 08:04:27 2025 by rpki-client