$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/tUDGuA8OmxYbQpvkS72f8ZwTufc.roa File: tUDGuA8OmxYbQpvkS72f8ZwTufc.roa (raw, json) Hash identifier: Xn33hJjjnPMvOZNPUiwPZgaPupe28ukZKc0XCnlwmCE= Subject key identifier: B5:40:C6:B8:0F:0E:9B:16:1B:42:9B:E4:4B:BD:9F:F1:9C:13:B9:F7 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0214 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tUDGuA8OmxYbQpvkS72f8ZwTufc.roa Signing time: Sat 01 Mar 2025 01:31:11 +0000 ROA not before: Sat 01 Mar 2025 01:31:11 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 153.192.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:31:11 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=B540C6B80F0E9B161B429BE44BBD9FF19C13B9F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:87:86:48:9f:8c:ae:af:56:d6:e3:ee:40:e7: 58:96:8f:73:7e:52:cd:13:18:ae:2d:30:2c:bd:ef: 34:5d:36:21:24:aa:0d:45:7d:ad:3a:91:49:2b:89: 2a:3b:1d:ab:30:5e:be:36:8e:d2:e7:92:16:cf:e3: 04:b0:52:53:cf:26:2f:f5:df:78:5e:8b:20:f1:12: a6:a6:81:00:70:e0:92:e2:cc:17:78:81:6f:c9:aa: a3:d1:c1:cc:7e:34:88:99:19:a8:95:5f:e9:ce:62: de:87:4a:99:8a:45:fc:db:ce:f0:90:99:41:01:fe: d6:12:2a:5d:a7:90:80:cc:86:90:61:41:6d:b6:86: ee:0f:9b:9e:28:e1:00:39:da:49:9e:eb:32:98:01: e8:8a:5c:ad:eb:95:6e:38:a7:58:db:7c:2e:af:aa: ca:f4:9e:3d:d0:40:1e:b2:e4:ae:44:e3:20:65:59: 80:f5:cd:2a:15:f8:20:3f:be:1a:6d:9f:87:43:bc: a5:fd:72:4a:60:82:13:7e:67:a6:d6:a0:a6:97:ae: 33:8b:85:77:65:b1:f1:8f:7a:af:0e:c0:ae:d0:20: a9:7d:22:3f:4c:99:0a:b9:4f:df:c6:03:f4:7a:16: c7:4b:59:d5:20:93:1c:a4:6d:5a:e1:61:92:ea:59: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:40:C6:B8:0F:0E:9B:16:1B:42:9B:E4:4B:BD:9F:F1:9C:13:B9:F7 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tUDGuA8OmxYbQpvkS72f8ZwTufc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.192.0.0/11 Signature Algorithm: sha256WithRSAEncryption cc:b8:d4:ca:88:70:bf:a6:82:64:c5:fc:62:da:d8:0c:f8:00: 84:d4:61:3e:7a:c2:ce:71:0d:6d:b9:c1:23:87:60:a3:42:35: e4:2c:0c:aa:ba:f8:db:c1:1d:80:8c:53:e1:83:0e:31:72:09: 16:3a:7e:55:16:9c:94:e6:02:21:39:bf:15:2b:8d:0a:d7:0e: ca:dd:2e:58:e9:e7:f7:41:2d:e2:b5:bb:3f:a4:4f:41:cc:07: 64:c5:cb:87:4d:dc:b0:6c:6c:0a:7d:38:71:c7:85:ab:20:da: 44:2a:6c:41:b4:3c:dd:7d:59:be:9b:d4:7d:e1:bb:0f:ec:75: eb:47:3c:f3:bf:ab:40:0c:ac:01:fe:fe:4e:2a:ee:47:85:e7: 7c:f2:18:d7:2d:df:1e:c5:93:43:9f:73:a3:0a:02:ff:c4:f7: f1:ee:8d:0c:0b:8d:0b:14:32:61:3a:7e:f3:e3:63:6d:e2:62: 81:ee:75:5b:34:9b:33:b8:9d:29:76:43:f2:87:1a:92:b2:f2: 0b:83:23:0f:be:91:8a:6d:b4:a5:e1:23:f3:ee:1e:da:8f:59: 26:1c:78:df:9a:c2:99:2e:a5:16:3a:c1:80:c2:73:23:20:62: c7:8f:97:25:58:1d:43:27:bb:46:e4:54:74:45:27:e2:b8:17: f6:79:ec:48 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMxMTFaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI1NDBDNkI4MEYwRTlC MTYxQjQyOUJFNDRCQkQ5RkYxOUMxM0I5RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3h4ZIn4yur1bW4+5A51iWj3N+Us0TGK4tMCy97zRdNiEkqg1F fa06kUkriSo7HaswXr42jtLnkhbP4wSwUlPPJi/133heiyDxEqamgQBw4JLizBd4 gW/JqqPRwcx+NIiZGaiVX+nOYt6HSpmKRfzbzvCQmUEB/tYSKl2nkIDMhpBhQW22 hu4Pm54o4QA52kme6zKYAeiKXK3rlW44p1jbfC6vqsr0nj3QQB6y5K5E4yBlWYD1 zSoV+CA/vhptn4dDvKX9ckpgghN+Z6bWoKaXrjOLhXdlsfGPeq8OwK7QIKl9Ij9M mQq5T9/GA/R6FsdLWdUgkxykbVrhYZLqWQdDAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUtUDGuA8OmxYbQpvkS72f8ZwTufcwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL3RVREd1QThPbXhZYlFwdmtTNzJmOFp3VHVmYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwWZwDANBgkqhkiG9w0BAQsFAAOCAQEAzLjUyohwv6aCZMX8YtrYDPgAhNRh PnrCznENbbnBI4dgo0I15CwMqrr428EdgIxT4YMOMXIJFjp+VRaclOYCITm/FSuN CtcOyt0uWOnn90Et4rW7P6RPQcwHZMXLh03csGxsCn04cceFqyDaRCpsQbQ83X1Z vpvUfeG7D+x160c887+rQAysAf7+TiruR4XnfPIY1y3fHsWTQ59zowoC/8T38e6N DAuNCxQyYTp+8+NjbeJige51WzSbM7idKXZD8ocakrLyC4MjD76Rim20peEj8+4e 2o9ZJhx435rCmS6lFjrBgMJzIyBix4+XJVgdQye7RuRUdEUn4rgX9nnsSA== -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:30 2025 by rpki-client