$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xdPaF5I0y9a3ItPXY6PweTzPqEU.roa File: xdPaF5I0y9a3ItPXY6PweTzPqEU.roa (raw, json) Hash identifier: DJdxQ35XpjBwXEEVFXp5ZIOIay/TESHGs2CSOAJ3GjY= Subject key identifier: C5:D3:DA:17:92:34:CB:D6:B7:22:D3:D7:63:A3:F0:79:3C:CF:A8:45 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0472 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xdPaF5I0y9a3ItPXY6PweTzPqEU.roa Signing time: Tue 01 Apr 2025 01:42:36 +0000 ROA not before: Tue 01 Apr 2025 01:42:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:17:fcc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:42:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C5D3DA179234CBD6B722D3D763A3F0793CCFA845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:b8:e5:20:d7:d6:4d:64:e1:5e:56:81:58: ff:29:5d:34:29:94:a8:63:d5:c7:c8:8b:ed:8a:cc: 07:ec:65:7a:20:6b:66:37:25:14:b5:91:45:28:3f: 74:4e:44:d9:86:08:69:a1:33:cc:b1:75:91:0c:28: 83:9b:2b:dc:e9:2f:f0:84:ee:d9:ab:71:a4:3a:dc: d2:85:2a:8c:1b:ff:8e:d5:b4:d7:d7:0d:73:7b:18: a3:10:7d:0c:61:ca:60:61:ee:bd:9d:a1:55:e6:57: 68:92:2f:af:5c:4f:46:61:bb:24:fa:0d:30:c5:76: 12:c3:28:65:2d:7a:57:e5:9f:60:1f:99:dc:87:1b: a5:5b:f2:2f:df:71:61:f0:a9:1b:1d:0b:69:ae:ae: f1:4a:11:88:04:d3:64:70:49:65:43:97:fe:5e:2d: 26:7f:df:94:16:a4:f5:e5:df:2c:ae:7b:35:89:03: f9:56:b0:3c:9e:a6:a3:2c:11:34:67:51:f9:94:79: ae:12:bc:07:ae:74:6f:60:90:d6:79:03:b7:09:89: a1:75:2f:59:80:32:dd:1f:32:fc:fc:5d:fd:5a:47: cc:39:bc:de:a2:e6:60:2b:61:a3:fd:ff:cb:9b:4c: 20:79:13:02:9b:87:02:40:ba:e4:59:80:f8:9b:1d: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D3:DA:17:92:34:CB:D6:B7:22:D3:D7:63:A3:F0:79:3C:CF:A8:45 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xdPaF5I0y9a3ItPXY6PweTzPqEU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:17:fcc::/48 Signature Algorithm: sha256WithRSAEncryption 7f:e9:57:22:1c:66:dd:5d:d7:c8:f9:ac:c7:42:e0:00:ba:6e: 97:6f:a0:01:13:40:0e:cf:5b:c3:16:67:59:b6:8c:22:33:34: fb:ff:3e:30:3c:2b:ae:48:d3:f8:53:bb:37:76:10:ff:fd:12: f8:ce:7d:04:40:33:8c:28:b9:56:53:20:75:44:c8:f9:54:fc: 9d:9f:37:0a:6c:93:8a:98:61:ff:d9:93:23:28:f1:fe:f5:d2: a9:a3:64:ba:7b:fd:5c:ad:72:1b:f7:a9:da:db:67:6b:70:42: 73:dc:4e:57:f1:6b:41:0a:b8:76:b4:dd:74:9e:04:62:2c:8b: 3c:bb:5d:fd:14:97:dd:45:77:c3:39:79:64:6f:7e:77:72:2e: 26:d2:48:cf:e2:73:28:45:50:ae:1e:7b:c0:5f:f5:5b:41:4c: 3f:a6:fb:41:49:98:b0:b7:a8:64:ef:0a:c4:10:91:b2:f2:ee: f9:cf:bb:4e:2b:ce:5e:e8:6d:b0:57:10:a9:29:42:e0:45:5c: 47:98:e9:8b:ab:68:37:09:0e:4d:a0:e8:da:82:9a:07:b7:8b: 0e:27:67:d2:14:c2:0a:bc:7f:1b:6c:5e:a7:8a:4e:1e:89:b0: ce:bd:85:cc:d2:ae:a6:1a:68:77:44:73:eb:0b:69:80:9a:a4: 95:7d:4a:d2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTQyMzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM1RDNEQTE3OTIzNENC RDZCNzIyRDNENzYzQTNGMDc5M0NDRkE4NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMY7jlINfWTWThXlaBWP8pXTQplKhj1cfIi+2KzAfsZXoga2Y3 JRS1kUUoP3RORNmGCGmhM8yxdZEMKIObK9zpL/CE7tmrcaQ63NKFKowb/47VtNfX DXN7GKMQfQxhymBh7r2doVXmV2iSL69cT0ZhuyT6DTDFdhLDKGUtelfln2AfmdyH G6Vb8i/fcWHwqRsdC2murvFKEYgE02RwSWVDl/5eLSZ/35QWpPXl3yyuezWJA/lW sDyepqMsETRnUfmUea4SvAeudG9gkNZ5A7cJiaF1L1mAMt0fMvz8Xf1aR8w5vN6i 5mArYaP9/8ubTCB5EwKbhwJAuuRZgPibHf8/AgMBAAGjggIrMIICJzAdBgNVHQ4E FgQUxdPaF5I0y9a3ItPXY6PweTzPqEUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS94ZFBhRjVJMHk5YTNJdFBYWTZQd2VUelBxRVUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAoAFw/MMA0GCSqGSIb3DQEBCwUAA4IBAQB/6VciHGbdXdfI+azH QuAAum6Xb6ABE0AOz1vDFmdZtowiMzT7/z4wPCuuSNP4U7s3dhD//RL4zn0EQDOM KLlWUyB1RMj5VPydnzcKbJOKmGH/2ZMjKPH+9dKpo2S6e/1crXIb96na22drcEJz 3E5X8WtBCrh2tN10ngRiLIs8u139FJfdRXfDOXlkb353ci4m0kjP4nMoRVCuHnvA X/VbQUw/pvtBSZiwt6hk7wrEEJGy8u75z7tOK85e6G2wVxCpKULgRVxHmOmLq2g3 CQ5NoOjagpoHt4sOJ2fSFMIKvH8bbF6nik4eibDOvYXM0q6mGmh3RHPrC2mAmqSV fUrS -----END CERTIFICATE-----Generated at Mon Apr 7 08:01:37 2025 by rpki-client