$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/yV-PB7PjcfEg0pFdIaPa8knKs5U.roa File: yV-PB7PjcfEg0pFdIaPa8knKs5U.roa (raw, json) Hash identifier: tGPkIWtRpKp1Pu717OVZMW9af2/9q888MGKcpYGS5tE= Subject key identifier: C9:5F:8F:07:B3:E3:71:F1:20:D2:91:5D:21:A3:DA:F2:49:CA:B3:95 Certificate issuer: /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058 Certificate serial: 52 Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/yV-PB7PjcfEg0pFdIaPa8knKs5U.roa Signing time: Sat 01 Mar 2025 01:31:39 +0000 ROA not before: Sat 01 Mar 2025 01:31:39 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 17948 IP address blocks: 218.219.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058 Validity Not Before: Mar 1 01:31:39 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=C95F8F07B3E371F120D2915D21A3DAF249CAB395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ea:67:c3:8f:2f:a5:e4:96:e8:3f:e5:d9:25: 6b:8f:fe:9b:73:1b:a3:08:9f:2e:66:51:39:92:85: 10:54:20:93:0e:58:b0:ac:d3:52:d0:80:6e:ac:17: ff:63:13:a5:c9:42:83:51:dc:37:d6:86:94:e0:a7: e4:c5:b4:f0:2d:10:6e:57:c2:63:8f:d0:71:83:5c: f1:f2:f4:fd:e5:f3:66:cb:27:29:26:b2:d6:88:e2: 15:f6:37:64:3a:a3:87:dc:e4:80:c6:1c:0b:c5:f5: e6:dd:38:6c:4c:e3:1f:e3:e7:de:fd:97:6f:8e:3c: 18:95:10:d3:bd:a2:ed:fd:e1:20:bd:fa:3f:a7:da: 02:ec:c7:36:cd:24:50:91:10:b9:ad:26:f5:8f:32: 0e:f3:81:31:36:7e:58:9d:c0:1c:e2:4f:b4:dd:6e: 53:56:0b:a5:71:af:72:48:5e:e2:b0:a8:82:e1:3b: 66:9b:15:da:eb:2c:bb:f2:2d:6c:71:a4:42:52:5a: 06:a5:c4:5e:25:82:d1:9b:dc:5b:f5:8f:a7:32:3e: aa:65:21:e8:8b:c9:e3:69:17:65:aa:8f:f5:5e:1a: 0f:c7:c2:09:fe:81:fc:1a:74:9e:95:4a:c9:0f:d0: 25:47:9e:90:89:3a:51:03:3a:7c:3b:46:98:59:a0: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5F:8F:07:B3:E3:71:F1:20:D2:91:5D:21:A3:DA:F2:49:CA:B3:95 X509v3 Authority Key Identifier: keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/yV-PB7PjcfEg0pFdIaPa8knKs5U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.219.144.0/20 Signature Algorithm: sha256WithRSAEncryption 87:2a:5b:28:37:c5:1f:53:0b:6f:20:b9:d5:d4:65:73:57:d4: 10:bf:03:58:7c:07:24:ae:31:6b:e7:42:69:36:37:b3:32:bf: f2:fb:f8:5b:05:20:28:77:6a:52:bd:70:8d:08:68:4d:6c:43: 88:fc:bf:5b:c2:a8:f4:ba:a7:e6:b5:75:ca:6f:cd:a9:a0:65: 9d:b4:f3:74:ff:66:17:84:25:03:e4:52:8d:4a:68:53:0e:49: 48:50:01:63:03:6e:94:17:3d:a7:dd:88:bd:ad:46:92:84:f4: 06:77:af:8c:56:09:0f:01:a4:f4:b2:6e:1a:be:48:08:b0:b3: 6d:2f:a7:96:62:6e:75:1a:28:a3:18:43:54:cc:b6:62:af:72: 50:b9:ce:91:e6:2f:69:99:5b:34:93:2b:35:84:86:af:a6:31: 39:a2:07:9e:f4:75:94:b8:7d:7c:8e:eb:fd:15:fb:54:cc:85: fc:38:37:c8:72:86:31:a5:47:00:6a:28:a5:64:71:41:ad:be: 2f:04:5b:bb:51:bf:d3:3c:2b:84:13:c8:b4:f2:3c:2b:87:47: 35:d5:58:95:c9:c4:a6:45:72:4e:6c:28:e2:c6:12:0a:ce:c6: 7f:41:56:a8:70:0b:54:f6:d4:ae:12:eb:dc:d3:aa:37:fe:45: 81:b8:a4:3f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNTU2 RUMzMzQxMDIwNDdCRURCQTBDMEREQjREQzkzMEUwN0E5MDU4MB4XDTI1MDMwMTAx MzEzOVoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQzk1RjhGMDdCM0UzNzFG MTIwRDI5MTVEMjFBM0RBRjI0OUNBQjM5NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANHqZ8OPL6Xklug/5dkla4/+m3MbowifLmZROZKFEFQgkw5YsKzT UtCAbqwX/2MTpclCg1HcN9aGlOCn5MW08C0QblfCY4/QcYNc8fL0/eXzZssnKSay 1ojiFfY3ZDqjh9zkgMYcC8X15t04bEzjH+Pn3v2Xb448GJUQ072i7f3hIL36P6fa AuzHNs0kUJEQua0m9Y8yDvOBMTZ+WJ3AHOJPtN1uU1YLpXGvckhe4rCoguE7ZpsV 2ussu/ItbHGkQlJaBqXEXiWC0ZvcW/WPpzI+qmUh6IvJ42kXZaqP9V4aD8fCCf6B /Bp0npVKyQ/QJUeekIk6UQM6fDtGmFmgmrUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTJX48Hs+Nx8SDSkV0ho9ryScqzlTAfBgNVHSMEGDAWgBT1VuwzQQIEe+26DA3b Tckw4HqQWDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjY4LzlWYnNNMEVDQkh2dHVnd04yMDNKTU9CNmtGZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzlWYnNNMEVDQkh2dHVnd04yMDNKTU9C NmtGZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NjgveVYtUEI3UGpjZkVnMHBGZElhUGE4a25LczVVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNrbkDANBgkqhkiG9w0BAQsFAAOCAQEAhypbKDfFH1MLbyC51dRlc1fUEL8D WHwHJK4xa+dCaTY3szK/8vv4WwUgKHdqUr1wjQhoTWxDiPy/W8Ko9Lqn5rV1ym/N qaBlnbTzdP9mF4QlA+RSjUpoUw5JSFABYwNulBc9p92Iva1GkoT0BnevjFYJDwGk 9LJuGr5ICLCzbS+nlmJudRoooxhDVMy2Yq9yULnOkeYvaZlbNJMrNYSGr6YxOaIH nvR1lLh9fI7r/RX7VMyF/Dg3yHKGMaVHAGoopWRxQa2+LwRbu1G/0zwrhBPItPI8 K4dHNdVYlcnEpkVyTmwo4sYSCs7Gf0FWqHALVPbUrhLr3NOqN/5FgbikPw== -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:38 2025 by rpki-client