$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/SitDxheAMfSlRQgc01mqDiL-mfU.roa File: SitDxheAMfSlRQgc01mqDiL-mfU.roa (raw, json) Hash identifier: Bs/CaB9/cVEG8i9wwL4Aup/Y+iaGM5ZkYBzfSYB5hd0= Subject key identifier: 4A:2B:43:C6:17:80:31:F4:A5:45:08:1C:D3:59:AA:0E:22:FE:99:F5 Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Certificate serial: 0116 Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/SitDxheAMfSlRQgc01mqDiL-mfU.roa Signing time: Fri 31 Jan 2025 01:31:07 +0000 ROA not before: Fri 31 Jan 2025 01:31:07 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9607 IP address blocks: 211.14.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 06:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Validity Not Before: Jan 31 01:31:07 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=4A2B43C6178031F4A545081CD359AA0E22FE99F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b8:70:1e:80:22:a6:24:7f:0b:ba:61:ad:88: 55:6e:c6:ef:73:e1:a8:a9:5e:1a:ca:1a:d7:99:66: 57:a3:99:fb:15:18:15:2f:cb:15:f3:20:25:37:24: 20:39:2c:55:09:62:8a:11:c3:e3:42:79:e9:44:a2: 64:ba:06:5f:26:8d:83:5f:ae:98:64:e9:ba:20:1a: 80:af:1f:3a:d2:65:b9:d2:8d:b3:4e:05:01:a9:31: 7d:b0:aa:40:cd:b6:d1:c0:3f:49:aa:a9:73:5e:e1: ee:ee:01:9f:14:4c:06:fa:1c:23:77:5c:50:64:20: 62:fe:ef:d9:e7:0f:9e:b8:4b:f3:3c:7d:5f:f9:de: 53:54:aa:b9:66:0d:c8:8d:05:c1:9e:21:d9:28:9e: e3:76:03:32:b1:73:52:57:98:1a:2f:44:f1:26:fe: a5:c8:7b:67:a3:46:e1:fe:c6:cb:1d:00:06:15:c3: 54:b8:98:14:bd:a4:ca:af:72:2e:17:15:df:00:8e: 28:bf:c9:ed:26:fd:ad:d2:cb:5f:cc:e6:15:e9:ce: 73:76:cc:3e:c5:19:ed:82:cc:1b:c1:bd:47:17:bb: a5:f3:31:13:81:ab:82:c9:b0:e3:d5:26:b2:36:4c: 1f:61:9a:ec:49:79:35:ee:be:59:15:0b:76:89:02: 4a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2B:43:C6:17:80:31:F4:A5:45:08:1C:D3:59:AA:0E:22:FE:99:F5 X509v3 Authority Key Identifier: keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/SitDxheAMfSlRQgc01mqDiL-mfU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.24.0/23 Signature Algorithm: sha256WithRSAEncryption 23:15:af:3a:e2:a5:fc:66:11:a4:f8:85:6a:c5:06:52:19:34: 41:72:7a:dc:9e:ec:0b:b2:47:97:5c:16:eb:29:02:8c:73:e8: ef:46:e2:7c:5f:8a:ae:60:26:1d:e4:70:dc:3e:0d:90:7f:d6: 43:db:e3:6e:c3:95:3d:dc:a3:e3:94:0d:c2:1f:3b:f5:4c:6a: 24:8b:f6:8d:b4:08:8c:a0:96:56:cc:84:c6:0e:bc:09:e2:8b: 9e:9d:19:a0:04:0d:ec:45:0c:33:3e:20:6b:e5:f2:6d:2f:92: 72:4c:46:90:5c:59:d6:6c:e6:6f:da:f7:23:6e:a5:9d:5d:fe: 4d:cc:46:43:16:5b:25:0f:59:28:52:cd:30:40:c0:8c:1a:61: 31:2d:32:38:3c:d4:fe:43:02:05:fc:99:87:ed:65:de:7e:63: 64:1c:73:f8:e7:6e:94:ce:74:9f:b2:cd:b6:b6:fa:19:ee:98: e3:c8:ff:fe:3a:79:81:e4:d7:2d:d0:02:4d:fb:35:df:8d:f1: ea:84:e1:ee:91:35:8c:cb:95:db:e8:c5:bf:0e:75:2d:ef:57: ec:f1:f8:20:e1:71:3a:9a:a4:d7:f7:23:78:ef:18:b0:47:0f: 01:ee:f3:a4:f9:e8:5b:81:77:56:8f:ed:a0:14:0b:b1:69:ea: ae:86:55:3f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICARYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1 QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNTAxMzEw MTMxMDdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRBMkI0M0M2MTc4MDMx RjRBNTQ1MDgxQ0QzNTlBQTBFMjJGRTk5RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYuHAegCKmJH8LumGtiFVuxu9z4aipXhrKGteZZlejmfsVGBUv yxXzICU3JCA5LFUJYooRw+NCeelEomS6Bl8mjYNfrphk6bogGoCvHzrSZbnSjbNO BQGpMX2wqkDNttHAP0mqqXNe4e7uAZ8UTAb6HCN3XFBkIGL+79nnD564S/M8fV/5 3lNUqrlmDciNBcGeIdkonuN2AzKxc1JXmBovRPEm/qXIe2ejRuH+xssdAAYVw1S4 mBS9pMqvci4XFd8Ajii/ye0m/a3Sy1/M5hXpznN2zD7FGe2CzBvBvUcXu6XzMROB q4LJsOPVJrI2TB9hmuxJeTXuvlkVC3aJAkrfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSitDxheAMfSlRQgc01mqDiL+mfUwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3 cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzU0L1NpdER4aGVBTWZTbFJRZ2MwMW1xRGlMLW1mVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTDhgwDQYJKoZIhvcNAQELBQADggEBACMVrzripfxmEaT4hWrFBlIZNEFy etye7AuyR5dcFuspAoxz6O9G4nxfiq5gJh3kcNw+DZB/1kPb427DlT3co+OUDcIf O/VMaiSL9o20CIygllbMhMYOvAnii56dGaAEDexFDDM+IGvl8m0vknJMRpBcWdZs 5m/a9yNupZ1d/k3MRkMWWyUPWShSzTBAwIwaYTEtMjg81P5DAgX8mYftZd5+Y2Qc c/jnbpTOdJ+yzba2+hnumOPI//46eYHk1y3QAk37Nd+N8eqE4e6RNYzLldvoxb8O dS3vV+zx+CDhcTqapNf3I3jvGLBHDwHu86T56FuBd1aP7aAUC7Fp6q6GVT8= -----END CERTIFICATE-----Generated at Thu Nov 6 08:29:02 2025 by rpki-client