$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/rFBpwMhQIUWP1LRTFfxS5c8f-Io.roa File: rFBpwMhQIUWP1LRTFfxS5c8f-Io.roa (raw, json) Hash identifier: AruzcUzeAbk0JmuKXkkPRT/YCHAiIF2FrwtfcaU+RRE= Subject key identifier: AC:50:69:C0:C8:50:21:45:8F:D4:B4:53:15:FC:52:E5:CF:1F:F8:8A Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Certificate serial: 6F Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/rFBpwMhQIUWP1LRTFfxS5c8f-Io.roa Signing time: Sat 01 Mar 2025 01:28:10 +0000 ROA not before: Sat 01 Mar 2025 01:28:10 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 10019 IP address blocks: 211.125.144.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 14:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Validity Not Before: Mar 1 01:28:10 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=AC5069C0C85021458FD4B45315FC52E5CF1FF88A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:3b:a5:09:ea:21:f6:b3:7b:11:42:c8:dd: 54:c4:a3:bd:32:53:95:e3:ea:03:78:db:37:d8:7b: ab:cc:e7:4f:bf:7c:67:52:5f:03:df:ec:27:9c:1b: 19:0a:1c:43:27:5c:14:48:6d:d9:aa:aa:33:62:c9: 1f:19:2f:70:6c:3d:f1:f9:f9:0f:e3:e7:99:5e:f6: 58:01:70:52:b0:88:88:53:5c:36:6f:a0:f3:a7:db: c3:16:da:ae:ff:4d:55:de:fc:4a:bb:96:36:de:bb: d6:fc:1f:99:92:d8:1f:9f:71:2a:bf:f7:58:dc:b9: 9f:14:3e:24:76:a7:64:c3:3b:68:c1:5d:0e:4f:87: 55:eb:77:da:67:f3:de:4a:53:09:9a:22:8c:8f:50: e9:87:43:1e:b6:13:b4:d1:75:6a:0c:2b:38:c7:40: 1d:13:bf:67:e0:11:08:77:1b:c7:e0:06:9d:7d:bd: cd:c5:c1:3f:f0:8a:89:70:22:5f:67:a0:27:f4:5f: bc:c9:08:95:9b:bf:7b:02:82:85:cc:7a:5a:38:5b: 68:52:ca:33:c0:5f:eb:51:8c:b5:0c:c3:33:a6:16: d3:3d:4d:e0:6a:a6:9b:92:86:64:22:c1:34:d8:89: 1f:25:1b:5d:90:3a:0e:99:5c:0b:d3:04:d8:9d:a1: 09:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:50:69:C0:C8:50:21:45:8F:D4:B4:53:15:FC:52:E5:CF:1F:F8:8A X509v3 Authority Key Identifier: keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/rFBpwMhQIUWP1LRTFfxS5c8f-Io.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.125.144.0/20 Signature Algorithm: sha256WithRSAEncryption 1d:d2:99:5f:1b:f9:76:6d:b4:cd:e7:44:d6:90:fa:64:0b:8e: 27:f1:ed:84:71:aa:01:86:b2:74:03:94:0a:f4:ea:20:e1:d9: ae:b4:d7:91:64:5e:7c:7a:90:55:ab:ee:a2:89:a4:8d:0f:9a: fa:2e:63:4f:55:24:d6:a7:dc:82:20:2a:2a:89:68:c3:61:98: 9e:b3:73:34:22:f5:b1:55:f1:c4:54:f7:45:2f:b5:d6:9d:d8: 25:94:6a:b3:ac:3a:1a:6d:8a:62:f9:d1:c7:f2:48:38:ba:28: ae:59:7b:fa:de:ae:84:0c:02:52:a4:45:c2:af:3e:4d:9e:9e: d3:90:d5:85:ff:1b:6f:9e:03:f1:1e:d1:81:29:04:dd:6f:42: b2:db:a9:db:56:c2:89:88:2b:64:7e:af:10:58:43:2d:70:7d: bd:b7:8b:ac:55:14:01:0f:eb:48:1d:49:79:e4:5e:ee:36:75: 20:2e:fb:a1:41:36:7b:92:ee:63:86:53:69:c6:4c:ae:09:8d: 4d:14:e0:65:57:7f:e3:99:28:38:82:3b:25:d3:9b:9d:9b:2a: 3c:f3:5a:b7:54:b1:1e:e9:7e:59:4b:9b:66:01:aa:00:48:8d: 12:bd:d0:e2:69:c6:cc:39:b1:5b:06:cc:80:b0:34:db:c0:a4: 8a:a1:b0:91 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Mzkx N0IyMzA3NDUyNEU5RTZFQThFNDBGQTRBMDY3MkM5NjIwMzE4MB4XDTI1MDMwMTAx MjgxMFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQUM1MDY5QzBDODUwMjE0 NThGRDRCNDUzMTVGQzUyRTVDRjFGRjg4QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL8EO6UJ6iH2s3sRQsjdVMSjvTJTlePqA3jbN9h7q8znT798Z1Jf A9/sJ5wbGQocQydcFEht2aqqM2LJHxkvcGw98fn5D+PnmV72WAFwUrCIiFNcNm+g 86fbwxbarv9NVd78SruWNt671vwfmZLYH59xKr/3WNy5nxQ+JHanZMM7aMFdDk+H Vet32mfz3kpTCZoijI9Q6YdDHrYTtNF1agwrOMdAHRO/Z+ARCHcbx+AGnX29zcXB P/CKiXAiX2egJ/RfvMkIlZu/ewKChcx6WjhbaFLKM8Bf61GMtQzDM6YW0z1N4Gqm m5KGZCLBNNiJHyUbXZA6DplcC9ME2J2hCa8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSsUGnAyFAhRY/UtFMV/FLlzx/4ijAfBgNVHSMEGDAWgBRDkXsjB0Uk6ebqjkD6 SgZyyWIDGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDYyL1E1RjdJd2RGSk9ubTZvNUEta29HY3NsaUF4Zy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1E1RjdJd2RGSk9ubTZvNUEta29HY3Ns aUF4Zy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NjIvckZCcHdNaFFJVVdQMUxSVEZmeFM1YzhmLUlvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNN9kDANBgkqhkiG9w0BAQsFAAOCAQEAHdKZXxv5dm20zedE1pD6ZAuOJ/Ht hHGqAYaydAOUCvTqIOHZrrTXkWRefHqQVavuoomkjQ+a+i5jT1Uk1qfcgiAqKolo w2GYnrNzNCL1sVXxxFT3RS+11p3YJZRqs6w6Gm2KYvnRx/JIOLoorll7+t6uhAwC UqRFwq8+TZ6e05DVhf8bb54D8R7RgSkE3W9Cstup21bCiYgrZH6vEFhDLXB9vbeL rFUUAQ/rSB1JeeRe7jZ1IC77oUE2e5LuY4ZTacZMrgmNTRTgZVd/45koOII7JdOb nZsqPPNat1SxHul+WUubZgGqAEiNEr3Q4mnGzDmxWwbMgLA028CkiqGwkQ== -----END CERTIFICATE-----Generated at Fri Apr 11 15:55:25 2025 by rpki-client