$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/IxZgprQlYFPc4O_aLN9eNDjwQc4.roa File: IxZgprQlYFPc4O_aLN9eNDjwQc4.roa (raw, json) Hash identifier: px+tfL7aBBNwfCvHQ8qdV0JTnvPL+/5lwzfROahJBZI= Subject key identifier: 23:16:60:A6:B4:25:60:53:DC:E0:EF:DA:2C:DF:5E:34:38:F0:41:CE Certificate issuer: /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Certificate serial: 19 Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/IxZgprQlYFPc4O_aLN9eNDjwQc4.roa Signing time: Tue 01 Apr 2025 01:31:17 +0000 ROA not before: Tue 01 Apr 2025 01:31:17 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 17955 IP address blocks: 103.152.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Validity Not Before: Apr 1 01:31:17 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=231660A6B4256053DCE0EFDA2CDF5E3438F041CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:37:c3:2c:ee:ed:62:84:26:73:89:91:72: 41:ff:1d:25:6f:81:c3:95:80:f9:ec:de:9b:51:79: 8e:cd:0c:e6:ee:0b:b6:80:4e:93:a5:8e:41:d8:b5: 55:ac:dc:83:db:39:f3:3a:6b:a2:a6:60:99:c2:73: 1b:c6:3d:4c:20:86:a6:98:c0:81:b8:7a:37:47:d5: e2:0a:78:cc:b3:55:aa:ca:79:86:7f:c7:bf:c8:80: c3:e4:ba:02:c8:e1:58:77:d2:48:28:ff:bb:df:6b: ff:67:40:1f:46:88:f9:8e:f4:da:62:ff:ba:a4:15: 47:a5:a2:8f:c9:ae:77:2b:54:61:a9:27:7f:2f:58: 85:c7:86:48:fa:ee:8d:86:7e:69:4d:ea:af:b1:73: c1:9c:5d:4d:44:2e:fd:58:80:70:13:d5:7f:2d:e2: bb:5f:c4:82:1e:3d:47:e3:14:25:c1:02:9e:38:e4: e5:56:27:d1:69:0e:85:40:cf:6e:9b:89:95:c7:17: b5:a3:f4:6c:e4:f6:5e:66:1e:ad:dd:f8:65:1f:8b: 06:be:33:c9:bc:ff:00:4f:90:d8:cc:c5:c7:17:67: bf:23:ac:ab:d4:9f:46:b8:62:00:3a:33:73:eb:2a: 8f:fb:91:9e:ae:f5:44:9b:2a:b4:dd:1d:7e:23:e1: 8d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:16:60:A6:B4:25:60:53:DC:E0:EF:DA:2C:DF:5E:34:38:F0:41:CE X509v3 Authority Key Identifier: keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/IxZgprQlYFPc4O_aLN9eNDjwQc4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.138.0/23 Signature Algorithm: sha256WithRSAEncryption 28:06:50:5f:cd:7c:ba:5e:80:69:66:f4:47:cb:3f:9d:2d:77: 16:f6:d8:aa:4b:f2:9f:4d:ef:94:c0:f7:4f:de:62:cb:19:7f: 0c:05:1b:32:57:54:74:a3:47:c3:8b:c7:b6:de:62:20:a5:ac: b4:a5:31:4b:07:c5:51:4b:ca:ad:2c:4c:ed:e6:b0:28:d5:fb: b2:68:df:e2:0a:6b:77:ff:13:6a:ea:0b:0f:03:86:c0:37:42: 77:fd:1c:85:a1:41:9a:c6:43:23:7d:96:89:ca:e5:4c:c2:0a: 88:18:0b:4f:68:de:92:eb:b3:69:1c:84:46:fc:d1:8c:a4:ed: e5:58:dc:11:42:14:56:f3:8e:9b:b6:4f:9f:f3:d3:94:9f:51: d6:32:b2:a4:86:8a:c9:26:45:2a:b9:5d:5d:bf:a4:33:06:cb: 3c:ae:b6:c8:b6:f1:8f:2f:d2:ae:3e:b3:14:79:be:f0:31:7f: 91:b8:69:b8:0b:3d:6d:91:cb:b9:9e:ad:85:5a:93:53:a7:e2: 20:aa:eb:ef:ab:78:15:68:70:43:c9:ee:31:3d:bb:68:8f:d5: b4:88:11:78:dc:36:53:49:a2:06:d0:54:61:35:22:fd:52:a2: 40:4c:da:d7:65:9a:35:f9:59:cd:0f:cf:97:f3:79:1f:f9:7f: 02:7c:38:d7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTA1 RTcxQURERUMwRjhFMzYxQkI1NUFCMTAzRjUzRDM4NTZDNjBBMB4XDTI1MDQwMTAx MzExN1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMjMxNjYwQTZCNDI1NjA1 M0RDRTBFRkRBMkNERjVFMzQzOEYwNDFDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALoON8Ms7u1ihCZziZFyQf8dJW+Bw5WA+ezem1F5js0M5u4LtoBO k6WOQdi1Vazcg9s58zproqZgmcJzG8Y9TCCGppjAgbh6N0fV4gp4zLNVqsp5hn/H v8iAw+S6AsjhWHfSSCj/u99r/2dAH0aI+Y702mL/uqQVR6Wij8mudytUYaknfy9Y hceGSPrujYZ+aU3qr7FzwZxdTUQu/ViAcBPVfy3iu1/Egh49R+MUJcECnjjk5VYn 0WkOhUDPbpuJlccXtaP0bOT2XmYerd34ZR+LBr4zybz/AE+Q2MzFxxdnvyOsq9Sf RrhiADozc+sqj/uRnq71RJsqtN0dfiPhjRUCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBQjFmCmtCVgU9zg79os3140OPBBzjAfBgNVHSMEGDAWgBTOBeca3ewPjjYbtVqx A/U9OFbGCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzMvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhXeGdvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhX eGdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMzL0l4WmdwclFsWUZQYzRPX2FMTjllTkRqd1FjNC5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnmIowDQYJKoZIhvcNAQELBQADggEBACgGUF/NfLpegGlm9EfLP50tdxb22KpL 8p9N75TA90/eYssZfwwFGzJXVHSjR8OLx7beYiClrLSlMUsHxVFLyq0sTO3msCjV +7Jo3+IKa3f/E2rqCw8DhsA3Qnf9HIWhQZrGQyN9lonK5UzCCogYC09o3pLrs2kc hEb80Yyk7eVY3BFCFFbzjpu2T5/z05SfUdYysqSGiskmRSq5XV2/pDMGyzyutsi2 8Y8v0q4+sxR5vvAxf5G4abgLPW2Ry7merYVak1On4iCq6++reBVocEPJ7jE9u2iP 1bSIEXjcNlNJogbQVGE1Iv1SokBM2tdlmjX5Wc0Pz5fzeR/5fwJ8ONc= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:09 2025 by rpki-client