$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ibCcZEuJr53xGMPo_b1ct2A-5R0.roa File: ibCcZEuJr53xGMPo_b1ct2A-5R0.roa (raw, json) Hash identifier: 0XXOiQHH6W5V6mjBeoYryRT144IVbQyFLexB9I1QO9Y= Subject key identifier: 89:B0:9C:64:4B:89:AF:9D:F1:18:C3:E8:FD:BD:5C:B7:60:3E:E5:1D Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 04C0 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ibCcZEuJr53xGMPo_b1ct2A-5R0.roa Signing time: Tue 01 Apr 2025 01:52:52 +0000 ROA not before: Tue 01 Apr 2025 01:52:52 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:52:52 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=89B09C644B89AF9DF118C3E8FDBD5CB7603EE51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:87:cb:d9:a7:34:c3:a9:1d:dd:3f:93:83: 9a:11:11:2b:64:18:04:e4:d4:58:6f:fb:5f:b5:fe: 0c:c9:4d:91:35:53:11:cb:cf:e5:d1:8a:c6:94:98: 23:2b:5e:50:c0:c7:fe:cb:65:94:db:e9:0a:a2:40: 55:b2:81:61:a5:b9:aa:35:e3:5c:7f:a9:3f:69:27: 0c:19:ba:aa:cf:a7:a7:8a:54:58:5b:fc:9b:24:f4: 30:3e:b2:ea:48:15:da:ae:66:c1:aa:79:e7:d1:69: 3d:da:e5:78:b2:67:97:b3:72:2a:f1:dc:9a:a0:45: 1a:a0:40:f7:06:bc:2b:08:9a:79:c1:53:15:56:cf: bf:b5:69:07:64:c0:74:71:21:84:c4:bf:b7:3d:eb: 58:18:bd:69:06:e6:db:8c:ed:ff:4c:19:9f:5f:83: f8:fd:3c:44:fc:4a:1b:79:e5:0a:ec:a6:d6:c6:6d: 81:18:27:4e:47:4c:d1:f3:45:32:0a:89:00:25:a1: db:48:a8:36:ce:d9:4b:70:bf:a3:ca:ab:1b:3a:95: 30:b4:cf:17:7c:a2:ae:84:cc:b8:8a:ab:49:41:4a: 85:f8:11:ec:cb:b0:72:a8:5e:a6:80:3d:20:4f:7f: a0:a4:2c:71:0a:f7:6b:d2:0a:73:4d:9c:95:a1:52: e7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B0:9C:64:4B:89:AF:9D:F1:18:C3:E8:FD:BD:5C:B7:60:3E:E5:1D X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ibCcZEuJr53xGMPo_b1ct2A-5R0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:e00::/40 Signature Algorithm: sha256WithRSAEncryption bb:cb:76:5f:89:bb:84:73:6e:46:47:74:2e:db:8e:d2:ae:1c: 78:5d:55:63:01:f3:b6:7a:26:69:de:79:d8:73:ad:2b:6b:8f: 67:49:77:c9:22:33:da:ee:80:42:ef:77:db:2a:a9:fa:4b:08: 69:18:e2:51:ff:76:eb:93:ff:28:75:57:28:be:4c:09:fa:30: e0:a5:f3:a8:50:a2:48:25:56:c0:d3:94:7e:90:22:d0:b1:f9: 04:37:93:36:7d:15:07:86:37:03:06:52:5b:82:b7:cb:85:a3: 29:1c:25:5e:0e:4a:6f:b0:ff:3f:1f:21:ea:21:41:fa:82:59: 2b:8b:5f:ec:ac:91:3b:62:c9:05:b7:d5:7d:e1:a8:90:b9:77: 21:02:27:2b:1a:3a:2e:ec:2e:c9:74:48:65:8d:9e:5b:98:63: 17:35:81:2e:bd:1b:7d:88:fd:b7:7d:5d:f2:59:28:4e:b4:1d: 9f:46:49:8a:af:6e:c6:9b:7e:e6:6e:8c:ca:01:cf:da:77:2a: 11:89:92:6a:39:45:84:4e:85:07:82:9a:2c:eb:0d:7f:74:af: 11:6b:f4:65:33:f0:1c:d7:ee:4d:b2:47:dd:01:85:0c:a0:15: 41:30:c7:ce:3a:c1:3e:37:65:73:da:0d:39:8c:fa:f3:ab:ed: 86:d6:44:6b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTUyNTJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg5QjA5QzY0NEI4OUFG OURGMTE4QzNFOEZEQkQ1Q0I3NjAzRUU1MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEXofL2ac0w6kd3T+Tg5oREStkGATk1Fhv+1+1/gzJTZE1UxHL z+XRisaUmCMrXlDAx/7LZZTb6QqiQFWygWGluao141x/qT9pJwwZuqrPp6eKVFhb /Jsk9DA+supIFdquZsGqeefRaT3a5XiyZ5ezcirx3JqgRRqgQPcGvCsImnnBUxVW z7+1aQdkwHRxIYTEv7c961gYvWkG5tuM7f9MGZ9fg/j9PET8Sht55QrsptbGbYEY J05HTNHzRTIKiQAlodtIqDbO2Utwv6PKqxs6lTC0zxd8oq6EzLiKq0lBSoX4EezL sHKoXqaAPSBPf6CkLHEK92vSCnNNnJWhUufTAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUibCcZEuJr53xGMPo/b1ct2A+5R0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9pYkNjWkV1SnI1M3hHTVBvX2IxY3QyQS01UjAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAaw4wDQYJKoZIhvcNAQELBQADggEBALvLdl+Ju4RzbkZHdC7b jtKuHHhdVWMB87Z6JmneedhzrStrj2dJd8kiM9rugELvd9sqqfpLCGkY4lH/duuT /yh1Vyi+TAn6MOCl86hQokglVsDTlH6QItCx+QQ3kzZ9FQeGNwMGUluCt8uFoykc JV4OSm+w/z8fIeohQfqCWSuLX+yskTtiyQW31X3hqJC5dyECJysaOi7sLsl0SGWN nluYYxc1gS69G32I/bd9XfJZKE60HZ9GSYqvbsabfuZujMoBz9p3KhGJkmo5RYRO hQeCmizrDX90rxFr9GUz8BzX7k2yR90BhQygFUEwx846wT43ZXPaDTmM+vOr7YbW RGs= -----END CERTIFICATE-----Generated at Mon Apr 7 07:59:42 2025 by rpki-client