$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/vXA9z1Sbcw8lFShCOxHIi7jH2Fc.roa File: vXA9z1Sbcw8lFShCOxHIi7jH2Fc.roa (raw, json) Hash identifier: NVtwzJ44GJSNMFozBCtaolqfmgf6UMDxJ38J2var9qw= Subject key identifier: BD:70:3D:CF:54:9B:73:0F:25:15:28:42:3B:11:C8:8B:B8:C7:D8:57 Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Certificate serial: 66 Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/vXA9z1Sbcw8lFShCOxHIi7jH2Fc.roa Signing time: Tue 01 Apr 2025 01:32:36 +0000 ROA not before: Tue 01 Apr 2025 01:32:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 7684 IP address blocks: 157.17.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Validity Not Before: Apr 1 01:32:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=BD703DCF549B730F251528423B11C88BB8C7D857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:87:ca:35:e2:1c:b7:48:a4:15:ad:8b:1a: 47:a0:9f:08:8e:8a:d5:aa:ad:d1:d4:a7:4d:61:d1: b1:0b:7f:aa:ac:c6:a8:1e:6d:62:77:61:3b:8d:e1: ce:a2:6a:c3:f1:05:98:da:ba:0e:2f:f6:15:4e:c9: 38:77:ae:89:1e:73:26:86:9b:8a:1e:64:5e:68:8e: 72:6f:ae:7a:62:4d:e5:49:08:12:05:f0:4e:31:fe: dc:55:ab:9e:11:38:c4:e7:cf:2a:26:c0:33:c9:4d: 71:b2:2e:63:76:0b:0e:be:1a:fe:8f:8c:68:6d:0f: 6c:23:c3:1f:3f:42:57:8a:09:b8:b8:7e:c9:0f:dd: 2f:7d:dc:34:e6:09:cd:8c:0b:db:5c:5f:27:fe:15: 45:10:d7:02:20:c5:2b:86:36:26:57:a6:da:69:23: e1:12:dd:a6:5a:c8:eb:5b:64:e0:8e:65:04:13:c4: cf:38:25:2a:9e:80:3b:69:15:56:c2:dd:91:c8:5e: 93:77:56:ba:4a:d4:1e:66:76:31:4b:90:d3:f3:61: 06:fa:59:d1:71:61:a8:e1:7c:ad:be:49:49:07:41: 43:61:1b:c5:4a:4f:e0:0e:51:29:0b:7b:bc:90:16: 80:29:d4:b4:46:07:fd:05:79:2e:1c:ce:ef:5b:a5: 67:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:70:3D:CF:54:9B:73:0F:25:15:28:42:3B:11:C8:8B:B8:C7:D8:57 X509v3 Authority Key Identifier: keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/vXA9z1Sbcw8lFShCOxHIi7jH2Fc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.17.32.0/20 Signature Algorithm: sha256WithRSAEncryption 88:b1:f1:9d:ff:a9:e1:ec:2e:d9:a8:2f:83:da:f9:98:9c:2b: d0:b2:95:e5:94:29:6a:16:ad:79:0e:db:da:1c:7e:40:d0:6c: 3c:7a:13:dc:4f:80:1f:de:63:7b:c6:eb:4e:12:02:fa:7a:06: bf:6e:80:fd:b4:7e:ed:a3:bc:b1:85:76:86:55:96:6c:d2:39: 59:05:80:41:c8:b1:33:e1:a1:99:66:3c:0a:79:8e:e0:68:1b: 54:13:1c:47:42:78:62:14:0b:5c:76:9e:05:c6:f7:11:3b:05: fa:cc:bd:5f:49:15:e2:da:be:a7:3f:ae:0c:97:08:db:e5:47: f4:92:e3:9a:e7:04:e0:2a:99:17:4e:bc:22:89:0f:6b:a6:a4: 4c:eb:67:ea:23:33:35:d9:c2:f3:d5:ed:63:d4:30:0d:78:a6: d6:53:88:d0:0a:ad:79:ce:a1:68:96:8c:6f:cb:8e:16:b1:fa: 7c:39:cb:cc:01:0f:a2:7a:90:c4:b6:f9:3b:e7:c8:ba:4d:70: 28:b5:09:ed:47:63:90:25:a0:87:9d:12:1d:29:32:9a:11:b3: 32:35:41:a0:79:fd:c0:6e:09:f9:b3:45:a5:31:97:4a:84:93: 7c:ef:e2:5a:f9:fa:c6:4c:a4:ea:22:e4:9a:64:61:39:e4:1c: 33:b8:97:34 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkM0 NjI5NEE1RDU2NDM3RTE5QTExQUVGOUZCOUI4Nzc2OTAxNDNFMB4XDTI1MDQwMTAx MzIzNloXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQkQ3MDNEQ0Y1NDlCNzMw RjI1MTUyODQyM0IxMUM4OEJCOEM3RDg1NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL3eh8o14hy3SKQVrYsaR6CfCI6K1aqt0dSnTWHRsQt/qqzGqB5t YndhO43hzqJqw/EFmNq6Di/2FU7JOHeuiR5zJoabih5kXmiOcm+uemJN5UkIEgXw TjH+3FWrnhE4xOfPKibAM8lNcbIuY3YLDr4a/o+MaG0PbCPDHz9CV4oJuLh+yQ/d L33cNOYJzYwL21xfJ/4VRRDXAiDFK4Y2Jlem2mkj4RLdplrI61tk4I5lBBPEzzgl Kp6AO2kVVsLdkchek3dWukrUHmZ2MUuQ0/NhBvpZ0XFhqOF8rb5JSQdBQ2EbxUpP 4A5RKQt7vJAWgCnUtEYH/QV5LhzO71ulZykCAwEAAaOCAigwggIkMB0GA1UdDgQW BBS9cD3PVJtzDyUVKEI7EciLuMfYVzAfBgNVHSMEGDAWgBT7xGKUpdVkN+GaEa75 +5uHdpAUPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyNDcvLThSaWxLWFZaRGZobWhHdS1mdWJoM2FRRkQ0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLThSaWxLWFZaRGZobWhHdS1mdWJo M2FRRkQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjQ3L3ZYQTl6MVNiY3c4bEZTaENPeEhJaTdqSDJGYy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBASdESAwDQYJKoZIhvcNAQELBQADggEBAIix8Z3/qeHsLtmoL4Pa+Zic K9CyleWUKWoWrXkO29ocfkDQbDx6E9xPgB/eY3vG604SAvp6Br9ugP20fu2jvLGF doZVlmzSOVkFgEHIsTPhoZlmPAp5juBoG1QTHEdCeGIUC1x2ngXG9xE7BfrMvV9J FeLavqc/rgyXCNvlR/SS45rnBOAqmRdOvCKJD2umpEzrZ+ojMzXZwvPV7WPUMA14 ptZTiNAKrXnOoWiWjG/Ljhax+nw5y8wBD6J6kMS2+TvnyLpNcCi1Ce1HY5AloIed Eh0pMpoRszI1QaB5/cBuCfmzRaUxl0qEk3zv4lr5+sZMpOoi5JpkYTnkHDO4lzQ= -----END CERTIFICATE-----Generated at Mon Apr 28 22:50:55 2025 by rpki-client on console.sobornost.net