$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30443/C5QWaHSyF17YYohV56XErn7O9-Y.roa File: C5QWaHSyF17YYohV56XErn7O9-Y.roa (raw, json) Hash identifier: CxiYKSLiUnu354/n9QkAY3WcSUG1fLB9j4OmLkZgiYI= Subject key identifier: 0B:94:16:68:74:B2:17:5E:D8:62:88:55:E7:A5:C4:AE:7E:CE:F7:E6 Certificate issuer: /CN=DAF8DA0CEB9A4A4E6637D619AE4E712DA91AF491 Certificate serial: 03 Authority key identifier: DA:F8:DA:0C:EB:9A:4A:4E:66:37:D6:19:AE:4E:71:2D:A9:1A:F4:91 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/C5QWaHSyF17YYohV56XErn7O9-Y.roa Signing time: Wed 26 Mar 2025 02:51:53 +0000 ROA not before: Wed 26 Mar 2025 02:51:53 +0000 ROA not after: Wed 25 Mar 2026 08:54:55 +0000 asID: 0 IP address blocks: 2401:d0a0:4000::/34 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAF8DA0CEB9A4A4E6637D619AE4E712DA91AF491 Validity Not Before: Mar 26 02:51:53 2025 GMT Not After : Mar 25 08:54:55 2026 GMT Subject: CN=0B94166874B2175ED8628855E7A5C4AE7ECEF7E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:a4:98:29:26:10:30:ba:8a:a1:e4:6d:5e: f5:36:0e:e7:6f:9c:77:01:f4:1b:61:f3:26:9b:9a: 8c:23:97:9a:fe:08:d8:20:33:db:a3:25:51:13:52: 48:2f:4b:06:74:89:85:af:07:a8:9f:0c:9c:50:72: 17:ec:5d:e4:67:e0:ed:6f:ec:fb:d6:bf:03:ba:61: 4f:59:5a:8c:c3:b9:72:15:85:c4:43:bc:a3:62:0a: 50:65:c4:3f:9d:eb:e4:ce:4b:77:9e:6e:aa:09:29: 22:1f:6f:4e:f1:a2:c5:b8:53:dd:52:99:78:ec:77: b7:1c:69:5d:0f:5a:d3:06:87:41:37:83:55:ea:d8: 9c:b1:1c:e1:6b:f5:2b:a1:9c:56:3b:36:c2:b1:44: a2:36:34:41:31:55:e0:3b:fc:d8:87:dd:f5:e3:01: 59:d1:4c:25:9d:75:63:6a:ff:ac:24:fd:d0:d2:6e: 62:2b:6b:35:de:55:9f:c0:8e:40:10:16:17:bf:e7: 9b:37:3c:16:c5:0a:43:da:1c:46:40:f8:4b:e7:f5: de:4d:7c:e1:23:1f:01:c5:f0:a1:4f:9d:1d:26:f7: d5:25:f2:59:0a:c0:cb:0d:11:a2:4c:40:ef:7e:f2: ac:f8:ca:54:88:ea:90:71:fa:da:92:37:5a:dc:98: f7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:94:16:68:74:B2:17:5E:D8:62:88:55:E7:A5:C4:AE:7E:CE:F7:E6 X509v3 Authority Key Identifier: keyid:DA:F8:DA:0C:EB:9A:4A:4E:66:37:D6:19:AE:4E:71:2D:A9:1A:F4:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/C5QWaHSyF17YYohV56XErn7O9-Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d0a0:4000::/34 Signature Algorithm: sha256WithRSAEncryption b9:ba:79:70:3b:88:de:25:a9:d5:7b:ac:82:bf:cb:e2:86:5a: 