$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/8aPzfqP1f20bPraNgQMe5_AY-iY.roa File: 8aPzfqP1f20bPraNgQMe5_AY-iY.roa (raw, json) Hash identifier: jNdZVVRllnQjQb+anDEzjSzMpepgbDoH+cUjtH4uUoo= Subject key identifier: F1:A3:F3:7E:A3:F5:7F:6D:1B:3E:B6:8D:81:03:1E:E7:F0:18:FA:26 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 01AA Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8aPzfqP1f20bPraNgQMe5_AY-iY.roa Signing time: Thu 01 May 2025 01:32:05 +0000 ROA not before: Thu 01 May 2025 01:32:05 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 32787 IP address blocks: 210.148.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 17:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: May 1 01:32:05 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=F1A3F37EA3F57F6D1B3EB68D81031EE7F018FA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:05:56:93:36:f1:75:f8:cd:bc:d7:65:14: 68:ff:3e:f8:c9:ba:01:8b:aa:ff:5b:01:4f:c9:f4: a1:d9:c9:d4:d4:91:98:90:2b:be:85:04:30:cb:41: b5:c1:61:9e:15:a7:00:0c:86:d0:51:04:b4:43:0d: 77:3f:8d:f4:38:7e:14:11:7c:ca:88:1e:48:d6:e9: 6d:b7:fb:35:dd:39:f3:81:b1:ae:c7:9e:69:47:11: 1a:b6:d4:3b:e5:3e:a8:9f:f6:cb:a7:6c:f8:ac:65: 62:af:28:ed:3b:0c:36:3a:42:2e:c0:43:92:48:99: 54:73:f7:54:49:cc:dc:4b:7c:82:0b:d7:14:6f:3c: 64:84:7d:b3:a6:fa:45:da:aa:e4:5c:a9:74:73:9a: ba:f3:cd:2c:43:60:96:1f:5e:e8:e7:43:53:73:81: 0f:39:83:ad:59:a0:a2:fc:3e:10:14:f7:55:e8:42: 6a:68:00:a1:8a:e3:c4:34:bb:ac:c0:ab:2d:a2:2e: 46:78:30:0e:13:c6:fe:90:c6:87:fc:ee:90:76:3a: 15:6a:f2:9f:7b:98:93:07:eb:db:94:b7:2c:d3:ef: 58:60:10:08:0e:31:97:7e:a6:35:a9:37:4e:18:6e: b4:33:62:63:c1:7a:57:04:7e:be:a4:96:60:51:ac: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A3:F3:7E:A3:F5:7F:6D:1B:3E:B6:8D:81:03:1E:E7:F0:18:FA:26 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8aPzfqP1f20bPraNgQMe5_AY-iY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.148.130.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:65:5b:20:83:4c:a4:33:1f:fc:49:c9:f9:5f:2d:82:0d:66: 1d:d7:f2:75:08:e4:d3:30:1e:e6:3d:be:f6:53:44:ea:0e:57: c3:b7:0c:3d:1b:16:cc:1a:eb:90:36:6b:46:46:20:03:18:bb: c2:73:fa:e7:de:71:77:f1:07:9d:f9:30:be:57:32:63:44:e3: e9:4e:92:83:79:16:cc:3a:66:0b:ff:b4:db:3e:3d:94:80:ec: 22:c2:b8:a9:0e:1c:ba:7b:37:82:5d:24:00:95:75:3a:f8:82: 2f:1c:35:ed:fc:ac:e0:b5:12:8f:e8:45:77:85:04:1e:5b:7c: 2c:5f:8d:91:f6:16:cc:49:10:95:10:6f:a3:d9:7f:2f:18:85: 10:1b:6a:f9:27:b2:94:d9:f7:a2:8e:bd:0e:03:fa:12:e4:2f: c8:e8:3f:7e:ab:96:ff:46:0d:00:b7:4d:7e:40:65:14:67:8b: cf:e8:82:a7:ac:c2:0b:fd:2e:d2:b7:b0:df:27:58:49:d2:40: 30:7e:de:8a:f4:80:09:5e:49:63:3a:61:58:fc:d3:4e:01:fd: fe:ca:a5:c7:48:24:4d:0e:b1:be:e1:c6:a9:05:ae:2f:cf:85: 37:99:18:70:24:b5:53:2e:6f:35:6e:8b:12:3a:99:19:9d:ed: 95:fa:c8:04 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA1MDEw MTMyMDVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYxQTNGMzdFQTNGNTdG NkQxQjNFQjY4RDgxMDMxRUU3RjAxOEZBMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcfQVWkzbxdfjNvNdlFGj/PvjJugGLqv9bAU/J9KHZydTUkZiQ K76FBDDLQbXBYZ4VpwAMhtBRBLRDDXc/jfQ4fhQRfMqIHkjW6W23+zXdOfOBsa7H nmlHERq21DvlPqif9sunbPisZWKvKO07DDY6Qi7AQ5JImVRz91RJzNxLfIIL1xRv PGSEfbOm+kXaquRcqXRzmrrzzSxDYJYfXujnQ1NzgQ85g61ZoKL8PhAU91XoQmpo AKGK48Q0u6zAqy2iLkZ4MA4Txv6Qxof87pB2OhVq8p97mJMH69uUtyzT71hgEAgO MZd+pjWpN04YbrQzYmPBelcEfr6klmBRrBn1AgMBAAGjggIgMIICHDAdBgNVHQ4E FgQU8aPzfqP1f20bPraNgQMe5/AY+iYwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvOGFQemZxUDFmMjBiUHJhTmdRTWU1X0FZLWlZLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANKUgjANBgkqhkiG9w0BAQsFAAOCAQEAHGVbIINMpDMf/EnJ+V8tgg1mHdfydQjk 0zAe5j2+9lNE6g5Xw7cMPRsWzBrrkDZrRkYgAxi7wnP6595xd/EHnfkwvlcyY0Tj 6U6Sg3kWzDpmC/+02z49lIDsIsK4qQ4cuns3gl0kAJV1OviCLxw17fys4LUSj+hF d4UEHlt8LF+NkfYWzEkQlRBvo9l/LxiFEBtq+SeylNn3oo69DgP6EuQvyOg/fquW /0YNALdNfkBlFGeLz+iCp6zCC/0u0rew3ydYSdJAMH7eivSACV5JYzphWPzTTgH9 /sqlx0gkTQ6xvuHGqQWuL8+FN5kYcCS1Uy5vNW6LEjqZGZ3tlfrIBA== -----END CERTIFICATE-----Generated at Thu Jun 5 20:05:52 2025 by rpki-client