$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/fHP1Bpj8eD6aT1DlL8tw0V4Hx-Y.roa File: fHP1Bpj8eD6aT1DlL8tw0V4Hx-Y.roa (raw, json) Hash identifier: XUh5x6DdtQuLXo20hLZRS3NbH8OjYfa7ZXnDIu2aHOU= Subject key identifier: 7C:73:F5:06:98:FC:78:3E:9A:4F:50:E5:2F:CB:70:D1:5E:07:C7:E6 Certificate issuer: /CN=FBFBE00E03FC9290AE586EF8556391D165C2F1AD Certificate serial: 2A Authority key identifier: FB:FB:E0:0E:03:FC:92:90:AE:58:6E:F8:55:63:91:D1:65:C2:F1:AD Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/fHP1Bpj8eD6aT1DlL8tw0V4Hx-Y.roa Signing time: Fri 31 Jan 2025 01:34:50 +0000 ROA not before: Fri 31 Jan 2025 01:34:50 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9622 IP address blocks: 157.70.208.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBFBE00E03FC9290AE586EF8556391D165C2F1AD Validity Not Before: Jan 31 01:34:50 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=7C73F50698FC783E9A4F50E52FCB70D15E07C7E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:33:8f:c2:c5:f8:5a:db:2f:a9:f1:6e:5b: f0:c9:be:5d:72:85:97:60:d4:a5:b5:a0:6f:f1:53: d6:49:c2:f6:ea:31:7a:f1:72:8c:e7:77:7e:bd:0e: 62:db:2e:99:7c:e9:84:cd:26:74:fb:3c:0b:cb:a2: 61:e6:8b:20:7e:50:26:49:06:4a:ef:62:4e:68:32: 56:cb:5b:d5:14:42:b1:71:8e:62:ec:e0:a8:4b:bf: 97:b6:37:b7:5c:88:dd:16:c0:3e:6b:2b:1c:0b:d5: 78:e6:d5:3e:ba:26:1b:d7:be:7a:bb:a6:95:ef:06: 49:fa:b1:1c:1e:6f:07:34:56:f6:4f:fe:21:2c:19: 35:3f:55:bb:35:df:1e:ff:3e:b6:94:80:17:f2:2c: cd:9c:aa:d6:77:16:17:3d:48:63:a6:a1:e3:8e:56: 29:5b:34:da:2e:9a:85:e1:d9:88:65:66:1b:a6:8d: ff:1f:d8:e6:8b:7e:46:5a:42:76:f1:0e:ca:30:5e: e2:f5:5c:0a:a3:85:7d:cc:3e:07:50:af:36:e7:e2: d9:d9:17:9f:46:03:4e:19:35:96:d1:b7:a4:dd:ec: 5d:a5:ad:db:99:64:35:42:12:1b:c2:93:77:ea:5b: 2b:1e:ae:03:7f:56:97:e4:11:f9:af:83:99:16:45: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:73:F5:06:98:FC:78:3E:9A:4F:50:E5:2F:CB:70:D1:5E:07:C7:E6 X509v3 Authority Key Identifier: keyid:FB:FB:E0:0E:03:FC:92:90:AE:58:6E:F8:55:63:91:D1:65:C2:F1:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/fHP1Bpj8eD6aT1DlL8tw0V4Hx-Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.70.208.0/20 Signature Algorithm: sha256WithRSAEncryption 13:49:e8:f1:cf:fa:2c:4b:6e:a6:35:e7:00:0d:f2:53:bb:63: b8:b6:4a:d6:74:a7:5b:0e:75:fa:53:3d:fd:30:b8:b4:70:a2: 30:59:63:e1:64:ca:f5:1a:74:27:eb:49:cf:8a:1c:ec:f8:90: 8e:e1:c4:f3:d5:10:95:82:b6:14:74:57:4c:20:9e:c9:b3:4a: 3a:19:bd:13:1f:00:6d:0f:55:bf:47:4e:b0:2c:c3:a1:34:43: f0:26:ca:4b:e8:93:af:36:4a:d1:b3:e7:65:c6:c4:7e:aa:e1: aa:e6:8d:25:af:4a:cc:6d:b2:4c:2d:eb:e5:d0:4d:6c:33:30: 06:a5:39:c8:20:45:76:e7:5c:e0:c6:4f:71:3e:86:56:05:e7: 5c:e3:03:60:f4:2e:94:5b:fe:99:cb:16:e8:01:74:e2:24:1a: fb:b4:fd:bf:c9:cd:0c:74:6e:82:93:30:86:65:c9:18:47:aa: 6f:c6:a3:c9:a5:39:7c:5d:b2:c3:91:9d:7c:c6:01:c2:0e:e7: 06:3e:e9:0f:50:a3:99:75:63:3f:58:e7:3a:4c:18:c5:d4:8e: 3f:09:86:6d:78:88:04:19:e6:40:c2:35:f9:92:bc:2e:de:b2: fb:c1:b8:4d:e6:f8:27:91:e7:df:db:82:d7:4d:09:2e:ab:fb: d9:b2:d6:58 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkZC RTAwRTAzRkM5MjkwQUU1ODZFRjg1NTYzOTFEMTY1QzJGMUFEMB4XDTI1MDEzMTAx MzQ1MFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoN0M3M0Y1MDY5OEZDNzgz RTlBNEY1MEU1MkZDQjcwRDE1RTA3QzdFNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALpxM4/Cxfha2y+p8W5b8Mm+XXKFl2DUpbWgb/FT1knC9uoxevFy jOd3fr0OYtsumXzphM0mdPs8C8uiYeaLIH5QJkkGSu9iTmgyVstb1RRCsXGOYuzg qEu/l7Y3t1yI3RbAPmsrHAvVeObVPromG9e+erumle8GSfqxHB5vBzRW9k/+ISwZ NT9VuzXfHv8+tpSAF/IszZyq1ncWFz1IY6ah445WKVs02i6aheHZiGVmG6aN/x/Y 5ot+RlpCdvEOyjBe4vVcCqOFfcw+B1CvNufi2dkXn0YDThk1ltG3pN3sXaWt25lk NUISG8KTd+pbKx6uA39Wl+QR+a+DmRZFTsMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR8c/UGmPx4PppPUOUvy3DRXgfH5jAfBgNVHSMEGDAWgBT7++AOA/ySkK5YbvhV Y5HRZcLxrTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzkzLy1fdmdEZ1A4a3BDdVdHNzRWV09SMFdYQzhhMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1fdmdEZ1A4a3BDdVdHNzRWV09SMFdY QzhhMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zOTMvZkhQMUJwajhlRDZhVDFEbEw4dHcwVjRIeC1ZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ1G0DANBgkqhkiG9w0BAQsFAAOCAQEAE0no8c/6LEtupjXnAA3yU7tjuLZK 1nSnWw51+lM9/TC4tHCiMFlj4WTK9Rp0J+tJz4oc7PiQjuHE89UQlYK2FHRXTCCe ybNKOhm9Ex8AbQ9Vv0dOsCzDoTRD8CbKS+iTrzZK0bPnZcbEfqrhquaNJa9KzG2y TC3r5dBNbDMwBqU5yCBFdudc4MZPcT6GVgXnXOMDYPQulFv+mcsW6AF04iQa+7T9 v8nNDHRugpMwhmXJGEeqb8ajyaU5fF2yw5GdfMYBwg7nBj7pD1CjmXVjP1jnOkwY xdSOPwmGbXiIBBnmQMI1+ZK8Lt6y+8G4Teb4J5Hn39uC100JLqv72bLWWA== -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:31 2025 by rpki-client on console.sobornost.net