$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30321/PZgSZK55zfwWeIr-B-GxnlKGlR8.roa File: PZgSZK55zfwWeIr-B-GxnlKGlR8.roa (raw, json) Hash identifier: aRGTgN2wyQndmc1R1mv3te/V80Qm+XfZ2sFH6XKNBOE= Subject key identifier: 3D:98:12:64:AE:79:CD:FC:16:78:8A:FE:07:E1:B1:9E:52:86:95:1F Certificate issuer: /CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2 Certificate serial: 4A Authority key identifier: 54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/PZgSZK55zfwWeIr-B-GxnlKGlR8.roa Signing time: Fri 31 Jan 2025 01:31:55 +0000 ROA not before: Fri 31 Jan 2025 01:31:55 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 63774 IP address blocks: 2402:b7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2 Validity Not Before: Jan 31 01:31:55 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=3D981264AE79CDFC16788AFE07E1B19E5286951F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:ed:53:1f:2b:a1:4c:f4:2f:ad:9e:8e:bd: fb:23:9e:2d:cd:ab:a8:02:9f:1e:83:03:7c:a5:1e: 5b:62:ac:5c:17:79:11:c9:bb:19:d1:a9:88:be:ff: 4f:28:7e:b9:22:35:37:bf:16:e6:50:70:1e:92:7a: ce:4c:ba:14:6c:44:f4:4e:df:75:ad:93:64:ca:df: 86:22:13:64:b2:a5:b7:5e:24:62:ad:9c:ab:16:e6: 67:a4:c9:c2:b1:67:26:e2:1f:3e:ed:47:39:de:3d: 35:3f:74:68:b1:4c:e9:2d:c8:e5:66:17:a4:6f:51: 88:c9:2d:2e:12:d8:9d:5a:aa:1d:17:da:f8:1f:d0: 39:5f:d7:d3:2a:6c:6c:a6:f6:0b:c8:f7:f7:00:3a: 2e:a0:f2:98:2e:e3:77:67:07:85:36:be:af:54:7b: 47:f8:99:d3:38:0e:73:f5:b8:06:0c:8c:d9:f6:21: c2:90:93:4d:ce:10:8d:a5:29:01:d0:69:e6:82:c0: 6d:f3:02:46:3d:35:04:e2:8e:0e:d9:17:40:da:6f: e6:c2:60:bb:11:36:fd:57:8c:ba:ca:e1:8c:85:d3: b6:af:8d:dc:1d:8e:e9:1d:74:56:76:63:68:26:6e: d9:47:5b:2c:11:05:87:11:5b:a4:69:47:16:83:6a: 6d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:98:12:64:AE:79:CD:FC:16:78:8A:FE:07:E1:B1:9E:52:86:95:1F X509v3 Authority Key Identifier: keyid:54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/PZgSZK55zfwWeIr-B-GxnlKGlR8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:b7c0::/32 Signature Algorithm: sha256WithRSAEncryption 7f:9c:f8:e7:bf:b0:39:b1:b7:a7:27:d9:ae:0e:1c:32:b1:56: 74:ed:0f:74:f3:b2:a2:ad:69:11:73:f3:17:4a:90:70:f5:e7: 20:00:90:74:89:d0:c9:9f:e6:f8:e0:28:ab:6e:5c:71:bb:95: a6:cd:45:69:ad:ca:7b:b7:e4:ec:b5:f2:ba:03:7e:d4:d2:1f: ae:aa:00:11:27:41:88:71:96:fa:67:61:b2:21:7a:c4:b0:3b: 24:0e:6f:3d:96:cc:10:22:77:5d:b0:f7:e7:58:4e:eb:21:32: 38:a3:c0:d2:a9:2a:81:90:12:81:0d:14:66:91:75:f4:3f:2e: 99:2f:8d:f5:a9:44:72:fa:37:24:18:fd:6f:1e:33:92:bc:46: 28:6a:a2:83:4c:01:8c:64:03:dc:c0:22:fe:7b:7a:1f:d2:47: fd:76:a5:66:35:0e:1f:db:22:40:f0:cb:e7:2b:68:de:f9:d5: 7d:78:7d:69:de:f0:6d:93:65:02:bf:c3:60:ba:43:dc:5c:35: 2d:6a:2a:ce:ae:20:de:32:ad:a7:ef:e1:0b:3b:23:1a:65:74: 0b:f1:80:dd:17:18:bf:5a:c5:8d:02:0f:93:df:5e:6e:76:db: 66:5a:bc:9c:76:0a:36:41:df:8a:42:02:ac:84:08:42:85:5c: ad:9a:94:d5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NDcy QzQwNzQ4Q0RBOUU5QkMwOEVBRTQyNUM2ODI2MTdFOTJFNEEyMB4XDTI1MDEzMTAx MzE1NVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoM0Q5ODEyNjRBRTc5Q0RG QzE2Nzg4QUZFMDdFMUIxOUU1Mjg2OTUxRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKvm7VMfK6FM9C+tno69+yOeLc2rqAKfHoMDfKUeW2KsXBd5Ecm7 GdGpiL7/Tyh+uSI1N78W5lBwHpJ6zky6FGxE9E7fda2TZMrfhiITZLKlt14kYq2c qxbmZ6TJwrFnJuIfPu1HOd49NT90aLFM6S3I5WYXpG9RiMktLhLYnVqqHRfa+B/Q OV/X0ypsbKb2C8j39wA6LqDymC7jd2cHhTa+r1R7R/iZ0zgOc/W4BgyM2fYhwpCT Tc4QjaUpAdBp5oLAbfMCRj01BOKODtkXQNpv5sJguxE2/VeMusrhjIXTtq+N3B2O 6R10VnZjaCZu2UdbLBEFhxFbpGlHFoNqbTMCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQ9mBJkrnnN/BZ4iv4H4bGeUoaVHzAfBgNVHSMEGDAWgBRUcsQHSM2p6bwI6uQl xoJhfpLkojAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMjEvVkhMRUIwak5xZW04Q09ya0pjYUNZWDZTNUtJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVkhMRUIwak5xZW04Q09ya0pjYUNZ WDZTNUtJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzIxL1BaZ1NaSzU1emZ3V2VJci1CLUd4bmxLR2xSOC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkArfAMA0GCSqGSIb3DQEBCwUAA4IBAQB/nPjnv7A5sbenJ9muDhwy sVZ07Q9087KirWkRc/MXSpBw9ecgAJB0idDJn+b44Cirblxxu5WmzUVprcp7t+Ts tfK6A37U0h+uqgARJ0GIcZb6Z2GyIXrEsDskDm89lswQInddsPfnWE7rITI4o8DS qSqBkBKBDRRmkXX0Py6ZL431qURy+jckGP1vHjOSvEYoaqKDTAGMZAPcwCL+e3of 0kf9dqVmNQ4f2yJA8MvnK2je+dV9eH1p3vBtk2UCv8NgukPcXDUtairOriDeMq2n 7+ELOyMaZXQL8YDdFxi/WsWNAg+T315udttmWrycdgo2Qd+KQgKshAhChVytmpTV -----END CERTIFICATE-----Generated at Sat Apr 26 18:59:07 2025 by rpki-client