$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xLnd9BNRq0Nxdt-O2sb5U56Nqak.roa File: xLnd9BNRq0Nxdt-O2sb5U56Nqak.roa (raw, json) Hash identifier: bVlBvq3IlGV3yUUmsIG1TBveoT+5I0cMgfd2Avi+4Hg= Subject key identifier: C4:B9:DD:F4:13:51:AB:43:71:76:DF:8E:DA:C6:F9:53:9E:8D:A9:A9 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 04DE Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xLnd9BNRq0Nxdt-O2sb5U56Nqak.roa Signing time: Tue 01 Apr 2025 01:55:49 +0000 ROA not before: Tue 01 Apr 2025 01:55:49 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:9800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:55:49 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C4B9DDF41351AB437176DF8EDAC6F9539E8DA9A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f6:03:7e:13:78:fe:c6:de:d5:9b:ea:19:a1: cb:99:1e:de:2d:1f:9a:2f:90:89:db:40:58:1a:51: 1c:c4:90:51:ae:05:12:2b:8d:35:5d:02:ba:8f:40: f0:84:b6:c5:5e:c8:99:6b:b8:56:91:ff:97:b9:2f: fe:02:a2:9a:06:52:f9:77:b1:1f:f9:c1:2c:6c:a5: de:cb:bd:8d:ff:95:13:38:0f:a1:35:dc:fa:69:db: ec:61:b9:d6:3d:fe:0c:b0:0d:ed:fb:0e:9f:a1:39: f7:be:2d:38:9c:cf:3e:78:76:61:0c:3b:a2:f2:db: 9f:1d:90:33:3e:10:a5:79:84:9a:c5:c3:c8:b4:8e: 73:50:53:51:d5:e3:a2:d8:af:02:22:f8:2d:5c:19: 9c:c3:74:cd:4c:87:ec:b1:99:8e:e7:d0:b3:f7:f6: 79:27:84:61:bb:65:06:3f:e3:2d:bf:14:5f:e1:21: 8a:b6:74:3b:91:96:ab:db:9c:3c:0b:a2:94:03:4a: 8a:06:08:8e:c0:2a:38:98:af:54:ba:24:79:40:56: bd:fa:cb:97:59:9b:cd:a7:e9:69:64:f7:9c:2b:0a: 48:d4:3a:f7:bc:d1:1d:f4:3a:be:19:5b:f9:01:e9: fb:78:27:18:22:14:06:46:b9:b0:8c:08:c7:d8:4d: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B9:DD:F4:13:51:AB:43:71:76:DF:8E:DA:C6:F9:53:9E:8D:A9:A9 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xLnd9BNRq0Nxdt-O2sb5U56Nqak.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:9800::/40 Signature Algorithm: sha256WithRSAEncryption bc:06:71:19:df:67:04:c6:63:09:73:6f:89:83:9c:2e:fa:e4: 6e:34:46:6b:d0:37:d3:9b:60:1c:85:18:01:34:08:5b:be:87: 7f:63:52:a3:90:89:63:3b:d9:8d:71:df:95:28:af:95:32:4b: 75:e3:f2:ea:c4:e3:16:0f:55:0e:7e:52:fd:dc:b0:4d:8e:0c: b7:b7:1d:32:88:e2:5b:3f:d8:3f:4b:65:f9:e2:c2:51:8a:ad: 2c:46:8e:b3:fe:08:92:8a:2f:e4:56:fe:a0:51:46:24:1a:2a: c8:b0:e5:f1:55:a9:5a:91:ba:6d:76:c3:d7:77:a3:36:6d:b6: 9f:76:dd:2b:46:86:31:3f:7e:91:2a:9e:f7:b9:51:56:7a:dc: 0f:c8:be:d1:5e:07:bf:0c:83:ae:c3:fc:16:98:62:e4:cf:7c: ca:37:71:4d:a6:9e:bd:cf:a4:4d:c6:1b:a0:cd:5a:25:e9:80: 6b:c9:c3:12:81:e2:c5:c3:52:d8:15:ad:8d:ce:8a:ec:8a:cd: 0e:64:dc:0b:b5:a6:f5:c0:51:8f:cd:72:74:ed:18:b4:b3:01: 22:46:cd:1e:f9:67:3a:3a:ea:f0:c4:c0:81:1f:a3:51:ad:e4: 5d:31:d4:33:22:38:c6:ad:18:77:70:1d:81:07:b3:8d:df:4a: 54:ae:61:8b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTU1NDlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM0QjlEREY0MTM1MUFC NDM3MTc2REY4RURBQzZGOTUzOUU4REE5QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ9gN+E3j+xt7Vm+oZocuZHt4tH5ovkInbQFgaURzEkFGuBRIr jTVdArqPQPCEtsVeyJlruFaR/5e5L/4CopoGUvl3sR/5wSxspd7LvY3/lRM4D6E1 3Ppp2+xhudY9/gywDe37Dp+hOfe+LTiczz54dmEMO6Ly258dkDM+EKV5hJrFw8i0 jnNQU1HV46LYrwIi+C1cGZzDdM1Mh+yxmY7n0LP39nknhGG7ZQY/4y2/FF/hIYq2 dDuRlqvbnDwLopQDSooGCI7AKjiYr1S6JHlAVr36y5dZm82n6Wlk95wrCkjUOve8 0R30Or4ZW/kB6ft4JxgiFAZGubCMCMfYTdO3AgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUxLnd9BNRq0Nxdt+O2sb5U56NqakwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS94TG5kOUJOUnEwTnhkdC1PMnNiNVU1Nk5xYWsu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa5gwDQYJKoZIhvcNAQELBQADggEBALwGcRnfZwTGYwlzb4mD nC765G40RmvQN9ObYByFGAE0CFu+h39jUqOQiWM72Y1x35Uor5UyS3Xj8urE4xYP VQ5+Uv3csE2ODLe3HTKI4ls/2D9LZfniwlGKrSxGjrP+CJKKL+RW/qBRRiQaKsiw 5fFVqVqRum12w9d3ozZttp923StGhjE/fpEqnve5UVZ63A/IvtFeB78Mg67D/BaY YuTPfMo3cU2mnr3PpE3GG6DNWiXpgGvJwxKB4sXDUtgVrY3OiuyKzQ5k3Au1pvXA UY/NcnTtGLSzASJGzR75Zzo66vDEwIEfo1Gt5F0x1DMiOMatGHdwHYEHs43fSlSu YYs= -----END CERTIFICATE-----Generated at Mon Apr 7 08:05:12 2025 by rpki-client