$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/xA25AZGs_4sDlUHwVDYu76c0SsU.roa File: xA25AZGs_4sDlUHwVDYu76c0SsU.roa (raw, json) Hash identifier: 2aYsxLIWifqkhL2UH3M/XEXyyyefGEJpi9q0WZ36I4s= Subject key identifier: C4:0D:B9:01:91:AC:FF:8B:03:95:41:F0:54:36:2E:EF:A7:34:4A:C5 Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Certificate serial: 6E Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/xA25AZGs_4sDlUHwVDYu76c0SsU.roa Signing time: Sat 01 Mar 2025 01:28:09 +0000 ROA not before: Sat 01 Mar 2025 01:28:09 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 10019 IP address blocks: 202.91.144.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Validity Not Before: Mar 1 01:28:09 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=C40DB90191ACFF8B039541F054362EEFA7344AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:78:90:49:6a:ae:f2:37:47:6e:05:92:36: e7:dc:34:96:9f:13:ca:ef:d2:54:a4:a7:0d:c0:f6: c4:d2:7a:7d:ae:f7:42:ea:be:5e:a1:b0:d8:9b:b0: 03:cf:02:27:70:ce:86:8f:04:9b:a9:40:bd:f2:5f: 93:7c:e2:f4:04:f2:07:91:02:56:26:fa:d1:ef:3c: dc:dc:1e:4f:0a:19:3c:77:4d:10:0b:25:cc:98:d7: a0:63:ce:ba:fd:3d:59:44:da:37:e0:31:ea:21:9b: 66:a5:ae:16:74:6b:55:17:ed:43:1d:ea:4a:d7:62: 1c:bc:3b:74:84:49:f9:12:b5:2f:03:46:c8:5e:bc: 0b:1b:3c:cd:7d:fd:16:c2:c2:7d:45:2c:4e:75:83: 8a:8a:e1:86:8a:25:9a:e1:b9:a5:e7:e4:62:43:01: 5f:ff:f6:99:2a:40:8d:fb:37:c7:1c:25:d3:10:6f: 72:f8:f8:0c:52:d0:79:b2:34:f9:32:a5:fa:88:d7: bd:f6:7b:93:00:eb:e0:af:b1:51:60:7d:50:c6:7b: e7:fd:c7:bd:e3:2a:05:2a:73:4d:1d:e3:33:f7:24: 1e:79:10:a7:89:2a:dd:06:da:f8:b5:6e:82:21:f3: 07:36:10:ea:28:1b:67:c8:59:47:f9:a4:6c:95:aa: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0D:B9:01:91:AC:FF:8B:03:95:41:F0:54:36:2E:EF:A7:34:4A:C5 X509v3 Authority Key Identifier: keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/xA25AZGs_4sDlUHwVDYu76c0SsU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.91.144.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:e4:7a:46:c6:1d:34:75:a7:a5:f8:70:a5:54:44:4d:9b:02: 95:67:9e:a8:ff:be:10:83:ab:62:3f:45:ce:c7:11:a6:75:ef: 2d:ce:e5:53:27:80:1e:2f:48:66:20:fa:75:15:1b:10:ac:2a: cf:bf:fb:ff:a1:e9:db:77:af:31:09:0d:74:ac:5c:9e:99:86: 2a:ef:52:23:53:33:39:43:3b:d9:89:bc:f0:6b:01:ad:97:30: 42:4e:ab:36:70:7b:32:f0:a3:e4:e2:b0:2b:0a:88:24:f3:fb: b2:2a:f4:41:ca:d7:3e:5a:d4:f6:4b:a7:7c:17:1f:cc:bc:35: 9d:16:9a:a1:ed:ff:29:29:94:6e:0c:64:69:f0:a4:56:a7:7b: f9:20:9c:e6:c9:75:48:85:10:9e:93:62:04:36:db:2f:ab:7a: 9d:09:8d:2d:1a:57:3b:3a:a3:3b:ed:5e:d8:d5:7a:e3:d1:eb: 00:a3:25:57:2a:6f:2a:4b:db:ab:63:eb:d9:19:2a:f7:ed:12: fa:ed:2b:90:93:f0:ec:97:72:5f:0b:fb:95:ba:8b:b8:b1:fa: 5f:d4:e6:ac:80:62:e7:4e:c4:ee:63:15:5c:05:52:9f:de:2c: 91:34:1b:e4:1c:a3:a8:93:5b:f6:c9:b9:a9:26:04:f1:04:0c: e5:dd:16:0d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Mzkx N0IyMzA3NDUyNEU5RTZFQThFNDBGQTRBMDY3MkM5NjIwMzE4MB4XDTI1MDMwMTAx MjgwOVoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQzQwREI5MDE5MUFDRkY4 QjAzOTU0MUYwNTQzNjJFRUZBNzM0NEFDNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJjHeJBJaq7yN0duBZI259w0lp8Tyu/SVKSnDcD2xNJ6fa73Quq+ XqGw2JuwA88CJ3DOho8Em6lAvfJfk3zi9ATyB5ECVib60e883NweTwoZPHdNEAsl zJjXoGPOuv09WUTaN+Ax6iGbZqWuFnRrVRftQx3qStdiHLw7dIRJ+RK1LwNGyF68 Cxs8zX39FsLCfUUsTnWDiorhhoolmuG5pefkYkMBX//2mSpAjfs3xxwl0xBvcvj4 DFLQebI0+TKl+ojXvfZ7kwDr4K+xUWB9UMZ75/3HveMqBSpzTR3jM/ckHnkQp4kq 3Qba+LVugiHzBzYQ6igbZ8hZR/mkbJWqGk0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTEDbkBkaz/iwOVQfBUNi7vpzRKxTAfBgNVHSMEGDAWgBRDkXsjB0Uk6ebqjkD6 SgZyyWIDGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDYyL1E1RjdJd2RGSk9ubTZvNUEta29HY3NsaUF4Zy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1E1RjdJd2RGSk9ubTZvNUEta29HY3Ns aUF4Zy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NjIveEEyNUFaR3NfNHNEbFVId1ZEWXU3NmMwU3NVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMpbkDANBgkqhkiG9w0BAQsFAAOCAQEATOR6RsYdNHWnpfhwpVRETZsClWee qP++EIOrYj9FzscRpnXvLc7lUyeAHi9IZiD6dRUbEKwqz7/7/6Hp23evMQkNdKxc npmGKu9SI1MzOUM72Ym88GsBrZcwQk6rNnB7MvCj5OKwKwqIJPP7sir0QcrXPlrU 9kunfBcfzLw1nRaaoe3/KSmUbgxkafCkVqd7+SCc5sl1SIUQnpNiBDbbL6t6nQmN LRpXOzqjO+1e2NV649HrAKMlVypvKkvbq2Pr2Rkq9+0S+u0rkJPw7JdyXwv7lbqL uLH6X9TmrIBi507E7mMVXAVSn94skTQb5ByjqJNb9sm5qSYE8QQM5d0WDQ== -----END CERTIFICATE-----Generated at Sat Apr 26 17:31:37 2025 by rpki-client