$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/l-8Og6qyHpNOgodXFMTIyHwVV74.roa File: l-8Og6qyHpNOgodXFMTIyHwVV74.roa (raw, json) Hash identifier: G7ViFHh1VqLVz9obr6OmUdUv2iosv1eHQZbSUtKFkV8= Subject key identifier: 97:EF:0E:83:AA:B2:1E:93:4E:82:87:57:14:C4:C8:C8:7C:15:57:BE Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 058E Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/l-8Og6qyHpNOgodXFMTIyHwVV74.roa Signing time: Fri 31 Jan 2025 01:42:08 +0000 ROA not before: Fri 31 Jan 2025 01:42:08 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 220.216.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 08:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1422 (0x58e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:42:08 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=97EF0E83AAB21E934E82875714C4C8C87C1557BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:b7:6a:f0:5a:cb:66:40:de:70:f5:39:c5: fb:a4:ff:b4:04:b5:7d:af:db:bb:98:2d:27:f2:9a: a9:33:39:9b:3f:1b:b0:df:df:11:73:d9:2f:fa:65: a6:e6:75:b3:ab:64:aa:7d:ca:c1:a8:b6:df:72:93: f8:74:ea:f5:2a:e5:7b:23:b9:6a:66:d3:a0:9b:aa: da:b3:17:ad:8f:66:59:a7:62:fe:f2:a6:7c:5d:c5: 39:a9:4b:61:9c:fa:c8:30:e6:2c:76:e7:66:ff:5c: 8a:59:8d:4d:9f:4d:b9:87:89:c4:1e:e4:ed:57:63: 43:60:40:8c:b1:33:78:e3:a9:c7:29:b0:a2:b3:f9: 9c:a6:e1:65:e4:60:73:a9:97:b6:e4:65:8c:d9:0c: e5:16:20:98:9f:b7:a7:4a:3f:fb:eb:9a:12:c6:e1: 26:59:a5:db:11:2f:c9:08:55:01:86:94:7c:cf:3e: e9:f1:9d:94:f6:9d:9f:10:fa:d7:c8:dd:2b:f9:06: 95:3c:ba:f9:40:06:3a:71:43:85:7f:ef:64:56:33: 4a:c3:e6:9c:41:54:94:66:5b:72:b3:eb:cd:c1:41: 95:25:52:8e:3a:17:47:33:d9:a9:be:18:9f:88:c3: 37:e9:71:57:03:18:56:fb:c1:5a:bd:ac:49:64:19: ca:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EF:0E:83:AA:B2:1E:93:4E:82:87:57:14:C4:C8:C8:7C:15:57:BE X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/l-8Og6qyHpNOgodXFMTIyHwVV74.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.216.48.0/21 Signature Algorithm: sha256WithRSAEncryption 2b:c9:38:90:c6:72:a0:3f:57:77:64:3c:b4:88:87:72:71:08: 2a:b2:a4:99:78:43:d4:97:bc:07:e5:3b:06:e2:8d:9e:a8:55: e1:67:bf:a4:48:90:d8:c0:02:4e:1a:ed:fb:ab:fa:b3:1b:dd: 10:ee:9c:63:3e:d3:0e:c0:0b:3f:dc:0b:7c:1c:5c:8a:36:c7: 08:51:69:4c:07:44:a2:a9:4e:3c:65:90:cd:6c:48:d5:ab:7a: 00:ea:77:c0:eb:03:fb:27:d2:71:57:c1:9f:e3:a4:b7:5f:88: ff:1b:3e:e5:83:21:2d:4b:d5:e5:54:8f:29:c3:e5:58:ba:fc: 25:16:8b:78:48:b1:46:dc:1a:94:6a:96:56:2a:01:35:a9:80: f7:f9:05:44:a6:86:d8:8c:50:d1:17:86:a6:b2:05:93:b6:38: fc:4b:0a:26:00:4e:ae:af:7f:fa:c0:6f:43:12:64:bf:e1:b2: 9a:b6:0f:fc:f0:a2:db:9e:9a:4f:9e:ec:9c:94:74:24:6a:38: a3:fd:0d:ef:68:e0:2f:d9:37:07:bd:e0:81:d0:99:b9:49:77: 27:2b:1f:4c:50:17:03:29:b9:d8:a0:ec:eb:c9:fa:21:5e:e1: f8:b1:5a:1b:7c:d5:54:a9:59:13:c3:4a:a8:d8:89:7e:b8:b3: 59:b2:f0:f9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTQyMDhaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk3RUYwRTgzQUFCMjFF OTM0RTgyODc1NzE0QzRDOEM4N0MxNTU3QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6R7dq8FrLZkDecPU5xfuk/7QEtX2v27uYLSfymqkzOZs/G7Df 3xFz2S/6ZabmdbOrZKp9ysGott9yk/h06vUq5XsjuWpm06CbqtqzF62PZlmnYv7y pnxdxTmpS2Gc+sgw5ix252b/XIpZjU2fTbmHicQe5O1XY0NgQIyxM3jjqccpsKKz +Zym4WXkYHOpl7bkZYzZDOUWIJift6dKP/vrmhLG4SZZpdsRL8kIVQGGlHzPPunx nZT2nZ8Q+tfI3Sv5BpU8uvlABjpxQ4V/72RWM0rD5pxBVJRmW3Kz683BQZUlUo46 F0cz2am+GJ+IwzfpcVcDGFb7wVq9rElkGcr1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUl+8Og6qyHpNOgodXFMTIyHwVV74wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L2wtOE9nNnF5SHBOT2dvZFhGTVRJeUh3VlY3NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPc2DAwDQYJKoZIhvcNAQELBQADggEBACvJOJDGcqA/V3dkPLSIh3JxCCqy pJl4Q9SXvAflOwbijZ6oVeFnv6RIkNjAAk4a7fur+rMb3RDunGM+0w7ACz/cC3wc XIo2xwhRaUwHRKKpTjxlkM1sSNWregDqd8DrA/sn0nFXwZ/jpLdfiP8bPuWDIS1L 1eVUjynD5Vi6/CUWi3hIsUbcGpRqllYqATWpgPf5BUSmhtiMUNEXhqayBZO2OPxL CiYATq6vf/rAb0MSZL/hspq2D/zwotuemk+e7JyUdCRqOKP9De9o4C/ZNwe94IHQ mblJdycrH0xQFwMpudig7OvJ+iFe4fixWht81VSpWRPDSqjYiX64s1my8Pk= -----END CERTIFICATE-----Generated at Wed Oct 22 11:53:33 2025 by rpki-client