$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GSwZyruZNekLCwi8YUz48MW1TYE.roa File: GSwZyruZNekLCwi8YUz48MW1TYE.roa (raw, json) Hash identifier: Q+WVgMNIArLHewuPkC5zYZ4jRZNi9Lfi/vSfkwKh69Y= Subject key identifier: 19:2C:19:CA:BB:99:35:E9:0B:0B:08:BC:61:4C:F8:F0:C5:B5:4D:81 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 04F8 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GSwZyruZNekLCwi8YUz48MW1TYE.roa Signing time: Sun 01 Jun 2025 01:30:47 +0000 ROA not before: Sun 01 Jun 2025 01:30:47 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 240a:61:7800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 18:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Jun 1 01:30:47 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=192C19CABB9935E90B0B08BC614CF8F0C5B54D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:52:b9:ae:14:75:d8:7c:df:12:38:4e:7d:42: 64:c2:7f:92:ba:c9:1f:f5:02:62:e3:09:3d:0b:47: 97:7c:29:4b:3d:62:9f:28:89:bc:0c:dd:c6:f2:41: 58:6b:0c:cc:35:be:98:d9:3b:1f:dc:42:91:b4:3c: d7:a4:82:e5:3e:31:ed:9d:8b:a4:d6:1b:48:c8:7c: 18:72:b9:8c:8c:52:b4:c7:fb:fa:73:5b:e0:1d:6b: 07:dc:ae:4a:2a:3c:12:f3:6e:97:6e:3b:65:82:a6: ea:0a:5f:50:25:66:f2:9b:24:0b:7d:eb:c3:ab:64: a9:60:87:e7:3a:68:aa:3d:05:cf:98:e0:fc:87:e3: d8:fd:ce:1c:d8:2f:77:ad:0a:c2:3d:e0:86:e8:5f: a7:0c:ab:51:6d:f8:16:af:d5:68:a3:c6:58:41:f6: 97:b6:d5:82:c0:06:8f:ff:fa:5e:a4:ac:c8:05:79: e0:74:22:97:66:91:f8:c1:6f:b0:78:cc:58:c6:20: 2b:62:89:e2:fb:ee:1a:32:f4:cf:cc:55:0c:63:ca: fb:fb:48:b1:49:15:89:81:ae:26:23:d2:d3:db:51: 38:cc:a9:d1:9e:3a:ad:d2:be:51:b5:bc:7b:b7:a4: 8b:24:b7:95:49:7a:9a:dc:42:a4:67:63:10:a3:89: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2C:19:CA:BB:99:35:E9:0B:0B:08:BC:61:4C:F8:F0:C5:B5:4D:81 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GSwZyruZNekLCwi8YUz48MW1TYE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:61:7800::/38 Signature Algorithm: sha256WithRSAEncryption a2:c8:7f:07:3e:e2:c5:9a:9d:72:b3:3c:3d:2c:98:94:f1:1e: b4:55:9b:38:a5:ec:88:be:68:c6:e7:7b:ba:ec:70:35:f6:5f: fa:fa:c4:97:8c:20:55:a6:82:23:67:fb:c4:0c:3d:ec:86:84: 95:29:50:fb:5a:24:97:32:24:4f:79:ae:2d:e6:64:84:ab:02: b7:84:ca:e5:9a:45:dc:e1:20:8a:84:91:03:4b:94:0b:f7:58: 68:23:d9:b1:4b:31:0f:7b:04:c6:78:7b:09:6a:31:69:ad:1a: a1:58:42:20:04:cb:e4:94:1c:a8:75:a5:23:f3:7d:70:64:25: 7a:26:7e:bf:d0:a2:69:c7:04:38:5c:89:49:ca:93:a6:d4:55: 82:55:5b:bf:b5:df:75:57:6f:c2:fb:15:23:73:06:97:5d:c7: 2b:68:95:30:89:69:9e:f6:87:18:84:89:8c:65:d8:e9:0f:b1: 54:b6:2c:cf:0d:cd:b9:14:84:8a:f7:0c:a1:53:6d:f9:b4:dc: f8:7d:b0:9f:e7:1e:09:9e:a2:61:b2:ec:b6:ff:0d:a2:60:d0: f9:3f:5f:48:24:a0:62:90:16:e9:4b:b7:fe:64:e7:ba:03:d1: 90:ff:83:6c:bd:b5:44:1c:26:d7:be:a6:a3:ac:24:76:a1:81: 73:0f:ed:e0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA2MDEw MTMwNDdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDE5MkMxOUNBQkI5OTM1 RTkwQjBCMDhCQzYxNENGOEYwQzVCNTREODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzUrmuFHXYfN8SOE59QmTCf5K6yR/1AmLjCT0LR5d8KUs9Yp8o ibwM3cbyQVhrDMw1vpjZOx/cQpG0PNekguU+Me2di6TWG0jIfBhyuYyMUrTH+/pz W+AdawfcrkoqPBLzbpduO2WCpuoKX1AlZvKbJAt968OrZKlgh+c6aKo9Bc+Y4PyH 49j9zhzYL3etCsI94IboX6cMq1Ft+Bav1WijxlhB9pe21YLABo//+l6krMgFeeB0 IpdmkfjBb7B4zFjGICtiieL77hoy9M/MVQxjyvv7SLFJFYmBriYj0tPbUTjMqdGe Oq3SvlG1vHu3pIskt5VJeprcQqRnYxCjifgDAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUGSwZyruZNekLCwi8YUz48MW1TYEwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9HU3daeXJ1Wk5la0xDd2k4WVV6NDhNVzFUWUUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAoAYXgwDQYJKoZIhvcNAQELBQADggEBAKLIfwc+4sWanXKzPD0s mJTxHrRVmzil7Ii+aMbne7rscDX2X/r6xJeMIFWmgiNn+8QMPeyGhJUpUPtaJJcy JE95ri3mZISrAreEyuWaRdzhIIqEkQNLlAv3WGgj2bFLMQ97BMZ4ewlqMWmtGqFY QiAEy+SUHKh1pSPzfXBkJXomfr/QomnHBDhciUnKk6bUVYJVW7+133VXb8L7FSNz BpddxytolTCJaZ72hxiEiYxl2OkPsVS2LM8NzbkUhIr3DKFTbfm03Ph9sJ/nHgme omGy7Lb/DaJg0Pk/X0gkoGKQFulLt/5k57oD0ZD/g2y9tUQcJte+pqOsJHahgXMP 7eA= -----END CERTIFICATE-----Generated at Thu Jun 5 20:26:23 2025 by rpki-client