$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3RN6rN6VeC6QRb4jZoDenXqZhvU.roa File: 3RN6rN6VeC6QRb4jZoDenXqZhvU.roa (raw, json) Hash identifier: KOKRUCqbu3kWym+OSpXX06leQcDqZnR89hlJN8yYpMg= Subject key identifier: DD:13:7A:AC:DE:95:78:2E:90:45:BE:23:66:80:DE:9D:7A:99:86:F5 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 042E Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3RN6rN6VeC6QRb4jZoDenXqZhvU.roa Signing time: Tue 01 Apr 2025 01:39:24 +0000 ROA not before: Tue 01 Apr 2025 01:39:24 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:d000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 05:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1070 (0x42e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:39:24 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=DD137AACDE95782E9045BE236680DE9D7A9986F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4f:c0:b0:dd:61:22:07:96:80:eb:a0:5a:23: 61:90:99:45:81:36:11:ae:74:6d:2e:4c:eb:1f:5a: 81:20:8f:2e:d1:a6:da:b5:aa:79:a7:23:1e:30:e2: 36:06:88:5d:c7:1c:95:80:8f:9d:e0:c5:97:99:46: d0:ea:c6:0a:ac:ca:04:bf:8a:51:cf:13:04:d9:40: e4:f0:49:31:ae:f2:32:74:0d:35:fd:4c:37:bb:4c: ed:f6:bf:ef:9b:74:cc:dc:1c:50:52:df:5d:d0:93: e3:36:36:d5:c3:32:b7:83:78:69:be:2d:08:1e:67: 20:d5:40:b2:65:b9:ac:77:74:dc:8d:ef:57:8e:84: 1e:4e:64:8c:07:d4:a3:d8:ec:54:e8:77:41:dc:3f: 01:b6:a4:b2:a0:9a:29:75:4f:41:6f:79:e6:e6:78: d6:ac:82:f4:10:f8:41:35:12:f3:a5:c7:10:e7:8b: 59:22:53:19:3f:42:52:19:fa:bb:2a:63:c4:d2:79: c6:29:54:e2:90:e1:14:9c:b7:d9:ec:40:84:64:cd: 40:33:57:8b:8b:b9:ff:36:9e:6d:75:9a:93:b3:6f: bd:d2:09:7b:ed:9f:25:7f:d4:01:ea:41:96:23:ac: 76:0c:27:ac:d9:e1:b5:4f:be:d1:9c:8a:21:ad:c7: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:13:7A:AC:DE:95:78:2E:90:45:BE:23:66:80:DE:9D:7A:99:86:F5 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3RN6rN6VeC6QRb4jZoDenXqZhvU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:d000::/40 Signature Algorithm: sha256WithRSAEncryption 5e:9d:52:df:01:e4:73:87:a5:25:df:e5:da:69:a6:4a:0f:62: 74:c9:48:d6:af:b3:bf:4d:58:88:e9:de:6b:df:f4:c0:12:aa: 8f:d4:a2:0b:97:b3:04:c2:81:71:4d:68:52:f4:7a:e8:94:5f: ad:0f:03:6f:9b:0d:fa:bb:84:23:b6:bb:65:98:3f:32:b8:5a: d5:d8:b7:ad:4b:40:b1:e4:91:96:d5:39:4b:d8:ca:98:e5:a2: 32:ed:7c:56:c9:07:49:c5:82:cd:93:80:1b:87:35:b3:da:00: 83:22:21:65:47:be:50:8e:67:b8:ce:65:0e:6f:51:5c:eb:85: 46:10:d1:54:e6:05:91:4b:ab:a2:0c:28:4c:63:19:58:99:0a: de:12:66:c4:72:b2:8d:ea:be:1d:51:41:b8:e1:79:36:32:1b: 4c:0f:a8:ca:51:68:40:19:98:85:96:0d:75:43:0b:4e:8e:43: 6d:bf:a9:61:b6:bc:cb:e6:ba:52:20:ff:32:9e:78:7c:cf:71: 5e:d9:df:45:21:ba:af:86:61:df:51:21:16:75:80:1d:ae:81: c5:ba:00:99:e7:2b:8d:48:d4:d6:d3:7b:03:d1:89:7c:b9:e9: f8:e3:90:7f:39:2b:14:22:8a:ea:a0:c5:8b:4b:f4:01:b4:9c: a1:9d:81:c8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTM5MjRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEREMTM3QUFDREU5NTc4 MkU5MDQ1QkUyMzY2ODBERTlEN0E5OTg2RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZT8Cw3WEiB5aA66BaI2GQmUWBNhGudG0uTOsfWoEgjy7Rptq1 qnmnIx4w4jYGiF3HHJWAj53gxZeZRtDqxgqsygS/ilHPEwTZQOTwSTGu8jJ0DTX9 TDe7TO32v++bdMzcHFBS313Qk+M2NtXDMreDeGm+LQgeZyDVQLJluax3dNyN71eO hB5OZIwH1KPY7FTod0HcPwG2pLKgmil1T0FveebmeNasgvQQ+EE1EvOlxxDni1ki Uxk/QlIZ+rsqY8TSecYpVOKQ4RSct9nsQIRkzUAzV4uLuf82nm11mpOzb73SCXvt nyV/1AHqQZYjrHYMJ6zZ4bVPvtGciiGtx5cnAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQU3RN6rN6VeC6QRb4jZoDenXqZhvUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS8zUk42ck42VmVDNlFSYjRqWm9EZW5YcVpodlUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa9AwDQYJKoZIhvcNAQELBQADggEBAF6dUt8B5HOHpSXf5dpp pkoPYnTJSNavs79NWIjp3mvf9MASqo/UoguXswTCgXFNaFL0euiUX60PA2+bDfq7 hCO2u2WYPzK4WtXYt61LQLHkkZbVOUvYypjlojLtfFbJB0nFgs2TgBuHNbPaAIMi IWVHvlCOZ7jOZQ5vUVzrhUYQ0VTmBZFLq6IMKExjGViZCt4SZsRyso3qvh1RQbjh eTYyG0wPqMpRaEAZmIWWDXVDC06OQ22/qWG2vMvmulIg/zKeeHzPcV7Z30Uhuq+G Yd9RIRZ1gB2ugcW6AJnnK41I1NbTewPRiXy56fjjkH85KxQiiuqgxYtL9AG0nKGd gcg= -----END CERTIFICATE-----Generated at Sun May 4 09:03:57 2025 by rpki-client