$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/a7_b8KuJSDHX6UDEYAPGaJ54YuM.roa File: a7_b8KuJSDHX6UDEYAPGaJ54YuM.roa (raw, json) Hash identifier: Kb5Gcijs0REu593C1pS3vTz2pECGJEPO+ejMOYsbPK8= Subject key identifier: 6B:BF:DB:F0:AB:89:48:31:D7:E9:40:C4:60:03:C6:68:9E:78:62:E3 Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Certificate serial: 79 Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/a7_b8KuJSDHX6UDEYAPGaJ54YuM.roa Signing time: Fri 31 Jan 2025 01:34:46 +0000 ROA not before: Fri 31 Jan 2025 01:34:46 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9622 IP address blocks: 202.171.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Validity Not Before: Jan 31 01:34:46 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=6BBFDBF0AB894831D7E940C46003C6689E7862E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9b:7d:85:d0:13:bd:d5:15:f5:af:ac:9d:ac: 60:bc:bc:ce:d2:7f:90:9f:6f:a9:20:8d:57:92:a5: 6a:89:b4:d6:4f:7d:d1:18:98:68:4e:4f:64:90:e7: 12:af:a5:6c:34:aa:bc:18:e1:0d:dd:90:dc:b2:50: a7:c1:cb:1e:71:97:8a:74:99:5a:78:93:cb:de:4b: 89:18:62:eb:70:b2:ef:50:26:a1:d1:68:a3:f2:38: 97:4b:47:2f:11:79:aa:a2:85:3f:c8:a0:48:1b:94: 0e:da:57:b8:62:af:b4:08:07:61:28:4a:51:59:03: 33:35:47:01:9d:f7:48:06:13:0f:93:d6:ba:d2:3c: 13:9b:c7:e4:4a:cb:37:77:99:5c:f2:78:f3:51:38: 05:1f:88:65:a1:30:6a:63:0b:68:e3:df:5e:37:60: 54:b0:0f:6c:b2:09:9b:66:17:cb:23:94:24:a8:29: 33:ef:3f:26:01:fd:ee:99:b8:1e:04:90:3a:45:77: 3f:d4:df:b2:cd:11:29:bb:ce:80:3d:7f:f1:e7:76: f3:2d:98:7c:f5:8d:c6:16:fb:41:0f:d2:44:26:4c: 15:4e:1e:cb:97:c4:65:61:b2:8b:69:49:08:ed:89: 0e:fd:7c:7d:0f:16:32:55:73:58:ea:b7:59:f9:a3: f6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BF:DB:F0:AB:89:48:31:D7:E9:40:C4:60:03:C6:68:9E:78:62:E3 X509v3 Authority Key Identifier: keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/a7_b8KuJSDHX6UDEYAPGaJ54YuM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.171.112.0/20 Signature Algorithm: sha256WithRSAEncryption 3e:e4:74:b2:a6:60:10:2f:7f:6e:34:d0:f4:e2:9c:13:12:1f: 1e:9b:49:ca:c8:0c:fb:0d:d5:99:07:01:94:e3:60:e6:b9:a2: f9:c8:47:e9:84:e5:6f:65:c4:f4:9f:cb:5c:3f:8f:27:6c:17: 75:f7:43:f3:4a:dd:e5:02:34:8f:68:fb:cb:85:8e:44:c8:51: e6:08:21:10:43:43:83:6b:c5:29:b7:c2:6d:c2:f0:8f:16:3a: e9:5c:8e:09:e5:0d:33:8c:2f:da:37:ef:d8:a2:bf:db:8c:cb: dc:83:e2:d2:39:4e:0e:44:ee:f4:04:75:64:47:4b:00:d3:0d: 94:38:55:bd:e9:aa:2c:45:31:39:54:f4:9e:36:49:0f:80:91: 97:ea:9f:2c:cd:89:77:25:95:18:fe:2b:d4:3f:ea:d8:da:8c: 56:d0:c5:fd:b9:e7:62:ad:0f:88:d4:9b:7a:33:0d:30:b3:c6: 18:17:73:de:51:72:29:c7:f8:48:3a:b3:d7:ef:87:ff:14:39: 08:28:96:d5:5b:f5:ec:06:49:da:2a:cf:62:ef:ec:19:0c:fb: 29:24:64:09:dc:75:49:ff:f1:99:f7:ff:d6:ab:04:40:c7:b6: 2b:87:bb:4a:45:d7:0e:92:d6:ac:91:bc:8e:57:be:1f:95:f6: 3f:3e:06:64 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDA1 NUIyREFBQzQ4ODc4Q0M5QjExMjdBMjlDRjExNjY2OTIwQTIzMB4XDTI1MDEzMTAx MzQ0NloXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNkJCRkRCRjBBQjg5NDgz MUQ3RTk0MEM0NjAwM0M2Njg5RTc4NjJFMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJSbfYXQE73VFfWvrJ2sYLy8ztJ/kJ9vqSCNV5Klaom01k990RiY aE5PZJDnEq+lbDSqvBjhDd2Q3LJQp8HLHnGXinSZWniTy95LiRhi63Cy71AmodFo o/I4l0tHLxF5qqKFP8igSBuUDtpXuGKvtAgHYShKUVkDMzVHAZ33SAYTD5PWutI8 E5vH5ErLN3eZXPJ481E4BR+IZaEwamMLaOPfXjdgVLAPbLIJm2YXyyOUJKgpM+8/ JgH97pm4HgSQOkV3P9Tfss0RKbvOgD1/8ed28y2YfPWNxhb7QQ/SRCZMFU4ey5fE ZWGyi2lJCO2JDv18fQ8WMlVzWOq3Wfmj9jUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRrv9vwq4lIMdfpQMRgA8Zonnhi4zAfBgNVHSMEGDAWgBRdBVstqsSIeMybESei nPEWZpIKIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzkzL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1hU0NpTS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1h U0NpTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zOTMvYTdfYjhLdUpTREhYNlVERVlBUEdhSjU0WXVNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMqrcDANBgkqhkiG9w0BAQsFAAOCAQEAPuR0sqZgEC9/bjTQ9OKcExIfHptJ ysgM+w3VmQcBlONg5rmi+chH6YTlb2XE9J/LXD+PJ2wXdfdD80rd5QI0j2j7y4WO RMhR5gghEENDg2vFKbfCbcLwjxY66VyOCeUNM4wv2jfv2KK/24zL3IPi0jlODkTu 9AR1ZEdLANMNlDhVvemqLEUxOVT0njZJD4CRl+qfLM2JdyWVGP4r1D/q2NqMVtDF /bnnYq0PiNSbejMNMLPGGBdz3lFyKcf4SDqz1++H/xQ5CCiW1Vv17AZJ2irPYu/s GQz7KSRkCdx1Sf/xmff/1qsEQMe2K4e7SkXXDpLWrJG8jle+H5X2Pz4GZA== -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:31 2025 by rpki-client on console.sobornost.net