$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/kJ-AcO1canJhnCwZXO4XfHLCP7c.roa File: kJ-AcO1canJhnCwZXO4XfHLCP7c.roa (raw, json) Hash identifier: 370euD4Wa7d/T9fM+q+BRcrqLI2Tgds4y01Nd75mcc0= Subject key identifier: 90:9F:80:70:ED:5C:6A:72:61:9C:2C:19:5C:EE:17:7C:72:C2:3F:B7 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 49 Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/kJ-AcO1canJhnCwZXO4XfHLCP7c.roa Signing time: Sat 01 Mar 2025 01:29:46 +0000 ROA not before: Sat 01 Mar 2025 01:29:46 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 17698 IP address blocks: 219.124.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 1 01:29:46 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=909F8070ED5C6A72619C2C195CEE177C72C23FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:5d:dc:97:02:6f:c5:85:f3:4e:7f:1d:df: 48:d8:9b:a5:79:34:e1:2b:d5:fc:0f:e3:fe:6f:93: 1f:e3:bd:52:6a:95:b9:27:85:59:cc:5d:1a:2b:f2: 17:3e:48:36:27:0d:e3:dd:b3:95:03:53:9d:15:96: e1:ea:24:c3:07:cb:ae:c4:19:5d:19:bc:49:9d:66: 56:1c:a0:0f:13:22:39:98:fb:7f:d1:28:ad:11:5e: b6:70:ae:e8:f3:d3:03:82:60:5d:7c:58:e1:c9:96: 66:4c:df:f3:ad:bf:11:49:62:1b:fb:3f:04:1c:f0: 11:de:b2:b1:72:c5:70:3d:13:c1:6c:93:40:e6:ef: b2:7e:74:cb:4d:ff:0c:6f:6d:d9:5b:b1:e1:f9:2d: 77:ca:eb:ad:b3:6d:67:38:7e:d3:f1:36:f1:e5:99: 65:34:08:eb:7f:b5:34:e7:4e:ee:2d:df:96:52:b2: f9:97:77:8d:62:25:d8:47:f9:92:ac:9d:98:dd:97: 6a:fe:5c:d7:9b:42:b0:e0:0e:ec:3f:c6:33:fe:de: c3:51:68:fa:24:7e:2e:a5:01:87:7e:ec:44:62:45: 4f:36:fb:df:af:c6:d1:4d:d3:b1:5c:16:57:7d:1b: 0d:11:b6:dd:49:8d:7e:dd:dc:fa:33:34:cf:df:1c: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9F:80:70:ED:5C:6A:72:61:9C:2C:19:5C:EE:17:7C:72:C2:3F:B7 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/kJ-AcO1canJhnCwZXO4XfHLCP7c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.124.192.0/19 Signature Algorithm: sha256WithRSAEncryption 91:e1:23:dc:34:1a:26:b4:2b:a1:bb:a1:af:d0:5c:a7:56:fa: 55:8c:2c:aa:d3:3b:88:5a:56:e9:18:4b:18:3d:cd:fb:e4:65: 0d:28:aa:e0:3d:a5:ce:85:4c:5e:b5:eb:00:d6:e7:8e:98:63: 53:20:4f:58:f7:5a:1e:65:c1:a3:7d:1b:5c:2a:88:ab:76:da: 92:ef:2e:10:7f:0d:0f:37:24:ce:c4:f8:2c:72:8e:e2:87:29: 74:4b:a3:da:fe:1d:35:ab:d5:d7:d0:f6:d8:15:f7:3a:84:6c: f7:27:71:0e:91:54:d3:fc:49:f8:80:6c:74:48:48:6e:77:1d: 72:05:73:bc:e9:24:1c:82:90:5c:cc:3e:03:ab:71:52:27:36: 69:c0:d1:6f:05:fb:00:f5:41:72:6d:f2:12:91:46:fc:82:37: b7:97:d8:6f:f8:2b:0c:9e:52:e3:1c:9b:6b:1b:74:40:90:e6: c7:cb:76:d1:70:23:88:ff:4a:14:40:10:55:1a:18:27:cc:b7: 2f:24:a4:46:e5:fd:7d:bc:ff:f3:3f:dd:a6:6a:0a:c0:b1:b1: 38:72:cc:37:4b:4e:fc:4d:de:e0:8f:c9:4c:0d:15:a2:60:04: bf:27:a2:b0:7a:1a:a7:48:0c:b8:97:d2:bc:71:8e:86:0b:55: 01:0a:84:3d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI1MDMwMTAx Mjk0NloXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoOTA5RjgwNzBFRDVDNkE3 MjYxOUMyQzE5NUNFRTE3N0M3MkMyM0ZCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM2GXdyXAm/FhfNOfx3fSNibpXk04SvV/A/j/m+TH+O9UmqVuSeF WcxdGivyFz5INicN492zlQNTnRWW4eokwwfLrsQZXRm8SZ1mVhygDxMiOZj7f9Eo rRFetnCu6PPTA4JgXXxY4cmWZkzf862/EUliG/s/BBzwEd6ysXLFcD0TwWyTQObv sn50y03/DG9t2Vux4fktd8rrrbNtZzh+0/E28eWZZTQI63+1NOdO7i3fllKy+Zd3 jWIl2Ef5kqydmN2Xav5c15tCsOAO7D/GM/7ew1Fo+iR+LqUBh37sRGJFTzb736/G 0U3TsVwWV30bDRG23UmNft3c+jM0z98cHvMCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSQn4Bw7VxqcmGcLBlc7hd8csI/tzAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwODIyL2tKLUFjTzFjYW5KaG5Dd1pYTzRYZkhMQ1A3Yy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAXbfMAwDQYJKoZIhvcNAQELBQADggEBAJHhI9w0Gia0K6G7oa/QXKdW +lWMLKrTO4haVukYSxg9zfvkZQ0oquA9pc6FTF616wDW546YY1MgT1j3Wh5lwaN9 G1wqiKt22pLvLhB/DQ83JM7E+CxyjuKHKXRLo9r+HTWr1dfQ9tgV9zqEbPcncQ6R VNP8SfiAbHRISG53HXIFc7zpJByCkFzMPgOrcVInNmnA0W8F+wD1QXJt8hKRRvyC N7eX2G/4KwyeUuMcm2sbdECQ5sfLdtFwI4j/ShRAEFUaGCfMty8kpEbl/X28//M/ 3aZqCsCxsThyzDdLTvxN3uCPyUwNFaJgBL8norB6GqdIDLiX0rxxjoYLVQEKhD0= -----END CERTIFICATE-----Generated at Sun Apr 6 15:17:29 2025 by rpki-client