$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/T7JnxMIqqT0LRx2L-90B6X1nO6Q.roa File: T7JnxMIqqT0LRx2L-90B6X1nO6Q.roa (raw, json) Hash identifier: gKXvXMtrE8WkM+EUoegQjgROQQLh4lj3L4vdg6TXjlY= Subject key identifier: 4F:B2:67:C4:C2:2A:A9:3D:0B:47:1D:8B:FB:DD:01:E9:7D:67:3B:A4 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0210 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/T7JnxMIqqT0LRx2L-90B6X1nO6Q.roa Signing time: Sat 01 Mar 2025 01:31:09 +0000 ROA not before: Sat 01 Mar 2025 01:31:09 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 125.170.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:31:09 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=4FB267C4C22AA93D0B471D8BFBDD01E97D673BA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:f0:b3:07:72:10:b7:7c:07:c9:34:c3:86: bb:54:32:51:28:12:ba:81:31:1f:da:d2:c1:26:8c: 85:bc:eb:5e:73:7f:90:1a:82:cd:cd:ac:20:bb:e7: eb:c9:96:ce:d6:0e:a7:e3:e5:dd:da:10:56:4a:c0: 9a:74:45:a2:3c:af:13:10:24:66:f4:f0:0b:ee:df: bb:2e:35:f0:34:52:83:80:37:42:01:38:91:53:d8: dd:f9:d8:f9:9f:71:29:6b:55:7a:d1:6e:f5:17:5d: 80:e3:65:59:6f:35:f6:62:96:a8:60:de:98:ac:f7: bb:95:d3:60:41:1b:34:95:34:05:cb:d1:c9:fc:7e: ce:83:17:26:a3:62:6b:b7:c6:e1:b0:58:07:72:cf: 6f:ad:d6:72:e7:c0:39:b1:cb:d6:49:16:c6:f4:b1: a9:4d:16:70:39:ae:a3:f9:12:66:88:b3:ab:9d:3c: b3:80:ae:d8:77:12:7a:d7:f3:69:3c:70:a6:d4:94: 6a:ed:95:a4:e3:bc:ef:26:8f:36:0b:d2:14:4a:b1: 04:d1:48:3a:ae:53:49:cc:27:59:5d:b6:33:13:da: e6:98:0a:05:e5:19:56:02:07:74:29:11:d8:c5:b4: d9:13:8d:92:3e:90:f5:98:67:c8:d2:a4:fb:c6:e7: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B2:67:C4:C2:2A:A9:3D:0B:47:1D:8B:FB:DD:01:E9:7D:67:3B:A4 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/T7JnxMIqqT0LRx2L-90B6X1nO6Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.170.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:78:2e:e2:cf:34:3b:78:96:67:22:25:8d:18:0a:68:01:c8: 77:b4:95:d9:52:19:83:86:20:66:7c:fe:65:4e:f9:76:b5:54: 60:ff:5a:d9:40:f7:12:c7:f7:fa:5a:3f:61:14:68:78:35:46: c3:86:b3:2a:1f:ca:c8:1a:36:c9:81:61:6c:f4:90:9d:11:33: ee:1b:07:00:01:fa:49:bf:cc:59:c9:60:37:51:06:c0:9c:48: 28:03:d6:1d:af:63:64:9e:6e:be:dc:7e:77:74:db:86:dd:3c: 9b:7e:71:5a:be:e6:ab:fe:87:e1:c4:13:94:96:dc:b9:b1:4c: 0f:77:70:ed:da:b1:3d:bf:ea:bf:08:92:b6:cf:e2:68:23:b1: 0f:f8:fa:f0:bb:36:75:8c:7d:dc:9e:d0:93:6d:25:31:b9:87: ca:96:7c:e7:a0:04:63:e0:45:ac:d5:ab:ab:2f:f8:53:b8:ea: 07:6a:4f:9a:af:09:2a:82:18:18:c9:b5:75:af:52:69:ba:ab: 5b:c7:69:83:3f:83:51:5a:c1:7f:21:c6:fc:55:99:c5:43:d6: c2:da:30:ea:1b:0a:80:36:de:b3:32:ca:68:46:3b:a4:a3:1f: b5:c1:42:c6:36:3a:6d:89:89:a7:bb:3d:46:b1:a5:3b:3d:4c: 94:80:8c:37 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMxMDlaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRGQjI2N0M0QzIyQUE5 M0QwQjQ3MUQ4QkZCREQwMUU5N0Q2NzNCQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC62/CzB3IQt3wHyTTDhrtUMlEoErqBMR/a0sEmjIW8615zf5Aa gs3NrCC75+vJls7WDqfj5d3aEFZKwJp0RaI8rxMQJGb08Avu37suNfA0UoOAN0IB OJFT2N352PmfcSlrVXrRbvUXXYDjZVlvNfZilqhg3pis97uV02BBGzSVNAXL0cn8 fs6DFyajYmu3xuGwWAdyz2+t1nLnwDmxy9ZJFsb0salNFnA5rqP5EmaIs6udPLOA rth3EnrX82k8cKbUlGrtlaTjvO8mjzYL0hRKsQTRSDquU0nMJ1ldtjMT2uaYCgXl GVYCB3QpEdjFtNkTjZI+kPWYZ8jSpPvG5wm9AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUT7JnxMIqqT0LRx2L+90B6X1nO6QwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL1Q3Sm54TUlxcVQwTFJ4MkwtOTBCNlgxbk82US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB9qjANBgkqhkiG9w0BAQsFAAOCAQEAr3gu4s80O3iWZyIljRgKaAHId7SV 2VIZg4YgZnz+ZU75drVUYP9a2UD3Esf3+lo/YRRoeDVGw4azKh/KyBo2yYFhbPSQ nREz7hsHAAH6Sb/MWclgN1EGwJxIKAPWHa9jZJ5uvtx+d3Tbht08m35xWr7mq/6H 4cQTlJbcubFMD3dw7dqxPb/qvwiSts/iaCOxD/j68Ls2dYx93J7Qk20lMbmHypZ8 56AEY+BFrNWrqy/4U7jqB2pPmq8JKoIYGMm1da9SabqrW8dpgz+DUVrBfyHG/FWZ xUPWwtow6hsKgDbeszLKaEY7pKMftcFCxjY6bYmJp7s9RrGlOz1MlICMNw== -----END CERTIFICATE-----Generated at Sat Apr 26 17:25:33 2025 by rpki-client