$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/K7TrEYSsa45j37oCPFlIo3OP0DA.roa File: K7TrEYSsa45j37oCPFlIo3OP0DA.roa (raw, json) Hash identifier: n2M7yaOM4O94WDG6xA5RT0QbBWX2e7bsZlEo3xNj/9g= Subject key identifier: 2B:B4:EB:11:84:AC:6B:8E:63:DF:BA:02:3C:59:48:A3:73:8F:D0:30 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 01F9 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/K7TrEYSsa45j37oCPFlIo3OP0DA.roa Signing time: Sat 01 Mar 2025 01:30:59 +0000 ROA not before: Sat 01 Mar 2025 01:30:59 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 211.130.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:30:59 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=2BB4EB1184AC6B8E63DFBA023C5948A3738FD030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:57:61:2b:b4:42:8e:c0:fa:87:65:5f:8b: e5:9f:e8:8a:55:4f:6f:7f:25:bb:9b:42:90:35:31: f0:8a:25:f5:81:af:0b:3e:9a:e2:fb:f2:84:43:4f: 55:e2:17:e6:27:69:56:43:af:d1:42:ea:1c:f1:1c: 8d:f2:60:e8:0d:2b:fe:2b:73:9b:0b:39:80:55:9c: 32:85:b6:bf:87:2d:55:35:76:e0:c0:eb:f7:89:b3: c9:86:c2:a7:a1:ef:03:41:8b:83:31:de:80:f3:94: cb:2e:59:ea:07:af:6f:05:25:28:51:75:ca:5d:74: 2c:d8:da:47:93:43:86:1e:17:a3:dc:a6:d3:53:34: 15:5a:f5:61:8d:ee:c0:cb:74:a2:7f:11:31:0d:59: 7f:72:2e:00:39:ac:a8:69:e3:d4:41:ce:19:94:84: 0d:81:96:6b:4d:38:e0:f6:e8:15:44:4e:15:57:af: a8:00:0a:46:84:0d:78:65:3a:2d:24:03:7a:12:dc: 05:00:49:a1:5b:c5:35:87:28:17:38:1a:e6:02:60: b5:83:88:84:b0:5b:77:35:4f:f5:03:45:b3:6a:0e: 79:e0:28:d6:89:ff:c6:d6:54:51:d0:83:88:21:89: 35:44:fc:a3:5f:b8:f3:b9:2b:39:7f:b1:11:59:27: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B4:EB:11:84:AC:6B:8E:63:DF:BA:02:3C:59:48:A3:73:8F:D0:30 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/K7TrEYSsa45j37oCPFlIo3OP0DA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.130.64.0/19 Signature Algorithm: sha256WithRSAEncryption d8:d1:aa:fc:4d:86:65:9f:fd:ac:b7:c7:75:6a:67:1e:33:2e: fa:33:30:f2:a5:e9:61:2f:1f:07:d2:b5:0a:2a:d9:20:5c:31: 9a:25:97:69:ab:b8:e6:0f:95:84:36:07:f7:25:eb:16:65:7d: 61:5f:ec:cb:87:80:2e:0a:0a:60:9d:0b:fb:39:eb:2b:ab:1e: 63:f5:36:78:79:58:5a:e3:e9:28:ad:8d:52:f6:05:84:a7:04: bd:28:71:43:ea:59:4c:6e:6d:fa:70:12:3e:88:14:3b:be:a5: ce:ea:ac:9f:10:66:14:c7:18:fb:8c:1c:03:51:19:64:25:3a: b7:83:f5:e6:7b:4f:1e:30:f5:bc:41:9e:f4:06:78:82:82:f3: d6:48:bd:52:36:51:fb:8e:63:a5:ab:53:1d:14:87:b0:57:a3: 54:b2:9a:60:c1:76:ab:33:a4:aa:89:f7:5e:14:da:55:71:8e: 20:ca:f8:a1:db:f3:0e:48:9e:38:c1:e8:ec:d3:b6:3f:6c:8e: fc:48:83:43:68:19:fb:81:7c:4a:f2:d3:cc:53:ef:e0:db:cd: 61:5f:3e:ee:e9:67:58:2e:8e:b1:34:86:56:47:cb:ca:54:d5: 54:68:d5:59:a3:fe:9f:86:c7:69:c5:39:0e:1a:57:f7:af:11: 68:33:27:74 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMwNTlaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJCQjRFQjExODRBQzZC OEU2M0RGQkEwMjNDNTk0OEEzNzM4RkQwMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCihVdhK7RCjsD6h2Vfi+Wf6IpVT29/JbubQpA1MfCKJfWBrws+ muL78oRDT1XiF+YnaVZDr9FC6hzxHI3yYOgNK/4rc5sLOYBVnDKFtr+HLVU1duDA 6/eJs8mGwqeh7wNBi4Mx3oDzlMsuWeoHr28FJShRdcpddCzY2keTQ4YeF6PcptNT NBVa9WGN7sDLdKJ/ETENWX9yLgA5rKhp49RBzhmUhA2BlmtNOOD26BVEThVXr6gA CkaEDXhlOi0kA3oS3AUASaFbxTWHKBc4GuYCYLWDiISwW3c1T/UDRbNqDnngKNaJ /8bWVFHQg4ghiTVE/KNfuPO5Kzl/sRFZJ4MZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUK7TrEYSsa45j37oCPFlIo3OP0DAwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL0s3VHJFWVNzYTQ1ajM3b0NQRmxJbzNPUDBEQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXTgkAwDQYJKoZIhvcNAQELBQADggEBANjRqvxNhmWf/ay3x3VqZx4zLvoz MPKl6WEvHwfStQoq2SBcMZoll2mruOYPlYQ2B/cl6xZlfWFf7MuHgC4KCmCdC/s5 6yurHmP1Nnh5WFrj6SitjVL2BYSnBL0ocUPqWUxubfpwEj6IFDu+pc7qrJ8QZhTH GPuMHANRGWQlOreD9eZ7Tx4w9bxBnvQGeIKC89ZIvVI2UfuOY6WrUx0Uh7BXo1Sy mmDBdqszpKqJ914U2lVxjiDK+KHb8w5InjjB6OzTtj9sjvxIg0NoGfuBfEry08xT 7+DbzWFfPu7pZ1gujrE0hlZHy8pU1VRo1Vmj/p+Gx2nFOQ4aV/evEWgzJ3Q= -----END CERTIFICATE-----Generated at Sat Apr 26 17:10:56 2025 by rpki-client