$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa File: iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa (raw, json) Hash identifier: 8CjfmAubG1rN3/yYGa9jSzoh1YjrWwT5yuraFxJJrRQ= Subject key identifier: 8A:ED:45:87:1F:F0:BA:C7:FA:A8:D3:C7:D3:B6:F1:76:C2:7D:B6:3B Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Certificate serial: C4 Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa Signing time: Fri 31 Jan 2025 01:31:36 +0000 ROA not before: Fri 31 Jan 2025 01:31:36 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18126 IP address blocks: 14.132.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Validity Not Before: Jan 31 01:31:36 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=8AED45871FF0BAC7FAA8D3C7D3B6F176C27DB63B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:75:d3:e1:82:46:d0:b0:d3:1b:14:9f:01:87: 20:7c:48:11:1a:d8:b4:cb:ff:79:c8:73:c7:5b:17: 3b:57:ea:c4:d2:be:7a:18:a0:bb:8a:9f:4b:40:03: 15:12:ae:52:f5:8c:8f:d5:b3:eb:3e:96:3c:2f:8a: df:80:56:bb:09:b3:70:1d:27:bc:4c:e3:cc:6f:a1: 72:10:86:4d:65:df:a2:f9:e5:59:f5:52:1b:35:3a: 1b:5c:03:57:4a:c4:dc:18:b6:a9:1e:45:ff:67:ea: 4a:f2:72:f3:a9:49:96:b9:e0:e6:42:39:7a:e1:1a: ec:cc:2d:24:56:25:ad:61:dd:bb:90:44:00:fa:74: 12:20:19:06:5b:2a:79:8c:ed:9d:1b:99:e8:9b:8b: be:83:0f:69:2e:c1:77:bd:6e:8d:80:40:f2:f8:b0: c7:c2:68:df:9f:b1:ab:97:0a:c3:78:6d:37:57:5b: 58:ca:61:ec:60:a2:43:f7:f8:c9:cf:22:aa:ab:d0: aa:2d:ca:9c:c3:da:a4:fb:b9:e4:de:fa:74:2d:ad: 20:43:7b:fc:93:eb:4e:5d:37:8b:91:8b:d3:a6:16: 88:36:6a:3f:a4:6b:00:e6:4b:3e:12:ff:fa:c1:ec: 47:7f:8d:a1:b7:67:8d:fe:f6:97:1c:a8:04:81:a9: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:ED:45:87:1F:F0:BA:C7:FA:A8:D3:C7:D3:B6:F1:76:C2:7D:B6:3B X509v3 Authority Key Identifier: keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.132.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2a:ee:86:ce:18:7d:95:b3:a9:2d:2f:6e:c5:dc:c2:02:bb:de: a8:b5:d0:85:1e:d6:5d:74:03:af:7f:1f:7d:79:0c:7d:31:dd: 9d:f9:9e:37:05:f3:21:88:7f:f0:4c:7f:51:99:14:c5:22:ef: 9a:59:a1:0e:0c:bd:ab:ec:36:f1:a8:0e:a8:91:10:c8:ee:89: 21:eb:3e:08:ea:90:c9:dd:76:47:04:2b:5f:31:2a:e3:04:61: 65:35:a1:6c:32:d0:76:e8:07:eb:65:c5:4b:e3:5b:a3:81:49: 2a:09:12:2a:39:36:48:23:a1:57:49:e4:f8:fa:64:36:97:b4: f2:81:52:06:87:d0:35:a2:9c:8f:38:b4:96:22:0e:d4:29:9b: 68:31:73:39:26:f3:95:a7:43:95:7b:75:20:66:91:2f:22:07: cd:fa:d8:d2:4b:28:f7:93:c3:ed:60:43:68:b2:88:dc:27:44: 5b:82:36:59:b9:3d:03:64:93:f7:60:6e:72:28:4e:71:4c:47: 87:f8:3d:70:0f:0a:96:0c:2b:6c:94:f5:27:b6:21:b0:43:1f: 51:b5:c3:fa:1d:43:46:d6:19:3e:ba:1b:76:fa:e9:b2:02:a2: ff:10:bd:6a:c8:6e:5f:37:53:21:55:8f:4e:49:db:42:6c:06: ce:61:91:c0 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNTAxMzEw MTMxMzZaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhBRUQ0NTg3MUZGMEJB QzdGQUE4RDNDN0QzQjZGMTc2QzI3REI2M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXddPhgkbQsNMbFJ8BhyB8SBEa2LTL/3nIc8dbFztX6sTSvnoY oLuKn0tAAxUSrlL1jI/Vs+s+ljwvit+AVrsJs3AdJ7xM48xvoXIQhk1l36L55Vn1 Uhs1OhtcA1dKxNwYtqkeRf9n6krycvOpSZa54OZCOXrhGuzMLSRWJa1h3buQRAD6 dBIgGQZbKnmM7Z0bmeibi76DD2kuwXe9bo2AQPL4sMfCaN+fsauXCsN4bTdXW1jK YexgokP3+MnPIqqr0KotypzD2qT7ueTe+nQtrSBDe/yT605dN4uRi9OmFog2aj+k awDmSz4S//rB7Ed/jaG3Z43+9pccqASBqXj7AgMBAAGjggInMIICIzAdBgNVHQ4E FgQUiu1Fhx/wusf6qNPH07bxdsJ9tjswHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDE3My9pdTFGaHhfd3VzZjZxTlBIMDdieGRzSjl0anMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBDoQwDQYJKoZIhvcNAQELBQADggEBACruhs4YfZWzqS0vbsXcwgK7 3qi10IUe1l10A69/H315DH0x3Z35njcF8yGIf/BMf1GZFMUi75pZoQ4MvavsNvGo DqiREMjuiSHrPgjqkMnddkcEK18xKuMEYWU1oWwy0HboB+tlxUvjW6OBSSoJEio5 NkgjoVdJ5Pj6ZDaXtPKBUgaH0DWinI84tJYiDtQpm2gxczkm85WnQ5V7dSBmkS8i B8362NJLKPeTw+1gQ2iyiNwnRFuCNlm5PQNkk/dgbnIoTnFMR4f4PXAPCpYMK2yU 9Se2IbBDH1G1w/odQ0bWGT66G3b66bICov8QvWrIbl83UyFVj05J20JsBs5hkcA= -----END CERTIFICATE-----Generated at Mon Apr 28 22:50:52 2025 by rpki-client on console.sobornost.net