$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/GQO5Uee6HyIrfpGsO88aRgtiOdo.roa File: GQO5Uee6HyIrfpGsO88aRgtiOdo.roa (raw, json) Hash identifier: ofHEJp7SSr7hVzvkZjv3zx3AcEbvqnHkngkbMgmZXNM= Subject key identifier: 19:03:B9:51:E7:BA:1F:22:2B:7E:91:AC:3B:CF:1A:46:0B:62:39:DA Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21 Certificate serial: 80 Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/GQO5Uee6HyIrfpGsO88aRgtiOdo.roa Signing time: Sat 01 Mar 2025 01:30:30 +0000 ROA not before: Sat 01 Mar 2025 01:30:30 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 10010 IP address blocks: 2403:7800::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21 Validity Not Before: Mar 1 01:30:30 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=1903B951E7BA1F222B7E91AC3BCF1A460B6239DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ff:03:07:eb:3b:e8:bf:b9:a0:34:e1:0c:20: e3:54:fd:74:7f:9d:7f:aa:31:35:e5:72:47:39:ea: 6c:9a:7d:22:24:a8:82:9b:24:66:d4:6d:39:b4:2f: 7e:f4:6c:82:fb:c2:7d:03:15:cf:95:2f:42:23:36: 42:dd:b5:74:0a:2d:f0:cb:38:8c:06:77:12:ac:aa: 82:93:ea:82:d8:c8:17:49:ae:7c:c3:31:62:b1:8c: 11:d8:1d:5f:eb:c3:88:d9:04:b8:9a:7d:99:70:91: f6:23:53:9f:ad:c5:19:20:bb:58:c3:31:94:2a:42: fe:b2:6f:60:19:fe:b0:82:bd:42:58:e6:07:4a:fb: d6:54:f3:52:4d:53:d2:98:9e:ea:92:0e:bd:7e:1a: dc:d7:0c:c2:31:cc:6a:8a:ee:d3:b5:ec:27:d8:32: ca:a3:af:5b:24:22:12:9d:e8:55:d9:e6:c7:e9:a9: 52:60:46:92:42:93:5d:96:ec:1c:2f:f0:7a:cf:83: dd:35:0e:56:a5:d9:ba:33:ed:55:95:a7:a0:e8:5c: e7:f1:9a:1e:2e:a5:0e:c7:7f:31:f1:79:8c:bb:52: fd:57:e3:0a:0f:5f:a6:a8:18:0d:35:27:dc:ab:08: 90:ce:97:9f:b5:2b:7a:85:80:d0:a3:c0:0e:3a:4c: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:03:B9:51:E7:BA:1F:22:2B:7E:91:AC:3B:CF:1A:46:0B:62:39:DA X509v3 Authority Key Identifier: keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/GQO5Uee6HyIrfpGsO88aRgtiOdo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:7800::/32 Signature Algorithm: sha256WithRSAEncryption 04:23:8e:7c:91:7e:3f:e0:f8:93:54:cf:7e:a6:52:ea:b8:b5: a9:b1:75:a5:79:20:6d:69:19:28:b3:3f:7a:80:8f:8e:ad:12: 1c:c6:e6:a3:2e:80:63:7d:23:90:8a:85:7c:63:29:dd:3f:53: 35:c0:7b:b0:f0:6d:34:99:5d:15:77:99:f1:b1:a6:a0:6a:b5: 3c:ac:ef:ef:23:75:9d:e1:42:1e:66:8f:48:37:8d:99:07:93: 27:c3:13:5f:1f:bb:c9:3a:be:a3:15:4e:f1:61:5b:a6:69:9d: 0b:18:96:11:4f:24:8f:29:d1:ff:d3:ae:6e:1d:35:5e:07:d9: c2:0c:ac:00:1a:e4:20:3e:75:ab:95:a0:a3:ac:06:c5:0c:31: 97:5f:bc:7b:e9:c3:4a:73:0f:5f:f9:34:54:26:02:4c:31:c2: c0:53:b2:95:b6:e4:b8:09:fe:4b:20:81:5a:76:d7:20:57:a1: ac:22:87:4b:bc:c5:d1:a6:d6:4d:ca:d8:c7:68:5d:16:1f:1e: 31:7b:9b:d7:e5:cb:34:45:ff:75:6e:90:cc:fd:4d:3c:09:7e: 71:1a:01:a5:61:f7:fa:8f:61:d8:d6:86:93:60:77:ec:58:1b: c6:f3:63:ff:db:3c:f2:5b:30:9a:0e:18:4b:10:01:01:e9:fa: d7:82:7f:5b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDEw RDg4NjU4MkJEREY0OEIwNDE4NTFDMzhDMEI2MzIxMTVGNUMyMTAeFw0yNTAzMDEw MTMwMzBaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE5MDNCOTUxRTdCQTFG MjIyQjdFOTFBQzNCQ0YxQTQ2MEI2MjM5REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDs/wMH6zvov7mgNOEMIONU/XR/nX+qMTXlckc56myafSIkqIKb JGbUbTm0L370bIL7wn0DFc+VL0IjNkLdtXQKLfDLOIwGdxKsqoKT6oLYyBdJrnzD MWKxjBHYHV/rw4jZBLiafZlwkfYjU5+txRkgu1jDMZQqQv6yb2AZ/rCCvUJY5gdK +9ZU81JNU9KYnuqSDr1+GtzXDMIxzGqK7tO17CfYMsqjr1skIhKd6FXZ5sfpqVJg RpJCk12W7Bwv8HrPg901Dlal2boz7VWVp6DoXOfxmh4upQ7HfzHxeYy7Uv1X4woP X6aoGA01J9yrCJDOl5+1K3qFgNCjwA46TKQbAgMBAAGjggIpMIICJTAdBgNVHQ4E FgQUGQO5Uee6HyIrfpGsO88aRgtiOdowHwYDVR0jBBgwFoAU0Q2IZYK930iwQYUc OMC2MhFfXCEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMjI4LzBRMklaWUs5MzBpd1FZVWNPTUMyTWhGZlhDRS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBRMklaWUs5MzBpd1FZVWNPTUMy TWhGZlhDRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDIyOC9HUU81VWVlNkh5SXJmcEdzTzg4YVJndGlPZG8u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAN4ADANBgkqhkiG9w0BAQsFAAOCAQEABCOOfJF+P+D4k1TPfqZS 6ri1qbF1pXkgbWkZKLM/eoCPjq0SHMbmoy6AY30jkIqFfGMp3T9TNcB7sPBtNJld FXeZ8bGmoGq1PKzv7yN1neFCHmaPSDeNmQeTJ8MTXx+7yTq+oxVO8WFbpmmdCxiW EU8kjynR/9Oubh01XgfZwgysABrkID51q5Wgo6wGxQwxl1+8e+nDSnMPX/k0VCYC TDHCwFOylbbkuAn+SyCBWnbXIFehrCKHS7zF0abWTcrYx2hdFh8eMXub1+XLNEX/ dW6QzP1NPAl+cRoBpWH3+o9h2NaGk2B37FgbxvNj/9s88lswmg4YSxABAen614J/ Ww== -----END CERTIFICATE-----Generated at Sun Apr 6 01:51:58 2025 by rpki-client