$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30100/Kx01AqHfNKMfhx_Da1tYTFM_em4.roa File: Kx01AqHfNKMfhx_Da1tYTFM_em4.roa (raw, json) Hash identifier: juvFxEzo7t0emvw2ZRvKBt+4yY4XXSrmNs7OiSy1qM0= Subject key identifier: 2B:1D:35:02:A1:DF:34:A3:1F:87:1F:C3:6B:5B:58:4C:53:3F:7A:6E Certificate issuer: /CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE Certificate serial: 31 Authority key identifier: F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/Kx01AqHfNKMfhx_Da1tYTFM_em4.roa Signing time: Tue 10 Jun 2025 10:48:31 +0000 ROA not before: Tue 10 Jun 2025 10:48:31 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 24257 IP address blocks: 2400:3000:70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 12:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE Validity Not Before: Jun 10 10:48:31 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=2B1D3502A1DF34A31F871FC36B5B584C533F7A6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5a:54:85:3c:dd:13:34:22:0e:61:e7:76:a0: cd:39:70:ab:ba:a9:91:19:1e:26:79:1b:ef:c7:68: 2f:76:29:69:fe:45:d8:42:bd:96:92:36:24:2f:5f: d2:60:dc:85:34:7e:82:0c:44:77:85:a8:01:89:fc: ef:c9:50:3b:d6:76:fd:77:df:cb:a8:38:a4:b1:55: b6:2a:ff:c0:d1:4e:e1:95:ad:07:30:ab:77:93:64: 3e:ea:f4:5d:82:56:d6:e3:ef:e1:fe:1b:f4:6d:fe: 98:fc:2d:87:b7:90:3f:29:41:fa:1c:ac:66:62:ce: dc:ca:9d:31:6e:bc:0e:37:bb:be:9c:86:92:95:d8: 33:a2:52:db:56:73:2f:f0:6c:ec:aa:ef:a8:8f:61: e3:3d:d8:b9:a7:f5:ab:50:c5:73:fa:06:30:c4:0d: 73:2e:11:8f:8e:50:54:b4:b1:69:b0:d1:b1:7c:c6: 96:2b:73:ac:d8:a8:d4:b8:1f:2d:cd:6b:d4:d5:10: 42:19:f7:ca:09:76:2d:cf:0c:33:f5:ce:0f:d4:c7: 7b:9d:1b:04:78:8a:ae:12:13:e0:03:b8:f3:fe:1a: 88:38:14:3d:c8:29:45:b3:22:11:5a:41:a5:4c:33: c4:fd:96:ac:de:22:fc:78:57:e0:de:5a:a4:9d:6e: 50:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1D:35:02:A1:DF:34:A3:1F:87:1F:C3:6B:5B:58:4C:53:3F:7A:6E X509v3 Authority Key Identifier: keyid:F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/Kx01AqHfNKMfhx_Da1tYTFM_em4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:3000:70::/48 Signature Algorithm: sha256WithRSAEncryption 43:46:ec:d8:1d:d6:cd:1c:4d:29:cc:d7:30:ee:6e:f5:bb:aa: d3:3a:96:7e:40:f2:79:15:7e:c5:21:3d:48:62:a2:86:df:21: cf:ef:8f:e4:8c:6e:d2:e5:bf:86:52:30:0c:2a:3a:99:ec:96: ce:21:c5:13:f5:ae:87:e4:f1:e9:a5:a3:f0:a8:08:35:9d:39: 18:24:3c:4a:8e:cb:5e:26:1a:d1:5b:3d:e8:21:98:d3:95:49: 2d:b6:ab:97:fd:b5:73:76:5f:94:c9:e4:d7:fb:b5:93:bf:6f: c7:2c:52:c5:12:6f:aa:7c:12:df:fa:bf:d3:29:c8:62:63:ac: 81:8e:f6:27:50:93:a6:0c:93:a9:21:c3:27:99:fe:c0:35:05: 48:0a:95:49:fd:36:11:1e:b2:70:0a:55:f4:51:af:f6:a6:a5: 5a:cd:29:e6:bc:11:d9:3d:d8:4f:b3:12:87:81:1b:cd:ba:10: b0:6d:62:cd:f1:6b:28:94:da:41:e0:1f:00:bd:9e:22:94:a5: 33:99:11:89:fa:9f:3e:1f:fc:6a:51:83:39:84:dd:5d:15:8c: 79:e7:34:00:a3:8b:70:fd:5d:a2:49:d8:47:e3:36:2a:3a:70: dc:91:dc:6a:eb:55:12:7b:03:5e:39:55:a7:ee:58:b2:9f:ab: 3d:a3:3f:23 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMDRC NzhGMEMyMTI4MzIxN0UwQTkxNDBENDY3OEQ5NzRCM0NFNkJFMB4XDTI1MDYxMDEw NDgzMVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMkIxRDM1MDJBMURGMzRB MzFGODcxRkMzNkI1QjU4NEM1MzNGN0E2RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOlaVIU83RM0Ig5h53agzTlwq7qpkRkeJnkb78doL3Ypaf5F2EK9 lpI2JC9f0mDchTR+ggxEd4WoAYn878lQO9Z2/Xffy6g4pLFVtir/wNFO4ZWtBzCr d5NkPur0XYJW1uPv4f4b9G3+mPwth7eQPylB+hysZmLO3MqdMW68Dje7vpyGkpXY M6JS21ZzL/Bs7KrvqI9h4z3Yuaf1q1DFc/oGMMQNcy4Rj45QVLSxabDRsXzGlitz rNio1LgfLc1r1NUQQhn3ygl2Lc8MM/XOD9THe50bBHiKrhIT4AO48/4aiDgUPcgp RbMiEVpBpUwzxP2WrN4i/HhX4N5apJ1uUC8CAwEAAaOCAiswggInMB0GA1UdDgQW BBQrHTUCod80ox+HH8NrW1hMUz96bjAfBgNVHSMEGDAWgBTwS3jwwhKDIX4KkUDU Z42XSzzmvjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMDAvOEV0NDhNSVNneUYtQ3BGQTFHZU5sMHM4NXI0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOEV0NDhNSVNneUYtQ3BGQTFHZU5s MHM4NXI0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTAwL0t4MDFBcUhmTktNZmh4X0RhMXRZVEZNX2VtNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkADAAAHAwDQYJKoZIhvcNAQELBQADggEBAENG7Ngd1s0cTSnM1zDu bvW7qtM6ln5A8nkVfsUhPUhioobfIc/vj+SMbtLlv4ZSMAwqOpnsls4hxRP1rofk 8emlo/CoCDWdORgkPEqOy14mGtFbPeghmNOVSS22q5f9tXN2X5TJ5Nf7tZO/b8cs UsUSb6p8Et/6v9MpyGJjrIGO9idQk6YMk6khwyeZ/sA1BUgKlUn9NhEesnAKVfRR r/ampVrNKea8Edk92E+zEoeBG826ELBtYs3xayiU2kHgHwC9niKUpTOZEYn6nz4f /GpRgzmE3V0VjHnnNACji3D9XaJJ2EfjNio6cNyR3GrrVRJ7A145VafuWLKfqz2j PyM= -----END CERTIFICATE-----Generated at Mon Jun 23 15:53:23 2025 by rpki-client