$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/csS7HLmQI8JhlIjq842E6DYo24U.roa File: csS7HLmQI8JhlIjq842E6DYo24U.roa (raw, json) Hash identifier: bjjSNJYAAsC6C40glnzlB9nLtwZro7/3kLpp7oOBX8U= Subject key identifier: 72:C4:BB:1C:B9:90:23:C2:61:94:88:EA:F3:8D:84:E8:36:28:DB:85 Certificate issuer: /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31 Certificate serial: 4F Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/csS7HLmQI8JhlIjq842E6DYo24U.roa Signing time: Thu 01 May 2025 01:34:23 +0000 ROA not before: Thu 01 May 2025 01:34:23 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131965 IP address blocks: 202.233.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 16:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31 Validity Not Before: May 1 01:34:23 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=72C4BB1CB99023C2619488EAF38D84E83628DB85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:e5:c3:00:35:fb:b5:d4:df:30:9d:df:31: 9f:3e:0a:ee:aa:2b:7e:ea:7f:43:45:30:35:7e:0c: b6:fe:4b:d7:3e:17:45:bb:0e:05:f8:0a:cd:83:1d: ae:cd:99:2b:f8:64:6c:b3:41:65:c0:61:ba:13:cd: 3a:be:9d:cf:3a:18:23:44:9a:62:7f:bf:49:7e:d6: 71:af:bc:59:fd:57:26:d6:11:0f:37:5c:df:10:28: 24:37:c3:8c:3f:72:1f:f1:50:da:3a:40:4d:c8:ba: 41:e0:ad:ed:3e:25:ba:98:c6:78:94:46:79:c6:60: 7a:f7:40:94:a4:de:ee:42:f8:ec:9b:17:80:17:cc: 56:77:f6:a1:e8:26:4c:e1:58:6f:53:a1:60:ad:bd: cf:74:0b:c3:bc:1a:35:6a:cc:22:47:ba:52:77:37: a3:72:9f:09:52:68:34:3d:6e:38:28:c3:c7:2d:d3: 19:48:f5:78:08:d8:ea:fa:83:5f:9d:da:84:ec:81: e1:df:04:04:17:89:f9:a0:83:fb:6c:4c:ac:01:ad: f0:f3:1d:27:d8:8d:6a:80:33:60:ec:54:c2:e5:4b: 27:a7:ee:7a:08:80:63:6b:01:19:79:cc:bb:af:8f: bf:35:c0:f6:5c:f7:c7:45:5d:07:c7:29:99:7f:dd: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C4:BB:1C:B9:90:23:C2:61:94:88:EA:F3:8D:84:E8:36:28:DB:85 X509v3 Authority Key Identifier: keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/csS7HLmQI8JhlIjq842E6DYo24U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.233.64.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:06:9b:ad:64:a7:c1:bd:9a:e1:bd:a0:15:5a:af:8f:06:be: 52:af:44:fc:26:ce:33:90:43:60:19:74:a3:49:43:ca:8d:8f: af:d0:4e:e0:7c:89:03:33:7d:2e:0b:de:29:00:ab:93:b0:e1: aa:ef:df:d8:07:70:e1:b1:a5:a0:be:af:1a:a8:ad:bf:ca:8e: a9:fa:d9:6d:f2:a7:94:7b:1c:f4:17:0b:06:10:ea:c0:68:11: 09:21:2e:eb:6c:14:4f:1f:73:46:5b:3e:81:98:d7:af:55:a3: 66:14:1e:54:71:da:96:00:35:31:ee:f9:81:cc:ee:89:25:e0: 41:61:df:31:65:37:f2:59:9d:c3:cf:08:91:cd:f7:52:ee:be: 02:a4:82:11:0b:fc:16:30:45:93:b0:79:65:bc:54:22:e5:00: 44:3f:06:43:66:91:d0:65:49:4c:50:d3:50:70:e2:3e:43:e1: 97:cc:d0:51:5c:3a:25:ad:a2:d0:75:b7:f8:b0:cf:4c:97:cc: 79:c3:87:b4:4a:3a:46:0b:54:f5:70:d7:53:00:bd:de:12:cf: 02:2b:3b:cf:e9:9a:79:a2:1c:8f:c7:e4:4a:96:ed:c8:db:3a: 55:54:11:77:3e:c2:4a:14:9c:0b:b5:9d:a5:ec:ca:ad:43:c6: 91:30:fc:7a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MkUz MjQ1N0MxNkJBODc0MjE2QThGNURCQjBEMzM1QkQxNDhDQjMxMB4XDTI1MDUwMTAx MzQyM1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNzJDNEJCMUNCOTkwMjND MjYxOTQ4OEVBRjM4RDg0RTgzNjI4REI4NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMGv5cMANfu11N8wnd8xnz4K7qorfup/Q0UwNX4Mtv5L1z4XRbsO BfgKzYMdrs2ZK/hkbLNBZcBhuhPNOr6dzzoYI0SaYn+/SX7Wca+8Wf1XJtYRDzdc 3xAoJDfDjD9yH/FQ2jpATci6QeCt7T4lupjGeJRGecZgevdAlKTe7kL47JsXgBfM Vnf2oegmTOFYb1OhYK29z3QLw7waNWrMIke6Unc3o3KfCVJoND1uOCjDxy3TGUj1 eAjY6vqDX53ahOyB4d8EBBeJ+aCD+2xMrAGt8PMdJ9iNaoAzYOxUwuVLJ6fuegiA Y2sBGXnMu6+PvzXA9lz3x0VdB8cpmX/dtAsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRyxLscuZAjwmGUiOrzjYToNijbhTAfBgNVHSMEGDAWgBRC4yRXwWuodCFqj127 DTNb0UjLMTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlGSXl6RS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlG SXl6RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvY3NTN0hMbVFJOEpobElqcTg0MkU2RFlvMjRVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsrpQDANBgkqhkiG9w0BAQsFAAOCAQEAmwabrWSnwb2a4b2gFVqvjwa+Uq9E /CbOM5BDYBl0o0lDyo2Pr9BO4HyJAzN9LgveKQCrk7Dhqu/f2Adw4bGloL6vGqit v8qOqfrZbfKnlHsc9BcLBhDqwGgRCSEu62wUTx9zRls+gZjXr1WjZhQeVHHalgA1 Me75gczuiSXgQWHfMWU38lmdw88Ikc33Uu6+AqSCEQv8FjBFk7B5ZbxUIuUARD8G Q2aR0GVJTFDTUHDiPkPhl8zQUVw6Ja2i0HW3+LDPTJfMecOHtEo6RgtU9XDXUwC9 3hLPAis7z+maeaIcj8fkSpbtyNs6VVQRdz7CShScC7WdpezKrUPGkTD8eg== -----END CERTIFICATE-----Generated at Thu Jun 5 20:17:11 2025 by rpki-client