$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/clbUtC8jofGAjp68T4-0H_bb-NQ.roa File: clbUtC8jofGAjp68T4-0H_bb-NQ.roa (raw, json) Hash identifier: IzXpJe1vMo3XT4ZCoHaPDVlub8Iw+I3C+LeRiiNkaoc= Subject key identifier: 72:56:D4:B4:2F:23:A1:F1:80:8E:9E:BC:4F:8F:B4:1F:F6:DB:F8:D4 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0438 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/clbUtC8jofGAjp68T4-0H_bb-NQ.roa Signing time: Tue 10 Jun 2025 10:45:09 +0000 ROA not before: Tue 10 Jun 2025 10:45:09 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 10013 IP address blocks: 180.131.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 03:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jun 10 10:45:09 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=7256D4B42F23A1F1808E9EBC4F8FB41FF6DBF8D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:e7:ae:7a:48:be:59:4a:67:2e:5d:20:9a: 48:53:cb:64:5c:88:d4:d8:7d:9c:b4:8b:f6:87:cd: 59:51:d9:eb:38:58:c0:bc:4a:41:ef:72:99:e3:1f: c8:3a:71:c3:ba:16:89:d3:25:95:f4:ca:d2:c9:fc: 6d:cb:80:4d:98:84:53:77:45:c1:52:83:4d:b6:0e: 18:b8:5e:43:15:2d:96:bb:26:74:fa:df:00:af:02: 7d:0d:c7:59:2a:d1:fa:57:ee:02:ee:c2:4d:57:39: d0:70:58:b5:ba:bf:72:cc:f7:fa:c4:b6:81:9a:c2: 10:a3:1c:69:14:2d:53:42:0b:70:5d:5c:cd:33:97: 4f:b9:b9:b4:39:1b:b8:3c:a1:68:2b:5f:4f:f3:c1: ff:aa:64:9f:a7:fc:c2:0c:d3:78:4c:62:c5:dd:9c: 78:da:f8:fc:94:30:bc:43:76:b9:b3:a5:ff:e9:d1: 33:44:4a:c5:e4:71:ab:fa:d4:01:7e:ef:96:32:24: 5e:28:b9:06:ef:b7:19:b0:b2:8a:74:70:e4:72:20: 71:7b:48:6d:89:4b:e5:35:26:1f:d7:f9:ff:21:df: e1:0c:4e:39:e7:67:dc:df:9c:ae:6d:c8:42:19:d8: af:e4:a1:d9:a7:88:67:f9:44:bb:ee:ef:21:30:a2: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:56:D4:B4:2F:23:A1:F1:80:8E:9E:BC:4F:8F:B4:1F:F6:DB:F8:D4 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/clbUtC8jofGAjp68T4-0H_bb-NQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.122.0/24 Signature Algorithm: sha256WithRSAEncryption 21:f1:74:58:88:34:38:7b:bb:0d:7e:e1:a5:9d:55:07:7c:8a: fd:77:f5:41:62:c7:27:7d:b1:fe:ca:de:ba:15:7e:3d:a6:93: 1b:a7:04:e1:13:5a:ea:cc:1d:a9:c3:88:17:21:0d:96:5a:bd: 84:69:85:3d:7c:b6:bc:f7:fa:55:7e:d6:87:f3:74:5a:25:80: c9:76:e4:88:a2:2a:7b:2b:4c:1d:9b:cf:51:57:20:cc:14:be: 86:0f:a8:87:30:98:eb:ba:91:13:fe:c4:48:eb:22:92:54:9c: 6f:e7:9c:a9:0a:e8:74:77:c2:b5:c7:3a:46:6e:8a:39:87:9f: 5b:0e:ed:9f:1e:bf:a1:c0:35:7f:06:1b:5a:63:fc:fd:5c:8f: 8b:43:71:a8:63:0e:f4:90:c6:8f:47:a1:dc:a8:53:c2:91:d2: b7:c0:14:94:62:5b:e0:f5:a8:a0:b8:b8:49:97:b4:52:5d:ed: 85:42:c4:e7:ed:80:f8:8e:aa:c5:55:98:48:50:80:0e:30:76: 4c:c5:e4:01:66:d5:c2:9d:f5:13:af:d2:42:65:d9:33:17:4c: c0:59:67:25:c5:dd:ab:ac:63:6b:f5:09:82:f5:73:ee:59:14: 07:85:0d:e2:03:5d:ef:8a:80:50:35:55:92:a2:c3:fb:cd:25: be:c3:ab:a0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA2MTAx MDQ1MDlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDcyNTZENEI0MkYyM0Ex RjE4MDhFOUVCQzRGOEZCNDFGRjZEQkY4RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCV3+eueki+WUpnLl0gmkhTy2RciNTYfZy0i/aHzVlR2es4WMC8 SkHvcpnjH8g6ccO6FonTJZX0ytLJ/G3LgE2YhFN3RcFSg022Dhi4XkMVLZa7JnT6 3wCvAn0Nx1kq0fpX7gLuwk1XOdBwWLW6v3LM9/rEtoGawhCjHGkULVNCC3BdXM0z l0+5ubQ5G7g8oWgrX0/zwf+qZJ+n/MIM03hMYsXdnHja+PyUMLxDdrmzpf/p0TNE SsXkcav61AF+75YyJF4ouQbvtxmwsop0cORyIHF7SG2JS+U1Jh/X+f8h3+EMTjnn Z9zfnK5tyEIZ2K/kodmniGf5RLvu7yEwor8vAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUclbUtC8jofGAjp68T4+0H/bb+NQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2NsYlV0Qzhqb2ZHQWpwNjhUNC0wSF9iYi1OUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC0g3owDQYJKoZIhvcNAQELBQADggEBACHxdFiINDh7uw1+4aWdVQd8iv13 9UFixyd9sf7K3roVfj2mkxunBOETWurMHanDiBchDZZavYRphT18trz3+lV+1ofz dFolgMl25IiiKnsrTB2bz1FXIMwUvoYPqIcwmOu6kRP+xEjrIpJUnG/nnKkK6HR3 wrXHOkZuijmHn1sO7Z8ev6HANX8GG1pj/P1cj4tDcahjDvSQxo9HodyoU8KR0rfA FJRiW+D1qKC4uEmXtFJd7YVCxOftgPiOqsVVmEhQgA4wdkzF5AFm1cKd9ROv0kJl 2TMXTMBZZyXF3ausY2v1CYL1c+5ZFAeFDeIDXe+KgFA1VZKiw/vNJb7Dq6A= -----END CERTIFICATE-----Generated at Mon Jun 23 06:30:00 2025 by rpki-client