$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/Qhu-g4bhbS7g2KE8qMH-n_iKn_s.roa File: Qhu-g4bhbS7g2KE8qMH-n_iKn_s.roa (raw, json) Hash identifier: Lvfbo+DDTDxLuvFSKmLk9/dyFX6mGFcoQd6m9Dr00FA= Subject key identifier: 42:1B:BE:83:86:E1:6D:2E:E0:D8:A1:3C:A8:C1:FE:9F:F8:8A:9F:FB Certificate issuer: /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9 Certificate serial: 05 Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/Qhu-g4bhbS7g2KE8qMH-n_iKn_s.roa Signing time: Wed 23 Apr 2025 00:38:43 +0000 ROA not before: Wed 23 Apr 2025 00:38:43 +0000 ROA not after: Tue 21 Apr 2026 06:15:57 +0000 asID: 18070 IP address blocks: 221.120.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9 Validity Not Before: Apr 23 00:38:43 2025 GMT Not After : Apr 21 06:15:57 2026 GMT Subject: CN=421BBE8386E16D2EE0D8A13CA8C1FE9FF88A9FFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2b:1d:53:8f:74:96:a2:2a:a8:27:aa:c2:c6: be:e4:87:c6:c1:c2:b6:88:35:ce:17:8c:4c:b6:82: 9f:ca:a1:1f:69:b4:16:ae:2f:9f:28:36:7e:f0:84: 3e:06:27:fd:9b:0c:17:11:87:dc:16:a9:a9:1b:c4: 00:28:63:13:bc:75:47:2f:0a:b5:2b:fe:d0:3c:0e: 6b:d4:67:0d:fc:01:dc:26:e0:00:15:fd:07:97:9f: d4:c7:33:3e:7e:76:97:96:64:45:c3:73:bb:c3:12: c7:f5:3e:f3:4d:57:f7:35:1b:a8:14:40:87:5f:e1: b5:69:d9:e9:5f:8a:07:e4:cd:d0:0f:0b:eb:0c:5a: ad:0a:46:2c:86:6f:95:a7:5f:7a:4a:c6:0a:98:4c: b7:bf:35:c8:2a:6e:db:11:74:86:cb:7d:29:34:1d: ad:20:7e:6f:7a:2d:78:d8:a7:8a:0f:5d:ad:6d:fd: 47:77:e5:a0:8a:bd:e9:33:56:78:84:8b:c9:b0:e4: fc:0f:de:57:d3:7d:de:2b:3a:96:f3:7b:7e:13:d5: d4:66:1f:53:b3:cb:b8:6c:f3:2d:ed:6a:b5:d3:de: 33:87:8b:94:08:fe:b8:6a:27:02:52:6b:18:fa:d6: d6:e0:6f:59:28:d7:75:e8:6c:41:06:38:03:9f:6f: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1B:BE:83:86:E1:6D:2E:E0:D8:A1:3C:A8:C1:FE:9F:F8:8A:9F:FB X509v3 Authority Key Identifier: keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/Qhu-g4bhbS7g2KE8qMH-n_iKn_s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 221.120.168.0/21 Signature Algorithm: sha256WithRSAEncryption 88:b2:5c:ce:74:7f:1b:52:cd:47:7f:59:88:e6:8b:88:a9:7f: 3d:69:c1:d3:1f:c9:1c:b1:81:8c:1e:e8:98:77:3f:61:76:bc: 28:0d:be:a8:1e:64:63:da:ba:92:94:a7:21:8d:92:db:41:7b: a3:24:f3:59:ad:89:cb:2a:9a:36:d8:1b:ea:a5:49:ff:20:bf: 37:56:6f:31:97:6e:ae:f9:f1:c6:07:4b:88:d5:55:0c:9d:8f: 2f:47:43:50:11:c1:51:cd:c0:fe:8c:e8:4d:9c:f7:97:91:3a: 8e:17:ce:59:bd:c9:fb:51:14:d3:29:15:3f:de:91:ee:cb:f9: ab:38:ac:90:9b:d1:c8:d7:67:8c:cb:ff:82:2e:3b:3f:c5:82: f9:18:3d:73:63:62:5e:2a:5f:8a:41:f7:99:38:b3:8d:56:a1: b2:21:d7:48:c4:72:06:40:f7:3b:d2:b9:c7:70:78:f8:c8:49: db:69:b3:21:a9:2e:fc:dc:2c:a5:4a:e8:45:c7:0e:03:f8:b3: cb:58:cb:10:57:a7:e3:60:13:68:02:cd:c5:01:6e:f8:83:35: 95:d9:fe:da:ee:13:44:8a:ab:ac:86:a6:5b:5c:57:83:ab:7c: ea:35:47:9d:0b:38:b8:ae:5a:82:04:f0:21:ac:5f:eb:e5:43: dc:f3:3b:42 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUU1 RjE4RDk2MzFDMjU4N0IwOTRFNzhDREQ0RTFCODY1MEY0Q0I5MB4XDTI1MDQyMzAw Mzg0M1oXDTI2MDQyMTA2MTU1N1owMzExMC8GA1UEAxMoNDIxQkJFODM4NkUxNkQy RUUwRDhBMTNDQThDMUZFOUZGODhBOUZGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJYrHVOPdJaiKqgnqsLGvuSHxsHCtog1zheMTLaCn8qhH2m0Fq4v nyg2fvCEPgYn/ZsMFxGH3BapqRvEAChjE7x1Ry8KtSv+0DwOa9RnDfwB3CbgABX9 B5ef1MczPn52l5ZkRcNzu8MSx/U+801X9zUbqBRAh1/htWnZ6V+KB+TN0A8L6wxa rQpGLIZvladfekrGCphMt781yCpu2xF0hst9KTQdrSB+b3oteNinig9drW39R3fl oIq96TNWeISLybDk/A/eV9N93is6lvN7fhPV1GYfU7PLuGzzLe1qtdPeM4eLlAj+ uGonAlJrGPrW1uBvWSjXdehsQQY4A59vHvUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRCG76DhuFtLuDYoTyowf6f+Iqf+zAfBgNVHSMEGDAWgBSF5fGNljHCWHsJTnjN 1OG4ZQ9MuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjc3L2hlWHhqWll4d2xoN0NVNTR6ZFRodUdVUFRMay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hlWHhqWll4d2xoN0NVNTR6ZFRodUdV UFRMay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NzcvUWh1LWc0YmhiUzdnMktFOHFNSC1uX2lLbl9zLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA914qDANBgkqhkiG9w0BAQsFAAOCAQEAiLJcznR/G1LNR39ZiOaLiKl/PWnB 0x/JHLGBjB7omHc/YXa8KA2+qB5kY9q6kpSnIY2S20F7oyTzWa2JyyqaNtgb6qVJ /yC/N1ZvMZdurvnxxgdLiNVVDJ2PL0dDUBHBUc3A/ozoTZz3l5E6jhfOWb3J+1EU 0ykVP96R7sv5qziskJvRyNdnjMv/gi47P8WC+Rg9c2NiXipfikH3mTizjVahsiHX SMRyBkD3O9K5x3B4+MhJ22mzIaku/NwspUroRccOA/izy1jLEFen42ATaALNxQFu +IM1ldn+2u4TRIqrrIamW1xXg6t86jVHnQs4uK5aggTwIaxf6+VD3PM7Qg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:44:08 2025 by rpki-client