$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/q4ZYQ32h_He0GOnomHtqXk2a2Fo.roa File: q4ZYQ32h_He0GOnomHtqXk2a2Fo.roa (raw, json) Hash identifier: 52ATW6C2zTKW5pMk9TjoTOjKAX9i4DDUfavPxeCyEqk= Subject key identifier: AB:86:58:43:7D:A1:FC:77:B4:18:E9:E8:98:7B:6A:5E:4D:9A:D8:5A Certificate issuer: /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91 Certificate serial: 3E Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/q4ZYQ32h_He0GOnomHtqXk2a2Fo.roa Signing time: Tue 01 Apr 2025 01:28:22 +0000 ROA not before: Tue 01 Apr 2025 01:28:22 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 17958 IP address blocks: 219.103.48.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91 Validity Not Before: Apr 1 01:28:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=AB8658437DA1FC77B418E9E8987B6A5E4D9AD85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:26:bc:70:b4:00:ba:bb:ee:28:1f:cc:69:54: 7e:6e:59:d1:ff:41:0c:7e:a1:6b:d0:6c:8c:07:86: 05:2b:a4:dc:e9:f4:f0:44:70:39:26:23:ad:4b:30: 33:8e:9c:c5:3c:1d:7f:2e:03:d5:7f:86:95:fe:08: e3:e5:5e:33:34:b3:ce:8e:22:da:dc:81:9a:1e:c9: 99:12:b9:b4:98:2e:52:c0:ad:54:14:6e:1e:32:c1: 7c:8b:5f:44:4c:81:4b:23:4f:8b:59:e1:87:fe:f8: af:f9:61:60:e0:79:4d:7f:63:5a:a2:32:ff:e4:ac: f8:54:d3:24:09:ca:d8:bd:75:0c:4a:6f:f3:76:d3: b2:70:b9:94:8b:55:c6:88:f5:de:f2:9a:b3:a7:8a: a9:7a:a8:9b:23:d8:91:1b:f4:0b:66:58:a5:61:0f: b6:6d:1d:2a:c7:77:c9:8e:3e:39:39:89:93:06:de: 99:a4:90:01:1d:62:58:96:5b:39:c7:f0:20:f8:1b: 6f:7d:7e:cc:45:52:f5:f2:46:49:c8:82:8b:6c:8a: 2d:42:ae:3b:1f:cf:af:c4:6c:4e:9b:26:96:cf:d8: 58:06:14:47:50:99:f6:d3:07:f3:d5:5a:dd:8d:1b: d5:7b:a0:58:2b:2d:03:a2:c2:a9:d3:5d:09:b1:37: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:86:58:43:7D:A1:FC:77:B4:18:E9:E8:98:7B:6A:5E:4D:9A:D8:5A X509v3 Authority Key Identifier: keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/q4ZYQ32h_He0GOnomHtqXk2a2Fo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.103.48.0/20 Signature Algorithm: sha256WithRSAEncryption 8b:37:d9:5c:6b:8b:d0:ca:a9:20:03:a9:dd:f4:e9:ec:e5:2c: b0:01:1c:97:a2:4f:43:6b:93:0c:25:ec:b6:05:4d:81:37:66: 56:e8:f9:00:0f:a3:b3:d4:94:43:a1:97:e0:b3:50:c3:81:86: 24:35:02:fc:b7:93:39:b4:51:42:7b:71:f9:61:7b:33:f2:f3: ee:23:7b:b6:2e:83:f1:77:29:08:54:30:cf:09:85:56:3b:4e: aa:60:20:a4:45:b3:d1:77:dc:f6:97:87:16:f6:ec:c4:e5:80: af:54:97:e7:91:c1:af:c6:0b:77:ac:36:f5:d6:b4:81:11:de: a2:59:51:c0:34:ed:79:34:6b:c7:a4:5d:ed:4a:71:57:b7:96: c6:62:ee:9f:a8:07:88:09:79:2d:66:c3:21:31:69:e1:b5:a0: df:59:01:93:9a:0d:8e:d3:e5:41:62:7e:e9:9d:02:82:90:54: 08:77:cb:67:71:95:57:c7:7e:86:30:49:09:16:1d:41:38:e2: d9:08:48:55:d0:1e:32:55:e1:f5:17:be:e5:f8:7d:50:fe:c4: 20:d2:3a:63:56:43:8f:92:f8:4e:df:7d:c1:5f:e1:33:75:9a: d9:10:d8:f0:83:e3:5c:4f:2d:2a:77:f1:54:02:23:76:8a:18: 84:ad:f6:22 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTI1MDQwMTAx MjgyMloXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQUI4NjU4NDM3REExRkM3 N0I0MThFOUU4OTg3QjZBNUU0RDlBRDg1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMkmvHC0ALq77igfzGlUfm5Z0f9BDH6ha9BsjAeGBSuk3On08ERw OSYjrUswM46cxTwdfy4D1X+Glf4I4+VeMzSzzo4i2tyBmh7JmRK5tJguUsCtVBRu HjLBfItfREyBSyNPi1nhh/74r/lhYOB5TX9jWqIy/+Ss+FTTJAnK2L11DEpv83bT snC5lItVxoj13vKas6eKqXqomyPYkRv0C2ZYpWEPtm0dKsd3yY4+OTmJkwbemaSQ AR1iWJZbOcfwIPgbb31+zEVS9fJGSciCi2yKLUKuOx/Pr8RsTpsmls/YWAYUR1CZ 9tMH89Va3Y0b1XugWCstA6LCqdNdCbE3JsUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSrhlhDfaH8d7QY6eiYe2peTZrYWjAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NzkvcTRaWVEzMmhfSGUwR09ub21IdHFYazJhMkZvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNtnMDANBgkqhkiG9w0BAQsFAAOCAQEAizfZXGuL0MqpIAOp3fTp7OUssAEc l6JPQ2uTDCXstgVNgTdmVuj5AA+js9SUQ6GX4LNQw4GGJDUC/LeTObRRQntx+WF7 M/Lz7iN7ti6D8XcpCFQwzwmFVjtOqmAgpEWz0Xfc9peHFvbsxOWAr1SX55HBr8YL d6w29da0gRHeollRwDTteTRrx6Rd7UpxV7eWxmLun6gHiAl5LWbDITFp4bWg31kB k5oNjtPlQWJ+6Z0CgpBUCHfLZ3GVV8d+hjBJCRYdQTji2QhIVdAeMlXh9Re+5fh9 UP7EINI6Y1ZDj5L4Tt99wV/hM3Wa2RDY8IPjXE8tKnfxVAIjdooYhK32Ig== -----END CERTIFICATE-----Generated at Sat Apr 5 20:08:24 2025 by rpki-client