$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/rzbDyZDtSZwnkdOzjt6JuYlUE-s.roa File: rzbDyZDtSZwnkdOzjt6JuYlUE-s.roa (raw, json) Hash identifier: yLaV+n9IZNJ30k89OC+bPXE0ZgjkwEBx6s4Ewtby0uM= Subject key identifier: AF:36:C3:C9:90:ED:49:9C:27:91:D3:B3:8E:DE:89:B9:89:54:13:EB Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0208 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/rzbDyZDtSZwnkdOzjt6JuYlUE-s.roa Signing time: Sat 01 Mar 2025 01:31:06 +0000 ROA not before: Sat 01 Mar 2025 01:31:06 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 118.16.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:31:06 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=AF36C3C990ED499C2791D3B38EDE89B9895413EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:d4:ec:41:2f:9b:6d:c5:35:73:e7:b9:aa: 8e:c6:1e:f4:c9:6a:d5:b6:77:62:03:32:8c:6b:fb: ca:a7:e6:f2:5c:d1:66:52:e5:41:74:6e:0a:b6:5d: 42:de:9e:6c:35:10:2a:5c:b8:c0:ff:07:9a:a8:78: 45:a7:bd:3d:17:9e:13:fc:a4:6e:12:0f:fe:27:10: a9:f7:af:15:39:da:30:d2:ad:b4:40:0c:b1:70:7c: e2:60:a6:92:0e:9a:63:57:cb:86:f5:bb:92:28:19: 1f:c9:01:cc:90:17:6e:6c:08:8c:a3:eb:ec:3c:a3: 2e:67:58:ef:a0:b8:3b:7e:e5:02:43:ea:f5:cd:2b: eb:27:ba:d0:f1:06:2f:5b:51:bf:32:b8:01:7a:86: a5:2e:8e:10:e2:81:ec:3e:d7:20:2d:07:dc:8c:5a: b9:45:96:0d:8e:87:6f:b0:fc:2b:d4:83:c2:a8:2a: b4:a3:a9:e2:0e:34:a6:13:34:33:86:c2:73:8e:d4: c2:40:a2:8c:19:e2:50:7e:c4:54:07:2b:52:d0:b4: bc:30:d0:a8:15:f8:01:d6:b1:79:37:d1:4f:ec:58: 1c:52:8e:d3:df:bc:1c:97:d3:1f:5c:15:df:b5:90: e5:9c:09:6a:d9:db:13:6b:8f:ac:18:37:49:62:ad: 50:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:36:C3:C9:90:ED:49:9C:27:91:D3:B3:8E:DE:89:B9:89:54:13:EB X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/rzbDyZDtSZwnkdOzjt6JuYlUE-s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.16.0.0/13 Signature Algorithm: sha256WithRSAEncryption 6a:93:e6:ae:85:c9:1b:3e:88:12:c4:4d:54:66:62:fa:8c:b5: d9:e5:25:8a:db:ef:20:42:c7:13:42:0e:44:52:c5:e6:a7:36: e4:24:46:a0:ee:2c:55:d7:e9:40:2e:df:82:b4:d5:55:05:47: 37:1b:0a:34:2a:1f:9e:59:19:98:b0:f8:dd:2c:94:4b:8a:7e: 91:a0:c1:69:97:8e:a0:05:26:9c:06:f5:e1:ca:84:6a:bb:9b: f2:c9:43:58:b7:7f:c7:d5:42:9e:ef:28:ee:f5:73:0c:ab:19: aa:7b:ea:06:bc:e0:be:e7:7a:0e:0b:62:72:d7:ea:65:d2:4a: 52:ef:72:16:c5:2e:f0:be:e2:b4:ef:32:f5:9d:55:70:fb:32: b4:66:93:7f:49:39:cc:03:1e:70:18:d5:0c:0c:46:3f:75:47: 9e:6b:ff:fc:d0:79:ac:da:6a:fc:13:7c:78:46:89:e1:a9:19: be:b6:8e:61:11:af:43:ed:97:fe:b3:a1:5c:59:97:ca:bb:36: ec:b3:bc:4e:2f:97:56:1e:66:5f:8c:4e:89:19:a3:27:33:9e: 57:5f:95:28:b5:4c:27:6b:42:00:6d:14:4d:ea:bb:2f:04:fd: f8:50:46:95:d8:e3:aa:2f:50:81:26:8c:7b:de:89:48:ea:22: 38:22:32:49 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMxMDZaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFGMzZDM0M5OTBFRDQ5 OUMyNzkxRDNCMzhFREU4OUI5ODk1NDEzRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2xdTsQS+bbcU1c+e5qo7GHvTJatW2d2IDMoxr+8qn5vJc0WZS 5UF0bgq2XULenmw1ECpcuMD/B5qoeEWnvT0XnhP8pG4SD/4nEKn3rxU52jDSrbRA DLFwfOJgppIOmmNXy4b1u5IoGR/JAcyQF25sCIyj6+w8oy5nWO+guDt+5QJD6vXN K+snutDxBi9bUb8yuAF6hqUujhDigew+1yAtB9yMWrlFlg2Oh2+w/CvUg8KoKrSj qeIONKYTNDOGwnOO1MJAoowZ4lB+xFQHK1LQtLww0KgV+AHWsXk30U/sWBxSjtPf vByX0x9cFd+1kOWcCWrZ2xNrj6wYN0lirVCTAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUrzbDyZDtSZwnkdOzjt6JuYlUE+swHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL3J6YkR5WkR0U1p3bmtkT3pqdDZKdVlsVUUtcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwN2EDANBgkqhkiG9w0BAQsFAAOCAQEAapPmroXJGz6IEsRNVGZi+oy12eUl itvvIELHE0IORFLF5qc25CRGoO4sVdfpQC7fgrTVVQVHNxsKNCofnlkZmLD43SyU S4p+kaDBaZeOoAUmnAb14cqEarub8slDWLd/x9VCnu8o7vVzDKsZqnvqBrzgvud6 DgtictfqZdJKUu9yFsUu8L7itO8y9Z1VcPsytGaTf0k5zAMecBjVDAxGP3VHnmv/ /NB5rNpq/BN8eEaJ4akZvraOYRGvQ+2X/rOhXFmXyrs27LO8Ti+XVh5mX4xOiRmj JzOeV1+VKLVMJ2tCAG0UTeq7LwT9+FBGldjjqi9QgSaMe96JSOoiOCIySQ== -----END CERTIFICATE-----Generated at Sat Apr 26 17:28:53 2025 by rpki-client