$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20168/5jj9ugeufh6PyVTnLrBUWcPOJIo.roa File: 5jj9ugeufh6PyVTnLrBUWcPOJIo.roa (raw, json) Hash identifier: kHYArmf0shVoXD6g0J41xiOuAD1bDlVcuDbXK1uDNu8= Subject key identifier: E6:38:FD:BA:07:AE:7E:1E:8F:C9:54:E7:2E:B0:54:59:C3:CE:24:8A Certificate issuer: /CN=7911FB3B3FB825FF96628FBC08DD2BEFCADB869C Certificate serial: 16 Authority key identifier: 79:11:FB:3B:3F:B8:25:FF:96:62:8F:BC:08:DD:2B:EF:CA:DB:86:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/5jj9ugeufh6PyVTnLrBUWcPOJIo.roa Signing time: Sun 01 Jun 2025 01:33:26 +0000 ROA not before: Sun 01 Jun 2025 01:33:26 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 146969 IP address blocks: 157.70.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 20:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7911FB3B3FB825FF96628FBC08DD2BEFCADB869C Validity Not Before: Jun 1 01:33:26 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E638FDBA07AE7E1E8FC954E72EB05459C3CE248A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:53:f8:3e:fd:6e:71:d3:64:3a:0d:9b:0e: 1d:e9:b4:c6:c0:2b:9b:b0:4b:53:48:50:5f:24:53: 68:ae:10:d4:8f:89:62:b3:b7:12:7e:cb:3d:bb:3a: 96:77:38:25:a6:47:82:cb:c9:e3:49:2b:e8:80:3e: 55:b9:ed:93:d1:66:e0:96:dc:fb:47:8b:1c:e1:81: 2a:b7:e9:b2:3d:b5:26:bb:8d:a4:8a:6c:c5:f3:c1: 8d:73:4f:fd:dc:c1:e2:e5:dc:8c:d4:38:f9:c6:79: 2f:70:af:3a:4a:4b:54:d9:fe:00:c1:1c:18:8b:06: d0:39:87:15:e1:f2:b6:12:86:d3:84:6c:be:a9:06: e6:d1:84:31:4a:d8:15:45:f9:7c:e8:c7:f5:15:77: a3:cf:04:f8:63:4d:05:f8:eb:13:5d:6a:33:c6:ed: fd:79:93:60:95:0d:70:0a:01:be:41:51:f0:73:5e: 27:a5:cd:9a:ae:e4:68:33:7c:40:1f:42:43:4e:42: 6a:4c:15:9f:56:53:08:85:34:8b:89:eb:bb:a8:2e: 5b:45:b9:34:62:33:41:b7:15:f0:b8:14:43:44:cf: 9f:b6:3f:92:d5:33:55:ac:ed:1e:ed:5a:a1:c0:15: a9:06:94:e5:b4:27:63:63:e8:fa:49:82:4a:39:ab: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:38:FD:BA:07:AE:7E:1E:8F:C9:54:E7:2E:B0:54:59:C3:CE:24:8A X509v3 Authority Key Identifier: keyid:79:11:FB:3B:3F:B8:25:FF:96:62:8F:BC:08:DD:2B:EF:CA:DB:86:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/5jj9ugeufh6PyVTnLrBUWcPOJIo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.70.240.0/20 Signature Algorithm: sha256WithRSAEncryption dd:0c:ff:6d:94:56:64:b9:7d:5c:ec:20:10:58:4e:10:dd:28: 92:bf:12:33:02:0a:54:f3:63:11:5b:fe:d0:9f:2a:e6:43:46: 74:bb:5d:4c:7a:a8:db:eb:d6:fb:9c:7f:c9:b1:38:ba:d9:8f: 15:e4:f9:de:40:7c:f7:0e:3b:af:3d:ed:d6:85:65:7e:cf:9c: 22:d0:79:09:f7:3a:af:2d:cb:20:ce:0d:40:5c:3c:11:57:ca: 85:a6:79:27:a8:e3:c8:44:a1:ba:77:85:c5:40:64:30:fc:b0: 73:9c:e8:b6:ad:63:49:b0:1b:24:ac:ee:89:0b:09:f6:b2:71: 9c:7a:f8:f5:1b:f5:2a:d8:9c:bc:fb:19:69:6e:7b:42:62:9b: a7:df:03:3b:98:65:be:fd:6e:20:69:97:3a:44:68:a0:8b:d6: de:e2:c2:ba:c6:ac:a6:50:f9:65:2b:da:5d:ce:f7:e2:84:35: 11:4c:e6:d8:8b:dc:23:e6:f2:14:8b:d7:0d:8c:a3:81:63:73: 3e:01:db:cf:13:ab:c3:8c:f0:c0:71:3b:bb:6d:09:ab:0e:fd: d2:99:a7:48:3c:c6:c5:70:0e:97:cc:4b:44:c4:08:a2:46:cf: 86:f2:68:70:fd:a6:4b:35:40:c7:fe:fc:fc:41:00:9f:84:0d: 75:5d:05:62 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3OTEx RkIzQjNGQjgyNUZGOTY2MjhGQkMwOEREMkJFRkNBREI4NjlDMB4XDTI1MDYwMTAx MzMyNloXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoRTYzOEZEQkEwN0FFN0Ux RThGQzk1NEU3MkVCMDU0NTlDM0NFMjQ4QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALUBU/g+/W5x02Q6DZsOHem0xsArm7BLU0hQXyRTaK4Q1I+JYrO3 En7LPbs6lnc4JaZHgsvJ40kr6IA+Vbntk9Fm4Jbc+0eLHOGBKrfpsj21JruNpIps xfPBjXNP/dzB4uXcjNQ4+cZ5L3CvOkpLVNn+AMEcGIsG0DmHFeHythKG04RsvqkG 5tGEMUrYFUX5fOjH9RV3o88E+GNNBfjrE11qM8bt/XmTYJUNcAoBvkFR8HNeJ6XN mq7kaDN8QB9CQ05CakwVn1ZTCIU0i4nru6guW0W5NGIzQbcV8LgUQ0TPn7Y/ktUz VaztHu1aocAVqQaU5bQnY2Po+kmCSjmr4EUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTmOP26B65+Ho/JVOcusFRZw84kijAfBgNVHSMEGDAWgBR5Efs7P7gl/5Zij7wI 3SvvytuGnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxNjgvZVJIN096LTRKZi1XWW8tOENOMHI3OHJiaHB3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZVJIN096LTRKZi1XWW8tOENOMHI3 OHJiaHB3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTY4LzVqajl1Z2V1Zmg2UHlWVG5MckJVV2NQT0pJby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBASdRvAwDQYJKoZIhvcNAQELBQADggEBAN0M/22UVmS5fVzsIBBYThDd KJK/EjMCClTzYxFb/tCfKuZDRnS7XUx6qNvr1vucf8mxOLrZjxXk+d5AfPcOO689 7daFZX7PnCLQeQn3Oq8tyyDODUBcPBFXyoWmeSeo48hEobp3hcVAZDD8sHOc6Lat Y0mwGySs7okLCfaycZx6+PUb9SrYnLz7GWlue0Jim6ffAzuYZb79biBplzpEaKCL 1t7iwrrGrKZQ+WUr2l3O9+KENRFM5tiL3CPm8hSL1w2Mo4Fjcz4B288Tq8OM8MBx O7ttCasO/dKZp0g8xsVwDpfMS0TECKJGz4byaHD9pks1QMf+/PxBAJ+EDXVdBWI= -----END CERTIFICATE-----Generated at Wed Jun 4 01:18:24 2025 by rpki-client