$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/cVDOGQo4xtAhev0yso0tTGnZR6w.roa File: cVDOGQo4xtAhev0yso0tTGnZR6w.roa (raw, json) Hash identifier: 8Usm/LLNm5nEAbTZnBlZAkcKr+TKi0/VOQc8ZpIFRWM= Subject key identifier: 71:50:CE:19:0A:38:C6:D0:21:7A:FD:32:B2:8D:2D:4C:69:D9:47:AC Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4 Certificate serial: E1 Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/cVDOGQo4xtAhev0yso0tTGnZR6w.roa Signing time: Thu 01 May 2025 01:29:16 +0000 ROA not before: Thu 01 May 2025 01:29:16 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 2518 IP address blocks: 211.135.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 21:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4 Validity Not Before: May 1 01:29:16 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=7150CE190A38C6D0217AFD32B28D2D4C69D947AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:b8:b7:02:1c:b0:aa:19:b0:d0:3d:f9:ef: 8b:bf:40:03:28:d6:9f:57:b1:08:87:8d:0f:7c:cd: 5b:8e:0e:c1:83:4a:f5:9e:6c:54:b5:4a:62:d8:34: 68:19:71:d6:a6:ec:1d:d4:d1:a5:58:91:de:9b:77: f2:b1:82:dc:ec:59:80:f4:3a:48:99:32:8d:16:3e: 25:1d:f8:b8:55:df:06:1a:e7:33:bd:49:9d:9f:e2: 9a:6d:2f:cf:a0:2f:42:67:9e:16:dd:c9:d6:de:b8: c3:fa:be:78:c5:bd:99:60:4c:81:f8:90:1e:a5:a9: 69:51:f0:3a:94:9f:73:05:a3:33:c0:38:1f:de:a9: e0:cf:1d:1c:f4:38:41:f7:8a:24:f7:fa:6d:d6:6b: b8:01:87:ef:30:d0:59:ff:40:23:65:43:7b:04:97: f8:ca:14:5f:fa:57:f4:5f:89:4a:36:3d:48:9e:e8: 67:0b:4c:0c:33:cd:3b:fd:04:2f:8a:de:95:7d:e8: 9b:5f:6d:8c:1a:39:bc:5c:9e:41:80:d5:9d:7e:15: 89:87:41:da:b4:6d:9d:9d:50:4c:4f:59:8e:65:0b: 50:86:01:b3:27:d2:ea:b1:e9:b4:1f:cc:d9:96:87: 90:43:54:b4:c5:a5:5e:0a:db:7e:67:9e:21:34:dd: 16:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:50:CE:19:0A:38:C6:D0:21:7A:FD:32:B2:8D:2D:4C:69:D9:47:AC X509v3 Authority Key Identifier: keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/cVDOGQo4xtAhev0yso0tTGnZR6w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.135.128.0/17 Signature Algorithm: sha256WithRSAEncryption 86:5a:e6:b3:25:1b:c4:22:66:be:70:d5:fe:22:2e:23:9b:08: 0e:e0:83:97:97:45:4a:d1:95:56:fe:6d:d4:d8:03:bf:fb:59: d5:64:c1:55:cd:c7:52:6d:30:54:a1:6e:06:c0:60:da:0b:f8: 20:98:96:58:fd:c6:ec:70:8d:d1:cc:47:91:1c:c8:48:ed:e0: ea:43:e1:63:4f:d4:02:94:28:0d:1f:77:ce:1a:c3:06:48:16: 32:92:5a:df:03:a0:b5:9e:fe:4d:a4:6a:7f:6e:30:6c:84:96: 79:d5:84:a8:1a:f7:20:b7:9d:be:dc:c0:e9:7b:9b:72:db:65: 53:97:8c:c5:7f:8f:d6:99:e8:76:3b:29:eb:81:95:22:21:71: 84:a2:11:52:ab:9c:62:bf:2f:de:e3:e9:16:ed:43:e8:ba:7f: df:c8:df:bb:8c:e3:fe:a0:ec:ac:57:9d:6d:b4:23:e1:a7:84: ee:9a:9b:81:85:01:33:2e:89:e6:8c:6b:3c:c4:81:2d:ef:48: db:d5:7a:91:65:3b:f4:db:35:a2:ce:86:80:c9:1b:8c:5b:e6: 75:38:bc:f2:f7:b3:a5:72:76:83:f7:60:2c:3d:21:b9:6c:a5: ea:fb:f6:f1:6b:31:d2:11:d5:ab:d3:1a:e1:de:58:11:54:ec: de:9d:95:51 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2 MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNTA1MDEw MTI5MTZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDcxNTBDRTE5MEEzOEM2 RDAyMTdBRkQzMkIyOEQyRDRDNjlEOTQ3QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvD7i3Ahywqhmw0D3574u/QAMo1p9XsQiHjQ98zVuODsGDSvWe bFS1SmLYNGgZcdam7B3U0aVYkd6bd/KxgtzsWYD0OkiZMo0WPiUd+LhV3wYa5zO9 SZ2f4pptL8+gL0JnnhbdydbeuMP6vnjFvZlgTIH4kB6lqWlR8DqUn3MFozPAOB/e qeDPHRz0OEH3iiT3+m3Wa7gBh+8w0Fn/QCNlQ3sEl/jKFF/6V/RfiUo2PUie6GcL TAwzzTv9BC+K3pV96JtfbYwaObxcnkGA1Z1+FYmHQdq0bZ2dUExPWY5lC1CGAbMn 0uqx6bQfzNmWh5BDVLTFpV4K235nniE03RaHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcVDOGQo4xtAhev0yso0tTGnZR6wwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3 LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTM5L2NWRE9HUW80eHRBaGV2MHlzbzB0VEduWlI2dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfTh4AwDQYJKoZIhvcNAQELBQADggEBAIZa5rMlG8QiZr5w1f4iLiObCA7g g5eXRUrRlVb+bdTYA7/7WdVkwVXNx1JtMFShbgbAYNoL+CCYllj9xuxwjdHMR5Ec yEjt4OpD4WNP1AKUKA0fd84awwZIFjKSWt8DoLWe/k2kan9uMGyElnnVhKga9yC3 nb7cwOl7m3LbZVOXjMV/j9aZ6HY7KeuBlSIhcYSiEVKrnGK/L97j6RbtQ+i6f9/I 37uM4/6g7KxXnW20I+GnhO6am4GFATMuieaMazzEgS3vSNvVepFlO/TbNaLOhoDJ G4xb5nU4vPL3s6VydoP3YCw9Iblsper79vFrMdIR1avTGuHeWBFU7N6dlVE= -----END CERTIFICATE-----Generated at Wed Jun 4 00:13:10 2025 by rpki-client