$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30188/-dZocnOf-qmwsrwdEsO_H41R6uU.roa File: -dZocnOf-qmwsrwdEsO_H41R6uU.roa (raw, json) Hash identifier: uPNxyOnvehXbBL69LFpioysTm6jTSwujZrw+hyfxOTQ= Subject key identifier: F9:D6:68:72:73:9F:FA:A9:B0:B2:BC:1D:12:C3:BF:1F:8D:51:EA:E5 Certificate issuer: /CN=157E088BE15A585F688D86A671D88F0150C3EDBA Certificate serial: 2C Authority key identifier: 15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/-dZocnOf-qmwsrwdEsO_H41R6uU.roa Signing time: Sat 01 Mar 2025 01:29:01 +0000 ROA not before: Sat 01 Mar 2025 01:29:01 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 18260 IP address blocks: 2400:df00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157E088BE15A585F688D86A671D88F0150C3EDBA Validity Not Before: Mar 1 01:29:01 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=F9D66872739FFAA9B0B2BC1D12C3BF1F8D51EAE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:c8:6d:15:d9:2b:42:72:b4:bb:ba:a7:4a: d8:62:83:1d:5c:10:a1:b3:16:71:60:c0:e2:93:1e: 70:0b:56:8c:66:a3:41:b6:a3:63:14:32:b1:30:44: 3b:00:c3:55:d7:a8:e6:e2:9e:3b:39:fe:d8:00:5e: dd:b1:92:f8:a6:02:22:a4:f1:43:45:26:22:ce:eb: d3:d6:4c:5e:7e:43:3b:36:81:68:95:53:19:ec:fc: 71:b4:86:50:50:aa:0e:64:67:13:51:ea:a4:00:0d: 22:32:c2:8a:84:5f:29:07:82:76:8c:89:ec:c7:5b: 57:ee:e9:f5:38:3a:17:7a:db:cc:70:f0:e2:1f:d0: 3c:68:1b:8c:d6:b9:b9:ba:25:53:32:ad:a7:0a:c8: f9:b4:82:47:9f:2f:c1:5b:3b:33:37:db:a8:fa:ad: 01:bc:e5:b5:bf:9d:0e:f0:a2:0b:9e:61:b6:ed:c5: 2a:d7:86:13:ea:b5:9f:fd:07:b0:76:bd:18:5d:54: 36:e1:29:e1:f2:98:49:41:d7:ba:c4:ec:32:00:28: fe:e6:1f:9d:4d:85:4f:0b:71:fa:17:b7:de:f2:0b: e2:86:2c:03:eb:8e:6f:bb:1a:d6:b5:7c:23:a1:00: 20:93:e8:49:bb:04:84:91:ab:27:6f:58:9a:4c:b2: 30:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D6:68:72:73:9F:FA:A9:B0:B2:BC:1D:12:C3:BF:1F:8D:51:EA:E5 X509v3 Authority Key Identifier: keyid:15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/-dZocnOf-qmwsrwdEsO_H41R6uU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:df00::/32 Signature Algorithm: sha256WithRSAEncryption 54:82:eb:81:4a:55:cc:14:6a:64:64:89:d1:96:a5:a7:65:e8: 05:ef:93:ff:c1:7c:3f:c2:0f:ae:43:6e:f2:fd:0e:cf:c5:0b: fd:21:6e:e4:69:30:6d:9c:44:c5:1a:1f:5a:98:4a:4f:5d:18: f6:58:99:ea:4d:49:c3:8e:d9:39:57:36:d7:cc:d3:14:9d:88: 8b:67:b6:04:c2:2c:61:dd:48:1e:f9:ba:64:c3:ae:54:ee:d1: 7e:84:3d:75:47:38:38:59:a0:45:a5:3f:5f:f1:63:cf:35:69: a8:3a:fe:c2:a2:b8:ef:b3:92:07:c8:e5:38:b8:34:c4:b7:d1: 06:17:8f:23:ba:ea:32:af:38:be:50:13:c7:54:80:d3:89:cd: 07:07:e4:55:2a:a4:b3:d4:fa:56:9d:76:e0:00:53:65:af:50: 86:21:e2:6f:04:b6:63:9c:ad:a9:3a:b4:b4:55:80:cd:cc:23: 2a:88:d9:3e:44:63:63:f9:ba:a5:9f:55:43:c7:de:c0:0e:b2: e5:9f:13:5b:53:f3:93:5f:75:bd:fd:2d:9b:30:bd:ef:00:13: 09:40:df:45:79:65:44:66:49:eb:9b:f8:94:9b:88:1d:12:30: a9:3d:c8:68:2f:98:6a:5f:fe:4c:d6:36:db:4e:67:6e:13:f0: a4:23:cd:c3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTdF MDg4QkUxNUE1ODVGNjg4RDg2QTY3MUQ4OEYwMTUwQzNFREJBMB4XDTI1MDMwMTAx MjkwMVoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoRjlENjY4NzI3MzlGRkFB OUIwQjJCQzFEMTJDM0JGMUY4RDUxRUFFNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM7iyG0V2StCcrS7uqdK2GKDHVwQobMWcWDA4pMecAtWjGajQbaj YxQysTBEOwDDVdeo5uKeOzn+2ABe3bGS+KYCIqTxQ0UmIs7r09ZMXn5DOzaBaJVT Gez8cbSGUFCqDmRnE1HqpAANIjLCioRfKQeCdoyJ7MdbV+7p9Tg6F3rbzHDw4h/Q PGgbjNa5ubolUzKtpwrI+bSCR58vwVs7MzfbqPqtAbzltb+dDvCiC55htu3FKteG E+q1n/0HsHa9GF1UNuEp4fKYSUHXusTsMgAo/uYfnU2FTwtx+he33vIL4oYsA+uO b7sa1rV8I6EAIJPoSbsEhJGrJ29YmkyyMMUCAwEAAaOCAikwggIlMB0GA1UdDgQW BBT51mhyc5/6qbCyvB0Sw78fjVHq5TAfBgNVHSMEGDAWgBQVfgiL4VpYX2iNhqZx 2I8BUMPtujAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxODgvRlg0SWktRmFXRjlvallhbWNkaVBBVkREN2JvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlg0SWktRmFXRjlvallhbWNkaVBB VkREN2JvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTg4Ly1kWm9jbk9mLXFtd3Nyd2RFc09fSDQxUjZ1VS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAN8AMA0GCSqGSIb3DQEBCwUAA4IBAQBUguuBSlXMFGpkZInRlqWn ZegF75P/wXw/wg+uQ27y/Q7PxQv9IW7kaTBtnETFGh9amEpPXRj2WJnqTUnDjtk5 VzbXzNMUnYiLZ7YEwixh3Uge+bpkw65U7tF+hD11Rzg4WaBFpT9f8WPPNWmoOv7C orjvs5IHyOU4uDTEt9EGF48juuoyrzi+UBPHVIDTic0HB+RVKqSz1PpWnXbgAFNl r1CGIeJvBLZjnK2pOrS0VYDNzCMqiNk+RGNj+bqln1VDx97ADrLlnxNbU/OTX3W9 /S2bML3vABMJQN9FeWVEZknrm/iUm4gdEjCpPchoL5hqX/5M1jbbTmduE/CkI83D -----END CERTIFICATE-----Generated at Sat Apr 26 20:39:55 2025 by rpki-client