$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/UyvnWV5ssTpBsCe4XCIQI-DIfMA.roa File: UyvnWV5ssTpBsCe4XCIQI-DIfMA.roa (raw, json) Hash identifier: qdUG5Y7CcMYt7ShtAuxCyH1VyAEZ0ptyxj6vqIS4Y3g= Subject key identifier: 53:2B:E7:59:5E:6C:B1:3A:41:B0:27:B8:5C:22:10:23:E0:C8:7C:C0 Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: 0103 Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/UyvnWV5ssTpBsCe4XCIQI-DIfMA.roa Signing time: Thu 01 May 2025 01:32:09 +0000 ROA not before: Thu 01 May 2025 01:32:09 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 9370 IP address blocks: 27.133.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 10:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: May 1 01:32:09 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=532BE7595E6CB13A41B027B85C221023E0C87CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:23:51:3d:4b:37:76:82:42:ac:5e:84:a7: 6e:06:ef:cd:08:c3:4a:68:a0:e3:33:47:eb:0c:be: d6:51:c5:51:a6:9f:30:b7:9e:65:ee:c1:fc:81:fc: 65:1f:e1:fb:ba:52:7a:53:77:22:70:68:24:4b:1b: 9b:3f:44:66:eb:9a:12:65:89:97:c3:3c:17:f0:c0: b6:c6:fb:18:3e:7f:21:23:81:41:9d:2a:35:9d:4b: de:ed:bd:ea:ed:d1:1e:84:fe:12:7b:c3:12:6f:ca: 98:a0:d1:5f:ce:77:75:e0:29:d8:d0:6b:2f:d6:16: 2a:67:49:4c:c9:06:19:7e:cb:6e:70:65:7e:b9:f8: 9e:7d:9d:a4:e6:0d:05:71:fb:71:e4:f1:60:c3:9c: 5a:b8:c1:27:a2:5b:ab:f7:c4:a2:cb:6b:f9:a5:64: 83:1e:ef:7e:9f:d8:d9:84:95:fe:df:97:cd:57:cb: d8:e3:9e:4c:f3:e0:8c:21:5b:bf:69:de:da:4f:60: 8f:fc:da:96:20:28:09:98:22:4f:96:da:fc:a2:16: c7:53:81:9d:35:34:74:97:70:b7:1a:cc:15:73:94: 7b:7c:7e:49:50:cc:19:7d:18:67:c4:1f:49:7b:f5: af:0a:56:ba:f9:59:25:04:c1:8b:84:dc:e6:6a:df: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2B:E7:59:5E:6C:B1:3A:41:B0:27:B8:5C:22:10:23:E0:C8:7C:C0 X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/UyvnWV5ssTpBsCe4XCIQI-DIfMA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.133.128.0/19 Signature Algorithm: sha256WithRSAEncryption 92:26:d5:c4:e1:90:29:4e:81:1d:cb:a1:47:64:49:a8:54:ed: cf:f4:c2:10:90:93:c5:8e:c4:87:b2:31:b4:df:5a:ec:f4:db: 40:33:23:8c:00:ca:37:02:fe:f4:35:9c:be:a7:52:a7:be:33: da:12:28:85:85:2f:f9:5b:2e:56:ab:f5:2d:e5:ba:99:e8:aa: 44:a7:35:be:d2:50:44:c5:d3:05:d4:9d:e3:c7:24:ca:84:86: ae:7f:cd:64:86:6a:81:ca:6b:ba:82:5d:ba:51:96:9d:87:e3: 70:c9:fa:7b:85:03:40:e8:04:3a:9b:75:bb:e3:ea:08:f5:06: 63:d5:a0:f4:86:72:b7:3a:4e:6d:2f:1e:95:b4:61:11:53:31: 72:dc:2d:1a:a2:72:9c:9c:e2:73:0b:50:68:a4:9d:5a:53:69: ee:21:0f:8a:4d:5e:23:b2:5b:83:fb:9f:cd:bb:e1:2a:21:dc: dd:05:b1:d0:91:5c:c0:f8:4e:ba:36:73:d4:05:63:22:f5:5c: 87:6b:89:10:a9:f4:1d:9c:de:61:ee:1a:e2:6b:cc:29:62:f4: 29:b8:c5:42:f5:75:6f:0b:46:45:01:40:2a:bb:36:65:e4:e0: 36:08:72:6f:3a:68:b0:04:81:8a:d8:93:26:3b:f6:19:82:3b: 5d:7c:e2:93 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNTA1MDEw MTMyMDlaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDUzMkJFNzU5NUU2Q0Ix M0E0MUIwMjdCODVDMjIxMDIzRTBDODdDQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNbSNRPUs3doJCrF6Ep24G780Iw0pooOMzR+sMvtZRxVGmnzC3 nmXuwfyB/GUf4fu6UnpTdyJwaCRLG5s/RGbrmhJliZfDPBfwwLbG+xg+fyEjgUGd KjWdS97tvert0R6E/hJ7wxJvypig0V/Od3XgKdjQay/WFipnSUzJBhl+y25wZX65 +J59naTmDQVx+3Hk8WDDnFq4wSeiW6v3xKLLa/mlZIMe736f2NmElf7fl81Xy9jj nkzz4IwhW79p3tpPYI/82pYgKAmYIk+W2vyiFsdTgZ01NHSXcLcazBVzlHt8fklQ zBl9GGfEH0l79a8KVrr5WSUEwYuE3OZq39OtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUyvnWV5ssTpBsCe4XCIQI+DIfMAwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ3L1V5dm5XVjVzc1RwQnNDZTRYQ0lRSS1ESWZNQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUbhYAwDQYJKoZIhvcNAQELBQADggEBAJIm1cThkClOgR3LoUdkSahU7c/0 whCQk8WOxIeyMbTfWuz020AzI4wAyjcC/vQ1nL6nUqe+M9oSKIWFL/lbLlar9S3l upnoqkSnNb7SUETF0wXUnePHJMqEhq5/zWSGaoHKa7qCXbpRlp2H43DJ+nuFA0Do BDqbdbvj6gj1BmPVoPSGcrc6Tm0vHpW0YRFTMXLcLRqicpyc4nMLUGiknVpTae4h D4pNXiOyW4P7n8274Soh3N0FsdCRXMD4Tro2c9QFYyL1XIdriRCp9B2c3mHuGuJr zCli9Cm4xUL1dW8LRkUBQCq7NmXk4DYIcm86aLAEgYrYkyY79hmCO1184pM= -----END CERTIFICATE-----Generated at Sat Jun 21 14:54:31 2025 by rpki-client