$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/P-IjuL1Keb8NMxLo1k6iGR6gogg.roa File: P-IjuL1Keb8NMxLo1k6iGR6gogg.roa (raw, json) Hash identifier: 1EaZe2+9tKXdgIZzbYGvwCZJ1ZRBttFxIT0EDRoLsJs= Subject key identifier: 3F:E2:23:B8:BD:4A:79:BF:0D:33:12:E8:D6:4E:A2:19:1E:A0:A2:08 Certificate issuer: /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058 Certificate serial: 4F Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/P-IjuL1Keb8NMxLo1k6iGR6gogg.roa Signing time: Fri 31 Jan 2025 01:34:58 +0000 ROA not before: Fri 31 Jan 2025 01:34:58 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 17948 IP address blocks: 203.145.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058 Validity Not Before: Jan 31 01:34:58 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=3FE223B8BD4A79BF0D3312E8D64EA2191EA0A208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:05:51:9d:6d:32:fe:e8:31:66:b6:8d:0c: 60:b7:2d:35:cc:a6:c4:ba:37:f6:d6:85:61:4c:55: 2d:da:25:74:a2:e4:e0:81:55:fa:05:2d:0f:8d:15: be:f5:67:02:c4:10:ab:d9:af:58:9a:5e:83:72:44: 3e:1d:fc:a7:90:84:d7:49:27:fc:a2:6c:8a:01:93: 95:08:70:ce:c7:d7:1e:b3:f6:53:93:0a:e4:e9:cc: 8c:35:9b:bc:92:1d:7c:f0:bf:19:73:b7:bd:e8:67: 40:13:b8:cc:7b:e1:08:72:7b:f2:8d:6d:94:5d:b6: 6b:21:a1:5f:7f:97:70:78:84:9c:0f:e7:82:66:89: 9a:66:cc:49:94:55:08:dd:5a:91:1e:37:78:18:52: 26:ce:a9:c9:85:4c:48:e8:27:d6:ed:62:d1:f3:54: 05:2a:67:5f:2c:43:1e:25:a5:0c:48:94:81:fa:44: a3:9e:d4:91:08:e9:fd:74:f5:46:b4:34:40:7b:94: 58:23:f0:f1:7e:09:f2:b7:e0:d2:6d:d9:4e:35:d2: f5:13:84:0f:40:f6:bc:c0:fe:a9:f4:9a:d3:af:92: d3:7f:92:36:83:37:85:c4:98:9a:4b:63:5a:2a:95: e2:de:b6:19:90:aa:1d:6d:1e:59:26:48:47:1d:33: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E2:23:B8:BD:4A:79:BF:0D:33:12:E8:D6:4E:A2:19:1E:A0:A2:08 X509v3 Authority Key Identifier: keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/P-IjuL1Keb8NMxLo1k6iGR6gogg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.145.120.0/21 Signature Algorithm: sha256WithRSAEncryption 48:a6:a7:c5:e6:70:32:a1:46:6d:47:da:82:26:5c:10:99:02: 1c:56:f9:65:79:94:ea:74:97:88:28:c5:52:17:0d:ed:80:bb: a7:18:bf:dc:e2:aa:1c:89:77:52:c0:38:7e:98:02:f3:fe:22: 4d:63:65:62:11:81:35:32:01:21:15:6c:6d:5d:8e:4c:a4:93: ec:a0:f5:64:f4:8d:41:62:7c:6c:96:c2:c9:bb:7a:aa:fd:1e: 65:3e:a4:f3:67:53:49:3f:e7:09:07:3c:7c:55:3a:fe:b7:ca: 69:ab:67:72:94:94:a4:05:f7:b4:58:f6:44:2d:f9:70:36:eb: 13:ce:ee:f6:1b:51:0e:d1:a0:73:49:f2:1c:0e:d8:c3:e8:05: 6c:6e:05:45:1b:31:ab:10:17:94:3a:21:4f:39:fe:e9:ce:e0: 0a:0b:43:fb:2e:a8:4f:26:0d:0f:27:50:f5:15:de:5c:45:b2: 07:4a:c7:8b:44:49:09:7e:0c:92:1f:e3:75:9d:bd:85:30:8a: 10:dd:ba:b8:b3:38:3d:3d:8e:9b:73:9c:8a:a1:7a:19:88:01: 86:42:c4:2b:79:82:61:d5:13:eb:91:33:96:b8:1b:29:dd:fc: 1b:0e:66:94:fe:75:bb:f6:fe:14:7a:de:3b:31:81:af:8b:6f: da:2f:57:cb -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNTU2 RUMzMzQxMDIwNDdCRURCQTBDMEREQjREQzkzMEUwN0E5MDU4MB4XDTI1MDEzMTAx MzQ1OFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoM0ZFMjIzQjhCRDRBNzlC RjBEMzMxMkU4RDY0RUEyMTkxRUEwQTIwODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL1GBVGdbTL+6DFmto0MYLctNcymxLo39taFYUxVLdoldKLk4IFV +gUtD40VvvVnAsQQq9mvWJpeg3JEPh38p5CE10kn/KJsigGTlQhwzsfXHrP2U5MK 5OnMjDWbvJIdfPC/GXO3vehnQBO4zHvhCHJ78o1tlF22ayGhX3+XcHiEnA/ngmaJ mmbMSZRVCN1akR43eBhSJs6pyYVMSOgn1u1i0fNUBSpnXyxDHiWlDEiUgfpEo57U kQjp/XT1RrQ0QHuUWCPw8X4J8rfg0m3ZTjXS9ROED0D2vMD+qfSa06+S03+SNoM3 hcSYmktjWiqV4t62GZCqHW0eWSZIRx0zddkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ/4iO4vUp5vw0zEujWTqIZHqCiCDAfBgNVHSMEGDAWgBT1VuwzQQIEe+26DA3b Tckw4HqQWDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjY4LzlWYnNNMEVDQkh2dHVnd04yMDNKTU9CNmtGZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzlWYnNNMEVDQkh2dHVnd04yMDNKTU9C NmtGZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NjgvUC1JanVMMUtlYjhOTXhMbzFrNmlHUjZnb2dnLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8uReDANBgkqhkiG9w0BAQsFAAOCAQEASKanxeZwMqFGbUfagiZcEJkCHFb5 ZXmU6nSXiCjFUhcN7YC7pxi/3OKqHIl3UsA4fpgC8/4iTWNlYhGBNTIBIRVsbV2O TKST7KD1ZPSNQWJ8bJbCybt6qv0eZT6k82dTST/nCQc8fFU6/rfKaatncpSUpAX3 tFj2RC35cDbrE87u9htRDtGgc0nyHA7Yw+gFbG4FRRsxqxAXlDohTzn+6c7gCgtD +y6oTyYNDydQ9RXeXEWyB0rHi0RJCX4Mkh/jdZ29hTCKEN26uLM4PT2Om3OciqF6 GYgBhkLEK3mCYdUT65EzlrgbKd38Gw5mlP51u/b+FHreOzGBr4tv2i9Xyw== -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:49 2025 by rpki-client on console.sobornost.net