$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/z39qnzVguBggg_KlQNL552dSudI.roa File: z39qnzVguBggg_KlQNL552dSudI.roa (raw, json) Hash identifier: +lYJniRl5Y1SdBPV4hFWUXiCL67IbAqZgcnviE55vK4= Subject key identifier: CF:7F:6A:9F:35:60:B8:18:20:83:F2:A5:40:D2:F9:E7:67:52:B9:D2 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0436 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/z39qnzVguBggg_KlQNL552dSudI.roa Signing time: Tue 10 Jun 2025 10:45:07 +0000 ROA not before: Tue 10 Jun 2025 10:45:07 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 10013 IP address blocks: 180.131.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 02:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jun 10 10:45:07 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=CF7F6A9F3560B8182083F2A540D2F9E76752B9D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4d:c3:0e:fb:dd:71:c9:68:fb:34:19:02:0d: f7:06:88:cc:a5:06:ca:73:94:c8:b5:1f:43:c5:f4: 1a:2c:a2:64:7e:7d:a8:f2:02:0e:65:04:43:92:f3: 3f:47:ed:11:d9:c1:e5:d7:a3:01:90:cb:72:c3:bc: 02:9c:d8:c4:27:33:f3:39:91:7c:b6:cd:53:45:55: 52:89:3e:0e:d4:cc:93:ac:01:c6:4e:b9:7c:99:6b: 54:ac:a8:cd:7e:d8:9b:49:84:a4:32:87:a1:b3:ae: e8:e2:af:d9:5d:b5:22:bb:a9:68:10:74:f4:94:42: c9:e5:7f:59:91:ad:f7:e2:bb:a7:cc:44:1a:fa:ae: 17:e0:ae:42:fe:c9:96:4f:77:a9:23:0b:36:e2:fa: 0c:33:3b:6e:cc:b2:a2:2e:49:8e:65:d0:3c:ed:c4: 97:13:14:d6:64:72:21:43:f1:49:ba:8a:3b:f4:fe: b6:14:42:51:e8:bc:ae:e7:37:38:77:e0:b2:fe:cb: c5:8c:a1:3b:da:43:4e:7e:44:70:d4:35:2d:9a:c4: 87:9e:3a:7d:5f:79:22:8c:6a:ca:b1:ee:4b:b3:fc: 66:61:85:ab:1c:30:54:a2:85:65:37:4c:1a:61:dd: e9:a5:c6:4c:72:b4:84:bd:64:46:71:33:65:a9:58: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7F:6A:9F:35:60:B8:18:20:83:F2:A5:40:D2:F9:E7:67:52:B9:D2 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/z39qnzVguBggg_KlQNL552dSudI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.120.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:fa:3d:19:3d:88:18:a6:2f:3c:19:55:c1:73:ed:b8:d4:28: dc:29:86:99:06:0d:6b:6f:82:f6:1f:86:9b:d1:03:1b:08:65: 2a:c5:92:30:9b:14:05:ae:4d:59:c3:1f:3e:12:88:7f:1f:38: 71:58:fe:97:cf:fb:0a:94:12:a2:3e:e9:a0:6e:b1:a3:53:2d: e0:17:54:cc:6e:2a:5d:b3:e7:c5:8b:bc:51:02:7c:3b:65:30: ed:d1:b8:8f:57:b6:3f:7d:ed:d1:a3:57:bd:71:39:2a:f0:7b: 2c:f0:e4:01:01:f5:3b:ef:42:0a:c0:97:28:22:25:38:b3:f1: 60:1a:71:68:5b:20:40:75:4e:c8:29:57:c5:49:1c:61:52:73: 04:e5:29:e8:18:26:60:d0:24:74:60:42:73:2d:6f:60:08:af: 32:e4:5c:d0:b0:f5:4f:95:8b:9b:d6:71:d2:60:aa:75:06:99: 72:a5:a1:1b:df:58:11:8b:aa:f4:20:7f:bf:62:d1:0d:a7:ae: aa:53:0c:5d:09:59:0f:8a:9c:4f:60:16:08:25:12:d9:07:9d: f8:e5:57:a2:88:63:2e:03:ed:58:ea:99:3e:fe:3a:52:a6:de: e5:aa:86:1e:f2:62:89:05:4c:1a:07:1a:fe:c2:07:6e:a4:2a: 0c:af:4a:e5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA2MTAx MDQ1MDdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKENGN0Y2QTlGMzU2MEI4 MTgyMDgzRjJBNTQwRDJGOUU3Njc1MkI5RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRTcMO+91xyWj7NBkCDfcGiMylBspzlMi1H0PF9BosomR+fajy Ag5lBEOS8z9H7RHZweXXowGQy3LDvAKc2MQnM/M5kXy2zVNFVVKJPg7UzJOsAcZO uXyZa1SsqM1+2JtJhKQyh6Gzrujir9ldtSK7qWgQdPSUQsnlf1mRrffiu6fMRBr6 rhfgrkL+yZZPd6kjCzbi+gwzO27MsqIuSY5l0DztxJcTFNZkciFD8Um6ijv0/rYU QlHovK7nNzh34LL+y8WMoTvaQ05+RHDUNS2axIeeOn1feSKMasqx7kuz/GZhhasc MFSihWU3TBph3emlxkxytIS9ZEZxM2WpWGsRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUz39qnzVguBggg/KlQNL552dSudIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3ozOXFuelZndUJnZ2dfS2xRTkw1NTJkU3VkSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC0g3gwDQYJKoZIhvcNAQELBQADggEBAB36PRk9iBimLzwZVcFz7bjUKNwp hpkGDWtvgvYfhpvRAxsIZSrFkjCbFAWuTVnDHz4SiH8fOHFY/pfP+wqUEqI+6aBu saNTLeAXVMxuKl2z58WLvFECfDtlMO3RuI9Xtj997dGjV71xOSrweyzw5AEB9Tvv QgrAlygiJTiz8WAacWhbIEB1TsgpV8VJHGFScwTlKegYJmDQJHRgQnMtb2AIrzLk XNCw9U+Vi5vWcdJgqnUGmXKloRvfWBGLqvQgf79i0Q2nrqpTDF0JWQ+KnE9gFggl EtkHnfjlV6KIYy4D7VjqmT7+OlKm3uWqhh7yYokFTBoHGv7CB26kKgyvSuU= -----END CERTIFICATE-----Generated at Mon Jun 23 05:38:43 2025 by rpki-client