$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20273/IrO07XN0ygV3p8E3j-Ibr-5dLrs.roa File: IrO07XN0ygV3p8E3j-Ibr-5dLrs.roa (raw, json) Hash identifier: RFD0/MiZ2XMMFDXGHNUq1tUkxRE45H8+FZlzI/E+j8M= Subject key identifier: 22:B3:B4:ED:73:74:CA:05:77:A7:C1:37:8F:E2:1B:AF:EE:5D:2E:BB Certificate issuer: /CN=895716F04D35F0F8BA47469217046A965E7A9B7A Certificate serial: 02 Authority key identifier: 89:57:16:F0:4D:35:F0:F8:BA:47:46:92:17:04:6A:96:5E:7A:9B:7A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iVcW8E018Pi6R0aSFwRqll56m3o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/IrO07XN0ygV3p8E3j-Ibr-5dLrs.roa Signing time: Sun 19 Jan 2025 23:54:07 +0000 ROA not before: Sun 19 Jan 2025 23:54:07 +0000 ROA not after: Mon 19 Jan 2026 14:26:04 +0000 asID: 38656 IP address blocks: 161.248.40.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/iVcW8E018Pi6R0aSFwRqll56m3o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/iVcW8E018Pi6R0aSFwRqll56m3o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iVcW8E018Pi6R0aSFwRqll56m3o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=895716F04D35F0F8BA47469217046A965E7A9B7A Validity Not Before: Jan 19 23:54:07 2025 GMT Not After : Jan 19 14:26:04 2026 GMT Subject: CN=22B3B4ED7374CA0577A7C1378FE21BAFEE5D2EBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:0b:e7:a4:cb:6c:28:e9:a5:b6:c1:e7:c4: 31:73:36:be:7f:4f:f0:8d:b4:f6:cf:f4:e8:a0:bc: cf:70:73:da:09:7f:b4:dd:f8:d8:e4:0c:e8:13:34: a5:5c:3c:d5:d9:b4:7c:47:d4:a1:78:61:58:d2:7b: 89:7c:9c:27:ae:e9:46:4f:05:05:d7:7d:14:a1:84: 5e:98:3a:6c:1d:76:07:7b:12:fc:06:ec:90:6f:a6: 01:c5:49:77:87:7d:bc:f0:2f:e1:91:60:1b:fc:5f: 20:1d:f4:73:8e:a0:f9:8e:92:f8:cc:6c:ba:4f:43: 93:72:13:48:9c:92:01:3d:a0:0a:8c:a0:8d:eb:4e: 1e:60:7b:d2:17:81:95:ca:e0:ed:53:92:6e:a9:be: ab:d3:63:42:43:b0:b2:64:81:e7:23:89:bb:8b:31: 01:d0:a9:0a:2a:bf:29:0d:e8:57:3c:0e:37:e8:52: d2:11:cd:f8:51:55:37:8c:63:52:1b:de:a8:cb:21: 27:26:9d:36:bc:d7:ed:ed:05:af:47:1d:12:b0:2c: 13:4e:d1:0d:dd:e8:73:9d:ca:5b:a7:3e:67:7b:79: 80:6d:71:65:2a:78:e8:16:0d:10:ec:67:74:29:11: cc:83:a3:df:69:21:ef:d6:82:7f:c1:01:50:9a:82: e6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B3:B4:ED:73:74:CA:05:77:A7:C1:37:8F:E2:1B:AF:EE:5D:2E:BB X509v3 Authority Key Identifier: keyid:89:57:16:F0:4D:35:F0:F8:BA:47:46:92:17:04:6A:96:5E:7A:9B:7A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/iVcW8E018Pi6R0aSFwRqll56m3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iVcW8E018Pi6R0aSFwRqll56m3o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/IrO07XN0ygV3p8E3j-Ibr-5dLrs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.40.