$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CuMGeN7DT5hEt5b-6nZYc9Dhowk.roa File: CuMGeN7DT5hEt5b-6nZYc9Dhowk.roa (raw, json) Hash identifier: WJssqKzpGfTrG94NKgH2iTEEWuv3CM01lH6euxp3WMU= Subject key identifier: 0A:E3:06:78:DE:C3:4F:98:44:B7:96:FE:EA:76:58:73:D0:E1:A3:09 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03EF Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CuMGeN7DT5hEt5b-6nZYc9Dhowk.roa Signing time: Thu 01 May 2025 01:45:16 +0000 ROA not before: Thu 01 May 2025 01:45:16 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 119.150.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 22:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1007 (0x3ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:45:16 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=0AE30678DEC34F9844B796FEEA765873D0E1A309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:81:e1:80:1a:1f:8d:e8:33:61:3b:ec:49: 78:80:ba:d7:d8:a3:2b:1a:5a:0c:fd:e3:5a:fd:22: ce:d6:d5:1d:69:b9:91:2e:ce:4c:13:f2:06:39:98: 86:fe:93:ee:24:df:89:da:a4:d8:c6:0f:86:dd:8d: f8:5f:87:6c:2e:8a:df:ea:1c:3f:19:76:3e:a3:8f: e7:c3:bd:e5:89:0b:0a:d9:a9:e8:9d:24:3c:f4:bd: 4e:93:77:11:44:4b:79:6f:88:77:86:5f:8a:dd:c5: 5b:41:e9:fa:2e:03:10:e8:b4:0a:54:0b:14:53:9c: c7:80:21:38:dc:0d:d1:40:36:3c:ad:81:95:70:4e: a6:4d:33:9c:b3:9f:2c:33:ba:29:40:96:7e:44:e1: b4:7f:22:e0:4e:76:8e:e7:59:3c:e0:a5:13:ab:4e: d4:5c:f9:dd:92:e8:98:cd:85:ca:0b:3f:ad:39:af: 17:5f:68:1b:c6:69:a8:5f:00:e4:25:da:a8:46:91: ea:48:30:32:7d:fe:bb:1e:9f:54:d5:2e:34:ce:42: 33:16:df:e8:c2:e6:e2:ca:29:2f:0f:e7:0c:7f:27: d6:35:cb:05:57:55:1b:61:92:29:e2:63:ab:04:8f: 9f:7d:47:20:9a:1f:3c:7e:1f:5f:f8:7d:8b:07:7a: c4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E3:06:78:DE:C3:4F:98:44:B7:96:FE:EA:76:58:73:D0:E1:A3:09 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CuMGeN7DT5hEt5b-6nZYc9Dhowk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.150.204.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:64:c6:69:ee:80:85:25:3e:5f:0f:19:26:a0:72:b3:52:60: a4:98:57:38:0f:a5:4f:b6:64:d4:a3:00:87:3f:6c:d0:52:67: c4:12:f3:14:f6:31:6b:f2:9f:78:fb:40:9f:13:42:ba:ad:39: 90:5b:aa:61:a2:60:5a:c0:79:bf:d0:45:54:34:41:c4:46:09: 04:28:6c:5f:94:ef:28:c0:b3:e6:96:eb:db:7a:a8:3b:73:29: d1:b2:fd:26:68:4b:e0:1f:16:6b:3f:c3:99:59:25:70:af:36: d7:e4:d8:9e:2f:fe:60:c7:b4:fe:02:04:48:1c:ec:40:ed:24: 6a:b4:fe:f6:be:fb:06:03:07:55:a5:59:a7:ec:14:38:a7:ae: 2a:63:4f:ad:be:9e:e4:c2:81:52:70:88:50:16:1a:2b:0a:a9: 39:ba:74:6c:35:6e:a3:a7:f5:78:44:3a:03:22:7a:d3:e4:fd: 30:2b:3c:07:e4:c7:79:2f:6a:bd:e4:85:6a:37:90:4d:c2:73: 27:fd:b0:dd:c4:f8:f4:df:2e:d7:17:2b:cc:a6:37:30:ae:5b: 52:99:55:a1:5a:03:62:1c:a6:20:41:6b:ed:70:3b:e1:70:a2: 43:4c:a5:59:a2:c2:ca:3a:69:6d:1a:e8:2b:c3:66:3f:fe:76: 15:38:c1:c7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ1MTZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBBRTMwNjc4REVDMzRG OTg0NEI3OTZGRUVBNzY1ODczRDBFMUEzMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm3IHhgBofjegzYTvsSXiAutfYoysaWgz941r9Is7W1R1puZEu zkwT8gY5mIb+k+4k34napNjGD4bdjfhfh2wuit/qHD8Zdj6jj+fDveWJCwrZqeid JDz0vU6TdxFES3lviHeGX4rdxVtB6fouAxDotApUCxRTnMeAITjcDdFANjytgZVw TqZNM5yznywzuilAln5E4bR/IuBOdo7nWTzgpROrTtRc+d2S6JjNhcoLP605rxdf aBvGaahfAOQl2qhGkepIMDJ9/rsen1TVLjTOQjMW3+jC5uLKKS8P5wx/J9Y1ywVX VRthkiniY6sEj599RyCaHzx+H1/4fYsHesS/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCuMGeN7DT5hEt5b+6nZYc9DhowkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0N1TUdlTjdEVDVoRXQ1Yi02blpZYzlEaG93ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAF3lswwDQYJKoZIhvcNAQELBQADggEBAGtkxmnugIUlPl8PGSagcrNSYKSY VzgPpU+2ZNSjAIc/bNBSZ8QS8xT2MWvyn3j7QJ8TQrqtOZBbqmGiYFrAeb/QRVQ0 QcRGCQQobF+U7yjAs+aW69t6qDtzKdGy/SZoS+AfFms/w5lZJXCvNtfk2J4v/mDH tP4CBEgc7EDtJGq0/va++wYDB1WlWafsFDinripjT62+nuTCgVJwiFAWGisKqTm6 dGw1bqOn9XhEOgMietPk/TArPAfkx3kvar3khWo3kE3Ccyf9sN3E+PTfLtcXK8ym NzCuW1KZVaFaA2IcpiBBa+1wO+FwokNMpVmiwso6aW0a6CvDZj/+dhU4wcc= -----END CERTIFICATE-----Generated at Wed Jun 4 01:06:08 2025 by rpki-client