$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Qr9o0GJ9QdJC90AtnVlY6zBsj88.roa File: Qr9o0GJ9QdJC90AtnVlY6zBsj88.roa (raw, json) Hash identifier: vF0ecGUTVxsMt0bLSk49XtuQ9lcSq7x48Imx2zLOa1w= Subject key identifier: 42:BF:68:D0:62:7D:41:D2:42:F7:40:2D:9D:59:58:EB:30:6C:8F:CF Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 057D Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Qr9o0GJ9QdJC90AtnVlY6zBsj88.roa Signing time: Fri 31 Jan 2025 01:39:51 +0000 ROA not before: Fri 31 Jan 2025 01:39:51 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 59.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:39:51 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=42BF68D0627D41D242F7402D9D5958EB306C8FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:0b:05:c8:06:85:70:d3:7e:6e:9a:a4:db: a1:15:77:35:12:a5:07:0c:80:22:79:ed:8b:fc:d7: dd:e4:06:c6:d3:a9:27:7f:3b:20:8e:b7:51:e3:11: 5d:f0:0c:52:85:6d:bf:f3:a8:1f:bd:12:1a:1d:db: e8:ce:1e:e8:cb:49:f2:b3:ac:df:58:9a:d5:c5:9f: d0:61:34:96:cb:0f:24:f3:49:b8:73:71:31:bf:08: 52:d5:d8:ba:8c:ea:f0:c1:7a:bf:8c:b4:88:6f:92: 96:73:8c:4b:72:bb:71:98:8c:27:11:f7:e2:52:98: cb:8c:dc:57:e1:7f:bd:7e:93:3e:3b:fa:64:b7:8e: 4d:c4:ca:9e:b9:a4:42:7a:ac:ba:07:29:eb:b1:01: b8:c1:d8:a7:6f:a9:4a:c5:8e:c8:2b:8e:ab:4c:43: da:7a:ac:81:d4:fb:a0:b3:3a:91:d2:2d:58:c2:3d: 62:42:22:ed:d4:32:2a:ed:60:9e:c7:f3:42:c4:25: 63:8a:bd:9c:ba:3c:81:3d:f4:81:89:a2:71:83:2a: 27:37:0d:46:ff:fb:95:55:21:d5:c5:cc:a2:80:b1: 21:a6:42:cd:f9:30:ea:d7:1b:56:07:04:4d:aa:24: 80:f6:94:13:9b:ae:48:27:bf:f9:b3:b6:ae:26:0f: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BF:68:D0:62:7D:41:D2:42:F7:40:2D:9D:59:58:EB:30:6C:8F:CF X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Qr9o0GJ9QdJC90AtnVlY6zBsj88.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8a:a1:cb:f6:c2:55:8d:ef:dc:d4:9a:72:ae:9b:80:f8:e1:34: 16:2d:96:73:e8:8e:f5:05:a4:9a:0d:ec:4a:c6:bb:a0:ff:c7: d7:4a:c1:a0:38:18:43:04:eb:b6:4b:78:44:ac:4e:5f:85:d0: 25:14:ee:63:b4:0e:df:da:5e:a0:06:8a:86:ae:ef:d3:c9:72: 01:9c:18:e6:b4:91:b0:72:d4:e5:3b:07:13:8e:23:7f:ae:4c: ab:47:a2:23:5c:7a:64:a4:42:ba:74:1a:4f:18:d4:79:fd:cb: 92:52:ba:36:71:ba:67:f6:9d:85:1b:e2:86:9f:d1:e1:dd:d0: af:ce:c6:7f:da:bb:01:15:5b:f8:e9:66:c2:42:b3:d9:57:57: 86:3d:9f:80:97:9d:6d:10:80:54:19:5e:e5:36:a2:d2:db:c3: fb:03:fd:97:dc:02:c5:84:44:3e:64:f1:d0:15:71:42:d6:35: ca:03:4f:20:04:5b:35:e2:55:82:7f:b2:fb:4f:6b:50:c8:39: 53:cd:9c:22:a7:3f:59:86:f7:99:7c:bb:53:ca:67:81:6d:06: 3b:cf:c7:3a:4e:a0:b9:ad:b6:88:17:f2:de:b3:65:24:07:bd: 2f:84:ee:01:9a:bd:cf:e3:81:22:20:c3:15:38:72:4e:60:ff: 86:fc:e6:dc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM5NTFaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQyQkY2OEQwNjI3RDQx RDI0MkY3NDAyRDlENTk1OEVCMzA2QzhGQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkTgsFyAaFcNN+bpqk26EVdzUSpQcMgCJ57Yv8193kBsbTqSd/ OyCOt1HjEV3wDFKFbb/zqB+9Ehod2+jOHujLSfKzrN9YmtXFn9BhNJbLDyTzSbhz cTG/CFLV2LqM6vDBer+MtIhvkpZzjEtyu3GYjCcR9+JSmMuM3Ffhf71+kz47+mS3 jk3Eyp65pEJ6rLoHKeuxAbjB2KdvqUrFjsgrjqtMQ9p6rIHU+6CzOpHSLVjCPWJC Iu3UMirtYJ7H80LEJWOKvZy6PIE99IGJonGDKic3DUb/+5VVIdXFzKKAsSGmQs35 MOrXG1YHBE2qJID2lBObrkgnv/mztq4mD2SpAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUQr9o0GJ9QdJC90AtnVlY6zBsj88wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L1FyOW8wR0o5UWRKQzkwQXRuVmxZNnpCc2o4OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA7VTANBgkqhkiG9w0BAQsFAAOCAQEAiqHL9sJVje/c1JpyrpuA+OE0Fi2W c+iO9QWkmg3sSsa7oP/H10rBoDgYQwTrtkt4RKxOX4XQJRTuY7QO39peoAaKhq7v 08lyAZwY5rSRsHLU5TsHE44jf65Mq0eiI1x6ZKRCunQaTxjUef3LklK6NnG6Z/ad hRvihp/R4d3Qr87Gf9q7ARVb+OlmwkKz2VdXhj2fgJedbRCAVBle5Tai0tvD+wP9 l9wCxYREPmTx0BVxQtY1ygNPIARbNeJVgn+y+09rUMg5U82cIqc/WYb3mXy7U8pn gW0GO8/HOk6gua22iBfy3rNlJAe9L4TuAZq9z+OBIiDDFThyTmD/hvzm3A== -----END CERTIFICATE-----Generated at Sat Apr 5 17:42:23 2025 by rpki-client