$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OEnbLbwuW-6Yw4Ze3rrpVWkKJxk.roa File: OEnbLbwuW-6Yw4Ze3rrpVWkKJxk.roa (raw, json) Hash identifier: 8POeEI4ap1FaLfQaWHpn39oBKDMzi+JumTeWnyl/tmg= Subject key identifier: 38:49:DB:2D:BC:2E:5B:EE:98:C3:86:5E:DE:BA:E9:55:69:0A:27:19 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: D4 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OEnbLbwuW-6Yw4Ze3rrpVWkKJxk.roa Signing time: Tue 10 Jun 2025 16:34:42 +0000 ROA not before: Tue 10 Jun 2025 16:34:42 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 18186 IP address blocks: 117.103.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 18:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Jun 10 16:34:42 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=3849DB2DBC2E5BEE98C3865EDEBAE955690A2719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d2:ce:de:3e:8d:6e:fd:f8:96:20:8b:71:da: c3:bf:fd:ce:0f:23:49:60:ea:00:14:4f:2d:a0:b4: 0a:34:b4:90:4b:73:24:dd:83:f8:16:35:5e:29:79: b2:ea:43:b3:46:07:5e:b8:18:55:ed:3e:b3:7e:29: 14:9c:93:5e:99:06:c6:ae:54:56:97:7f:22:68:bb: d0:90:83:06:37:3b:67:c9:8b:50:0d:e5:3c:68:e7: ea:96:32:0d:d8:3f:c9:63:13:11:7d:e1:1e:a5:ba: 11:98:2a:0c:28:a6:75:d8:7b:bd:a9:7f:ae:23:a7: f8:6e:47:78:c0:38:fd:58:99:cb:12:ac:52:ee:fc: ea:89:7d:38:44:c9:d7:d2:e4:d4:d4:6e:50:99:31: 0a:e6:0c:7c:68:7f:29:8e:ff:06:55:5d:3f:31:c4: 8e:f9:a1:69:bc:75:6e:bd:a3:4c:6d:b9:a3:b7:7d: c5:6e:22:1f:bb:51:42:03:c6:d2:12:6d:a3:2a:ff: 9d:46:9b:28:82:98:c2:a8:10:be:06:4c:f1:dc:46: 29:aa:1e:49:0d:9c:e4:12:68:22:59:de:f2:81:17: 52:f6:f1:f7:08:98:1e:b3:ca:a8:92:9f:ac:24:1b: 8f:1e:65:f1:f6:fb:41:8e:81:97:5f:54:43:3c:4e: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:49:DB:2D:BC:2E:5B:EE:98:C3:86:5E:DE:BA:E9:55:69:0A:27:19 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OEnbLbwuW-6Yw4Ze3rrpVWkKJxk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.103.191.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:56:8f:64:03:d8:1f:5a:54:f1:10:c6:bc:d6:5e:25:5c:b9: 73:b4:05:30:bf:10:12:b3:7b:47:cc:e0:32:b4:b2:a3:21:b9: 21:1d:2c:d4:ba:95:1b:72:ee:f2:16:fc:88:0a:71:03:5e:d6: 9c:8d:42:88:19:fb:ea:ef:e7:91:7b:05:13:4e:2d:ae:7c:9f: 4b:fe:68:c6:3f:f4:25:63:b4:ba:4b:4c:74:d9:c6:16:03:a2: cc:f9:1b:26:f0:ab:26:65:b6:e3:59:d2:9c:b2:c6:13:bc:02: 1e:10:4f:c1:7f:05:0c:10:9c:b3:c2:65:05:39:fb:04:6f:97: 98:5c:f7:2f:a6:a9:04:d4:34:e6:95:a1:4a:aa:4d:f9:7c:ac: 7b:ae:20:80:f2:91:46:bd:7a:9e:b0:3e:fc:3e:91:e9:bd:49: 75:bf:7b:c4:ca:fa:03:2b:99:e6:77:a1:70:a4:70:26:39:c4: 7a:68:fa:68:4c:ed:59:17:8f:2e:d4:a7:0f:98:8c:a3:a8:93: 10:1c:8a:9f:47:95:41:9b:15:00:6f:50:2b:79:ac:68:3e:8d: 4a:43:1d:e1:7c:13:a0:ab:7e:80:a1:dc:9b:9f:ea:ca:09:75: dc:12:10:f1:ad:4b:2b:31:92:11:e3:cc:48:e8:7f:e9:20:50: ef:1c:db:8c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTA2MTAx NjM0NDJaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDM4NDlEQjJEQkMyRTVC RUU5OEMzODY1RURFQkFFOTU1NjkwQTI3MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP0s7ePo1u/fiWIItx2sO//c4PI0lg6gAUTy2gtAo0tJBLcyTd g/gWNV4pebLqQ7NGB164GFXtPrN+KRSck16ZBsauVFaXfyJou9CQgwY3O2fJi1AN 5Txo5+qWMg3YP8ljExF94R6luhGYKgwopnXYe72pf64jp/huR3jAOP1YmcsSrFLu /OqJfThEydfS5NTUblCZMQrmDHxofymO/wZVXT8xxI75oWm8dW69o0xtuaO3fcVu Ih+7UUIDxtISbaMq/51GmyiCmMKoEL4GTPHcRimqHkkNnOQSaCJZ3vKBF1L28fcI mB6zyqiSn6wkG48eZfH2+0GOgZdfVEM8TmN9AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUOEnbLbwuW+6Yw4Ze3rrpVWkKJxkwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9PRW5iTGJ3dVctNll3NFplM3JycFZXa0tKeGsu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAdWe/MA0GCSqGSIb3DQEBCwUAA4IBAQBeVo9kA9gfWlTxEMa81l4l XLlztAUwvxASs3tHzOAytLKjIbkhHSzUupUbcu7yFvyICnEDXtacjUKIGfvq7+eR ewUTTi2ufJ9L/mjGP/QlY7S6S0x02cYWA6LM+Rsm8KsmZbbjWdKcssYTvAIeEE/B fwUMEJyzwmUFOfsEb5eYXPcvpqkE1DTmlaFKqk35fKx7riCA8pFGvXqesD78PpHp vUl1v3vEyvoDK5nmd6FwpHAmOcR6aPpoTO1ZF48u1KcPmIyjqJMQHIqfR5VBmxUA b1AreaxoPo1KQx3hfBOgq36Aodybn+rKCXXcEhDxrUsrMZIR48xI6H/pIFDvHNuM -----END CERTIFICATE-----Generated at Sat Jun 21 21:19:53 2025 by rpki-client