$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/kc4cUdMcyuYNpBNRQ0FL2g8edQ4.roa File: kc4cUdMcyuYNpBNRQ0FL2g8edQ4.roa (raw, json) Hash identifier: qrLn4gwKOOpv9MjCxQSQlI82PHcCasGg747o7Kr4r7Y= Subject key identifier: 91:CE:1C:51:D3:1C:CA:E6:0D:A4:13:51:43:41:4B:DA:0F:1E:75:0E Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0189 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/kc4cUdMcyuYNpBNRQ0FL2g8edQ4.roa Signing time: Tue 10 Jun 2025 10:47:26 +0000 ROA not before: Tue 10 Jun 2025 10:47:26 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 2527 IP address blocks: 133.114.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 18:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Jun 10 10:47:26 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=91CE1C51D31CCAE60DA4135143414BDA0F1E750E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:73:3c:28:62:c0:c3:f2:d4:07:2d:fd:6c:e4: a4:79:89:fd:0d:fd:7a:80:06:92:75:04:b3:c5:f9: 30:89:b2:56:19:7b:20:b2:ef:50:6d:7b:21:42:f7: 98:3d:d8:93:d4:9a:32:43:5e:62:df:8b:df:3a:23: 05:38:d7:71:dd:77:b3:f2:c7:7a:65:1a:43:04:a2: b0:3e:80:b5:cd:aa:0d:9e:94:90:fd:c1:9e:47:31: e2:51:5c:09:1f:89:e1:89:24:d3:86:90:b7:e3:f7: 29:7a:f6:16:0d:18:ae:fe:c2:36:29:66:f0:9d:f7: 71:9a:4c:3d:bc:f9:c7:06:ee:27:3a:0e:84:a4:fa: 4f:ee:b9:eb:e9:6d:7c:7a:c6:ed:ff:6a:0e:ee:a0: 0c:25:a9:9b:f4:8f:ec:75:4a:5c:08:25:e0:c0:28: 76:c3:30:77:f9:88:14:72:d0:b3:0a:1d:94:af:d5: f2:41:95:b8:38:56:fd:c9:db:5e:e7:1c:00:c1:ae: 9b:e8:7e:96:6b:84:13:de:99:51:31:d1:69:bb:82: 66:58:8b:f7:36:35:be:6b:7f:d9:b8:d2:5b:1c:f4: a3:88:32:50:94:54:81:43:a3:ac:fa:81:5f:ed:5e: c2:40:12:30:83:20:12:79:f0:9f:c1:ac:82:2f:21: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CE:1C:51:D3:1C:CA:E6:0D:A4:13:51:43:41:4B:DA:0F:1E:75:0E X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/kc4cUdMcyuYNpBNRQ0FL2g8edQ4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4c:3d:cc:07:63:aa:0f:72:78:b3:a1:1b:2b:23:f1:7f:b0:82: 7e:e4:06:d9:8a:7b:37:ad:c7:4c:b0:f7:06:42:70:40:cb:52: 2b:dc:e7:98:72:30:66:de:e5:a9:f3:53:77:d8:6c:3e:3c:82: 1a:a3:87:2b:e2:2c:e0:c9:50:9a:ef:7d:5f:1a:dd:df:4b:95: ad:6c:29:db:e4:53:1a:4f:5c:c8:f4:6d:8f:2e:9e:78:5b:07: cd:b5:67:cd:f3:c6:e0:26:0d:3a:1f:a2:98:f8:91:47:d7:79: c4:7a:83:3f:46:d7:a9:3d:a5:2a:cb:16:5c:0f:af:ee:5f:0a: 97:76:15:26:b8:a7:ce:e9:07:48:39:0a:2c:aa:47:c3:d2:62: 69:ec:5e:fa:10:84:16:86:2f:40:54:45:c4:ed:a7:26:be:f0: 2f:0e:aa:c9:bf:fb:3b:4b:02:a6:31:be:7e:4a:f1:f3:00:5f: d2:18:3b:fa:15:52:51:80:d9:33:d8:ab:48:3f:bb:a8:2e:12: 83:f7:e6:77:31:8d:45:2f:d1:33:7a:6c:ed:6a:01:b5:a2:97: 76:45:d3:93:6e:3d:42:63:41:41:68:79:bd:bc:6c:2e:08:7b: b5:99:65:96:bc:be:8e:58:19:49:46:c6:11:35:ad:50:2b:d4: 07:4e:03:23 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNTA2MTAx MDQ3MjZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDkxQ0UxQzUxRDMxQ0NB RTYwREE0MTM1MTQzNDE0QkRBMEYxRTc1MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOczwoYsDD8tQHLf1s5KR5if0N/XqABpJ1BLPF+TCJslYZeyCy 71BteyFC95g92JPUmjJDXmLfi986IwU413Hdd7Pyx3plGkMEorA+gLXNqg2elJD9 wZ5HMeJRXAkfieGJJNOGkLfj9yl69hYNGK7+wjYpZvCd93GaTD28+ccG7ic6DoSk +k/uuevpbXx6xu3/ag7uoAwlqZv0j+x1SlwIJeDAKHbDMHf5iBRy0LMKHZSv1fJB lbg4Vv3J217nHADBrpvofpZrhBPemVEx0Wm7gmZYi/c2Nb5rf9m40lsc9KOIMlCU VIFDo6z6gV/tXsJAEjCDIBJ58J/BrIIvIUULAgMBAAGjggIhMIICHTAdBgNVHQ4E FgQUkc4cUdMcyuYNpBNRQ0FL2g8edQ4wHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9rYzRjVWRNY3l1WU5wQk5SUTBGTDJnOGVkUTQucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMAhXIwDQYJKoZIhvcNAQELBQADggEBAEw9zAdjqg9yeLOhGysj8X+wgn7kBtmK ezetx0yw9wZCcEDLUivc55hyMGbe5anzU3fYbD48ghqjhyviLODJUJrvfV8a3d9L la1sKdvkUxpPXMj0bY8unnhbB821Z83zxuAmDTofopj4kUfXecR6gz9G16k9pSrL FlwPr+5fCpd2FSa4p87pB0g5CiyqR8PSYmnsXvoQhBaGL0BURcTtpya+8C8Oqsm/ +ztLAqYxvn5K8fMAX9IYO/oVUlGA2TPYq0g/u6guEoP35ncxjUUv0TN6bO1qAbWi l3ZF05NuPUJjQUFoeb28bC4Ie7WZZZa8vo5YGUlGxhE1rVAr1AdOAyM= -----END CERTIFICATE-----Generated at Sat Jun 21 21:51:15 2025 by rpki-client