$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/jrO1LYrdVo_9PMGzP76BVhkdGCY.roa File: jrO1LYrdVo_9PMGzP76BVhkdGCY.roa (raw, json) Hash identifier: EVd6yGZNKPXyQTxPjDmPZeoVWa8dgnRymjcLcgUhjZk= Subject key identifier: 8E:B3:B5:2D:8A:DD:56:8F:FD:3C:C1:B3:3F:BE:81:56:19:1D:18:26 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 36 Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/jrO1LYrdVo_9PMGzP76BVhkdGCY.roa Signing time: Sat 01 Mar 2025 01:29:38 +0000 ROA not before: Sat 01 Mar 2025 01:29:38 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 17698 IP address blocks: 103.1.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 1 01:29:38 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=8EB3B52D8ADD568FFD3CC1B33FBE8156191D1826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:6f:ec:21:73:2b:2b:4b:c7:7b:0f:dc:df: 06:e3:6c:ad:16:43:55:a5:33:db:0c:c7:00:29:b5: fd:f6:ce:a2:b5:ee:ee:15:a4:90:2c:ff:8f:95:7d: de:9c:0c:08:63:f8:2d:f3:44:b9:6b:f4:51:3a:e0: 22:5f:e1:d2:46:9c:a4:9f:18:87:51:77:c3:88:00: 03:17:ed:08:0d:ce:92:97:00:af:e6:6a:5c:84:dc: 87:e8:37:e8:5a:cc:05:85:bd:ec:01:37:85:70:62: 2b:e4:df:43:0a:12:e3:2f:60:9c:8e:f7:66:e0:00: 88:27:75:ed:89:74:b3:d0:88:9e:a7:c3:9c:72:79: 10:af:8b:7d:84:a1:5d:f4:f1:7d:4b:04:24:86:fa: c1:d3:a6:c8:d2:56:f7:d6:5c:48:dc:d9:02:dc:36: b6:f6:02:0f:16:52:55:74:9c:38:15:a5:08:65:ee: 29:ee:0a:68:8f:bb:dd:a1:05:7d:55:8e:1c:d8:fd: 91:d2:ae:31:db:df:83:7c:85:4d:4d:2a:20:ef:76: 33:bd:87:0d:07:03:9f:8b:61:8d:ff:d4:20:b1:5b: 50:cf:a5:ed:6b:4b:4d:da:4d:53:5d:1f:dd:51:fc: 12:d2:0c:05:ec:a1:a8:31:8d:67:f3:fa:2b:d8:ef: 6a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B3:B5:2D:8A:DD:56:8F:FD:3C:C1:B3:3F:BE:81:56:19:1D:18:26 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/jrO1LYrdVo_9PMGzP76BVhkdGCY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.244.0/22 Signature Algorithm: sha256WithRSAEncryption 86:cf:3d:51:6a:d7:e1:01:a1:4f:ac:33:d2:f4:f2:c7:fa:67: 44:ff:6b:73:b7:66:c3:3c:f3:af:e3:a8:d2:e0:d3:34:23:d2: 6a:7a:68:34:01:c4:15:d0:99:1e:13:5e:66:b3:39:5d:ae:b9: 67:71:04:be:38:2a:65:1c:85:5d:8c:8d:37:73:67:f1:d9:46: 70:e9:78:b5:9b:7a:d2:8c:82:48:45:77:39:53:46:f3:8c:f8: 4b:3d:dc:09:e0:90:72:b5:04:24:dc:48:46:eb:f0:75:e9:b2: 42:b9:e5:f9:f8:01:7c:28:a6:c4:cd:e1:8c:84:35:0b:7a:26: 85:13:75:24:06:86:86:f3:72:41:d3:b4:57:72:1f:07:f1:7c: c4:b3:80:ad:69:82:80:89:0d:2f:d8:aa:9c:24:8a:aa:43:aa: b4:df:66:97:39:1e:1d:de:b0:9a:7a:d1:a2:a7:fc:cd:a5:ea: 8a:47:3f:44:63:b5:6a:f5:f5:a4:c2:12:0b:bb:ac:c2:01:39: 67:8b:11:02:36:66:9d:1a:11:f1:8c:28:3f:7f:6e:ca:b9:36: 74:3f:b9:35:27:d3:7f:7b:0f:72:b7:bb:18:16:db:25:c1:76: 4b:00:94:4e:a1:d2:c6:2a:14:c7:e7:a7:2e:8b:c4:df:4d:01: 99:78:2b:45 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI1MDMwMTAx MjkzOFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoOEVCM0I1MkQ4QURENTY4 RkZEM0NDMUIzM0ZCRTgxNTYxOTFEMTgyNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALRjb+whcysrS8d7D9zfBuNsrRZDVaUz2wzHACm1/fbOorXu7hWk kCz/j5V93pwMCGP4LfNEuWv0UTrgIl/h0kacpJ8Yh1F3w4gAAxftCA3OkpcAr+Zq XITch+g36FrMBYW97AE3hXBiK+TfQwoS4y9gnI73ZuAAiCd17Yl0s9CInqfDnHJ5 EK+LfYShXfTxfUsEJIb6wdOmyNJW99ZcSNzZAtw2tvYCDxZSVXScOBWlCGXuKe4K aI+73aEFfVWOHNj9kdKuMdvfg3yFTU0qIO92M72HDQcDn4thjf/UILFbUM+l7WtL TdpNU10f3VH8EtIMBeyhqDGNZ/P6K9jvaqcCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSOs7Utit1Wj/08wbM/voFWGR0YJjAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwODIyL2pyTzFMWXJkVm9fOVBNR3pQNzZCVmhrZEdDWS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJnAfQwDQYJKoZIhvcNAQELBQADggEBAIbPPVFq1+EBoU+sM9L08sf6 Z0T/a3O3ZsM886/jqNLg0zQj0mp6aDQBxBXQmR4TXmazOV2uuWdxBL44KmUchV2M jTdzZ/HZRnDpeLWbetKMgkhFdzlTRvOM+Es93AngkHK1BCTcSEbr8HXpskK55fn4 AXwopsTN4YyENQt6JoUTdSQGhobzckHTtFdyHwfxfMSzgK1pgoCJDS/YqpwkiqpD qrTfZpc5Hh3esJp60aKn/M2l6opHP0RjtWr19aTCEgu7rMIBOWeLEQI2Zp0aEfGM KD9/bsq5NnQ/uTUn0397D3K3uxgW2yXBdksAlE6h0sYqFMfnpy6LxN9NAZl4K0U= -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:23 2025 by rpki-client