$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jNCRO-X-GXS3q6DoD5oLzKrsaBA.roa File: jNCRO-X-GXS3q6DoD5oLzKrsaBA.roa (raw, json) Hash identifier: wXd5NCPRI1Ug/0/F/CE069viLVlczyb4xppGZx552Ns= Subject key identifier: 8C:D0:91:3B:E5:FE:19:74:B7:AB:A0:E8:0F:9A:0B:CC:AA:EC:68:10 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0479 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jNCRO-X-GXS3q6DoD5oLzKrsaBA.roa Signing time: Tue 01 Apr 2025 01:45:33 +0000 ROA not before: Tue 01 Apr 2025 01:45:33 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:3100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 12:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1145 (0x479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:45:33 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=8CD0913BE5FE1974B7ABA0E80F9A0BCCAAEC6810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:e6:04:b8:4e:ba:dc:94:9b:09:62:42:06: 8c:65:0b:79:20:63:6c:74:49:66:58:08:ec:75:99: 3b:fa:2a:d6:3e:33:ac:67:9f:5f:0b:3e:da:40:0f: ec:6e:5d:93:62:6f:33:35:48:08:13:04:d3:a6:cd: d7:1d:c2:1f:a1:45:3d:e3:d2:d5:d4:cc:75:6b:ab: 0f:a6:22:d1:d8:2b:06:20:1a:ed:ea:ed:ec:39:80: 19:9f:93:80:bf:db:79:f2:13:df:29:03:63:ba:79: 08:98:66:40:b8:d2:a1:8e:4e:9f:15:3b:67:29:8a: ec:83:e7:99:2f:dc:9a:16:e8:dc:b6:c6:dc:60:23: a5:5a:d9:c7:0f:67:39:89:80:28:88:77:80:19:85: 68:c6:ff:83:31:4e:ed:fa:af:0e:63:84:ac:b5:27: a6:96:35:31:21:cd:b1:34:c5:31:ec:0e:4f:bf:e6: cb:e5:8f:39:7e:0d:8e:8c:c6:1a:a6:f3:aa:2d:a6: c8:f7:95:0c:69:ff:bb:65:70:13:47:cb:38:17:22: 79:4d:70:a0:32:b9:42:78:1f:b0:df:10:91:d3:33: b2:6f:02:c5:0d:e8:53:18:49:f3:d4:ad:fc:60:64: 76:c3:25:07:fa:bb:52:de:92:bc:a4:67:0f:17:e7: 53:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D0:91:3B:E5:FE:19:74:B7:AB:A0:E8:0F:9A:0B:CC:AA:EC:68:10 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jNCRO-X-GXS3q6DoD5oLzKrsaBA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:3100::/40 Signature Algorithm: sha256WithRSAEncryption c6:99:91:17:42:35:05:fa:41:4d:e4:7b:fc:11:d9:a7:01:f4: e2:68:46:54:cc:8f:e1:bc:ba:5f:53:88:84:57:ff:d0:77:c3: 3d:1f:f8:22:6e:a1:98:7a:07:a5:55:76:3e:51:9a:98:aa:48: 69:ce:07:d9:89:71:b2:3a:39:4c:84:6e:23:3f:bc:19:f3:d8: 11:00:d3:9a:fc:c4:5c:1f:7b:3c:34:41:45:8a:ae:19:73:56: 1a:fd:4c:b9:d3:6d:7f:b8:9f:d6:31:03:9b:4b:07:88:eb:73: b1:0f:a6:ca:23:07:8c:b6:35:55:61:3a:c7:00:60:7a:23:92: 0b:a4:f9:ac:fb:06:ed:24:b9:d3:1e:c7:95:9f:24:0b:6f:7f: 73:16:92:11:24:12:9d:12:3e:e1:17:fa:23:71:3b:55:ab:47: 7d:13:4a:51:44:af:55:22:b6:c8:1e:ac:23:ff:5f:70:01:b6: 05:64:5f:dd:0d:17:39:30:e7:4f:67:0c:28:fe:18:cc:7c:09: 95:e4:23:d6:b0:88:92:47:1d:d9:00:1e:eb:32:30:24:b2:26: 27:86:2d:f6:31:1a:21:07:0a:9c:3e:9a:e7:28:58:4a:e2:0f: 3f:7f:0d:cd:de:1d:02:6e:6f:4c:89:01:ef:8d:5e:af:5f:34: f4:78:63:71 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTQ1MzNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhDRDA5MTNCRTVGRTE5 NzRCN0FCQTBFODBGOUEwQkNDQUFFQzY4MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9yuYEuE663JSbCWJCBoxlC3kgY2x0SWZYCOx1mTv6KtY+M6xn n18LPtpAD+xuXZNibzM1SAgTBNOmzdcdwh+hRT3j0tXUzHVrqw+mItHYKwYgGu3q 7ew5gBmfk4C/23nyE98pA2O6eQiYZkC40qGOTp8VO2cpiuyD55kv3JoW6Ny2xtxg I6Va2ccPZzmJgCiId4AZhWjG/4MxTu36rw5jhKy1J6aWNTEhzbE0xTHsDk+/5svl jzl+DY6Mxhqm86otpsj3lQxp/7tlcBNHyzgXInlNcKAyuUJ4H7DfEJHTM7JvAsUN 6FMYSfPUrfxgZHbDJQf6u1LekrykZw8X51OLAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUjNCRO+X+GXS3q6DoD5oLzKrsaBAwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9qTkNSTy1YLUdYUzNxNkRvRDVvTHpLcnNhQkEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAazEwDQYJKoZIhvcNAQELBQADggEBAMaZkRdCNQX6QU3ke/wR 2acB9OJoRlTMj+G8ul9TiIRX/9B3wz0f+CJuoZh6B6VVdj5RmpiqSGnOB9mJcbI6 OUyEbiM/vBnz2BEA05r8xFwfezw0QUWKrhlzVhr9TLnTbX+4n9YxA5tLB4jrc7EP psojB4y2NVVhOscAYHojkguk+az7Bu0kudMex5WfJAtvf3MWkhEkEp0SPuEX+iNx O1WrR30TSlFEr1UitsgerCP/X3ABtgVkX90NFzkw509nDCj+GMx8CZXkI9awiJJH HdkAHusyMCSyJieGLfYxGiEHCpw+mucoWEriDz9/Dc3eHQJub0yJAe+NXq9fNPR4 Y3E= -----END CERTIFICATE-----Generated at Mon Apr 7 14:53:56 2025 by rpki-client