$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20093/TvaIq_lGRMUiTC0YfuhxOOeXzX4.roa File: TvaIq_lGRMUiTC0YfuhxOOeXzX4.roa (raw, json) Hash identifier: hm98oPUTu03pwCM7cCCbdKihv01I9wW4YkcOPeUTyU8= Subject key identifier: 4E:F6:88:AB:F9:46:44:C5:22:4C:2D:18:7E:E8:71:38:E7:97:CD:7E Certificate issuer: /CN=711F626595BDEABE9334C61D729C4DA254CED91C Certificate serial: 50 Authority key identifier: 71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/TvaIq_lGRMUiTC0YfuhxOOeXzX4.roa Signing time: Thu 01 May 2025 01:29:00 +0000 ROA not before: Thu 01 May 2025 01:29:00 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131949 IP address blocks: 133.247.144.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 21:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=711F626595BDEABE9334C61D729C4DA254CED91C Validity Not Before: May 1 01:29:00 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=4EF688ABF94644C5224C2D187EE87138E797CD7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:30:fc:b0:8e:b9:e1:dd:af:e7:ce:c8:a6:cb: 54:27:42:95:33:6d:6b:21:74:ec:76:73:cb:d0:73: d1:bf:ee:38:4d:dc:f8:f5:75:0d:32:35:19:f3:b6: 4b:c2:e3:8d:f4:f5:d9:9f:d0:25:07:48:c5:e1:82: 99:d9:4d:f5:53:ec:44:ef:d9:55:97:cb:be:26:2b: 97:f7:f3:90:8d:8b:ed:2f:23:50:50:e6:d4:6b:8c: 9a:29:c2:b5:4c:63:29:77:82:b5:3d:27:0f:8d:42: 25:54:05:3f:7c:af:47:50:6e:95:e6:fc:7c:f3:f8: f9:8b:4e:b4:da:75:70:97:dd:ff:ca:e3:6d:12:43: b0:56:74:39:96:5e:49:38:74:fc:b4:a3:67:d3:00: 08:25:78:13:b3:7d:e5:0a:2a:65:42:e8:c4:37:fa: 21:19:ff:70:d9:0d:f8:7b:f2:89:ba:c9:78:09:0c: 3a:c1:48:b2:2b:c4:54:21:31:95:df:22:37:b7:29: fe:d2:44:d6:38:53:d5:9b:b3:01:6b:40:ca:00:c2: fc:6e:3b:51:6c:d6:99:11:7a:57:38:af:56:42:8b: 1a:c5:54:e2:8d:10:a3:ce:d0:dd:c2:4f:b2:8d:5b: 18:88:d8:39:b5:98:50:3e:16:d6:a2:08:a8:6d:5e: 54:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F6:88:AB:F9:46:44:C5:22:4C:2D:18:7E:E8:71:38:E7:97:CD:7E X509v3 Authority Key Identifier: keyid:71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/TvaIq_lGRMUiTC0YfuhxOOeXzX4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.247.144.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:42:b6:59:3e:24:fd:c0:0a:4e:bc:ec:37:3d:4b:06:52:4f: d4:d5:01:38:ec:d0:60:30:e5:9f:51:3c:02:a3:15:01:38:10: 61:12:2d:82:58:d8:1e:c3:c8:0b:3c:27:ec:8b:cd:19:4d:0a: 0a:a3:6f:14:56:55:06:13:3a:0e:6e:44:a4:0f:7b:b4:57:82: a2:93:84:3a:87:ed:e3:47:a0:d0:c0:b1:4f:3c:21:54:98:8b: 1a:59:b3:02:84:aa:1c:03:a6:b4:2b:22:4f:8e:f3:cf:ec:1b: cd:24:6e:b1:75:53:4b:64:ef:73:db:5b:8f:c2:51:82:05:0f: 1a:b8:49:18:f2:43:1e:51:1e:0f:84:88:36:b9:04:15:73:6c: e6:ce:03:e8:d0:92:dd:9b:cc:31:af:67:d2:be:41:48:34:af: 0d:b0:59:64:ec:b2:33:60:ff:7b:f4:90:d1:03:f3:78:cd:ef: 2a:58:e0:14:14:eb:6d:20:92:4e:d4:d0:f3:bc:62:c0:69:54: 30:68:88:7e:3b:01:9d:24:50:63:92:28:db:b4:da:c9:04:38: 47:f8:f7:44:da:0c:32:14:fc:5b:1f:3a:44:42:d2:3f:b5:50: 80:76:4a:83:8e:d2:5d:45:19:8e:49:3a:cd:cb:22:f8:ac:7d: 2c:1e:6a:32 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTFG NjI2NTk1QkRFQUJFOTMzNEM2MUQ3MjlDNERBMjU0Q0VEOTFDMB4XDTI1MDUwMTAx MjkwMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNEVGNjg4QUJGOTQ2NDRD NTIyNEMyRDE4N0VFODcxMzhFNzk3Q0Q3RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL4w/LCOueHdr+fOyKbLVCdClTNtayF07HZzy9Bz0b/uOE3c+PV1 DTI1GfO2S8LjjfT12Z/QJQdIxeGCmdlN9VPsRO/ZVZfLviYrl/fzkI2L7S8jUFDm 1GuMminCtUxjKXeCtT0nD41CJVQFP3yvR1Buleb8fPP4+YtOtNp1cJfd/8rjbRJD sFZ0OZZeSTh0/LSjZ9MACCV4E7N95QoqZULoxDf6IRn/cNkN+HvyibrJeAkMOsFI sivEVCExld8iN7cp/tJE1jhT1ZuzAWtAygDC/G47UWzWmRF6VzivVkKLGsVU4o0Q o87Q3cJPso1bGIjYObWYUD4W1qIIqG1eVB0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBRO9oir+UZExSJMLRh+6HE455fNfjAfBgNVHSMEGDAWgBRxH2Jllb3qvpM0xh1y nE2iVM7ZHDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwOTMvY1I5aVpaVzk2cjZUTk1ZZGNweE5vbFRPMlJ3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY1I5aVpaVzk2cjZUTk1ZZGNweE5v bFRPMlJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDkzL1R2YUlxX2xHUk1VaVRDMFlmdWh4T09lWHpYNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBASF95AwDQYJKoZIhvcNAQELBQADggEBADxCtlk+JP3ACk687Dc9SwZS T9TVATjs0GAw5Z9RPAKjFQE4EGESLYJY2B7DyAs8J+yLzRlNCgqjbxRWVQYTOg5u RKQPe7RXgqKThDqH7eNHoNDAsU88IVSYixpZswKEqhwDprQrIk+O88/sG80kbrF1 U0tk73PbW4/CUYIFDxq4SRjyQx5RHg+EiDa5BBVzbObOA+jQkt2bzDGvZ9K+QUg0 rw2wWWTssjNg/3v0kNED83jN7ypY4BQU620gkk7U0PO8YsBpVDBoiH47AZ0kUGOS KNu02skEOEf490TaDDIU/FsfOkRC0j+1UIB2SoOO0l1FGY5JOs3LIvisfSweajI= -----END CERTIFICATE-----Generated at Wed Jun 4 01:01:58 2025 by rpki-client