$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/OjjUnWh-nn2XOCGdOB4wVha1Hro.roa File: OjjUnWh-nn2XOCGdOB4wVha1Hro.roa (raw, json) Hash identifier: wb97gGrcj/gx+ZYXp6fGtkX4x54ZcCeAwg0UmilbHZY= Subject key identifier: 3A:38:D4:9D:68:7E:9E:7D:97:38:21:9D:38:1E:30:56:16:B5:1E:BA Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 37 Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/OjjUnWh-nn2XOCGdOB4wVha1Hro.roa Signing time: Sat 01 Mar 2025 01:29:23 +0000 ROA not before: Sat 01 Mar 2025 01:29:23 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 23783 IP address blocks: 218.185.128.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 01:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Mar 1 01:29:23 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=3A38D49D687E9E7D9738219D381E305616B51EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:c0:62:0f:40:8b:4f:60:d1:e7:9c:a4:a8: 92:25:7d:1b:0a:85:f8:3c:16:0d:72:8e:ef:05:ef: ff:43:34:b2:82:18:d6:50:56:a9:c0:9c:e6:d5:e8: 2a:45:3f:3f:2a:2d:52:e1:d2:56:88:59:e3:85:e8: d1:cf:e9:19:59:c5:04:8a:1e:cf:71:3d:1d:00:3f: 42:ea:86:81:27:0b:d9:59:cd:ff:c3:5b:d3:90:d0: b5:1d:ab:ee:af:46:41:b8:bc:64:29:6d:99:bd:48: cd:2c:4a:a8:2f:30:92:18:67:d8:ca:b6:b8:80:1e: f6:de:6a:f3:32:c2:70:2d:bf:a1:fe:95:08:c4:e1: 7c:f5:3e:2f:7e:c2:b7:8e:62:c8:55:d6:23:06:90: 92:25:80:5e:f9:93:cc:fc:3a:ba:bb:e1:28:f9:d1: 15:06:4b:4c:a0:03:54:c2:87:da:10:b6:f2:f4:b3: 2b:0e:97:10:12:38:45:fa:84:be:e2:74:86:a7:1d: 56:1f:1b:ea:d1:03:22:2c:d8:d5:fb:7f:4e:a9:0c: 6e:c8:f4:69:44:80:62:ac:0d:fc:70:fa:03:7a:ef: 14:a7:ac:75:c6:c9:84:4b:bc:0d:2e:28:ec:96:e7: b8:cc:b0:5c:b8:fd:84:50:c4:75:e0:01:16:8f:f6: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:38:D4:9D:68:7E:9E:7D:97:38:21:9D:38:1E:30:56:16:B5:1E:BA X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/OjjUnWh-nn2XOCGdOB4wVha1Hro.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.185.128.0/19 Signature Algorithm: sha256WithRSAEncryption 11:e2:ea:ef:07:6f:8f:71:fc:30:a8:16:5d:6e:74:d5:52:ba: 13:ea:01:9d:2d:da:22:93:10:00:33:6a:b4:6d:c8:4a:3b:ad: 78:ff:a5:2d:04:43:56:fe:0c:cd:b9:08:9c:aa:5d:6c:f7:60: 2a:d3:4d:4f:14:8b:a6:0d:49:65:4d:a2:5b:01:dd:97:6c:a2: 7f:cf:95:0b:07:d9:71:eb:a3:b2:0c:f9:e3:ab:71:3a:c4:d6: f0:4f:b6:58:a2:0b:62:a6:c5:4d:d0:ab:06:a4:71:66:4a:87: 9f:31:d0:17:1a:f6:cf:06:ae:e1:ad:f5:64:d5:e0:63:77:8a: 3a:9c:f4:ca:03:7b:05:ba:3a:b7:a5:87:29:df:4f:47:ae:4e: 2d:4d:32:81:7f:1f:48:3c:bb:f0:17:34:43:ef:1f:d0:85:ac: 28:ef:a4:79:20:bf:fd:c8:79:25:b5:a0:23:c6:d1:fb:93:c9: ab:5b:ea:07:d3:8c:fb:ca:1b:34:69:c9:4f:69:94:ec:4a:35: 81:b0:46:ec:8f:6a:e3:83:23:5d:17:6b:0d:7a:b5:eb:03:d9: f6:64:2a:7f:3f:1e:ff:58:3b:a4:ac:48:7c:15:02:d8:19:ff: 60:92:45:b0:a7:8e:e1:2b:bb:52:f1:08:ac:b4:80:80:de:c8: f3:27:4e:af -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI1MDMwMTAx MjkyM1oXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoM0EzOEQ0OUQ2ODdFOUU3 RDk3MzgyMTlEMzgxRTMwNTYxNkI1MUVCQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMwEwGIPQItPYNHnnKSokiV9GwqF+DwWDXKO7wXv/0M0soIY1lBW qcCc5tXoKkU/PyotUuHSVohZ44Xo0c/pGVnFBIoez3E9HQA/QuqGgScL2VnN/8Nb 05DQtR2r7q9GQbi8ZCltmb1IzSxKqC8wkhhn2Mq2uIAe9t5q8zLCcC2/of6VCMTh fPU+L37Ct45iyFXWIwaQkiWAXvmTzPw6urvhKPnRFQZLTKADVMKH2hC28vSzKw6X EBI4RfqEvuJ0hqcdVh8b6tEDIizY1ft/TqkMbsj0aUSAYqwN/HD6A3rvFKesdcbJ hEu8DS4o7JbnuMywXLj9hFDEdeABFo/2jM8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ6ONSdaH6efZc4IZ04HjBWFrUeujAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvT2pqVW5XaC1ubjJYT0NHZE9CNHdWaGExSHJvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdq5gDANBgkqhkiG9w0BAQsFAAOCAQEAEeLq7wdvj3H8MKgWXW501VK6E+oB nS3aIpMQADNqtG3ISjuteP+lLQRDVv4MzbkInKpdbPdgKtNNTxSLpg1JZU2iWwHd l2yif8+VCwfZceujsgz546txOsTW8E+2WKILYqbFTdCrBqRxZkqHnzHQFxr2zwau 4a31ZNXgY3eKOpz0ygN7Bbo6t6WHKd9PR65OLU0ygX8fSDy78Bc0Q+8f0IWsKO+k eSC//ch5JbWgI8bR+5PJq1vqB9OM+8obNGnJT2mU7Eo1gbBG7I9q44MjXRdrDXq1 6wPZ9mQqfz8e/1g7pKxIfBUC2Bn/YJJFsKeO4Su7UvEIrLSAgN7I8ydOrw== -----END CERTIFICATE-----Generated at Thu Mar 13 06:35:30 2025 by rpki-client