$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30132/gvh8ky4fdXFP8l8WlhNBLGYlqwc.roa File: gvh8ky4fdXFP8l8WlhNBLGYlqwc.roa (raw, json) Hash identifier: mwKyEITFnyhmdhw9UU94MAbF+gVGCzztfkstNIJpqGQ= Subject key identifier: 82:F8:7C:93:2E:1F:75:71:4F:F2:5F:16:96:13:41:2C:66:25:AB:07 Certificate issuer: /CN=93FEB3B6C5F839403C57D04354437BCAEE7B3991 Certificate serial: 2A Authority key identifier: 93:FE:B3:B6:C5:F8:39:40:3C:57:D0:43:54:43:7B:CA:EE:7B:39:91 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/gvh8ky4fdXFP8l8WlhNBLGYlqwc.roa Signing time: Sat 01 Mar 2025 01:29:04 +0000 ROA not before: Sat 01 Mar 2025 01:29:04 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 10019 IP address blocks: 2401:3200::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93FEB3B6C5F839403C57D04354437BCAEE7B3991 Validity Not Before: Mar 1 01:29:04 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=82F87C932E1F75714FF25F169613412C6625AB07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:0e:b8:41:bf:73:e0:76:4d:71:04:c1:f9: 19:65:46:84:2b:fe:8f:c1:58:bb:5a:9b:75:a6:a4: fc:17:b2:b2:8e:7a:b3:33:24:db:12:e4:33:06:24: 3e:f9:0f:8b:7e:0b:6e:ad:27:f9:7b:84:e4:a9:32: 85:07:0b:d9:21:ac:16:08:47:1b:ed:52:2a:b5:fb: 8d:a6:6c:48:b7:13:2b:a0:08:fd:96:d9:86:25:57: 5f:ec:d8:6c:7e:60:40:a2:fb:c4:b7:ca:7b:7b:9a: fb:a2:77:5f:d5:9c:1a:bf:6b:1b:ff:f4:1f:6f:84: 0d:18:41:98:b2:3b:db:a1:c5:5a:24:2a:ae:44:e6: 7b:08:a0:c4:5c:fc:e6:9c:a3:6f:59:e0:fb:3b:38: 56:99:b1:6e:b7:ba:89:09:3a:ab:50:43:96:8a:a0: b2:46:f0:62:fd:6d:ba:cb:78:9a:8e:31:60:8f:4f: ce:db:be:0b:05:24:3c:18:2d:25:61:46:3d:f8:fe: 9b:b8:8f:84:9a:23:b3:79:16:2f:f7:91:3d:88:80: 3c:2d:9b:0c:61:4d:e9:9b:d3:ff:0c:86:79:45:88: 50:a2:bb:03:3c:05:97:a5:15:9c:d4:2a:ad:e7:b5: 19:92:3f:0f:1d:89:05:05:b6:f1:32:bd:8c:97:a3: 83:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F8:7C:93:2E:1F:75:71:4F:F2:5F:16:96:13:41:2C:66:25:AB:07 X509v3 Authority Key Identifier: keyid:93:FE:B3:B6:C5:F8:39:40:3C:57:D0:43:54:43:7B:CA:EE:7B:39:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/gvh8ky4fdXFP8l8WlhNBLGYlqwc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:3200::/32 Signature Algorithm: sha256WithRSAEncryption 91:e1:87:08:12:ca:30:1e:e3:99:02:4f:d0:f1:73:50:e6:0f: ae:ca:f8:48:8b:b7:e2:a3:12:14:d2:0b:94:65:62:f6:21:f8: 1c:21:8f:c8:03:67:22:7b:79:b5:6a:5a:4f:88:14:f4:39:6b: 08:9b:90:7d:30:ae:9e:f8:df:af:30:a3:21:19:15:50:c2:25: 17:e2:ae:23:c6:f5:1d:7e:6f:83:25:46:76:c4:d3:0f:f4:6a: ea:1e:aa:21:79:73:47:4b:a1:47:77:6b:28:16:6b:90:db:c2: 27:44:c3:54:e5:8c:a0:6d:0f:d6:a3:83:1c:07:26:89:42:ad: 1e:92:4d:9c:05:9e:b8:46:08:68:1c:e9:b7:8e:94:c9:b2:ce: 06:5c:87:d1:05:df:ee:1d:43:83:27:29:49:29:50:a9:cd:45: 72:a4:78:4c:15:fa:7c:72:84:3d:7e:0f:95:53:7b:1e:63:61: bf:b1:bb:5c:3d:d5:07:c0:36:34:72:b1:e4:c0:b7:6a:52:e2: d8:02:62:b1:09:79:bc:18:6a:14:5f:7b:e6:3f:9d:b5:b1:d9: b5:17:72:b4:0b:ea:76:3c:07:2b:f9:7f:90:7e:c2:8d:0d:5e: ce:bb:b5:a8:c4:10:71:03:cd:54:89:47:b5:d6:ca:3f:53:3f: 0a:d2:a7:23 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0ZF QjNCNkM1RjgzOTQwM0M1N0QwNDM1NDQzN0JDQUVFN0IzOTkxMB4XDTI1MDMwMTAx MjkwNFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoODJGODdDOTMyRTFGNzU3 MTRGRjI1RjE2OTYxMzQxMkM2NjI1QUIwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL0zDrhBv3Pgdk1xBMH5GWVGhCv+j8FYu1qbdaak/Beyso56szMk 2xLkMwYkPvkPi34Lbq0n+XuE5KkyhQcL2SGsFghHG+1SKrX7jaZsSLcTK6AI/ZbZ hiVXX+zYbH5gQKL7xLfKe3ua+6J3X9WcGr9rG//0H2+EDRhBmLI726HFWiQqrkTm ewigxFz85pyjb1ng+zs4Vpmxbre6iQk6q1BDloqgskbwYv1tust4mo4xYI9Pztu+ CwUkPBgtJWFGPfj+m7iPhJojs3kWL/eRPYiAPC2bDGFN6ZvT/wyGeUWIUKK7AzwF l6UVnNQqree1GZI/Dx2JBQW28TK9jJejgyECAwEAAaOCAikwggIlMB0GA1UdDgQW BBSC+HyTLh91cU/yXxaWE0EsZiWrBzAfBgNVHSMEGDAWgBST/rO2xfg5QDxX0ENU Q3vK7ns5kTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMzIva182enRzWDRPVUE4VjlCRFZFTjd5dTU3T1pFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAva182enRzWDRPVUE4VjlCRFZFTjd5 dTU3T1pFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTMyL2d2aDhreTRmZFhGUDhsOFdsaE5CTEdZbHF3Yy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkATIAMA0GCSqGSIb3DQEBCwUAA4IBAQCR4YcIEsowHuOZAk/Q8XNQ 5g+uyvhIi7fioxIU0guUZWL2IfgcIY/IA2cie3m1alpPiBT0OWsIm5B9MK6e+N+v MKMhGRVQwiUX4q4jxvUdfm+DJUZ2xNMP9GrqHqoheXNHS6FHd2soFmuQ28InRMNU 5YygbQ/Wo4McByaJQq0ekk2cBZ64RghoHOm3jpTJss4GXIfRBd/uHUODJylJKVCp zUVypHhMFfp8coQ9fg+VU3seY2G/sbtcPdUHwDY0crHkwLdqUuLYAmKxCXm8GGoU X3vmP521sdm1F3K0C+p2PAcr+X+QfsKNDV7Ou7WoxBBxA81UiUe11so/Uz8K0qcj -----END CERTIFICATE-----Generated at Sat Apr 5 23:10:54 2025 by rpki-client