$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/I6L4vPYt6uFDAbcnevdJQ6e0qCA.roa File: I6L4vPYt6uFDAbcnevdJQ6e0qCA.roa (raw, json) Hash identifier: LQjwFVDdUyaa/AGyzTAHaGFEZwDkEDXHgIjl2WGjtdQ= Subject key identifier: 23:A2:F8:BC:F6:2D:EA:E1:43:01:B7:27:7A:F7:49:43:A7:B4:A8:20 Certificate issuer: /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC Certificate serial: 1B Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/I6L4vPYt6uFDAbcnevdJQ6e0qCA.roa Signing time: Wed 02 Apr 2025 03:55:48 +0000 ROA not before: Wed 02 Apr 2025 03:55:48 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 10002 IP address blocks: 120.72.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC Validity Not Before: Apr 2 03:55:48 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=23A2F8BCF62DEAE14301B7277AF74943A7B4A820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:c1:af:4a:5a:ee:52:94:99:be:52:d6:e5: 43:f9:1b:72:d5:20:37:b2:70:ce:b9:72:f5:47:01: 6f:d0:8b:31:40:54:fc:8f:35:74:9d:fb:66:89:9a: 44:8e:04:32:58:d4:a0:d6:43:bf:70:c8:98:6c:77: 1f:ad:de:07:22:86:18:cc:72:a0:59:45:bb:d3:6e: cd:cb:d2:71:07:2d:d9:f7:ce:79:41:fc:02:32:64: 7c:ab:81:55:37:9b:01:4d:e3:fe:ae:c6:4e:3f:17: 7d:41:bd:b9:85:1a:a5:9a:d9:4e:86:28:de:a7:f3: 72:bf:fa:28:e9:72:ad:39:4c:c0:d1:68:ba:c2:bf: e5:c6:4b:26:a0:24:85:7b:df:67:42:e2:11:b0:57: 78:dd:7c:c0:4c:b7:cb:2c:a8:f3:6f:aa:28:26:c5: 60:44:d5:68:68:fc:76:3f:9e:04:f1:63:06:ab:52: 77:88:65:1b:47:d1:62:52:46:17:49:ed:40:ca:2d: 38:cb:3f:37:51:b9:84:72:15:c1:1e:cd:ff:b6:a9: ed:bc:c5:54:d4:1d:55:cc:6a:38:a2:b2:3c:cb:2f: db:a6:0e:79:de:0a:9e:cf:ce:5f:45:b4:1c:ca:8e: 42:88:16:0f:30:4e:bf:70:8f:64:fa:25:cf:69:d1: 40:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A2:F8:BC:F6:2D:EA:E1:43:01:B7:27:7A:F7:49:43:A7:B4:A8:20 X509v3 Authority Key Identifier: keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/I6L4vPYt6uFDAbcnevdJQ6e0qCA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.72.0.0/20 Signature Algorithm: sha256WithRSAEncryption 12:e1:4c:80:34:a5:3f:8b:d5:b6:27:48:0a:0e:41:4c:c1:41: 1a:19:22:df:1e:93:9d:4a:b3:ed:04:f7:12:4c:00:2a:a9:98: f9:36:41:ba:9e:b8:b1:f7:16:fe:d5:d2:90:ca:83:ea:31:7f: f4:89:9f:d8:36:85:87:7c:74:b2:03:57:8c:e7:50:bd:eb:a1: e8:55:af:28:cc:7c:a4:8c:96:0a:42:38:83:62:0b:57:29:cf: 6a:44:65:21:e7:c6:85:e2:59:13:20:44:61:54:00:f7:9b:40: 6c:c5:b2:33:36:3d:aa:b7:2c:c0:8a:35:ee:0d:99:34:97:a6: 33:2a:48:67:ed:0d:1b:f0:6d:85:2e:e3:12:a8:aa:af:d0:74: 25:90:b3:b5:26:17:55:37:95:4f:c3:ed:d7:b3:10:bc:63:bd: 0c:e2:c8:09:f5:9b:cd:52:66:92:5b:bf:31:f5:e2:5c:ce:3a: 57:d5:ff:40:ee:0a:39:22:6d:0d:7c:0c:d6:a3:02:ce:12:e5: e9:80:71:99:49:36:ac:66:e1:e3:97:f4:4f:12:a0:b9:be:fb: 2b:65:75:64:3e:7b:7a:f5:07:ef:72:91:d0:ed:a4:45:70:0f: 12:d2:2f:7c:9d:ac:89:49:16:79:7b:15:0d:62:d8:e4:c7:0c: e7:25:7d:2a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNTAz NEZCQkNFMDc5OUEwRjI4NjgzQkQzQkEzMzlBOUJENjQ1QkRDMB4XDTI1MDQwMjAz NTU0OFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMjNBMkY4QkNGNjJERUFF MTQzMDFCNzI3N0FGNzQ5NDNBN0I0QTgyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKJPwa9KWu5SlJm+UtblQ/kbctUgN7Jwzrly9UcBb9CLMUBU/I81 dJ37ZomaRI4EMljUoNZDv3DImGx3H63eByKGGMxyoFlFu9NuzcvScQct2ffOeUH8 AjJkfKuBVTebAU3j/q7GTj8XfUG9uYUapZrZToYo3qfzcr/6KOlyrTlMwNFousK/ 5cZLJqAkhXvfZ0LiEbBXeN18wEy3yyyo82+qKCbFYETVaGj8dj+eBPFjBqtSd4hl G0fRYlJGF0ntQMotOMs/N1G5hHIVwR7N/7ap7bzFVNQdVcxqOKKyPMsv26YOed4K ns/OX0W0HMqOQogWDzBOv3CPZPolz2nRQAMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQjovi89i3q4UMBtyd690lDp7SoIDAfBgNVHSMEGDAWgBTFA0+7zgeZoPKGg707 ozmpvWRb3DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQ3L3hRTlB1ODRIbWFEeWhvTzlPNk01cWIxa1c5dy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hRTlB1ODRIbWFEeWhvTzlPNk01cWIx a1c5dy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDcvSTZMNHZQWXQ2dUZEQWJjbmV2ZEpRNmUwcUNBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHhIADANBgkqhkiG9w0BAQsFAAOCAQEAEuFMgDSlP4vVtidICg5BTMFBGhki 3x6TnUqz7QT3EkwAKqmY+TZBup64sfcW/tXSkMqD6jF/9Imf2DaFh3x0sgNXjOdQ veuh6FWvKMx8pIyWCkI4g2ILVynPakRlIefGheJZEyBEYVQA95tAbMWyMzY9qrcs wIo17g2ZNJemMypIZ+0NG/BthS7jEqiqr9B0JZCztSYXVTeVT8Pt17MQvGO9DOLI CfWbzVJmklu/MfXiXM46V9X/QO4KOSJtDXwM1qMCzhLl6YBxmUk2rGbh45f0TxKg ub77K2V1ZD57evUH73KR0O2kRXAPEtIvfJ2siUkWeXsVDWLY5McM5yV9Kg== -----END CERTIFICATE-----Generated at Sat Apr 5 12:05:14 2025 by rpki-client