$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/8Wc-DLSJHUe-5rrCHx-JYvXwdIs.roa File: 8Wc-DLSJHUe-5rrCHx-JYvXwdIs.roa (raw, json) Hash identifier: oTINA2mCyRtprTXGxw8Mug70XsqGbAA+owZI5cezxeg= Subject key identifier: F1:67:3E:0C:B4:89:1D:47:BE:E6:BA:C2:1F:1F:89:62:F5:F0:74:8B Certificate issuer: /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD Certificate serial: 46 Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/8Wc-DLSJHUe-5rrCHx-JYvXwdIs.roa Signing time: Tue 01 Apr 2025 01:30:31 +0000 ROA not before: Tue 01 Apr 2025 01:30:31 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 59127 IP address blocks: 2401:7ec0:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD Validity Not Before: Apr 1 01:30:31 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F1673E0CB4891D47BEE6BAC21F1F8962F5F0748B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:da:4e:9e:fa:8a:44:af:33:fa:23:ad:31: 5e:7d:71:16:9b:29:15:89:2d:ec:6e:04:c9:3c:59: 0e:21:66:be:63:ae:29:27:84:c7:46:1f:8c:71:54: 78:bb:f7:ad:e5:3a:69:dd:37:8a:f9:bb:c2:85:8c: 3e:b1:d8:ce:be:69:a0:ea:b0:29:26:8d:fa:4c:37: 75:4a:0f:d3:bb:fd:00:b0:d6:ef:4e:c7:52:0b:f3: 8b:92:a4:38:42:a5:a1:70:31:59:2c:ca:f7:0f:b3: 16:d9:10:fe:f2:8a:34:40:79:5e:35:f8:41:8b:87: b9:58:8d:9d:2f:e1:a0:8f:09:31:db:80:3c:fc:4b: 58:58:09:16:24:e2:1f:f5:30:e4:8f:aa:45:eb:7f: 91:0e:f6:6d:23:87:9b:e1:74:a6:77:97:85:81:08: eb:ed:68:a1:7d:ec:cc:f0:d7:73:75:b6:dc:f8:43: 8b:d7:0b:d4:27:76:cb:6b:e2:64:15:6a:33:b6:3c: bc:42:cc:85:dd:a9:64:38:40:c4:48:27:48:7e:e1: 0c:e9:0a:a9:f9:8e:a5:da:43:bc:dd:06:7f:32:92: 9b:6f:35:48:14:c5:2a:76:98:70:98:53:d6:e6:2d: 78:15:ce:80:da:15:87:47:c9:52:cb:2e:e0:c1:48: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:67:3E:0C:B4:89:1D:47:BE:E6:BA:C2:1F:1F:89:62:F5:F0:74:8B X509v3 Authority Key Identifier: keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/8Wc-DLSJHUe-5rrCHx-JYvXwdIs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:7ec0:8000::/36 Signature Algorithm: sha256WithRSAEncryption 9c:66:97:9b:20:b3:92:bf:1e:f6:cb:e9:65:2b:90:26:e9:84: 07:7a:ac:50:bb:b5:6b:43:18:6c:c6:e9:9b:bf:a9:a9:11:a4: 95:d8:02:43:58:bb:14:15:20:33:e9:31:71:f1:9e:7f:5d:93: 45:de:92:2d:a4:da:a5:2d:ac:89:1e:d5:25:9b:ee:1d:1c:83: d0:09:4d:8c:b1:99:ec:7c:83:26:b0:f2:1b:9e:1f:07:cc:c7: 30:28:90:08:3a:a9:a6:84:4a:31:fb:98:5d:8e:2b:45:6f:49: 9e:0f:70:71:74:36:8a:44:36:b1:9d:75:c5:1a:7f:dc:d3:61: 88:19:72:29:98:cd:a7:31:ca:30:c0:b0:24:5e:e4:31:e2:c9: 94:68:46:3d:6b:10:be:53:05:ba:b4:a1:27:cf:26:28:c7:54: af:0e:70:79:d7:c7:df:b0:e3:71:cb:27:23:d2:f5:9c:40:24: d1:58:0d:e8:10:aa:28:59:e8:2a:56:02:4e:b9:4b:a7:07:e7: e6:70:fc:d9:b2:83:65:4a:17:fd:77:a7:db:a0:22:6e:ee:68: c7:96:22:31:3a:68:2b:2a:46:4f:4d:25:e2:69:5d:9a:c0:ef: 1c:00:e8:29:28:7c:59:ea:5b:46:c2:91:52:e2:01:1d:1c:20: ed:ea:ae:88 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTI1MDQwMTAx MzAzMVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRjE2NzNFMENCNDg5MUQ0 N0JFRTZCQUMyMUYxRjg5NjJGNUYwNzQ4QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMox2k6e+opErzP6I60xXn1xFpspFYkt7G4EyTxZDiFmvmOuKSeE x0YfjHFUeLv3reU6ad03ivm7woWMPrHYzr5poOqwKSaN+kw3dUoP07v9ALDW707H Ugvzi5KkOEKloXAxWSzK9w+zFtkQ/vKKNEB5XjX4QYuHuViNnS/hoI8JMduAPPxL WFgJFiTiH/Uw5I+qRet/kQ72bSOHm+F0pneXhYEI6+1ooX3szPDXc3W23PhDi9cL 1Cd2y2viZBVqM7Y8vELMhd2pZDhAxEgnSH7hDOkKqfmOpdpDvN0GfzKSm281SBTF KnaYcJhT1uYteBXOgNoVh0fJUssu4MFIawsCAwEAAaOCAiowggImMB0GA1UdDgQW BBTxZz4MtIkdR77musIfH4li9fB0izAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzA0LzhXYy1ETFNKSFVlLTVyckNIeC1KWXZYd2RJcy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgQkAX7AgDANBgkqhkiG9w0BAQsFAAOCAQEAnGaXmyCzkr8e9svpZSuQ JumEB3qsULu1a0MYbMbpm7+pqRGkldgCQ1i7FBUgM+kxcfGef12TRd6SLaTapS2s iR7VJZvuHRyD0AlNjLGZ7HyDJrDyG54fB8zHMCiQCDqppoRKMfuYXY4rRW9Jng9w cXQ2ikQ2sZ11xRp/3NNhiBlyKZjNpzHKMMCwJF7kMeLJlGhGPWsQvlMFurShJ88m KMdUrw5wedfH37DjccsnI9L1nEAk0VgN6BCqKFnoKlYCTrlLpwfn5nD82bKDZUoX /Xen26Aibu5ox5YiMTpoKypGT00l4mldmsDvHADoKSh8WepbRsKRUuIBHRwg7equ iA== -----END CERTIFICATE-----Generated at Mon Apr 7 08:04:09 2025 by rpki-client