$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/f3A0879I3hDqFgOWKd9h_q3Q36k.roa File: f3A0879I3hDqFgOWKd9h_q3Q36k.roa (raw, json) Hash identifier: FfdHVr4Gwlzh+Y5trym2mVmhwm2jHnKOyVYYNGor/fc= Subject key identifier: 7F:70:34:F3:BF:48:DE:10:EA:16:03:96:29:DF:61:FE:AD:D0:DF:A9 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 020D Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/f3A0879I3hDqFgOWKd9h_q3Q36k.roa Signing time: Sat 01 Mar 2025 01:31:08 +0000 ROA not before: Sat 01 Mar 2025 01:31:08 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 123.224.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:31:08 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=7F7034F3BF48DE10EA16039629DF61FEADD0DFA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:8f:1a:f0:c9:16:27:81:c2:fb:25:06:49: 3f:7b:f9:2b:f9:0b:96:0f:2b:9c:15:b9:cf:5d:f7: 1c:a1:be:b1:d1:bb:2d:d2:8d:df:c7:22:f8:42:d6: 4e:65:2b:00:bf:af:c3:8b:f1:c5:bf:37:43:8c:b2: 51:b0:47:0b:21:26:1a:b9:29:18:f0:78:4e:c9:c5: cb:92:b6:c7:f4:b6:40:9e:75:5d:86:a6:22:2c:41: 0e:46:da:a7:36:aa:e0:dc:86:a4:b8:cf:a4:dc:ea: a7:00:b6:06:71:32:8d:7c:d6:bb:c0:3b:f5:24:8d: 81:31:f0:4a:05:27:0e:d4:de:f4:f5:49:ae:d0:c8: 2b:73:13:fb:1a:7b:22:99:2a:65:fc:d2:1a:5b:c9: 4e:a4:b5:fc:dc:c4:69:9c:b4:a6:85:10:45:c2:7e: 85:a5:8b:aa:9d:8a:7f:07:7d:55:9f:2a:e0:6b:dc: 7d:aa:44:d9:e0:47:cb:4c:18:8d:92:1e:7c:87:ec: 23:af:52:19:22:6a:26:1b:ca:40:04:35:00:a5:5e: 15:94:43:ea:c8:7a:93:ff:76:18:aa:62:1b:9c:92: d1:45:73:93:e1:66:7c:d8:9f:d1:a4:b5:82:4e:44: dc:24:73:c9:d3:be:95:bb:4e:42:7b:0b:b8:56:ff: 91:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:70:34:F3:BF:48:DE:10:EA:16:03:96:29:DF:61:FE:AD:D0:DF:A9 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/f3A0879I3hDqFgOWKd9h_q3Q36k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.224.0.0/14 Signature Algorithm: sha256WithRSAEncryption 5d:87:64:bd:3e:36:43:cc:f5:c5:27:8f:93:e0:7b:81:16:e0: a1:63:08:1f:a7:db:be:fd:a7:d4:66:ab:1e:ad:aa:a9:03:2f: 37:d3:d6:24:48:cd:ca:b0:61:e9:f1:98:85:66:42:7a:64:37: be:36:68:b5:41:9c:11:88:58:7d:24:25:cb:b2:49:4f:f3:e8: 46:42:18:36:cb:6c:96:2c:72:b3:7e:83:ad:de:05:45:dc:c6: b9:9f:08:2c:26:56:c5:3b:3c:1f:7d:19:79:b2:0d:6f:27:65: c7:4f:ba:71:24:89:df:d0:bf:e3:3b:ce:1e:0c:dd:cd:e5:5e: 6c:e1:84:15:41:84:64:b4:5f:de:04:e0:03:96:ac:3a:d5:c1: 2e:ac:1d:bc:25:5e:0b:6c:08:4e:59:45:1b:0d:42:26:5e:4e: 54:54:09:f6:ca:ae:01:1b:04:a2:5e:7d:df:bf:62:47:ba:ef: 16:fc:15:c2:21:e2:a9:84:14:1b:97:ef:fe:74:1a:11:68:dd: 00:95:9a:58:8c:08:ab:06:aa:ca:c6:c2:6f:7c:a0:e4:b3:cc: 6d:60:28:20:78:98:96:06:65:26:ae:43:af:64:d9:65:31:f2: 51:72:fd:06:c6:6b:bf:32:3d:10:75:f4:fc:53:b2:4a:81:51: 8c:0d:35:cc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMxMDhaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdGNzAzNEYzQkY0OERF MTBFQTE2MDM5NjI5REY2MUZFQUREMERGQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnZY8a8MkWJ4HC+yUGST97+Sv5C5YPK5wVuc9d9xyhvrHRuy3S jd/HIvhC1k5lKwC/r8OL8cW/N0OMslGwRwshJhq5KRjweE7JxcuStsf0tkCedV2G piIsQQ5G2qc2quDchqS4z6Tc6qcAtgZxMo181rvAO/UkjYEx8EoFJw7U3vT1Sa7Q yCtzE/saeyKZKmX80hpbyU6ktfzcxGmctKaFEEXCfoWli6qdin8HfVWfKuBr3H2q RNngR8tMGI2SHnyH7COvUhkiaiYbykAENQClXhWUQ+rIepP/dhiqYhucktFFc5Ph ZnzYn9GktYJORNwkc8nTvpW7TkJ7C7hW/5EzAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUf3A0879I3hDqFgOWKd9h/q3Q36kwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL2YzQTA4NzlJM2hEcUZnT1dLZDloX3EzUTM2ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJ74DANBgkqhkiG9w0BAQsFAAOCAQEAXYdkvT42Q8z1xSePk+B7gRbgoWMI H6fbvv2n1GarHq2qqQMvN9PWJEjNyrBh6fGYhWZCemQ3vjZotUGcEYhYfSQly7JJ T/PoRkIYNstslixys36Drd4FRdzGuZ8ILCZWxTs8H30ZebINbydlx0+6cSSJ39C/ 4zvOHgzdzeVebOGEFUGEZLRf3gTgA5asOtXBLqwdvCVeC2wITllFGw1CJl5OVFQJ 9squARsEol59379iR7rvFvwVwiHiqYQUG5fv/nQaEWjdAJWaWIwIqwaqysbCb3yg 5LPMbWAoIHiYlgZlJq5Dr2TZZTHyUXL9BsZrvzI9EHX0/FOySoFRjA01zA== -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:43 2025 by rpki-client