$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/2q2MbxApQMfVycV1fWL24pUMKAs.roa File: 2q2MbxApQMfVycV1fWL24pUMKAs.roa (raw, json) Hash identifier: Uzfw+6TFZ7cNZ2aWrfOLoceSZX6q977u2ogyEeAgp6Y= Subject key identifier: DA:AD:8C:6F:10:29:40:C7:D5:C9:C5:75:7D:62:F6:E2:95:0C:28:0B Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 020F Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/2q2MbxApQMfVycV1fWL24pUMKAs.roa Signing time: Sat 01 Mar 2025 01:31:09 +0000 ROA not before: Sat 01 Mar 2025 01:31:09 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 124.96.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:31:09 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=DAAD8C6F102940C7D5C9C5757D62F6E2950C280B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:33:b6:d7:6e:4a:62:eb:02:02:b7:5e:f8: 3b:3f:ce:e1:b1:ac:ff:2f:f9:d1:4b:e9:31:76:31: 7e:c0:ce:5d:f6:67:2f:cf:97:21:9e:e6:f7:74:b1: cb:1b:a6:61:02:0a:2f:dc:c6:cc:2e:ea:49:89:ee: ae:84:25:48:30:29:db:c8:1c:0f:53:f8:bc:a6:bb: 84:87:f1:a7:4e:81:60:3e:73:89:d1:60:8c:d0:97: 9f:91:6b:21:35:1d:00:c2:eb:e5:06:b7:13:22:a7: dd:48:00:fe:34:52:6c:f9:57:a9:72:f2:a5:7b:d4: f6:2a:d2:65:ef:87:aa:50:ad:79:89:a4:b6:4e:93: 2f:5f:c2:0f:58:d9:6d:21:57:0c:de:3c:a0:46:09: 9c:4c:f2:32:3f:82:9f:8e:c1:e9:1b:77:71:cd:0a: 09:d0:9b:81:10:d1:2b:af:2e:67:15:0c:77:9a:35: e6:b6:32:4d:4d:e5:ae:d7:d2:54:bc:6b:50:78:86: 2e:20:8f:f5:fb:2b:f7:43:0f:9b:c6:55:73:ab:1a: 1d:7f:4f:c8:07:bf:5e:44:4d:dc:f9:05:46:3e:06: 3d:fc:d5:19:56:51:d6:fc:27:e7:4d:5c:98:c6:20: 90:91:a1:a3:25:60:81:60:79:a9:c5:fc:24:b0:1b: 54:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AD:8C:6F:10:29:40:C7:D5:C9:C5:75:7D:62:F6:E2:95:0C:28:0B X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/2q2MbxApQMfVycV1fWL24pUMKAs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.96.0.0/13 Signature Algorithm: sha256WithRSAEncryption bb:2f:aa:ec:21:86:d9:e7:84:b8:96:f2:1c:7a:9d:69:78:f2: 27:b7:af:65:bb:85:d6:55:33:f0:73:35:a0:7b:ce:fd:31:79: 5b:0a:8a:53:cb:7e:3f:d1:23:08:92:d8:8d:3c:5a:ba:f6:f3: e2:07:33:c4:ef:7b:82:3e:41:56:0a:02:75:f7:11:db:43:e5: 2c:52:64:11:66:76:8b:11:a0:dd:41:52:1e:f5:da:44:c2:bb: f5:0f:f2:26:6f:72:19:32:1e:28:76:11:67:0e:3a:71:45:00: be:b1:74:b2:12:bd:34:ab:3a:97:0a:db:fd:f1:6e:b0:71:2a: 73:58:16:73:87:bd:26:7b:af:93:f0:b1:0b:f3:d1:5e:a0:92: 70:c8:5f:29:d3:eb:67:a4:a6:01:6b:12:c6:dc:ac:78:52:79: ba:7c:f7:b6:60:4e:fd:ed:cb:da:c5:0c:e6:f8:76:c3:d2:85: ab:19:ce:42:d8:d8:89:91:35:e6:0c:d8:95:43:57:38:e1:e1: e0:09:1a:21:52:5d:ff:9c:cc:d8:24:ee:a1:14:7d:c2:99:bd: 2b:1a:81:9b:a9:7e:e5:df:83:60:06:f6:e9:74:52:da:f7:42: 87:41:ca:47:89:c1:16:af:20:ef:2a:78:ac:11:f5:fc:b2:d2: 9c:b6:49:3d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMxMDlaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERBQUQ4QzZGMTAyOTQw QzdENUM5QzU3NTdENjJGNkUyOTUwQzI4MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3DDO2125KYusCArde+Ds/zuGxrP8v+dFL6TF2MX7Azl32Zy/P lyGe5vd0scsbpmECCi/cxswu6kmJ7q6EJUgwKdvIHA9T+Lymu4SH8adOgWA+c4nR YIzQl5+RayE1HQDC6+UGtxMip91IAP40Umz5V6ly8qV71PYq0mXvh6pQrXmJpLZO ky9fwg9Y2W0hVwzePKBGCZxM8jI/gp+Owekbd3HNCgnQm4EQ0SuvLmcVDHeaNea2 Mk1N5a7X0lS8a1B4hi4gj/X7K/dDD5vGVXOrGh1/T8gHv15ETdz5BUY+Bj381RlW Udb8J+dNXJjGIJCRoaMlYIFgeanF/CSwG1T5AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU2q2MbxApQMfVycV1fWL24pUMKAswHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxLzJxMk1ieEFwUU1mVnljVjFmV0wyNHBVTUtBcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwN8YDANBgkqhkiG9w0BAQsFAAOCAQEAuy+q7CGG2eeEuJbyHHqdaXjyJ7ev ZbuF1lUz8HM1oHvO/TF5WwqKU8t+P9EjCJLYjTxauvbz4gczxO97gj5BVgoCdfcR 20PlLFJkEWZ2ixGg3UFSHvXaRMK79Q/yJm9yGTIeKHYRZw46cUUAvrF0shK9NKs6 lwrb/fFusHEqc1gWc4e9Jnuvk/CxC/PRXqCScMhfKdPrZ6SmAWsSxtyseFJ5unz3 tmBO/e3L2sUM5vh2w9KFqxnOQtjYiZE15gzYlUNXOOHh4AkaIVJd/5zM2CTuoRR9 wpm9KxqBm6l+5d+DYAb26XRS2vdCh0HKR4nBFq8g7yp4rBH1/LLSnLZJPQ== -----END CERTIFICATE-----Generated at Sat Apr 26 17:25:48 2025 by rpki-client