$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/Mi8DXv6KOW_1pktnYg54M0td6Uk.roa File: Mi8DXv6KOW_1pktnYg54M0td6Uk.roa (raw, json) Hash identifier: yU9uxON5kdSbGLEvZhwpOefcUxLEksGbe1v3QLYKAMU= Subject key identifier: 32:2F:03:5E:FE:8A:39:6F:F5:A6:4B:67:62:0E:78:33:4B:5D:E9:49 Certificate issuer: /CN=D7A784AA3FB01396E35DE2857639DEE06954706C Certificate serial: 2B Authority key identifier: D7:A7:84:AA:3F:B0:13:96:E3:5D:E2:85:76:39:DE:E0:69:54:70:6C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/16eEqj-wE5bjXeKFdjne4GlUcGw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/Mi8DXv6KOW_1pktnYg54M0td6Uk.roa Signing time: Tue 10 Jun 2025 10:48:50 +0000 ROA not before: Tue 10 Jun 2025 10:48:50 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 38628 IP address blocks: 45.75.0.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/16eEqj-wE5bjXeKFdjne4GlUcGw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/16eEqj-wE5bjXeKFdjne4GlUcGw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/16eEqj-wE5bjXeKFdjne4GlUcGw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 18:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7A784AA3FB01396E35DE2857639DEE06954706C Validity Not Before: Jun 10 10:48:50 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=322F035EFE8A396FF5A64B67620E78334B5DE949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f4:a2:88:3d:42:cb:92:b2:6b:4e:3a:ba:41: 81:57:9f:86:b1:52:c4:9b:43:37:75:ff:68:f1:92: ba:0a:08:65:a8:65:18:a3:0d:40:1d:92:15:59:0e: 53:39:cd:eb:51:b9:8b:e7:71:a3:9d:4a:2b:db:95: 4d:3e:ab:db:c3:c9:7e:cb:f0:bb:fe:c8:f8:21:39: 96:3d:bf:41:20:47:44:7b:d6:9d:f7:09:70:8d:68: 2f:fb:12:65:b3:81:84:64:66:34:64:22:80:72:f0: 2f:d9:5f:b0:fc:a4:a4:57:08:b5:ce:0f:9e:a7:e8: 52:5d:62:4a:45:2f:17:fd:e4:c8:9d:36:9a:89:36: aa:e1:ba:f9:08:21:90:00:92:a2:fd:fb:1f:4d:1f: bc:64:22:96:31:02:d9:0f:50:c8:30:0b:3a:72:a7: c1:67:21:55:b5:ee:1d:96:52:61:ee:f7:21:23:b7: f3:2b:72:c0:e5:63:8a:b1:84:40:c4:27:00:33:f4: 47:c8:5f:a3:67:bb:00:45:d7:cc:39:0d:43:e1:2b: 68:d3:fb:6d:4a:67:dc:e8:bc:ab:2a:d8:d1:88:6c: 37:a0:3b:20:77:e8:59:74:58:ee:f8:95:4b:ea:72: 5e:a0:1a:0f:6f:44:ac:d6:6a:c4:11:dd:b2:72:0e: 9d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2F:03:5E:FE:8A:39:6F:F5:A6:4B:67:62:0E:78:33:4B:5D:E9:49 X509v3 Authority Key Identifier: keyid:D7:A7:84:AA:3F:B0:13:96:E3:5D:E2:85:76:39:DE:E0:69:54:70:6C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/16eEqj-wE5bjXeKFdjne4GlUcGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/16eEqj-wE5bjXeKFdjne4GlUcGw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/Mi8DXv6KOW_1pktnYg54M0td6Uk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.75.0.0/17 