$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30387/CFE3rJciYYY0mR_y1_iVs4eC7zM.roa File: CFE3rJciYYY0mR_y1_iVs4eC7zM.roa (raw, json) Hash identifier: NhitJe2bK1zQK5ZMdDD5f5EfKld2utd7/vXzAxT7NG8= Subject key identifier: 08:51:37:AC:97:22:61:86:34:99:1F:F2:D7:F8:95:B3:87:82:EF:33 Certificate issuer: /CN=671784C2CB3B8487CA74726A65F4B447BE012C56 Certificate serial: 16 Authority key identifier: 67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/CFE3rJciYYY0mR_y1_iVs4eC7zM.roa Signing time: Sun 01 Jun 2025 01:33:27 +0000 ROA not before: Sun 01 Jun 2025 01:33:27 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 146969 IP address blocks: 2407:e540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 17:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=671784C2CB3B8487CA74726A65F4B447BE012C56 Validity Not Before: Jun 1 01:33:27 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=085137AC9722618634991FF2D7F895B38782EF33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9a:ac:75:db:bd:02:25:de:6f:c9:a3:a1:dc: 36:90:52:15:68:6f:1b:c0:8e:ea:a0:5e:a6:14:26: 8e:f8:b0:09:4d:8b:1b:5a:d8:3d:f5:e4:c4:ee:9e: 82:af:5e:0e:4f:9f:f5:c6:4c:17:91:e1:6f:26:e3: 6e:c1:17:56:7c:48:e8:e9:ef:60:b9:ed:32:3a:e5: ee:a4:88:ac:6d:b8:96:16:7f:9d:26:ca:87:a0:55: e0:5c:fb:68:2b:aa:1a:62:75:3e:ea:9d:b2:9d:6d: 4e:e7:67:ef:c7:8c:6a:9f:88:e8:73:b7:26:12:53: d6:79:da:15:91:42:c2:ac:ab:ca:56:b2:cc:6d:48: d4:51:ea:fb:82:cc:65:7e:df:2d:60:c4:48:ad:f0: 5c:56:d4:0a:5c:b7:62:59:61:61:10:09:b1:d2:bd: e2:91:08:2a:fd:a6:a8:78:ec:65:bf:ec:d7:c8:58: db:12:ce:ca:6f:d5:b3:e8:1a:27:74:d8:88:23:98: a0:f5:fc:f2:b3:32:7e:b3:1f:1b:05:e5:9d:b7:19: 81:e8:1d:cb:dc:ed:d9:16:a1:c2:52:dd:c7:88:bf: 92:9c:01:f7:ff:ea:f2:ee:74:62:73:42:03:da:a7: d4:be:4d:76:fe:e9:af:ce:bb:8c:77:54:59:be:71: 8b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:51:37:AC:97:22:61:86:34:99:1F:F2:D7:F8:95:B3:87:82:EF:33 X509v3 Authority Key Identifier: keyid:67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/CFE3rJciYYY0mR_y1_iVs4eC7zM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:e540::/32 Signature Algorithm: sha256WithRSAEncryption b4:83:f1:c8:91:9f:e0:f8:4c:1d:40:3e:dd:ec:d3:7e:d9:b6: 0c:0c:4a:bd:d7:f2:32:6b:fd:9f:4c:d8:92:ac:23:b7:2d:ae: ad:9e:b8:b4:e0:9a:94:79:55:16:ec:d4:6b:fa:36:bf:89:9b: b6:37:f9:7a:d7:81:df:91:6a:16:f2:92:09:c3:ba:51:84:4d: da:3d:85:94:35:d3:de:de:fb:bb:34:33:31:36:ee:6f:7e:f1: 6b:a9:30:86:0e:df:89:91:d3:23:4f:77:f2:0d:c2:a3:d7:2c: 09:52:2f:c3:e5:ff:3b:bd:ad:2b:ed:a0:4d:46:82:01:eb:2f: 29:fe:83:b5:7d:8b:84:68:d3:ed:92:3d:34:5d:cb:05:1b:54: 03:44:8e:59:d6:aa:a0:a5:c8:69:ef:ef:e5:e5:07:09:30:03: 42:25:9f:4c:ca:1a:12:91:0e:69:ff:26:29:47:90:54:5f:64: 33:c0:5e:73:e7:f5:6c:9b:19:63:f0:a8:b8:ec:fa:99:55:bc: 1e:ae:a3:94:50:5e:ab:f9:4e:89:97:be:bd:ed:59:5e:d4:17: b5:45:74:a9:cb:59:d5:c1:21:26:07:55:ef:7b:48:49:c2:9c: 3d:18:14:04:bd:d0:cc:2f:99:21:1b:e4:6c:20:df:f9:4a:76: 5a:1e:ae:2b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NzE3 ODRDMkNCM0I4NDg3Q0E3NDcyNkE2NUY0QjQ0N0JFMDEyQzU2MB4XDTI1MDYwMTAx MzMyN1oXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMDg1MTM3QUM5NzIyNjE4 NjM0OTkxRkYyRDdGODk1QjM4NzgyRUYzMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ+arHXbvQIl3m/Jo6HcNpBSFWhvG8CO6qBephQmjviwCU2LG1rY PfXkxO6egq9eDk+f9cZMF5HhbybjbsEXVnxI6OnvYLntMjrl7qSIrG24lhZ/nSbK h6BV4Fz7aCuqGmJ1Puqdsp1tTudn78eMap+I6HO3JhJT1nnaFZFCwqyrylayzG1I 1FHq+4LMZX7fLWDESK3wXFbUCly3YllhYRAJsdK94pEIKv2mqHjsZb/s18hY2xLO ym/Vs+gaJ3TYiCOYoPX88rMyfrMfGwXlnbcZgegdy9zt2RahwlLdx4i/kpwB9//q 8u50YnNCA9qn1L5Ndv7pr867jHdUWb5xi1sCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQIUTeslyJhhjSZH/LX+JWzh4LvMzAfBgNVHSMEGDAWgBRnF4TCyzuEh8p0cmpl 9LRHvgEsVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzODcvWnhlRXdzczdoSWZLZEhKcVpmUzBSNzRCTEZZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWnhlRXdzczdoSWZLZEhKcVpmUzBS NzRCTEZZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzg3L0NGRTNySmNpWVlZMG1SX3kxX2lWczRlQzd6TS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkB+VAMA0GCSqGSIb3DQEBCwUAA4IBAQC0g/HIkZ/g+EwdQD7d7NN+ 2bYMDEq91/Iya/2fTNiSrCO3La6tnri04JqUeVUW7NRr+ja/iZu2N/l614HfkWoW 8pIJw7pRhE3aPYWUNdPe3vu7NDMxNu5vfvFrqTCGDt+JkdMjT3fyDcKj1ywJUi/D 5f87va0r7aBNRoIB6y8p/oO1fYuEaNPtkj00XcsFG1QDRI5Z1qqgpchp7+/l5QcJ MANCJZ9MyhoSkQ5p/yYpR5BUX2QzwF5z5/Vsmxlj8Ki47PqZVbwerqOUUF6r+U6J l7697Vle1Be1RXSpy1nVwSEmB1Xve0hJwpw9GBQEvdDML5khG+RsIN/5SnZaHq4r -----END CERTIFICATE-----Generated at Thu Jun 5 19:18:47 2025 by rpki-client