28:9e:47:bc:97:fd:79:b9:d7:a4:b5:bc:46:f4:9b:03:5a:61: 99:dd:9d:7f:76:f6:e1:f1:1d:1e:7e:10:01:13:6a:f1:53:97: 1a:5f:52:42:ea:7c:bf:19:b5:62:41:e9:95:d4:44:10:50:a3: 7f:45:71:7f:1c:ab:1e:b5:71:e6:53:05:02:92:fc:12:1c:66: cc:7e:51:d3:cc:94:e8:e3:3d:58:e4:ee:8f:b6:44:c4:ae:ce: 33:51:e9:09:c8:f4:b2:b3:fa:67:98:54:c9:06:69:9d:69:03: af:7c:d9:0f:fe:00:0c:de:3f:55:50:24:ab:9f:40:cc:e2:d1: 91:1b:92:4d:d6:2f:52:61:3d:0c:b0:59:29:ff:c7:a8:59:42: 32:41:bf:d2:9d:45:99:8e:fa:4f:d9:23:34:41:0f:44:85:42: 1b:a2:02:8c:a2:23:17:07:80:56:f3:9e:50:c5:97:35:5f:fd: 9f:7f:a0:2c:f1:60:8b:2e:81:f5:b6:d5:41:6b:df:67:5f:1e: 65:0a:2c:ef:0d:c2:0e:6a:f4:e1:75:6f:32:29:58:fc:e1:ae: f2:da:27:dc:ad:6c:d9:4e:2e:04:7c:32:bf:a8:c5:39:be:c9: 8b:fb:fa:25 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQUY4 REEwQ0VCOUE0QTRFNjYzN0Q2MTlBRTRFNzEyREE5MUFGNDkxMB4XDTI1MDMyNjAy NTE1M1oXDTI2MDMyNTA4NTQ1NVowMzExMC8GA1UEAxMoMEI5NDE2Njg3NEIyMTc1 RUQ4NjI4ODU1RTdBNUM0QUU3RUNFRjdFNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKGjpJgpJhAwuoqh5G1e9TYO52+cdwH0G2HzJpuajCOXmv4I2CAz 26MlURNSSC9LBnSJha8HqJ8MnFByF+xd5Gfg7W/s+9a/A7phT1lajMO5chWFxEO8 o2IKUGXEP53r5M5Ld55uqgkpIh9vTvGixbhT3VKZeOx3txxpXQ9a0waHQTeDVerY nLEc4Wv1K6GcVjs2wrFEojY0QTFV4Dv82Ifd9eMBWdFMJZ11Y2r/rCT90NJuYitr Nd5Vn8COQBAWF7/nmzc8FsUKQ9ocRkD4S+f13k184SMfAcXwoU+dHSb31SXyWQrA yw0RokxA737yrPjKVIjqkHH62pI3WtyY93cCAwEAAaOCAiowggImMB0GA1UdDgQW BBQLlBZodLIXXthiiFXnpcSufs735jAfBgNVHSMEGDAWgBTa+NoM65pKTmY31hmu TnEtqRr0kTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0NDMvMnZqYURPdWFTazVtTjlZWnJrNXhMYWthOUpFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMnZqYURPdWFTazVtTjlZWnJrNXhM YWthOUpFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDQzL0M1UVdhSFN5RjE3WVlvaFY1NlhFcm43TzktWS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgYkAdCgQDANBgkqhkiG9w0BAQsFAAOCAQEAubp5cDuI3iWp1Xusgr/L 4oZaKJ5HvJf9ebnXpLW8RvSbA1phmd2df3b24fEdHn4QARNq8VOXGl9SQup8vxm1 YkHpldREEFCjf0VxfxyrHrVx5lMFApL8EhxmzH5R08yU6OM9WOTuj7ZExK7OM1Hp Ccj0srP6Z5hUyQZpnWkDr3zZD/4ADN4/VVAkq59AzOLRkRuSTdYvUmE9DLBZKf/H qFlCMkG/0p1FmY76T9kjNEEPRIVCG6ICjKIjFweAVvOeUMWXNV/9n3+gLPFgiy6B 9bbVQWvfZ18eZQos7w3CDmr04XVvMilY/OGu8ton3K1s2U4uBHwyv6jFOb7Ji/v6 JQ== -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:30 2025 by rpki-client