Signature Algorithm: sha256WithRSAEncryption 6f:1a:f7:dc:a1:ce:7a:ac:1c:26:a6:70:c3:fb:c8:37:74:c8: 6f:49:16:da:6f:40:5d:61:3e:51:db:75:ac:ac:fa:de:08:86: 35:8a:ce:7f:4c:4c:ff:e0:f5:65:40:17:bc:cf:39:78:dd:1d: 74:68:7c:0d:67:45:eb:4b:65:ff:a1:9e:c9:72:50:a8:93:b0: 07:c2:e7:93:9a:5c:9c:b0:08:29:40:79:b2:f3:f2:4d:7d:d2: f6:16:63:e1:53:42:f0:1f:a8:16:b0:44:21:22:14:60:89:f4: a5:2d:bb:88:26:2f:66:a2:4a:a6:d9:28:d3:13:1f:0f:ae:c4: 5b:03:3e:c4:2b:35:74:33:70:1e:52:b4:eb:12:62:9e:f6:33: cd:ea:e5:d1:a5:03:7c:08:98:91:41:03:2d:4f:19:f2:c0:9d: d9:e9:eb:51:51:ab:af:f6:8a:23:c0:40:95:ce:c4:7b:7b:f4: 0b:3c:b6:fe:5d:cd:d1:fe:3a:41:56:5b:c5:23:d5:d6:24:ed: c2:61:43:21:04:2d:fc:ec:1c:04:31:90:49:3e:5e:ab:b7:58: 8c:49:d3:a4:44:cb:4e:41:64:b6:4e:04:72:7f:86:43:16:a9: 32:27:80:10:7f:d6:88:a6:0f:7b:10:9e:20:dc:4d:8d:fa:0e: 4b:3d:2d:24 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEN0E3 ODRBQTNGQjAxMzk2RTM1REUyODU3NjM5REVFMDY5NTQ3MDZDMB4XDTI1MDYxMDEw NDg1MFoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMzIyRjAzNUVGRThBMzk2 RkY1QTY0QjY3NjIwRTc4MzM0QjVERTk0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOD0oog9QsuSsmtOOrpBgVefhrFSxJtDN3X/aPGSugoIZahlGKMN QB2SFVkOUznN61G5i+dxo51KK9uVTT6r28PJfsvwu/7I+CE5lj2/QSBHRHvWnfcJ cI1oL/sSZbOBhGRmNGQigHLwL9lfsPykpFcItc4PnqfoUl1iSkUvF/3kyJ02mok2 quG6+QghkACSov37H00fvGQiljEC2Q9QyDALOnKnwWchVbXuHZZSYe73ISO38yty wOVjirGEQMQnADP0R8hfo2e7AEXXzDkNQ+EraNP7bUpn3Oi8qyrY0YhsN6A7IHfo WXRY7viVS+pyXqAaD29ErNZqxBHdsnIOnSsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQyLwNe/oo5b/WmS2diDngzS13pSTAfBgNVHSMEGDAWgBTXp4SqP7ATluNd4oV2 Od7gaVRwbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ4LzE2ZUVxai13RTVialhlS0Zkam5lNEdsVWNHdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE2ZUVxai13RTVialhlS0Zkam5lNEds VWNHdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NDgvTWk4RFh2NktPV18xcGt0bllnNTRNMHRkNlVrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBy1LADANBgkqhkiG9w0BAQsFAAOCAQEAbxr33KHOeqwcJqZww/vIN3TIb0kW 2m9AXWE+Udt1rKz63giGNYrOf0xM/+D1ZUAXvM85eN0ddGh8DWdF60tl/6GeyXJQ qJOwB8Lnk5pcnLAIKUB5svPyTX3S9hZj4VNC8B+oFrBEISIUYIn0pS27iCYvZqJK ptko0xMfD67EWwM+xCs1dDNwHlK06xJinvYzzerl0aUDfAiYkUEDLU8Z8sCd2enr UVGrr/aKI8BAlc7Ee3v0Czy2/l3N0f46QVZbxSPV1iTtwmFDIQQt/OwcBDGQST5e q7dYjEnTpETLTkFktk4Ecn+GQxapMieAEH/WiKYPexCeINxNjfoOSz0tJA== -----END CERTIFICATE-----Generated at Sun Jun 22 22:34:45 2025 by rpki-client