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:02:8b:8a:58:5c:50:a7:66:58:b3:2a:50:39:8c:32:9a:b0: ac:55:a0:1e:45:e4:b2:52:56:16:9b:26:5f:2f:8e:23:d3:54: 66:81:cb:4d:b0:17:f6:8b:06:5f:d7:92:0a:d8:40:36:91:18: 18:6c:96:c0:e2:66:b3:0c:dd:fc:ad:2f:97:5d:f2:ad:8b:94: b4:76:5d:a3:ce:e0:87:14:62:0a:f1:1d:6f:f8:d3:a5:6d:67: c1:a5:d9:0f:84:ad:c0:2f:8a:2c:f3:e3:78:89:44:59:5d:22: a5:d6:51:00:67:3c:3b:1f:25:c0:b5:a2:f3:c9:67:36:02:2e: 8e:fd:e3:d7:69:fd:8e:c1:ce:0a:08:be:82:4b:ec:1f:ee:b6: b6:26:ee:1b:05:cc:02:cf:e5:0b:52:84:f3:9f:b2:15:d2:b8: 2b:c5:77:8d:65:af:fa:16:1f:82:cf:90:48:8c:5d:e1:12:af: b7:a0:7a:10:82:19:e1:32:99:1f:29:8d:63:fd:86:f8:d0:92: 14:39:dc:75:bf:e3:79:e7:c5:43:f0:1a:a4:41:77:4a:70:ea: 72:0e:ec:39:a0:a0:ce:1e:a9:64:8d:aa:83:b6:89:94:d3:41: 0b:d4:22:e5:f7:07:46:0d:8e:48:8b:94:03:13:7b:9f:c0:07: dc:2b:c3:27 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTU3 MTZGMDREMzVGMEY4QkE0NzQ2OTIxNzA0NkE5NjVFN0E5QjdBMB4XDTI1MDExOTIz NTQwN1oXDTI2MDExOTE0MjYwNFowMzExMC8GA1UEAxMoMjJCM0I0RUQ3Mzc0Q0Ew NTc3QTdDMTM3OEZFMjFCQUZFRTVEMkVCQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALmzC+eky2wo6aW2wefEMXM2vn9P8I209s/06KC8z3Bz2gl/tN34 2OQM6BM0pVw81dm0fEfUoXhhWNJ7iXycJ67pRk8FBdd9FKGEXpg6bB12B3sS/Abs kG+mAcVJd4d9vPAv4ZFgG/xfIB30c46g+Y6S+Mxsuk9Dk3ITSJySAT2gCoygjetO HmB70heBlcrg7VOSbqm+q9NjQkOwsmSB5yOJu4sxAdCpCiq/KQ3oVzwON+hS0hHN +FFVN4xjUhveqMshJyadNrzX7e0Fr0cdErAsE07RDd3oc53KW6c+Z3t5gG1xZSp4 6BYNEOxndCkRzIOj32kh79aCf8EBUJqC5k8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBQis7Ttc3TKBXenwTeP4huv7l0uuzAfBgNVHSMEGDAWgBSJVxbwTTXw+LpHRpIX BGqWXnqbejAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNzMvaVZjVzhFMDE4UGk2UjBhU0Z3UnFsbDU2bTNvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVZjVzhFMDE4UGk2UjBhU0Z3UnFs bDU2bTNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjczL0lyTzA3WE4weWdWM3A4RTNqLUlici01ZExycy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGh+CgwDQYJKoZIhvcNAQELBQADggEBACwCi4pYXFCnZlizKlA5jDKa sKxVoB5F5LJSVhabJl8vjiPTVGaBy02wF/aLBl/XkgrYQDaRGBhslsDiZrMM3fyt L5dd8q2LlLR2XaPO4IcUYgrxHW/406VtZ8Gl2Q+ErcAviizz43iJRFldIqXWUQBn PDsfJcC1ovPJZzYCLo7949dp/Y7BzgoIvoJL7B/utrYm7hsFzALP5QtShPOfshXS uCvFd41lr/oWH4LPkEiMXeESr7egehCCGeEymR8pjWP9hvjQkhQ53HW/43nnxUPw GqRBd0pw6nIO7DmgoM4eqWSNqoO2iZTTQQvUIuX3B0YNjkiLlAMTe5/AB9wrwyc= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:14 2025 by rpki-client on console.sobornost.net