$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/LqPRCrwrJ398XiIiEe2YW_AP4h8.roa File: LqPRCrwrJ398XiIiEe2YW_AP4h8.roa (raw, json) Hash identifier: Bic6E4WMN9UxwN008c+iZ2E8bsoicBoAbkfobhABwUM= Subject key identifier: 2E:A3:D1:0A:BC:2B:27:7F:7C:5E:22:22:11:ED:98:5B:F0:0F:E2:1F Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0432 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LqPRCrwrJ398XiIiEe2YW_AP4h8.roa Signing time: Tue 10 Jun 2025 10:45:01 +0000 ROA not before: Tue 10 Jun 2025 10:45:01 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 4686 IP address blocks: 124.255.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jun 10 10:45:01 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=2EA3D10ABC2B277F7C5E222211ED985BF00FE21F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ee:67:03:44:dc:a0:9a:51:40:fd:8b:3f:46: 80:55:01:ab:61:f8:da:6f:20:96:e0:74:87:f3:34: 18:f3:51:79:d9:6d:37:00:11:e1:31:c6:64:99:3a: 02:c5:fa:63:66:77:c8:ea:60:e2:21:4c:a8:5f:6f: 88:02:e6:69:00:5a:e4:03:4c:c1:7d:3b:50:92:f3: b7:6e:36:f6:ec:c2:30:aa:b1:e4:63:04:23:af:83: 8a:de:9b:d3:33:ce:16:f9:09:2a:ad:9e:a6:c6:da: c5:5f:4a:25:f0:f2:42:5b:b5:a5:c3:18:7c:e3:e4: 66:4e:cb:2e:d8:cd:5f:4d:3b:58:18:fd:87:f8:75: 0e:4d:6d:e9:22:2f:49:d9:e8:67:28:a3:4f:e5:4c: 5d:6f:83:62:36:d7:5f:03:f6:a0:f1:99:5e:72:39: 2b:b4:26:ee:f9:f3:e0:2b:43:95:fa:b2:64:cf:65: 23:7d:a8:3c:e2:46:5e:e5:f2:a0:ba:dd:c7:8b:2c: d0:14:5a:ee:9f:36:e5:a2:e3:d1:21:14:3a:da:80: ca:a3:1f:ea:ad:b9:81:13:43:e6:f0:3a:93:72:e6: 1c:18:94:bb:b2:60:f2:6c:b5:95:6c:eb:64:c7:23: 9d:46:54:13:c4:40:fd:d5:71:8c:9a:71:be:88:a1: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A3:D1:0A:BC:2B:27:7F:7C:5E:22:22:11:ED:98:5B:F0:0F:E2:1F X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LqPRCrwrJ398XiIiEe2YW_AP4h8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.255.224.0/19 Signature Algorithm: sha256WithRSAEncryption 22:a4:89:b5:be:3c:d1:a8:5d:93:7f:3c:66:b6:c3:b9:64:6c: 0b:e9:79:12:f0:ef:53:eb:bd:fe:31:86:8a:a9:42:1b:be:76: fb:e3:0f:9e:75:1a:3f:a0:14:59:58:df:6f:e8:72:13:f5:9d: e9:21:60:60:a4:8d:c7:69:6d:51:20:77:88:a6:36:b9:2d:47: ce:30:0d:aa:86:09:11:3a:af:a0:9c:ae:49:d5:20:ed:4a:f2: 6f:fc:a6:20:19:74:fa:52:e2:49:cf:19:33:32:d1:ca:94:90: 6c:7a:0e:af:30:dc:cd:58:c4:b7:65:26:dc:50:d8:5d:cc:d7: 30:c0:63:ec:76:dc:0d:0a:b6:33:1f:08:6d:5c:32:59:28:8d: 75:12:4b:d0:9a:7f:d8:1c:a1:b6:1a:22:4d:8c:c6:e0:99:77: 9c:20:10:a3:3a:67:5a:9a:71:82:22:fd:0c:50:08:5f:7a:ee: f8:9b:9a:de:0a:08:aa:ba:3f:93:aa:96:22:e2:d3:6d:5b:14: 58:2a:20:34:ef:56:9f:93:f5:8a:6e:ce:bc:5b:6b:78:73:32: 6e:a9:53:97:b7:7a:89:ed:0a:5e:5e:6c:0e:7a:59:3d:4c:0c: 88:1d:0e:e6:0d:9c:46:45:f0:d7:40:aa:7a:2e:b1:e6:c3:69: 27:42:f1:05 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA2MTAx MDQ1MDFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDJFQTNEMTBBQkMyQjI3 N0Y3QzVFMjIyMjExRUQ5ODVCRjAwRkUyMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCd7mcDRNygmlFA/Ys/RoBVAath+NpvIJbgdIfzNBjzUXnZbTcA EeExxmSZOgLF+mNmd8jqYOIhTKhfb4gC5mkAWuQDTMF9O1CS87duNvbswjCqseRj BCOvg4rem9Mzzhb5CSqtnqbG2sVfSiXw8kJbtaXDGHzj5GZOyy7YzV9NO1gY/Yf4 dQ5NbekiL0nZ6Gcoo0/lTF1vg2I2118D9qDxmV5yOSu0Ju758+ArQ5X6smTPZSN9 qDziRl7l8qC63ceLLNAUWu6fNuWi49EhFDragMqjH+qtuYETQ+bwOpNy5hwYlLuy YPJstZVs62THI51GVBPEQP3VcYyacb6IobUhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULqPRCrwrJ398XiIiEe2YW/AP4h8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0xxUFJDcndySjM5OFhpSWlFZTJZV19BUDRoOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAV8/+AwDQYJKoZIhvcNAQELBQADggEBACKkibW+PNGoXZN/PGa2w7lkbAvp eRLw71Prvf4xhoqpQhu+dvvjD551Gj+gFFlY32/ochP1nekhYGCkjcdpbVEgd4im NrktR84wDaqGCRE6r6CcrknVIO1K8m/8piAZdPpS4knPGTMy0cqUkGx6Dq8w3M1Y xLdlJtxQ2F3M1zDAY+x23A0KtjMfCG1cMlkojXUSS9Caf9gcobYaIk2MxuCZd5wg EKM6Z1qacYIi/QxQCF967vibmt4KCKq6P5OqliLi021bFFgqIDTvVp+T9Ypuzrxb a3hzMm6pU5e3eontCl5ebA56WT1MDIgdDuYNnEZF8NdAqnousebDaSdC8QU= -----END CERTIFICATE-----Generated at Sun Jun 22 00:58:24 2025 by rpki-client