$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30180/FwD4cJTjdy7P2dMu8O_JSXgejiI.roa File: FwD4cJTjdy7P2dMu8O_JSXgejiI.roa (raw, json) Hash identifier: KhFOOPPO1IA4xLTxxzsL4K2DkHbTQHXejo9ZOpoN4lo= Subject key identifier: 17:00:F8:70:94:E3:77:2E:CF:D9:D3:2E:F0:EF:C9:49:78:1E:8E:22 Certificate issuer: /CN=618932F641D650DC860D7411AC8AEB6C35C89D04 Certificate serial: 14 Authority key identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/FwD4cJTjdy7P2dMu8O_JSXgejiI.roa Signing time: Tue 01 Apr 2025 01:31:21 +0000 ROA not before: Tue 01 Apr 2025 01:31:21 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 7690 IP address blocks: 2407:d600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618932F641D650DC860D7411AC8AEB6C35C89D04 Validity Not Before: Apr 1 01:31:21 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1700F87094E3772ECFD9D32EF0EFC949781E8E22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:6d:25:e8:68:0d:43:2f:22:03:5c:0c:f4: d5:a8:60:42:81:fe:19:ae:4f:05:e7:32:d9:bb:e1: ea:ae:fd:6c:67:dc:1c:c5:e6:b7:85:26:ff:4e:25: 3d:b3:c7:33:0f:0b:49:e9:fc:4d:b7:6a:3d:90:9f: a0:08:06:76:73:68:c6:ad:33:27:30:71:4b:1d:35: f1:ce:c8:90:6e:bb:60:84:42:ed:51:47:a9:86:13: 18:9a:55:42:55:af:3e:9d:b6:a6:b9:d8:1b:b2:77: a8:8c:8f:e4:84:9c:55:d4:6a:b4:28:ce:73:79:bf: 05:6a:19:d0:ae:d6:de:fc:d7:b5:e5:0a:68:25:71: 70:24:3f:8b:05:a9:7f:65:e0:8e:e0:90:70:15:05: ef:79:29:b4:26:94:20:df:02:85:11:66:30:48:91: 61:4c:cb:db:6c:f4:94:9a:6c:79:04:f7:27:80:8f: 74:00:16:20:e2:d4:78:0e:0c:6f:6d:54:33:13:0a: 0d:f9:ed:ad:85:d9:72:36:d5:68:3d:ed:2a:de:87: 78:ab:35:74:87:de:4e:1b:df:a4:f8:01:0d:30:51: 15:1a:59:33:79:a8:c4:07:b4:29:ab:d2:e0:e4:de: 0d:7c:f6:e8:e3:2b:2a:9e:d3:bf:b6:dd:e8:be:59: 75:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:00:F8:70:94:E3:77:2E:CF:D9:D3:2E:F0:EF:C9:49:78:1E:8E:22 X509v3 Authority Key Identifier: keyid:61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/FwD4cJTjdy7P2dMu8O_JSXgejiI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:d600::/32 Signature Algorithm: sha256WithRSAEncryption 8f:1a:04:c2:74:b0:ad:49:28:d8:73:d7:ca:75:61:ab:92:62: 0c:33:34:37:50:47:e3:7a:32:b6:69:ba:c6:27:95:f7:a6:8a: 8e:52:cc:af:df:17:d6:87:39:11:bc:29:97:c1:05:1f:41:b4: e1:06:80:bc:29:ad:1e:21:01:7d:87:6f:0a:9c:c7:d2:9b:89: b6:67:6b:a0:e9:d3:4b:a4:38:0e:22:1d:d6:c9:f3:02:d0:1a: ae:98:54:2c:7f:58:b1:fb:9d:aa:cf:f6:9d:ca:28:72:0f:99: 05:d9:be:d7:aa:9f:55:cc:e9:6a:4c:7a:61:f4:5f:10:49:5a: fc:d2:e2:f4:59:a1:a3:27:50:60:00:c6:65:60:47:ee:84:22: ba:6e:47:0f:09:fd:51:10:f5:b9:87:83:8e:05:e8:cd:81:6d: 53:fb:03:e3:72:67:8e:95:e8:23:a3:9c:78:de:fe:5c:3e:d7: 2b:df:58:ba:33:8e:3f:e9:3d:7a:bf:e2:08:87:fe:34:2f:dc: c4:59:32:fc:d2:71:09:6e:a9:36:3a:65:95:8f:42:26:66:ac: 9d:c9:db:53:2a:ef:07:99:90:1f:cc:6f:60:bd:98:e3:c4:1e: ca:33:80:b2:d6:5a:1c:39:87:5e:4f:83:cb:03:d2:3c:8d:1e: 4c:29:0f:e9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MTg5 MzJGNjQxRDY1MERDODYwRDc0MTFBQzhBRUI2QzM1Qzg5RDA0MB4XDTI1MDQwMTAx MzEyMVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMTcwMEY4NzA5NEUzNzcy RUNGRDlEMzJFRjBFRkM5NDk3ODFFOEUyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALu3bSXoaA1DLyIDXAz01ahgQoH+Ga5PBecy2bvh6q79bGfcHMXm t4Um/04lPbPHMw8LSen8TbdqPZCfoAgGdnNoxq0zJzBxSx018c7IkG67YIRC7VFH qYYTGJpVQlWvPp22prnYG7J3qIyP5IScVdRqtCjOc3m/BWoZ0K7W3vzXteUKaCVx cCQ/iwWpf2XgjuCQcBUF73kptCaUIN8ChRFmMEiRYUzL22z0lJpseQT3J4CPdAAW IOLUeA4Mb21UMxMKDfntrYXZcjbVaD3tKt6HeKs1dIfeThvfpPgBDTBRFRpZM3mo xAe0KavS4OTeDXz26OMrKp7Tv7bd6L5ZdS8CAwEAAaOCAikwggIlMB0GA1UdDgQW BBQXAPhwlON3Ls/Z0y7w78lJeB6OIjAfBgNVHSMEGDAWgBRhiTL2QdZQ3IYNdBGs iutsNcidBDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxODAvWVlreTlrSFdVTnlHRFhRUnJJcnJiRFhJblFRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWVlreTlrSFdVTnlHRFhRUnJJcnJi RFhJblFRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTgwL0Z3RDRjSlRqZHk3UDJkTXU4T19KU1hnZWppSS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkB9YAMA0GCSqGSIb3DQEBCwUAA4IBAQCPGgTCdLCtSSjYc9fKdWGr kmIMMzQ3UEfjejK2abrGJ5X3poqOUsyv3xfWhzkRvCmXwQUfQbThBoC8Ka0eIQF9 h28KnMfSm4m2Z2ug6dNLpDgOIh3WyfMC0BqumFQsf1ix+52qz/adyihyD5kF2b7X qp9VzOlqTHph9F8QSVr80uL0WaGjJ1BgAMZlYEfuhCK6bkcPCf1REPW5h4OOBejN gW1T+wPjcmeOlegjo5x43v5cPtcr31i6M44/6T16v+IIh/40L9zEWTL80nEJbqk2 OmWVj0ImZqydydtTKu8HmZAfzG9gvZjjxB7KM4Cy1locOYdeT4PLA9I8jR5MKQ/p -----END CERTIFICATE-----Generated at Sun Apr 27 05:27:19 2025 by rpki-client