$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30340/Clnx0aiCtl_5QptaZyUjWYZ5AbE.roa File: Clnx0aiCtl_5QptaZyUjWYZ5AbE.roa (raw, json) Hash identifier: uTonN1FqWj4uXmcqA+pB4iPDAJJOS3ha0KDg/jDVs/s= Subject key identifier: 0A:59:F1:D1:A8:82:B6:5F:F9:42:9B:5A:67:25:23:59:86:79:01:B1 Certificate issuer: /CN=C0119CFB25B3886ED092938A864A5E911C557407 Certificate serial: 12 Authority key identifier: C0:11:9C:FB:25:B3:88:6E:D0:92:93:8A:86:4A:5E:91:1C:55:74:07 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wBGc-yWziG7QkpOKhkpekRxVdAc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/Clnx0aiCtl_5QptaZyUjWYZ5AbE.roa Signing time: Wed 05 Mar 2025 05:14:27 +0000 ROA not before: Wed 05 Mar 2025 05:14:27 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 24249 IP address blocks: 2404:df40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wBGc-yWziG7QkpOKhkpekRxVdAc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0119CFB25B3886ED092938A864A5E911C557407 Validity Not Before: Mar 5 05:14:27 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=0A59F1D1A882B65FF9429B5A67252359867901B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:fb:76:7d:1b:2a:08:5b:f2:07:a6:6a:98: a4:f4:6c:2e:89:ee:21:15:12:20:4a:99:d4:e3:b0: 02:50:68:16:fc:61:0f:3d:55:df:fb:43:e0:0e:bb: 2c:4f:b4:55:b8:ff:6d:d6:d4:83:7f:43:37:20:47: b5:aa:73:dc:f0:e0:9c:24:27:85:28:e4:d7:ae:04: e4:95:90:3e:17:f5:87:4c:02:d2:49:43:93:74:e4: 4a:58:d5:35:9a:9c:11:7d:f9:1e:91:f4:3d:5e:d2: 4f:80:b3:c6:53:6f:6a:ac:f8:05:a9:f6:41:cf:7e: f0:29:fa:bc:14:6c:b4:14:7a:51:f3:a0:84:b7:4a: 8e:4f:a2:d0:15:f5:c2:d0:36:31:ff:13:24:f4:ee: d7:6d:e0:30:7c:94:0c:39:2a:67:44:7c:40:7b:e8: 52:18:9a:85:ea:7d:36:e9:f5:d3:9a:ac:61:6d:10: 8c:a1:53:c9:3c:a3:ee:71:55:f0:4a:14:30:02:83: 40:26:30:b6:a0:bd:6c:1f:3a:49:ec:77:b4:22:92: dd:6c:61:8a:57:66:c8:dc:c3:64:57:26:5d:6b:37: b1:7e:f5:37:fc:09:b6:f8:a1:71:b5:41:d2:0b:d9: 02:ee:b5:61:3e:b9:7b:a1:64:37:15:4f:b1:54:7f: 08:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:59:F1:D1:A8:82:B6:5F:F9:42:9B:5A:67:25:23:59:86:79:01:B1 X509v3 Authority Key Identifier: keyid:C0:11:9C:FB:25:B3:88:6E:D0:92:93:8A:86:4A:5E:91:1C:55:74:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wBGc-yWziG7QkpOKhkpekRxVdAc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/Clnx0aiCtl_5QptaZyUjWYZ5AbE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:df40::/32 