$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ueq3KQ0tIiSRfh8thLLZeHNKsBY.roa File: ueq3KQ0tIiSRfh8thLLZeHNKsBY.roa (raw, json) Hash identifier: +wgkeOfiEniyW0C4+WzC3hL0QUZ73dHKOsqzGiAIwlU= Subject key identifier: B9:EA:B7:29:0D:2D:22:24:91:7E:1F:2D:84:B2:D9:78:73:4A:B0:16 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0430 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ueq3KQ0tIiSRfh8thLLZeHNKsBY.roa Signing time: Tue 10 Jun 2025 10:45:00 +0000 ROA not before: Tue 10 Jun 2025 10:45:00 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 4686 IP address blocks: 218.225.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jun 10 10:45:00 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=B9EAB7290D2D2224917E1F2D84B2D978734AB016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:80:a9:73:70:a5:01:ef:ed:4e:34:2f:f7: 59:1f:0d:6a:83:42:26:cb:dd:78:43:ab:37:2c:df: 68:88:82:8c:62:e7:6c:26:90:9d:03:b3:fa:9a:20: 97:60:94:29:9b:ad:bb:2e:d2:1d:23:5e:8e:15:64: e3:44:14:cb:5b:49:11:55:73:14:3f:ca:ec:56:96: 8e:54:1c:46:8d:c6:84:e0:c2:22:8c:2e:37:bc:99: b2:f4:76:86:fc:90:5b:06:35:94:cb:8d:0f:32:66: 3b:b1:f1:93:c7:9c:ef:68:fa:fa:e7:17:6f:43:97: 97:f1:4c:ee:4b:0a:7b:5a:08:d6:3c:d2:c5:a6:c9: 27:97:74:c2:ac:4a:67:7e:58:e4:21:22:65:04:e6: 0c:f9:56:4f:28:1b:60:90:29:4b:9f:24:65:99:6a: c2:a4:7a:73:be:69:fa:f4:dd:2f:6b:b6:86:71:22: af:28:ec:d4:34:b7:87:55:20:97:e0:d7:45:d5:34: 73:b3:a7:5e:5e:a9:45:09:7e:ad:0e:81:94:25:d9: 76:82:42:30:0e:80:cd:db:c0:1f:cb:41:ab:d4:22: 2c:de:a4:64:16:85:25:04:a9:45:76:23:3a:e1:cd: 36:1b:c1:6e:30:65:8b:9f:0f:db:43:91:b6:71:a7: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EA:B7:29:0D:2D:22:24:91:7E:1F:2D:84:B2:D9:78:73:4A:B0:16 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ueq3KQ0tIiSRfh8thLLZeHNKsBY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.225.224.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:09:dc:67:3b:c0:bf:94:d3:58:9d:ae:bd:d2:b1:1c:8f:f1: 2e:30:6c:a6:7a:d4:58:c4:4b:25:25:d2:3e:24:0c:71:a0:36: e7:7e:5d:b1:46:06:c5:d4:a2:09:bc:32:cb:2a:9c:f9:1c:0a: 88:23:99:9c:97:fa:b3:1a:87:e5:1c:da:fa:d6:a9:5f:73:89: ef:70:63:db:a1:b3:e3:a6:ee:5d:c5:b8:4e:dd:b7:5f:b2:df: 9c:06:f4:1d:8f:47:87:5f:e0:b4:a8:d2:5e:d6:86:58:06:cf: 0c:81:3c:5c:de:0d:c1:a9:50:89:e9:01:e4:4d:0b:b7:b4:04: eb:d9:7c:82:fa:d9:c0:63:4b:87:16:84:30:26:05:7a:45:ee: 01:54:f3:26:9b:50:cd:bc:83:6c:f6:fb:8a:97:2d:c2:83:5f: 2c:5a:48:69:ad:40:1f:1a:47:fb:32:25:6a:2b:69:b3:53:c4: 65:cc:ea:13:c5:23:e9:b1:7d:4a:ed:3e:66:f6:eb:34:a2:6a: 3a:01:d8:2f:53:b4:78:db:78:e3:c6:bd:56:ba:73:68:64:b3: cb:b7:61:09:c4:41:32:c5:6c:44:76:37:19:95:84:1f:ce:1a: 66:28:a8:82:7d:e2:c6:e4:c3:c1:cf:84:e8:34:bd:22:92:ad: ee:5e:00:43 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA2MTAx MDQ1MDBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEI5RUFCNzI5MEQyRDIy MjQ5MTdFMUYyRDg0QjJEOTc4NzM0QUIwMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNTICpc3ClAe/tTjQv91kfDWqDQibL3XhDqzcs32iIgoxi52wm kJ0Ds/qaIJdglCmbrbsu0h0jXo4VZONEFMtbSRFVcxQ/yuxWlo5UHEaNxoTgwiKM Lje8mbL0dob8kFsGNZTLjQ8yZjux8ZPHnO9o+vrnF29Dl5fxTO5LCntaCNY80sWm ySeXdMKsSmd+WOQhImUE5gz5Vk8oG2CQKUufJGWZasKkenO+afr03S9rtoZxIq8o 7NQ0t4dVIJfg10XVNHOzp15eqUUJfq0OgZQl2XaCQjAOgM3bwB/LQavUIizepGQW hSUEqUV2IzrhzTYbwW4wZYufD9tDkbZxp2G/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUueq3KQ0tIiSRfh8thLLZeHNKsBYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3VlcTNLUTB0SWlTUmZoOHRoTExaZUhOS3NCWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATa4eAwDQYJKoZIhvcNAQELBQADggEBACwJ3Gc7wL+U01idrr3SsRyP8S4w bKZ61FjESyUl0j4kDHGgNud+XbFGBsXUogm8MssqnPkcCogjmZyX+rMah+Uc2vrW qV9zie9wY9uhs+Om7l3FuE7dt1+y35wG9B2PR4df4LSo0l7WhlgGzwyBPFzeDcGp UInpAeRNC7e0BOvZfIL62cBjS4cWhDAmBXpF7gFU8yabUM28g2z2+4qXLcKDXyxa SGmtQB8aR/syJWorabNTxGXM6hPFI+mxfUrtPmb26zSiajoB2C9TtHjbeOPGvVa6 c2hks8u3YQnEQTLFbER2NxmVhB/OGmYoqIJ94sbkw8HPhOg0vSKSre5eAEM= -----END CERTIFICATE-----Generated at Sun Jun 22 01:13:38 2025 by rpki-client