$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/TSZ5b0i9DIFIKqs-A_Rg-W8hkCQ.roa File: TSZ5b0i9DIFIKqs-A_Rg-W8hkCQ.roa (raw, json) Hash identifier: wS2oxsEshmJLWmNy9iGO+iT98ZGgnXA8hSF6sswza4A= Subject key identifier: 4D:26:79:6F:48:BD:0C:81:48:2A:AB:3E:03:F4:60:F9:6F:21:90:24 Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4 Certificate serial: D3 Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/TSZ5b0i9DIFIKqs-A_Rg-W8hkCQ.roa Signing time: Thu 01 May 2025 01:29:09 +0000 ROA not before: Thu 01 May 2025 01:29:09 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 2518 IP address blocks: 221.170.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 14:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4 Validity Not Before: May 1 01:29:09 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=4D26796F48BD0C81482AAB3E03F460F96F219024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:55:7b:13:7e:62:34:29:71:3c:b4:57:6a:f1: 98:e3:73:38:1b:15:1e:7b:0a:98:d9:39:d1:b7:d2: 74:e6:3c:f8:78:fc:64:ce:d2:9a:53:ba:19:55:7c: e1:78:37:56:c4:09:0a:b0:21:e5:a1:33:87:80:6f: d6:b5:cc:0b:ae:7e:68:14:a2:41:03:24:8e:ea:64: dd:e1:1a:86:90:20:0f:26:87:b3:d6:cd:c6:62:12: c4:67:f8:92:2a:52:44:8f:3e:c9:eb:f6:43:fb:c7: 0b:9b:41:4c:df:19:c5:d2:71:9c:39:68:7c:49:06: 75:2d:2e:27:8b:0e:d7:bf:4e:97:ef:e0:4e:81:a3: 0c:d3:be:18:f5:ba:cf:97:08:e4:eb:e9:6b:d7:c0: b0:6b:3c:23:79:bc:2f:7f:79:9b:24:bb:6f:8b:b8: 18:2b:db:d1:da:14:b9:e4:1b:20:83:40:30:c8:38: 8d:98:f7:f5:04:14:1c:f8:71:a9:3a:aa:d3:90:0d: c7:12:c3:61:77:c8:67:ec:ff:65:27:26:45:c2:b1: 91:c2:9a:9d:a2:c8:dd:75:f8:6a:b4:07:03:16:c4: f5:c0:06:08:94:1f:09:e0:9a:95:7e:26:86:06:ac: 2d:d3:18:86:ff:f7:d2:b9:dd:57:36:f9:e0:27:1c: 35:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:26:79:6F:48:BD:0C:81:48:2A:AB:3E:03:F4:60:F9:6F:21:90:24 X509v3 Authority Key Identifier: keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/TSZ5b0i9DIFIKqs-A_Rg-W8hkCQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 221.170.0.0/15 Signature Algorithm: sha256WithRSAEncryption 92:89:ed:26:4f:e9:0d:94:65:46:71:e7:62:b0:5c:a0:69:59: 2b:dd:67:c8:45:5f:6e:5a:8e:05:7e:92:dc:d0:5b:83:d4:fd: 4a:12:72:83:f2:30:3c:49:0c:13:f0:dd:2a:a4:db:80:6e:f0: 4e:38:89:84:10:c3:e6:d8:25:b3:4b:13:96:dd:e7:23:5b:97: ff:98:1c:03:b6:b8:e1:44:29:19:cb:c5:a2:95:11:7f:81:ab: 7a:a1:b2:6c:54:ab:f8:0e:57:ab:fc:b5:23:58:9e:34:ff:17: b2:82:45:20:95:79:f7:cd:36:94:6a:56:59:67:b2:7b:c9:b1: 3f:e3:8a:03:ff:76:91:8e:13:46:f0:69:60:c5:ab:a7:a8:bd: a2:fd:27:f5:fa:2c:86:8d:42:29:e0:17:78:b2:fc:50:c1:15: 1c:29:73:66:71:38:55:ca:90:7e:a8:cf:6a:44:82:55:74:b4: 08:53:44:57:ba:a5:22:80:b8:ac:06:0a:65:c7:33:5c:8d:c2: df:22:71:cb:a7:8e:80:2a:f1:4a:68:62:b2:b4:b2:71:9d:27: fd:5c:a6:75:f4:31:c4:b0:33:f9:de:af:54:76:8b:4d:db:0c: 64:84:9a:5b:03:90:bf:b2:53:10:1c:89:96:9c:67:8b:fa:69: 03:c3:ee:9c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICANMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2 MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNTA1MDEw MTI5MDlaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDREMjY3OTZGNDhCRDBD ODE0ODJBQUIzRTAzRjQ2MEY5NkYyMTkwMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhVXsTfmI0KXE8tFdq8ZjjczgbFR57CpjZOdG30nTmPPh4/GTO 0ppTuhlVfOF4N1bECQqwIeWhM4eAb9a1zAuufmgUokEDJI7qZN3hGoaQIA8mh7PW zcZiEsRn+JIqUkSPPsnr9kP7xwubQUzfGcXScZw5aHxJBnUtLieLDte/Tpfv4E6B owzTvhj1us+XCOTr6WvXwLBrPCN5vC9/eZsku2+LuBgr29HaFLnkGyCDQDDIOI2Y 9/UEFBz4cak6qtOQDccSw2F3yGfs/2UnJkXCsZHCmp2iyN11+Gq0BwMWxPXABgiU HwngmpV+JoYGrC3TGIb/99K53Vc2+eAnHDXhAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUTSZ5b0i9DIFIKqs+A/Rg+W8hkCQwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3 LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTM5L1RTWjViMGk5RElGSUtxcy1BX1JnLVc4aGtDUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwHdqjANBgkqhkiG9w0BAQsFAAOCAQEAkontJk/pDZRlRnHnYrBcoGlZK91n yEVfblqOBX6S3NBbg9T9ShJyg/IwPEkME/DdKqTbgG7wTjiJhBDD5tgls0sTlt3n I1uX/5gcA7a44UQpGcvFopURf4GreqGybFSr+A5Xq/y1I1ieNP8XsoJFIJV59802 lGpWWWeye8mxP+OKA/92kY4TRvBpYMWrp6i9ov0n9fosho1CKeAXeLL8UMEVHClz ZnE4VcqQfqjPakSCVXS0CFNEV7qlIoC4rAYKZcczXI3C3yJxy6eOgCrxSmhisrSy cZ0n/VymdfQxxLAz+d6vVHaLTdsMZISaWwOQv7JTEByJlpxni/ppA8PunA== -----END CERTIFICATE-----Generated at Fri Jun 6 17:35:06 2025 by rpki-client