Signature Algorithm: sha256WithRSAEncryption a3:14:8e:ce:20:f7:e3:c7:8c:b3:33:3d:59:1b:dd:2a:e0:14: 25:32:f2:44:ee:b3:e4:2d:97:c4:8d:ee:5e:4e:d5:fe:d4:16: 13:1d:83:65:a3:b7:63:b7:e9:10:98:b0:b2:60:ad:02:35:d1: e2:20:00:70:33:a0:60:bf:b8:c1:9d:f8:84:72:61:25:be:54: db:32:41:94:a6:b2:99:b8:5a:61:06:8a:06:a0:68:2f:20:c2: 07:41:1e:d7:cd:9a:7d:81:74:22:ec:e5:26:a8:15:c5:a6:8b: d4:e7:f4:3c:21:57:ba:51:8d:63:97:77:c4:e4:90:3b:75:bb: 78:67:f9:be:4e:d1:61:b3:58:7f:f5:29:f9:5b:87:d3:f6:ce: 73:ed:79:32:b7:84:1f:09:94:da:06:f0:c3:cd:2e:d7:11:8b: b4:00:65:ac:f2:46:7a:14:fd:5d:ee:ab:76:a2:2c:f2:6a:84: e7:6f:43:c6:01:a4:0b:2c:b0:b0:5b:3e:78:52:b6:ab:37:ca: a2:fd:77:39:90:d5:c1:fe:67:49:c3:ee:e4:2e:86:02:7d:4e: 63:81:3f:a2:fb:4f:ea:03:b2:01:00:8c:55:b2:3b:53:29:a0: dd:fb:c9:37:54:6c:63:9f:a1:77:d4:42:79:65:93:1f:ff:58: 15:90:c1:a1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDEx OUNGQjI1QjM4ODZFRDA5MjkzOEE4NjRBNUU5MTFDNTU3NDA3MB4XDTI1MDMwNTA1 MTQyN1oXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMEE1OUYxRDFBODgyQjY1 RkY5NDI5QjVBNjcyNTIzNTk4Njc5MDFCMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMKU+3Z9GyoIW/IHpmqYpPRsLonuIRUSIEqZ1OOwAlBoFvxhDz1V 3/tD4A67LE+0Vbj/bdbUg39DNyBHtapz3PDgnCQnhSjk164E5JWQPhf1h0wC0klD k3TkSljVNZqcEX35HpH0PV7ST4CzxlNvaqz4Ban2Qc9+8Cn6vBRstBR6UfOghLdK jk+i0BX1wtA2Mf8TJPTu123gMHyUDDkqZ0R8QHvoUhiahep9Nun105qsYW0QjKFT yTyj7nFV8EoUMAKDQCYwtqC9bB86Sex3tCKS3WxhildmyNzDZFcmXWs3sX71N/wJ tvihcbVB0gvZAu61YT65e6FkNxVPsVR/CGECAwEAAaOCAikwggIlMB0GA1UdDgQW BBQKWfHRqIK2X/lCm1pnJSNZhnkBsTAfBgNVHSMEGDAWgBTAEZz7JbOIbtCSk4qG Sl6RHFV0BzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNDAvd0JHYy15V3ppRzdRa3BPS2hrcGVrUnhWZEFjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvd0JHYy15V3ppRzdRa3BPS2hrcGVr UnhWZEFjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzQwL0NsbngwYWlDdGxfNVFwdGFaeVVqV1laNUFiRS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkBN9AMA0GCSqGSIb3DQEBCwUAA4IBAQCjFI7OIPfjx4yzMz1ZG90q 4BQlMvJE7rPkLZfEje5eTtX+1BYTHYNlo7djt+kQmLCyYK0CNdHiIABwM6Bgv7jB nfiEcmElvlTbMkGUprKZuFphBooGoGgvIMIHQR7XzZp9gXQi7OUmqBXFpovU5/Q8 IVe6UY1jl3fE5JA7dbt4Z/m+TtFhs1h/9Sn5W4fT9s5z7Xkyt4QfCZTaBvDDzS7X EYu0AGWs8kZ6FP1d7qt2oizyaoTnb0PGAaQLLLCwWz54UrarN8qi/Xc5kNXB/mdJ w+7kLoYCfU5jgT+i+0/qA7IBAIxVsjtTKaDd+8k3VGxjn6F31EJ5ZZMf/1gVkMGh -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:48 2025 by rpki-client