$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/fYsvPHwHgk2YgooOhlUpJYILXM8.roa File: fYsvPHwHgk2YgooOhlUpJYILXM8.roa (raw, json) Hash identifier: NEIKFyVARpX3mxHCXwZ5SxlMaqlpanBG1agHs9ulLF4= Subject key identifier: 7D:8B:2F:3C:7C:07:82:4D:98:82:8A:0E:86:55:29:25:82:0B:5C:CF Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0215 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/fYsvPHwHgk2YgooOhlUpJYILXM8.roa Signing time: Sat 01 Mar 2025 01:31:11 +0000 ROA not before: Sat 01 Mar 2025 01:31:11 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 153.224.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:31:11 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=7D8B2F3C7C07824D98828A0E86552925820B5CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:92:1d:6e:23:1b:66:bf:c5:40:78:37:6b: 5c:5f:ca:98:f1:9a:3e:14:a6:61:e0:d8:c0:39:76: 58:8b:30:d5:1d:26:7f:99:53:dd:be:03:19:eb:7d: e3:99:5c:de:04:e3:e7:b3:ed:53:d2:3c:8c:a9:93: 8a:99:29:8e:c9:92:7a:9d:8c:f0:99:6f:93:14:99: 52:11:92:29:f8:ac:a3:c6:30:78:55:fa:96:f2:04: 7c:b9:b6:22:9f:02:e8:a6:93:c0:b3:de:83:7d:99: 95:1b:57:17:82:ec:52:5a:36:70:2f:b0:61:e7:75: a5:93:fa:51:96:e8:a4:8b:54:08:e3:ac:df:ac:83: 74:d9:d1:39:cd:51:0c:7b:ad:d5:c8:fd:4e:2c:9a: be:6a:26:f6:09:58:90:a9:df:af:a0:01:39:c4:ee: 34:46:50:49:0f:a9:b7:0d:91:5f:a3:6d:5a:ac:40: 81:69:55:55:9f:29:b3:bd:fb:57:70:9b:1d:14:e4: 06:37:95:28:e4:bc:47:b9:06:c7:0a:32:f0:7f:8a: 37:55:d8:33:87:63:cd:b9:76:ac:af:b2:27:9b:42: a4:8a:59:47:c4:c7:e2:4e:9b:ab:30:9f:4a:c5:56: 6b:16:14:37:d2:e6:67:84:e8:45:d7:04:6d:a8:3e: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8B:2F:3C:7C:07:82:4D:98:82:8A:0E:86:55:29:25:82:0B:5C:CF X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/fYsvPHwHgk2YgooOhlUpJYILXM8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.224.0.0/12 Signature Algorithm: sha256WithRSAEncryption ca:e2:1a:b8:24:d9:cc:90:6f:36:d5:e3:76:93:8b:47:b5:10: 24:eb:4a:e1:3a:7c:3f:e6:b5:a6:d6:dc:6a:a0:b9:5d:ff:20: 3f:50:a6:fd:5e:9c:b6:95:d8:45:15:28:e3:84:bd:d1:f6:4b: 16:d5:68:e7:e8:c4:32:e5:56:d1:85:ec:1c:f4:27:ba:88:5e: b9:d3:2c:cb:58:be:a2:da:71:f2:2e:ec:01:29:ef:98:bd:bf: 70:65:8d:80:a0:d3:b6:03:d3:cc:dd:82:0e:86:e5:57:a5:33: f1:16:dd:6d:41:4f:a4:f5:b3:1b:3d:1b:b0:7a:36:7c:99:ff: d3:0c:cb:e3:30:d8:2e:ff:93:0c:40:fb:f3:74:e8:80:65:5e: 45:ee:ee:5a:85:a3:de:ce:90:a3:32:d8:fb:19:9a:2c:21:40: ab:c2:d8:77:63:71:3a:7e:17:aa:df:2e:ea:8b:00:6d:25:a6: bf:a7:8e:7b:7d:33:7e:4e:c4:8c:f9:7e:9b:a6:3a:6a:88:ef: d0:f3:1a:34:2a:34:e9:6b:90:e9:3a:79:f4:2f:b6:1d:ce:7e: dd:0b:bb:ac:7a:95:c2:30:66:25:b4:7e:18:4b:d8:de:d3:37: 0d:fd:bc:1a:21:6f:62:59:6f:9f:6e:e2:c2:8c:89:d2:9f:cb: 64:19:94:92 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMxMTFaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdEOEIyRjNDN0MwNzgy NEQ5ODgyOEEwRTg2NTUyOTI1ODIwQjVDQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAVZIdbiMbZr/FQHg3a1xfypjxmj4UpmHg2MA5dliLMNUdJn+Z U92+AxnrfeOZXN4E4+ez7VPSPIypk4qZKY7JknqdjPCZb5MUmVIRkin4rKPGMHhV +pbyBHy5tiKfAuimk8Cz3oN9mZUbVxeC7FJaNnAvsGHndaWT+lGW6KSLVAjjrN+s g3TZ0TnNUQx7rdXI/U4smr5qJvYJWJCp36+gATnE7jRGUEkPqbcNkV+jbVqsQIFp VVWfKbO9+1dwmx0U5AY3lSjkvEe5BscKMvB/ijdV2DOHY825dqyvsiebQqSKWUfE x+JOm6swn0rFVmsWFDfS5meE6EXXBG2oPpbFAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUfYsvPHwHgk2YgooOhlUpJYILXM8wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL2ZZc3ZQSHdIZ2syWWdvb09obFVwSllJTFhNOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwSZ4DANBgkqhkiG9w0BAQsFAAOCAQEAyuIauCTZzJBvNtXjdpOLR7UQJOtK 4Tp8P+a1ptbcaqC5Xf8gP1Cm/V6ctpXYRRUo44S90fZLFtVo5+jEMuVW0YXsHPQn uoheudMsy1i+otpx8i7sASnvmL2/cGWNgKDTtgPTzN2CDoblV6Uz8RbdbUFPpPWz Gz0bsHo2fJn/0wzL4zDYLv+TDED783TogGVeRe7uWoWj3s6QozLY+xmaLCFAq8LY d2NxOn4Xqt8u6osAbSWmv6eOe30zfk7EjPl+m6Y6aojv0PMaNCo06WuQ6Tp59C+2 Hc5+3Qu7rHqVwjBmJbR+GEvY3tM3Df28GiFvYllvn27iwoyJ0p/LZBmUkg== -----END CERTIFICATE-----Generated at Sat Apr 26 17:33:37 2025 by rpki-client