$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/z3VF9s2ZIoL3j9oxqwPZjvHObpk.roa File: z3VF9s2ZIoL3j9oxqwPZjvHObpk.roa (raw, json) Hash identifier: 6Pkyvv3WpzXl45zt8XB62L5dQyIK8PB2zoM/rpLsC4c= Subject key identifier: CF:75:45:F6:CD:99:22:82:F7:8F:DA:31:AB:03:D9:8E:F1:CE:6E:99 Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 70 Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z3VF9s2ZIoL3j9oxqwPZjvHObpk.roa Signing time: Thu 01 May 2025 01:29:57 +0000 ROA not before: Thu 01 May 2025 01:29:57 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 9605 IP address blocks: 160.249.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: May 1 01:29:57 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=CF7545F6CD992282F78FDA31AB03D98EF1CE6E99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:61:53:37:ba:2d:09:a2:92:98:60:b3:8e: 0d:85:57:e5:dd:c8:b4:d7:96:b2:11:46:01:66:f5: 0f:00:23:89:67:b6:77:ac:80:7c:5f:0a:41:dd:9c: df:5f:a0:e9:0f:aa:33:19:b8:90:7e:dd:90:15:ac: 86:de:d3:d3:a6:f3:e6:d0:62:4f:28:cb:8b:4e:a1: 39:92:4e:2d:cc:59:e7:2d:24:0d:6a:f2:a9:20:b3: 58:34:14:2c:94:63:6c:44:a3:c4:df:30:f6:ab:85: 6d:ce:02:17:51:98:f7:b2:cd:68:eb:bb:d1:f4:72: ea:a1:ec:1b:c5:09:eb:00:57:2c:63:39:47:ee:82: 70:50:0a:b8:47:e6:3f:ef:2f:6f:8a:bb:07:a4:4c: ea:44:c7:70:c1:77:34:6e:9d:8a:e6:39:13:8e:68: 4a:5f:84:e5:13:86:b6:e5:1e:1b:df:93:27:9b:94: 30:b9:f5:4c:d2:6c:45:2d:05:98:31:0c:e7:1a:6c: d4:3b:22:24:9c:4e:93:5a:5b:eb:19:f0:f6:64:66: 86:eb:8c:61:4f:05:7d:13:22:30:06:c8:57:30:47: 7c:2e:e3:6d:c8:97:6e:f1:3e:c9:54:15:21:4d:ca: fb:95:22:4a:de:c0:a4:bd:d6:47:7b:99:b2:b2:91: 28:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:75:45:F6:CD:99:22:82:F7:8F:DA:31:AB:03:D9:8E:F1:CE:6E:99 X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z3VF9s2ZIoL3j9oxqwPZjvHObpk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.249.80.0/21 Signature Algorithm: sha256WithRSAEncryption 21:01:b4:ab:76:c8:34:44:af:43:89:5a:20:bc:f3:28:9a:5c: 31:bc:0c:77:f6:55:e8:a4:32:74:6c:8b:63:f4:4a:a3:bc:75: 56:9c:97:c0:5d:5c:29:f2:36:92:30:62:82:4c:29:fd:1b:a9: 04:62:fc:09:ac:60:1d:48:64:c7:85:69:29:4e:bf:ea:57:48: 43:b7:a4:f4:5f:00:ef:cb:04:3c:71:4a:02:12:6d:d8:fc:87: 32:71:06:ea:b1:44:95:55:32:ca:7a:fd:eb:9e:68:f0:12:da: be:bd:b1:b5:8a:7b:28:51:42:4b:46:87:15:7b:2f:04:b5:53: 1f:a8:2f:63:71:03:e9:cc:80:b2:eb:8b:cc:42:97:c7:ec:70: 76:1d:09:de:eb:14:80:a7:2d:c3:41:96:cc:6c:69:7d:0e:14: 5c:71:f5:53:ab:a3:33:ed:9b:97:00:c0:c9:a0:d0:26:9f:4c: f1:36:11:2b:cb:f6:21:d6:9a:20:b7:e4:aa:88:47:ff:8b:1e: 76:06:e0:b7:a2:5b:ff:4e:80:f6:ad:27:27:54:e1:fe:17:31: 97:57:25:6e:bd:17:7a:91:f5:8c:5d:d8:da:44:82:26:7d:3e: cd:88:6a:1a:02:81:cb:b9:74:29:6e:ea:70:0c:6a:bb:c5:24: c8:4c:2d:1d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI1MDUwMTAx Mjk1N1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQ0Y3NTQ1RjZDRDk5MjI4 MkY3OEZEQTMxQUIwM0Q5OEVGMUNFNkU5OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMEfYVM3ui0JopKYYLOODYVX5d3ItNeWshFGAWb1DwAjiWe2d6yA fF8KQd2c31+g6Q+qMxm4kH7dkBWsht7T06bz5tBiTyjLi06hOZJOLcxZ5y0kDWry qSCzWDQULJRjbESjxN8w9quFbc4CF1GY97LNaOu70fRy6qHsG8UJ6wBXLGM5R+6C cFAKuEfmP+8vb4q7B6RM6kTHcMF3NG6diuY5E45oSl+E5ROGtuUeG9+TJ5uUMLn1 TNJsRS0FmDEM5xps1DsiJJxOk1pb6xnw9mRmhuuMYU8FfRMiMAbIVzBHfC7jbciX bvE+yVQVIU3K+5UiSt7ApL3WR3uZsrKRKKcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTPdUX2zZkigveP2jGrA9mO8c5umTAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDkvejNWRjlzMlpJb0wzajlveHF3UFpqdkhPYnBrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA6D5UDANBgkqhkiG9w0BAQsFAAOCAQEAIQG0q3bINESvQ4laILzzKJpcMbwM d/ZV6KQydGyLY/RKo7x1VpyXwF1cKfI2kjBigkwp/RupBGL8CaxgHUhkx4VpKU6/ 6ldIQ7ek9F8A78sEPHFKAhJt2PyHMnEG6rFElVUyynr9655o8BLavr2xtYp7KFFC S0aHFXsvBLVTH6gvY3ED6cyAsuuLzEKXx+xwdh0J3usUgKctw0GWzGxpfQ4UXHH1 U6ujM+2blwDAyaDQJp9M8TYRK8v2IdaaILfkqohH/4sedgbgt6Jb/06A9q0nJ1Th /hcxl1clbr0XepH1jF3Y2kSCJn0+zYhqGgKBy7l0KW7qcAxqu8UkyEwtHQ== -----END CERTIFICATE-----Generated at Sat May 10 22:48:42 2025 by rpki-client