$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/HHAeZaoVv1YZ20HmOu442O8tfsA.roa File: HHAeZaoVv1YZ20HmOu442O8tfsA.roa (raw, json) Hash identifier: r6qCIwT82CZmX2qIMBS+M2bQLOoXL32Kc6h9rmQ1I9k= Subject key identifier: 1C:70:1E:65:AA:15:BF:56:19:DB:41:E6:3A:EE:38:D8:EF:2D:7E:C0 Certificate issuer: /CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Certificate serial: 24 Authority key identifier: 8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/HHAeZaoVv1YZ20HmOu442O8tfsA.roa Signing time: Thu 01 May 2025 01:34:19 +0000 ROA not before: Thu 01 May 2025 01:34:19 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131965 IP address blocks: 162.43.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 18:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Validity Not Before: May 1 01:34:19 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=1C701E65AA15BF5619DB41E63AEE38D8EF2D7EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:96:86:ad:e0:59:78:8c:c5:09:92:61:c4:c3: 13:14:d5:67:ba:c4:3f:0a:36:ca:a2:4c:c3:32:3d: 83:57:3e:9b:87:c5:c9:89:b0:6b:a5:06:c3:08:60: 19:d2:31:91:3a:d0:cb:38:43:74:f0:78:a7:a7:b6: 32:bd:75:ff:62:5d:df:96:81:ac:b9:30:8d:64:1f: 8a:2a:fe:6e:06:4d:43:4e:3e:20:d3:b9:d9:cb:50: 3b:8a:b0:a2:b4:6e:b1:f1:00:76:13:48:70:a8:b7: 46:f6:5e:0f:c0:0a:2f:64:ca:c4:23:d8:2b:cf:77: 91:93:af:11:1e:fb:ff:ac:05:c7:6a:8f:4c:6b:ff: 03:62:73:e3:97:0c:c6:34:3f:8e:ae:50:c5:81:6e: f4:33:fe:e2:b2:44:bb:70:04:f4:2d:f5:24:c0:00: c4:11:7c:a5:d6:c6:02:45:d9:2a:d8:ed:c9:07:e9: 0c:1a:4d:2b:0e:4f:14:4f:b5:ec:7c:9f:8c:f0:32: fe:2a:b2:30:31:67:fe:35:32:fe:b1:23:53:d4:50: b1:da:75:7f:ca:05:56:32:58:c5:5f:82:b5:39:74: 27:a5:e4:64:c4:23:a9:e3:ec:98:bf:fb:0f:d9:a8: 24:93:b6:21:da:71:ba:e0:c9:0c:bc:ca:af:b2:c9: 70:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:70:1E:65:AA:15:BF:56:19:DB:41:E6:3A:EE:38:D8:EF:2D:7E:C0 X509v3 Authority Key Identifier: keyid:8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/HHAeZaoVv1YZ20HmOu442O8tfsA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 162.43.0.0/17 Signature Algorithm: sha256WithRSAEncryption 27:9e:53:f6:11:2e:43:4a:a6:f5:67:bf:5e:78:30:ea:40:85: 40:0a:ed:6c:90:6a:27:47:b1:45:b2:b7:70:ed:c7:9b:46:57: 37:95:03:80:b4:b6:a0:ae:7b:60:5b:05:cd:ab:18:6b:4d:bf: 91:66:08:00:f2:a6:a4:e1:ca:47:ce:31:98:10:30:9f:69:33: 0e:41:b9:69:23:4b:eb:c0:db:d3:2f:be:72:74:ce:50:ce:7f: 91:5d:a3:c4:4a:ab:0a:72:e8:35:a8:94:56:9f:43:35:19:f4: 7e:82:2a:90:8f:20:48:ea:e0:ff:4e:f3:a7:1f:4f:2f:b9:46: c0:8f:ad:99:25:b8:d0:20:9b:fb:90:2c:85:6f:14:4f:46:bd: 3c:c2:a2:86:03:de:4f:76:d1:e2:bb:57:1e:94:b0:0c:d6:67: 47:f1:45:47:dd:b1:fc:ba:6b:36:75:4e:85:3c:cc:6a:cf:9f: cf:83:f5:40:c4:39:0b:b6:69:5a:e1:22:d7:c1:fb:96:cc:22: 5b:05:1a:4e:16:02:6b:0f:f1:cf:73:36:68:51:c5:9f:3b:f1: 8d:dc:2a:30:6d:16:df:ec:4d:e4:f5:85:e9:4c:2b:2a:68:88: 26:c0:a4:0f:81:30:18:be:52:9c:e1:bd:9b:21:03:72:a3:a6: f0:4f:2a:49 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RTM2 REU3NkFFMUIyNTlEMTJGNTRFRUI5QzZCRkNGMERFNDUzQzA0MB4XDTI1MDUwMTAx MzQxOVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMUM3MDFFNjVBQTE1QkY1 NjE5REI0MUU2M0FFRTM4RDhFRjJEN0VDMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMqWhq3gWXiMxQmSYcTDExTVZ7rEPwo2yqJMwzI9g1c+m4fFyYmw a6UGwwhgGdIxkTrQyzhDdPB4p6e2Mr11/2Jd35aBrLkwjWQfiir+bgZNQ04+INO5 2ctQO4qworRusfEAdhNIcKi3RvZeD8AKL2TKxCPYK893kZOvER77/6wFx2qPTGv/ A2Jz45cMxjQ/jq5QxYFu9DP+4rJEu3AE9C31JMAAxBF8pdbGAkXZKtjtyQfpDBpN Kw5PFE+17HyfjPAy/iqyMDFn/jUy/rEjU9RQsdp1f8oFVjJYxV+CtTl0J6XkZMQj qePsmL/7D9moJJO2IdpxuuDJDLzKr7LJcH0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQccB5lqhW/VhnbQeY67jjY7y1+wDAfBgNVHSMEGDAWgBSONt52rhslnRL1Tuuc a/zw3kU8BDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41RlBBUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41 RlBBUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvSEhBZVphb1Z2MVlaMjBIbU91NDQyTzh0ZnNBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB6IrADANBgkqhkiG9w0BAQsFAAOCAQEAJ55T9hEuQ0qm9We/Xngw6kCFQArt bJBqJ0exRbK3cO3Hm0ZXN5UDgLS2oK57YFsFzasYa02/kWYIAPKmpOHKR84xmBAw n2kzDkG5aSNL68Db0y++cnTOUM5/kV2jxEqrCnLoNaiUVp9DNRn0foIqkI8gSOrg /07zpx9PL7lGwI+tmSW40CCb+5AshW8UT0a9PMKihgPeT3bR4rtXHpSwDNZnR/FF R92x/LprNnVOhTzMas+fz4P1QMQ5C7ZpWuEi18H7lswiWwUaThYCaw/xz3M2aFHF nzvxjdwqMG0W3+xN5PWF6UwrKmiIJsCkD4EwGL5SnOG9myEDcqOm8E8qSQ== -----END CERTIFICATE-----Generated at Thu Jun 5 20:32:03 2025 by rpki-client