$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/-WYlhYLrNLBpWlgsJMQR6DxLPXQ.roa File: -WYlhYLrNLBpWlgsJMQR6DxLPXQ.roa (raw, json) Hash identifier: k/8mcdzaASO9MFiTnYNOnKaVIuWuSncevQCraoLqD8E= Subject key identifier: F9:66:25:85:82:EB:34:B0:69:5A:58:2C:24:C4:11:E8:3C:4B:3D:74 Certificate issuer: /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D Certificate serial: 2F Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/-WYlhYLrNLBpWlgsJMQR6DxLPXQ.roa Signing time: Sat 01 Mar 2025 01:29:29 +0000 ROA not before: Sat 01 Mar 2025 01:29:29 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 18071 IP address blocks: 157.8.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D Validity Not Before: Mar 1 01:29:29 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=F966258582EB34B0695A582C24C411E83C4B3D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:05:67:ed:53:b5:57:86:bd:78:90:f0:ae: 32:e3:2b:d6:57:ca:03:92:e0:cd:84:1a:38:e3:97: 1f:20:23:2e:79:b1:3a:f7:44:e9:0c:d5:65:84:27: b5:32:57:9c:91:5c:de:ca:24:46:20:10:52:e2:39: 5f:44:2a:38:b7:cb:52:d8:1c:c3:14:52:9d:22:2a: a5:27:57:82:39:53:b3:63:37:6d:34:7d:4c:a6:a2: c1:24:a6:41:cb:58:19:6c:3e:d0:4b:90:0d:b2:5f: 63:e0:1b:a4:d1:a2:9d:f3:b8:f7:0d:62:38:41:d8: d2:74:c1:85:c7:d4:26:38:25:db:c6:f9:ac:ed:1d: d2:a1:5c:d3:ae:bb:a9:58:8b:cc:d5:54:b3:00:2c: 8d:45:d5:1f:b0:f3:92:25:4f:f9:52:af:82:43:b8: 6b:3a:28:ea:0f:78:53:ab:86:ff:95:27:c1:23:cc: 59:a7:35:b9:e6:d9:43:99:8c:37:54:f4:29:18:aa: 48:11:ec:33:ea:db:8c:cf:dc:49:05:81:40:9e:96: fd:38:92:bd:7e:6f:6b:36:ad:dd:05:3c:71:98:fe: 62:b5:b4:24:18:c5:39:be:94:7e:ea:19:34:45:1f: ed:b9:2a:00:1c:d7:a5:e5:08:a5:52:1c:9a:f8:5a: 12:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:66:25:85:82:EB:34:B0:69:5A:58:2C:24:C4:11:E8:3C:4B:3D:74 X509v3 Authority Key Identifier: keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/-WYlhYLrNLBpWlgsJMQR6DxLPXQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.8.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:1e:dc:d6:d2:09:36:df:a8:d1:13:7e:44:2d:ed:cc:0e:17: 34:7c:92:c9:5b:17:e0:91:a9:d1:cf:34:fe:79:a6:01:1f:ea: ca:38:4d:9d:5e:e8:78:e0:8d:0b:29:45:24:9f:64:eb:a1:4d: ee:66:b0:b8:02:73:f3:ce:17:76:7f:3f:47:05:f2:a3:7b:78: 44:21:38:ba:e7:b1:75:3f:4a:36:7d:59:85:79:a0:81:8f:bb: 72:82:85:29:7b:5c:40:72:b2:09:04:d4:ce:5b:8e:5f:86:4d: 6c:49:06:79:d2:60:c6:a4:3c:5c:ed:99:ef:e1:4d:6e:d3:90: 7c:09:2f:00:8c:04:de:7d:f3:59:ad:38:a4:29:b3:bb:62:0e: b9:5e:d2:a8:28:07:dc:6d:d3:ec:d6:a7:5b:19:88:81:53:9e: 1f:26:87:e7:35:82:17:61:4d:c6:d0:80:10:a2:0c:b9:ff:14: ed:ed:2b:f6:67:62:41:9a:0d:8a:ae:72:4e:db:37:c9:f4:4f: 4e:01:ef:2d:96:17:2e:06:0e:c0:ef:a7:2a:8d:a1:64:6f:fd: 30:76:a2:3b:28:95:95:fe:34:2b:c0:cc:7b:9d:0e:30:4e:44: 3b:c2:96:77:72:35:c4:01:cb:60:46:70:6b:65:43:67:6f:a0: 28:fd:24:29 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTkx Q0I5RjRDNDIyRDNCM0Q2NzUzNzFCMThBOERBRERBRTg3OThEMB4XDTI1MDMwMTAx MjkyOVoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoRjk2NjI1ODU4MkVCMzRC MDY5NUE1ODJDMjRDNDExRTgzQzRCM0Q3NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANDHBWftU7VXhr14kPCuMuMr1lfKA5LgzYQaOOOXHyAjLnmxOvdE 6QzVZYQntTJXnJFc3sokRiAQUuI5X0QqOLfLUtgcwxRSnSIqpSdXgjlTs2M3bTR9 TKaiwSSmQctYGWw+0EuQDbJfY+AbpNGinfO49w1iOEHY0nTBhcfUJjgl28b5rO0d 0qFc0667qViLzNVUswAsjUXVH7DzkiVP+VKvgkO4azoo6g94U6uG/5UnwSPMWac1 uebZQ5mMN1T0KRiqSBHsM+rbjM/cSQWBQJ6W/TiSvX5vazat3QU8cZj+YrW0JBjF Ob6UfuoZNEUf7bkqABzXpeUIpVIcmvhaEjECAwEAAaOCAiUwggIhMB0GA1UdDgQW BBT5ZiWFgus0sGlaWCwkxBHoPEs9dDAfBgNVHSMEGDAWgBRxkcufTEItOz1nU3Gx io2t2uh5jTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTkzNy9jWkhMbjB4Q0xUczlaMU54c1lxTnJkcm9lWTAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jWkhMbjB4Q0xUczlaMU54c1lxTnJk cm9lWTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTkzNy8tV1lsaFlMck5MQnBXbGdzSk1RUjZEeExQWFEucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAnQgwDQYJKoZIhvcNAQELBQADggEBADke3NbSCTbfqNETfkQt7cwOFzR8 kslbF+CRqdHPNP55pgEf6so4TZ1e6HjgjQspRSSfZOuhTe5msLgCc/POF3Z/P0cF 8qN7eEQhOLrnsXU/SjZ9WYV5oIGPu3KChSl7XEBysgkE1M5bjl+GTWxJBnnSYMak PFztme/hTW7TkHwJLwCMBN5981mtOKQps7tiDrle0qgoB9xt0+zWp1sZiIFTnh8m h+c1ghdhTcbQgBCiDLn/FO3tK/ZnYkGaDYquck7bN8n0T04B7y2WFy4GDsDvpyqN oWRv/TB2ojsolZX+NCvAzHudDjBORDvClndyNcQBy2BGcGtlQ2dvoCj9JCk= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:06 2025 by rpki-client on console.sobornost.net