$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/7u0gsopXAmoXHFSqFLn1j8lE0i0.roa File: 7u0gsopXAmoXHFSqFLn1j8lE0i0.roa (raw, json) Hash identifier: M51AQzFUkpsKY8DbuUEgIaPOa2fYlJFXUADGNAoaX8o= Subject key identifier: EE:ED:20:B2:8A:57:02:6A:17:1C:54:AA:14:B9:F5:8F:C9:44:D2:2D Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0216 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7u0gsopXAmoXHFSqFLn1j8lE0i0.roa Signing time: Tue 11 Mar 2025 05:06:15 +0000 ROA not before: Tue 11 Mar 2025 05:06:15 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 27.132.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 11 05:06:15 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=EEED20B28A57026A171C54AA14B9F58FC944D22D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:b2:b0:2b:29:ad:f4:02:86:f3:ee:16:ea: d1:ea:f4:89:7d:3d:97:36:21:2a:b0:46:9f:9d:73: fe:b2:61:c1:fa:8c:6f:58:20:63:cb:2e:b9:db:e0: 22:f7:e4:bd:01:1e:b7:66:df:64:cd:cc:1e:14:f7: 08:89:60:84:aa:35:c8:13:db:75:55:b3:b1:85:19: 73:1c:26:80:ab:b4:0c:03:fe:dd:18:ca:9e:99:6b: 9c:5d:fb:cd:38:88:8a:ad:f6:4f:11:e5:e8:a7:20: e1:22:81:7c:79:1d:60:a0:96:bd:47:de:46:8a:b3: c6:2f:c2:d2:1a:63:d7:b2:aa:fa:c0:6f:f8:a8:30: e0:af:6f:81:a6:97:0e:90:e1:80:53:e2:cf:10:01: cd:9e:70:23:ff:8e:34:4e:04:a7:d3:55:a1:ea:78: e6:9d:04:64:b3:6f:09:b2:20:21:a9:83:a1:25:30: e3:38:19:80:db:9d:a9:9f:40:69:9c:df:8b:92:53: b1:5d:a1:2f:61:2e:09:bd:bd:91:59:6e:98:05:85: 64:0a:61:1e:38:7b:6e:50:b9:20:03:bc:49:58:1d: 48:c8:db:38:11:16:21:9b:f0:06:67:bf:4c:54:7e: b5:c9:a5:c5:02:ac:e4:ad:9e:b3:95:7e:73:ed:4f: 14:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:ED:20:B2:8A:57:02:6A:17:1C:54:AA:14:B9:F5:8F:C9:44:D2:2D X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7u0gsopXAmoXHFSqFLn1j8lE0i0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.132.8.0/24 Signature Algorithm: sha256WithRSAEncryption 06:78:91:1f:5d:23:a5:bf:59:e1:25:10:6e:29:f7:45:d8:06: 11:53:1f:6d:5e:3e:3e:6c:a5:79:5a:c0:f2:46:3f:ed:23:82: 18:80:3f:a7:2d:90:52:55:40:91:30:63:ae:05:8d:fd:fb:97: f6:65:ea:35:3c:6f:ff:ff:b0:fa:f0:cc:f9:c9:bb:5b:98:0f: 11:07:c8:2f:ef:92:ee:c4:49:fd:08:a9:77:ad:46:a3:c7:8f: a5:e8:6c:e3:7b:04:0c:a0:e2:e4:0b:d2:46:bd:c2:79:fe:2b: af:f6:ce:41:ec:71:cb:ac:20:ac:37:c4:04:5f:ac:26:73:da: 0c:fa:63:45:64:a9:4c:88:6a:9e:18:6c:ad:24:9b:9d:18:04: 12:79:84:c0:77:8b:45:e0:a7:d8:e9:97:53:15:18:31:da:c6: 63:a3:83:25:8d:f3:96:dc:c0:5b:4b:5c:ba:4f:da:2e:55:38: b1:f0:31:3d:74:af:21:40:9e:5e:a0:b0:ba:10:a1:48:b2:38: 18:3f:ec:4a:0c:b4:6a:fd:d3:c8:14:78:c5:a7:3e:b1:9d:2a: 05:51:7a:ef:d8:bb:36:55:5f:3b:66:ea:da:42:a2:8a:3e:1e: 84:88:ae:39:68:2f:a8:f4:5b:f1:f0:39:6c:24:50:b7:94:bd: 0c:4b:62:2d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMTEw NTA2MTVaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVFRUQyMEIyOEE1NzAy NkExNzFDNTRBQTE0QjlGNThGQzk0NEQyMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUJbKwKymt9AKG8+4W6tHq9Il9PZc2ISqwRp+dc/6yYcH6jG9Y IGPLLrnb4CL35L0BHrdm32TNzB4U9wiJYISqNcgT23VVs7GFGXMcJoCrtAwD/t0Y yp6Za5xd+804iIqt9k8R5einIOEigXx5HWCglr1H3kaKs8YvwtIaY9eyqvrAb/io MOCvb4Gmlw6Q4YBT4s8QAc2ecCP/jjROBKfTVaHqeOadBGSzbwmyICGpg6ElMOM4 GYDbnamfQGmc34uSU7FdoS9hLgm9vZFZbpgFhWQKYR44e25QuSADvElYHUjI2zgR FiGb8AZnv0xUfrXJpcUCrOStnrOVfnPtTxQJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7u0gsopXAmoXHFSqFLn1j8lE0i0wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxLzd1MGdzb3BYQW1vWEhGU3FGTG4xajhsRTBpMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAbhAgwDQYJKoZIhvcNAQELBQADggEBAAZ4kR9dI6W/WeElEG4p90XYBhFT H21ePj5spXlawPJGP+0jghiAP6ctkFJVQJEwY64Fjf37l/Zl6jU8b///sPrwzPnJ u1uYDxEHyC/vku7ESf0IqXetRqPHj6XobON7BAyg4uQL0ka9wnn+K6/2zkHsccus IKw3xARfrCZz2gz6Y0VkqUyIap4YbK0km50YBBJ5hMB3i0Xgp9jpl1MVGDHaxmOj gyWN85bcwFtLXLpP2i5VOLHwMT10ryFAnl6gsLoQoUiyOBg/7EoMtGr908gUeMWn PrGdKgVReu/YuzZVXztm6tpCooo+HoSIrjloL6j0W/HwOWwkULeUvQxLYi0= -----END CERTIFICATE-----Generated at Sat Apr 26 17:33:15 2025 by rpki-client