$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/6oklst0zAPXz6IH2vDIaJB-kKGQ.roa File: 6oklst0zAPXz6IH2vDIaJB-kKGQ.roa (raw, json) Hash identifier: CVhIIOfpa2l88bQGyfPnWSGyIlWDZfNykUILBLUgy+E= Subject key identifier: EA:89:25:B2:DD:33:00:F5:F3:E8:81:F6:BC:32:1A:24:1F:A4:28:64 Certificate issuer: /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D Certificate serial: 31 Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/6oklst0zAPXz6IH2vDIaJB-kKGQ.roa Signing time: Sat 01 Mar 2025 01:29:33 +0000 ROA not before: Sat 01 Mar 2025 01:29:33 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 18071 IP address blocks: 137.40.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D Validity Not Before: Mar 1 01:29:33 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=EA8925B2DD3300F5F3E881F6BC321A241FA42864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:91:d5:e6:79:fd:a4:d5:fd:a2:c4:b9:00:04: b9:ef:dc:c8:1a:1d:46:2f:7d:88:c0:13:09:64:79: 6c:72:e6:ef:be:da:12:84:de:49:66:d6:7b:c1:a2: fa:e9:82:d7:b4:65:c1:a1:62:2f:89:39:78:82:aa: 16:0d:3f:93:34:96:f2:ce:e9:ac:5a:48:29:5c:9a: 35:c6:81:83:15:fc:6e:88:bd:13:3a:66:fe:ed:38: 46:68:58:c6:ba:d6:ed:d0:46:50:33:5c:24:ea:c7: c6:44:45:28:0e:c2:5c:20:70:63:b3:3a:8f:da:f2: 02:44:01:13:b4:bf:06:ce:2d:33:6a:8d:95:b9:96: e3:1d:e6:90:81:ac:0a:fa:bd:4a:98:d6:31:54:1b: 92:9e:a0:13:08:d0:14:81:17:48:36:71:c4:19:13: 27:39:11:e2:f4:2a:a8:06:dd:fb:30:70:ac:9e:4b: c6:8e:e2:69:ca:4a:36:b0:5b:c6:df:cb:a3:7a:e4: 27:e9:8b:64:69:78:af:ff:4c:73:41:dc:4c:d5:7c: 6d:a8:39:cd:04:a6:14:75:cc:3a:82:06:60:87:24: 9b:84:8f:01:9c:22:e7:65:ff:a4:7c:51:3a:5d:a2: 0d:5d:ba:fe:25:d9:2f:69:d0:1b:62:c3:b9:8e:c2: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:89:25:B2:DD:33:00:F5:F3:E8:81:F6:BC:32:1A:24:1F:A4:28:64 X509v3 Authority Key Identifier: keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/6oklst0zAPXz6IH2vDIaJB-kKGQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 137.40.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:d7:be:4d:a3:5b:17:97:9a:09:ee:c9:2e:70:4b:2d:65:2b: 28:53:33:5d:5f:33:a4:b5:86:d3:6a:e3:b9:14:87:7b:7a:a1: 9b:e7:9e:07:18:a4:43:f3:ed:46:35:71:93:96:05:c0:9a:e5: 08:cd:59:dc:9d:8a:af:12:ca:81:c6:24:83:58:48:01:ab:1c: eb:28:a8:83:07:55:f0:d6:e3:3c:3c:80:1e:c8:29:05:d1:27: 59:1a:37:97:1f:ac:f1:21:55:16:9d:fc:4e:a9:07:19:5d:70: fc:ca:3a:cc:d2:9e:2b:7e:33:77:94:7e:5a:35:a0:f4:9d:a9: 03:98:a7:64:3a:26:48:39:43:ad:52:e3:5f:32:ec:13:57:10: 6f:c6:d3:ac:cb:4b:a1:5a:35:96:f8:33:7c:8b:96:22:1e:35: e2:f4:a9:c7:c2:d6:6c:03:fe:d3:f3:6e:37:27:2a:88:07:51: 8b:46:5b:3a:50:40:dc:cb:98:e2:c2:2c:1e:f4:25:9e:d2:b3: 55:36:a1:73:4b:0b:35:c7:63:0e:ee:0c:52:af:c5:98:5b:ed: a0:c6:e1:af:06:c3:82:26:f6:e5:18:9b:f0:9c:83:4f:06:3b: 5b:c1:ab:8f:81:a3:8b:5d:07:da:e9:20:92:ce:4a:31:02:9c: 8a:17:3f:7c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTkx Q0I5RjRDNDIyRDNCM0Q2NzUzNzFCMThBOERBRERBRTg3OThEMB4XDTI1MDMwMTAx MjkzM1oXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoRUE4OTI1QjJERDMzMDBG NUYzRTg4MUY2QkMzMjFBMjQxRkE0Mjg2NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANiR1eZ5/aTV/aLEuQAEue/cyBodRi99iMATCWR5bHLm777aEoTe SWbWe8Gi+umC17RlwaFiL4k5eIKqFg0/kzSW8s7prFpIKVyaNcaBgxX8boi9Ezpm /u04RmhYxrrW7dBGUDNcJOrHxkRFKA7CXCBwY7M6j9ryAkQBE7S/Bs4tM2qNlbmW 4x3mkIGsCvq9SpjWMVQbkp6gEwjQFIEXSDZxxBkTJzkR4vQqqAbd+zBwrJ5Lxo7i acpKNrBbxt/Lo3rkJ+mLZGl4r/9Mc0HcTNV8bag5zQSmFHXMOoIGYIckm4SPAZwi 52X/pHxROl2iDV26/iXZL2nQG2LDuY7CSycCAwEAAaOCAiUwggIhMB0GA1UdDgQW BBTqiSWy3TMA9fPogfa8MhokH6QoZDAfBgNVHSMEGDAWgBRxkcufTEItOz1nU3Gx io2t2uh5jTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTkzNy9jWkhMbjB4Q0xUczlaMU54c1lxTnJkcm9lWTAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jWkhMbjB4Q0xUczlaMU54c1lxTnJk cm9lWTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTkzNy82b2tsc3QwekFQWHo2SUgydkRJYUpCLWtLR1Eucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAiSgwDQYJKoZIhvcNAQELBQADggEBAD/Xvk2jWxeXmgnuyS5wSy1lKyhT M11fM6S1htNq47kUh3t6oZvnngcYpEPz7UY1cZOWBcCa5QjNWdydiq8SyoHGJINY SAGrHOsoqIMHVfDW4zw8gB7IKQXRJ1kaN5cfrPEhVRad/E6pBxldcPzKOszSnit+ M3eUflo1oPSdqQOYp2Q6Jkg5Q61S418y7BNXEG/G06zLS6FaNZb4M3yLliIeNeL0 qcfC1mwD/tPzbjcnKogHUYtGWzpQQNzLmOLCLB70JZ7Ss1U2oXNLCzXHYw7uDFKv xZhb7aDG4a8Gw4Im9uUYm/Ccg08GO1vBq4+Bo4tdB9rpIJLOSjECnIoXP3w= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:06 2025 by rpki-client on console.sobornost.net