$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/1Q9i1OL36PXw7qH7R5GaTK2DedM.roa File: 1Q9i1OL36PXw7qH7R5GaTK2DedM.roa (raw, json) Hash identifier: 98RVjXFbkZwTJHzJB0qABv8yyc4uuCNXHFAJ7JzK2eo= Subject key identifier: D5:0F:62:D4:E2:F7:E8:F5:F0:EE:A1:FB:47:91:9A:4C:AD:83:79:D3 Certificate issuer: /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25 Certificate serial: 16 Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/1Q9i1OL36PXw7qH7R5GaTK2DedM.roa Signing time: Sat 05 Apr 2025 01:22:22 +0000 ROA not before: Sat 05 Apr 2025 01:22:22 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 131931 IP address blocks: 110.4.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25 Validity Not Before: Apr 5 01:22:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D50F62D4E2F7E8F5F0EEA1FB47919A4CAD8379D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:40:55:b6:2e:76:f5:0b:f1:84:ec:73:2c:48: 8a:42:f7:5b:43:a3:4f:24:44:06:f1:86:e3:2b:d7: 03:e2:63:f4:af:59:20:6b:18:ae:7f:1b:6e:f4:2e: bb:76:4f:30:6f:93:bd:59:8f:5b:a5:64:b3:04:35: 6d:6b:37:c2:f2:f1:c4:9b:6f:ec:29:74:5a:bb:04: 12:ff:8c:cc:3d:7b:f2:ec:66:85:6c:cf:1c:d6:61: e1:9c:d9:b9:e8:1a:92:1b:e7:5a:ca:b3:5a:0d:28: 03:73:d6:8c:23:50:77:fc:50:00:7b:99:29:df:0a: 6d:e7:fb:c4:3f:5f:da:d6:c2:3a:f2:30:e7:e2:ee: f9:cb:07:25:ba:cd:f6:ea:79:dc:0c:94:e3:db:fb: e3:cb:64:24:53:cf:23:06:ae:54:48:ec:69:04:9f: 2d:e9:42:87:fc:3e:1f:57:ba:60:0a:7c:90:d4:21: 17:02:df:0c:96:75:2f:42:ad:b5:00:56:89:af:4b: 41:5d:6d:98:f4:2c:f6:a1:71:8c:70:ab:bc:f8:41: 30:63:bb:d9:1f:ee:ab:66:bc:24:ca:aa:47:de:8c: 32:aa:fb:42:11:16:f7:de:b0:e6:76:59:7c:bf:32: 9a:6e:a1:e7:5d:cf:98:97:2e:88:10:36:b3:91:4a: f0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0F:62:D4:E2:F7:E8:F5:F0:EE:A1:FB:47:91:9A:4C:AD:83:79:D3 X509v3 Authority Key Identifier: keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/1Q9i1OL36PXw7qH7R5GaTK2DedM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.4.32.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:8c:55:fd:08:03:17:d6:21:de:6d:29:18:ee:23:fa:fc:9c: c3:5f:be:52:93:d8:71:1c:f8:ac:27:2d:67:96:71:f4:c6:63: 17:df:11:db:29:18:e0:55:34:93:c6:0b:c9:01:6f:27:6e:4f: f2:a3:d3:34:57:aa:48:f8:f0:c2:1d:93:80:46:65:6d:4e:31: a0:67:08:6b:80:11:a1:3b:88:0b:17:75:2e:48:53:a4:54:26: 65:15:37:01:46:0d:f9:16:3e:d7:6f:9b:a7:b6:df:30:cb:28: 26:92:4c:63:19:3d:38:49:3c:e2:ea:b9:6e:82:5d:36:5c:69: 35:7d:2d:03:c7:64:8e:49:9b:34:9a:82:dc:01:4c:32:7b:bf: 57:bb:ca:ce:2c:5e:7a:fa:e7:11:53:83:b6:25:e2:6f:b5:83: 62:1d:f6:75:cb:4e:64:1f:5b:19:79:09:02:21:cb:04:f4:53: 9c:57:7e:3f:0c:5e:6c:46:fa:ee:f2:90:cb:12:a9:af:4d:d3: ae:28:bd:78:17:68:2c:96:87:d1:37:15:b1:98:33:cc:4c:44: a1:c7:4e:c0:5e:b4:55:a8:0e:cd:4b:83:71:f1:a4:ed:af:5d: 24:88:cb:53:8c:52:91:05:df:5b:ee:5d:3f:35:e4:17:6a:01: 70:ed:82:c7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjJF N0U2MkRBOEYxMkYzQkIzM0UwQjVFM0NFMDAyRkRBMjhDRjI1MB4XDTI1MDQwNTAx MjIyMloXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRDUwRjYyRDRFMkY3RThG NUYwRUVBMUZCNDc5MTlBNENBRDgzNzlEMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANFAVbYudvUL8YTscyxIikL3W0OjTyREBvGG4yvXA+Jj9K9ZIGsY rn8bbvQuu3ZPMG+TvVmPW6VkswQ1bWs3wvLxxJtv7Cl0WrsEEv+MzD178uxmhWzP HNZh4ZzZuegakhvnWsqzWg0oA3PWjCNQd/xQAHuZKd8Kbef7xD9f2tbCOvIw5+Lu +csHJbrN9up53AyU49v748tkJFPPIwauVEjsaQSfLelCh/w+H1e6YAp8kNQhFwLf DJZ1L0KttQBWia9LQV1tmPQs9qFxjHCrvPhBMGO72R/uq2a8JMqqR96MMqr7QhEW 996w5nZZfL8ymm6h513PmJcuiBA2s5FK8H0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTVD2LU4vfo9fDuoftHkZpMrYN50zAfBgNVHSMEGDAWgBQbLn5i2o8S87sz4LXj zgAv2ijPJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODE4L0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlvb3p5VS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlv b3p5VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MTgvMVE5aTFPTDM2UFh3N3FIN1I1R2FUSzJEZWRNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA24EIDANBgkqhkiG9w0BAQsFAAOCAQEAW4xV/QgDF9Yh3m0pGO4j+vycw1++ UpPYcRz4rCctZ5Zx9MZjF98R2ykY4FU0k8YLyQFvJ25P8qPTNFeqSPjwwh2TgEZl bU4xoGcIa4ARoTuICxd1LkhTpFQmZRU3AUYN+RY+12+bp7bfMMsoJpJMYxk9OEk8 4uq5boJdNlxpNX0tA8dkjkmbNJqC3AFMMnu/V7vKzixeevrnEVODtiXib7WDYh32 dctOZB9bGXkJAiHLBPRTnFd+PwxebEb67vKQyxKpr03Trii9eBdoLJaH0TcVsZgz zExEocdOwF60VagOzUuDcfGk7a9dJIjLU4xSkQXfW+5dPzXkF2oBcO2Cxw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:43:32 2025 by rpki-client