$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/EGSbAuQOEh8oq7xuq94h2VMcVFQ.roa File: EGSbAuQOEh8oq7xuq94h2VMcVFQ.roa (raw, json) Hash identifier: ueYzaHww5MAuh89CN/rQVDwfOTEzulP9w8qFOpmEfbo= Subject key identifier: 10:64:9B:02:E4:0E:12:1F:28:AB:BC:6E:AB:DE:21:D9:53:1C:54:54 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 035F Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EGSbAuQOEh8oq7xuq94h2VMcVFQ.roa Signing time: Tue 01 Apr 2025 01:28:30 +0000 ROA not before: Tue 01 Apr 2025 01:28:30 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 4686 IP address blocks: 219.112.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Apr 1 01:28:30 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=10649B02E40E121F28ABBC6EABDE21D9531C5454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:9a:af:0d:a6:e0:87:54:2b:9c:3b:aa:58: a2:59:d9:a4:e2:29:56:23:16:ec:e8:10:13:4c:c1: 88:50:fa:39:b9:c3:4f:06:52:fa:4b:76:fa:fd:b0: 90:3f:db:dc:80:60:8e:29:08:58:7b:71:d7:1f:f3: e9:9d:b9:49:1e:f3:45:5a:bd:09:3c:54:21:ef:77: 32:36:60:66:af:04:74:27:67:bf:31:27:73:e4:c3: f8:4f:d5:7d:f6:25:84:c9:aa:2c:4c:c2:00:ff:fc: 3d:07:fe:11:df:65:f0:04:b0:a8:66:36:e6:a6:21: 3c:f9:af:1c:36:0e:bd:31:1c:6b:cd:31:55:a5:c0: 88:e4:76:8e:01:64:fd:e0:94:7f:c6:25:87:8a:ec: a8:78:6c:59:94:2b:c9:51:93:2e:00:4f:02:93:3e: 90:20:d1:7b:44:5f:7d:07:06:a7:e8:ec:e1:c2:c7: 74:40:86:8c:41:c1:ad:a4:99:04:77:48:ac:34:7e: 73:1f:86:5a:55:7c:20:cb:26:01:28:cf:5a:8d:19: 8c:71:08:4b:07:29:c2:49:5d:5b:19:32:18:c1:2e: 24:d7:4c:a3:72:64:40:45:c5:88:4d:aa:97:8d:9a: 26:4a:2d:84:30:61:60:18:bb:66:88:f8:af:12:d5: 82:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:9B:02:E4:0E:12:1F:28:AB:BC:6E:AB:DE:21:D9:53:1C:54:54 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EGSbAuQOEh8oq7xuq94h2VMcVFQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.112.0.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:8d:07:71:63:25:39:33:7d:f9:25:c8:e3:b7:ce:45:f4:92: 1b:74:16:cb:d2:d3:a6:b4:ec:47:46:33:d0:be:61:16:6f:13: 56:ca:fb:3a:eb:90:ca:c0:5b:a3:9b:05:d1:66:e9:d5:f0:48: cb:2b:4f:de:fa:88:07:f8:04:fe:74:60:be:ca:cd:1f:53:40: 09:21:a2:d9:26:48:dc:06:bd:70:c9:35:d0:6b:89:2d:ab:3a: 47:c3:85:01:94:c3:f3:7a:62:da:b9:bc:4e:7c:26:85:90:e8: 6d:a6:a4:55:77:5d:c8:e7:5f:08:ba:b9:7a:b5:79:db:1f:79: 06:0e:1d:3c:33:31:77:25:4c:54:fa:7b:c7:cc:06:24:9e:88: 8d:7b:27:0b:d6:23:e7:0c:39:94:15:fa:85:fa:84:60:fb:5c: 97:a3:c8:71:15:ff:aa:a7:14:80:7b:39:aa:99:42:72:9b:1a: 97:04:01:5e:c3:8b:20:4a:32:b0:a2:8c:dc:23:11:02:63:57: 19:8f:80:61:e4:79:93:97:9a:03:bd:e8:4b:6c:91:61:93:f9: cb:51:af:33:1d:bf:77:d2:0a:3f:e2:8b:8a:76:9e:28:8f:29: fe:f1:5c:e4:9d:09:26:70:15:fc:01:12:be:84:07:7f:8e:fb: 55:ec:12:c2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA18wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA0MDEw MTI4MzBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDEwNjQ5QjAyRTQwRTEy MUYyOEFCQkM2RUFCREUyMUQ5NTMxQzU0NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZw5qvDabgh1QrnDuqWKJZ2aTiKVYjFuzoEBNMwYhQ+jm5w08G UvpLdvr9sJA/29yAYI4pCFh7cdcf8+mduUke80VavQk8VCHvdzI2YGavBHQnZ78x J3Pkw/hP1X32JYTJqixMwgD//D0H/hHfZfAEsKhmNuamITz5rxw2Dr0xHGvNMVWl wIjkdo4BZP3glH/GJYeK7Kh4bFmUK8lRky4ATwKTPpAg0XtEX30HBqfo7OHCx3RA hoxBwa2kmQR3SKw0fnMfhlpVfCDLJgEoz1qNGYxxCEsHKcJJXVsZMhjBLiTXTKNy ZEBFxYhNqpeNmiZKLYQwYWAYu2aI+K8S1YJRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEGSbAuQOEh8oq7xuq94h2VMcVFQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0VHU2JBdVFPRWg4b3E3eHVxOTRoMlZNY1ZGUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbbcAAwDQYJKoZIhvcNAQELBQADggEBAD+NB3FjJTkzffklyOO3zkX0kht0 FsvS06a07EdGM9C+YRZvE1bK+zrrkMrAW6ObBdFm6dXwSMsrT976iAf4BP50YL7K zR9TQAkhotkmSNwGvXDJNdBriS2rOkfDhQGUw/N6Ytq5vE58JoWQ6G2mpFV3Xcjn Xwi6uXq1edsfeQYOHTwzMXclTFT6e8fMBiSeiI17JwvWI+cMOZQV+oX6hGD7XJej yHEV/6qnFIB7OaqZQnKbGpcEAV7DiyBKMrCijNwjEQJjVxmPgGHkeZOXmgO96Ets kWGT+ctRrzMdv3fSCj/ii4p2niiPKf7xXOSdCSZwFfwBEr6EB3+O+1XsEsI= -----END CERTIFICATE-----Generated at Sat Apr 5 23:14:30 2025 by rpki-client