$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/LEJHSf0vPGK01DVRRUeoHsnPOKQ.roa File: LEJHSf0vPGK01DVRRUeoHsnPOKQ.roa (raw, json) Hash identifier: zo7x3a7FDqYuprvPrq3I0RUd1yjJ+BySPiDLIN7Iw7Q= Subject key identifier: 2C:42:47:49:FD:2F:3C:62:B4:D4:35:51:45:47:A8:1E:C9:CF:38:A4 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 2F Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/LEJHSf0vPGK01DVRRUeoHsnPOKQ.roa Signing time: Fri 31 Jan 2025 01:33:48 +0000 ROA not before: Fri 31 Jan 2025 01:33:48 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 17698 IP address blocks: 202.168.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Jan 31 01:33:48 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=2C424749FD2F3C62B4D435514547A81EC9CF38A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:18:6b:57:82:b0:87:c0:eb:d8:be:81:c8:30: 80:a1:50:ea:54:1f:56:ca:58:32:1e:ba:f5:f3:4d: 5b:a0:9e:53:e7:5f:78:ee:89:0e:93:1b:89:74:06: 9b:ed:61:93:e9:85:01:17:20:c3:fc:70:c6:2c:d2: 8c:fa:5c:d0:38:52:f0:c2:ec:68:bc:29:46:65:fd: 8a:b8:74:2b:80:f0:c4:60:7f:30:17:32:a5:9a:4c: a2:7f:e0:ec:56:76:f0:43:8a:4f:52:0d:a0:9e:4c: 7a:2b:2e:d2:7d:be:7a:4d:9d:26:6e:64:fa:41:b8: 8b:6d:6a:c9:1f:86:a6:31:40:95:5a:a1:e1:d1:5d: 0a:1d:96:74:ee:9f:ce:90:ea:58:68:2f:ad:3a:b7: 5e:e2:9b:41:16:33:20:57:09:1b:39:4a:43:f8:ea: de:57:bb:15:6f:64:be:ea:09:5d:77:10:00:23:77: a3:2f:b2:7d:10:3a:44:00:2b:b9:8e:01:7a:de:99: c2:72:db:aa:98:61:1c:e2:ba:bf:4b:83:ff:a3:f3: 80:02:92:15:e0:fa:6d:eb:65:ba:2a:81:7a:cb:bb: 95:fe:2d:d7:48:4d:17:5a:37:8a:30:a0:a2:5e:13: 92:04:b3:56:7f:cd:13:e7:57:35:4b:49:5d:00:f8: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:42:47:49:FD:2F:3C:62:B4:D4:35:51:45:47:A8:1E:C9:CF:38:A4 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/LEJHSf0vPGK01DVRRUeoHsnPOKQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.168.216.0/21 Signature Algorithm: sha256WithRSAEncryption d5:c2:eb:a1:c9:fa:26:e8:06:51:3f:fb:0e:45:c4:dc:a1:e8: b3:f7:26:f6:3f:99:a2:a6:0f:7d:45:9d:52:ac:e9:5b:6d:06: c4:58:f1:59:d4:4c:94:14:0a:24:03:90:1c:51:ec:8c:05:cd: f8:58:07:f6:6f:53:eb:51:39:70:7d:ec:e9:87:ba:97:c1:1e: 43:69:bf:eb:53:05:95:f8:14:5c:37:ad:bd:af:54:bf:e5:b6: 9d:73:2f:fd:8a:e3:00:80:40:5c:dd:f3:fa:14:e9:dd:7b:7f: 13:5c:32:3e:80:2f:41:10:67:b1:c1:eb:dc:ad:c1:07:86:01: a5:95:24:a7:5e:00:24:e2:8a:09:af:47:65:d4:d5:95:f9:a5: 15:de:3f:ff:fa:fb:fb:86:b8:fe:cc:7b:76:08:d0:a2:77:df: c5:97:8f:e6:fb:18:54:d4:e9:ea:dd:3d:0c:04:b7:d1:bd:d2: 29:b0:dc:d9:fe:ea:7d:63:60:48:58:d0:da:86:05:09:83:48: 6d:61:29:5c:da:bf:f6:75:d8:07:a2:8d:b2:51:ea:f2:fb:53: 3e:ac:03:05:fc:bb:96:0f:39:a0:fd:8e:d2:0b:b2:cc:94:a6: 4a:9a:b4:3e:a6:85:f3:88:a8:a9:28:6a:ed:95:f3:2d:b4:80: ca:f4:76:51 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI1MDEzMTAx MzM0OFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoMkM0MjQ3NDlGRDJGM0M2 MkI0RDQzNTUxNDU0N0E4MUVDOUNGMzhBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPIYa1eCsIfA69i+gcgwgKFQ6lQfVspYMh669fNNW6CeU+dfeO6J DpMbiXQGm+1hk+mFARcgw/xwxizSjPpc0DhS8MLsaLwpRmX9irh0K4DwxGB/MBcy pZpMon/g7FZ28EOKT1INoJ5Meisu0n2+ek2dJm5k+kG4i21qyR+GpjFAlVqh4dFd Ch2WdO6fzpDqWGgvrTq3XuKbQRYzIFcJGzlKQ/jq3le7FW9kvuoJXXcQACN3oy+y fRA6RAAruY4Bet6ZwnLbqphhHOK6v0uD/6PzgAKSFeD6betluiqBesu7lf4t10hN F1o3ijCgol4TkgSzVn/NE+dXNUtJXQD4R+cCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQsQkdJ/S88YrTUNVFFR6geyc84pDAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwODIyL0xFSkhTZjB2UEdLMDFEVlJSVWVvSHNuUE9LUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAPKqNgwDQYJKoZIhvcNAQELBQADggEBANXC66HJ+iboBlE/+w5FxNyh 6LP3JvY/maKmD31FnVKs6VttBsRY8VnUTJQUCiQDkBxR7IwFzfhYB/ZvU+tROXB9 7OmHupfBHkNpv+tTBZX4FFw3rb2vVL/ltp1zL/2K4wCAQFzd8/oU6d17fxNcMj6A L0EQZ7HB69ytwQeGAaWVJKdeACTiigmvR2XU1ZX5pRXeP//6+/uGuP7Me3YI0KJ3 38WXj+b7GFTU6erdPQwEt9G90imw3Nn+6n1jYEhY0NqGBQmDSG1hKVzav/Z12Aei jbJR6vL7Uz6sAwX8u5YPOaD9jtILssyUpkqatD6mhfOIqKkoau2V8y20gMr0dlE= -----END CERTIFICATE-----Generated at Mon Apr 28 22:50:54 2025 by rpki-client on console.sobornost.net