$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/_e3jgBm0uaHLPl8oLSQTAQj5Hvw.roa File: _e3jgBm0uaHLPl8oLSQTAQj5Hvw.roa (raw, json) Hash identifier: 7TJ7GER8imQiYyGKjrbKC6jumqWGW9cFBZs2Y0oyo78= Subject key identifier: FD:ED:E3:80:19:B4:B9:A1:CB:3E:5F:28:2D:24:13:01:08:F9:1E:FC Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: DA Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/_e3jgBm0uaHLPl8oLSQTAQj5Hvw.roa Signing time: Tue 10 Jun 2025 10:46:34 +0000 ROA not before: Tue 10 Jun 2025 10:46:34 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 19905 IP address blocks: 218.216.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Jun 10 10:46:34 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=FDEDE38019B4B9A1CB3E5F282D24130108F91EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:64:af:92:1a:83:64:8c:2a:e7:55:44:a0: 80:4a:0a:61:a0:d6:cf:13:df:5c:46:e8:c4:ee:20: c1:4c:b2:ce:b8:4f:df:33:ad:12:a6:13:93:84:ba: 14:b7:b9:f7:29:b2:d5:7f:f5:c2:e8:aa:11:f3:3a: 6c:5b:ea:2b:db:ff:03:8f:0d:83:26:51:52:cc:0c: 8f:6e:b4:d1:92:43:7b:c8:fd:d8:eb:c5:6f:c8:02: 41:78:fb:a7:3e:81:ff:c8:7e:c6:1c:b2:ca:2e:28: 41:76:66:a1:07:48:9d:88:09:a7:30:d5:99:03:c9: 63:50:2b:22:4a:72:b9:47:29:18:27:cb:74:8f:ef: a2:3e:6e:eb:f6:1b:9b:70:b9:5a:fe:aa:9e:a0:61: 80:bd:e5:f0:91:fa:cb:34:00:12:e5:c5:94:04:42: 2f:0a:86:9e:21:28:65:62:93:68:4c:7f:ba:5d:81: 2c:04:c7:e9:dd:62:11:49:0e:b4:f5:42:b1:3a:09: 94:82:b2:2e:d0:f2:38:ce:78:d1:53:a3:94:5a:70: 18:d1:2e:48:71:ea:82:e6:0b:1d:07:11:72:9f:54: 75:56:04:42:7a:63:95:73:8c:6d:bd:b7:cb:cd:53: 97:1e:c3:91:1f:7f:32:a0:d1:4f:92:fc:d4:08:5d: b3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:ED:E3:80:19:B4:B9:A1:CB:3E:5F:28:2D:24:13:01:08:F9:1E:FC X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/_e3jgBm0uaHLPl8oLSQTAQj5Hvw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.216.176.0/20 Signature Algorithm: sha256WithRSAEncryption 83:b4:11:87:8c:61:f0:0b:5e:de:38:88:80:e9:56:b6:57:a1: f2:c8:14:73:3a:3d:32:6a:0b:6b:be:ca:2a:db:f9:eb:c0:5e: 7a:1c:2c:1e:0d:50:da:6b:4c:ab:61:04:c5:5f:f7:0c:44:4d: 31:59:f2:bd:ae:01:cf:da:2c:bd:15:c7:7e:b1:28:ee:7a:ef: c7:d9:7f:ea:85:00:dc:18:0f:f3:b3:92:bb:83:51:28:ec:e9: 7c:88:40:e4:d4:97:f1:84:0e:09:cb:b2:d9:6f:01:08:0d:e2: 3b:75:a8:01:6e:60:67:2b:11:23:f0:0b:ff:9e:9f:db:03:e0: 86:eb:e4:35:b1:5e:7b:4b:dc:ab:5a:0f:ca:7a:43:0c:0a:b0: b2:3d:e9:20:33:b4:b5:4a:b8:56:0c:23:b5:4f:f4:eb:d0:a8: 1b:fa:4a:45:6f:55:94:42:56:36:61:6f:c0:e2:65:d6:80:83: cb:20:5e:dc:29:4a:ce:72:a1:f3:65:06:c2:c6:9b:5b:55:9a: a5:2f:be:8c:9a:54:5b:18:fe:4e:9c:86:59:e3:4f:8d:5b:f0: b8:9d:b6:ce:ef:16:10:f9:2b:3d:00:b5:c0:1c:76:d8:73:da: 24:d6:39:9c:59:93:29:b6:a0:c4:9f:f2:4e:26:74:0b:ed:b4: 0f:55:66:5c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICANowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNTA2MTAx MDQ2MzRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEZERURFMzgwMTlCNEI5 QTFDQjNFNUYyODJEMjQxMzAxMDhGOTFFRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtVGSvkhqDZIwq51VEoIBKCmGg1s8T31xG6MTuIMFMss64T98z rRKmE5OEuhS3ufcpstV/9cLoqhHzOmxb6ivb/wOPDYMmUVLMDI9utNGSQ3vI/djr xW/IAkF4+6c+gf/IfsYcssouKEF2ZqEHSJ2ICacw1ZkDyWNQKyJKcrlHKRgny3SP 76I+buv2G5twuVr+qp6gYYC95fCR+ss0ABLlxZQEQi8Khp4hKGVik2hMf7pdgSwE x+ndYhFJDrT1QrE6CZSCsi7Q8jjOeNFTo5RacBjRLkhx6oLmCx0HEXKfVHVWBEJ6 Y5VzjG29t8vNU5cew5EffzKg0U+S/NQIXbODAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/e3jgBm0uaHLPl8oLSQTAQj5HvwwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTczL19lM2pnQm0wdWFITFBsOG9MU1FUQVFqNUh2dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATa2LAwDQYJKoZIhvcNAQELBQADggEBAIO0EYeMYfALXt44iIDpVrZXofLI FHM6PTJqC2u+yirb+evAXnocLB4NUNprTKthBMVf9wxETTFZ8r2uAc/aLL0Vx36x KO5678fZf+qFANwYD/OzkruDUSjs6XyIQOTUl/GEDgnLstlvAQgN4jt1qAFuYGcr ESPwC/+en9sD4Ibr5DWxXntL3KtaD8p6QwwKsLI96SAztLVKuFYMI7VP9OvQqBv6 SkVvVZRCVjZhb8DiZdaAg8sgXtwpSs5yofNlBsLGm1tVmqUvvoyaVFsY/k6chlnj T41b8Lidts7vFhD5Kz0AtcAcdthz2iTWOZxZkym2oMSf8k4mdAvttA9VZlw= -----END CERTIFICATE-----Generated at Sat Jun 21 10:44:30 2025 by rpki-client