$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ujOwjRTg6J1LXV7W0JdMFoA0fBY.roa File: ujOwjRTg6J1LXV7W0JdMFoA0fBY.roa (raw, json) Hash identifier: q1oNxWBZ3hMsFWrLO9EvRpqIccbdQJyVnq2XUpHHc2s= Subject key identifier: BA:33:B0:8D:14:E0:E8:9D:4B:5D:5E:D6:D0:97:4C:16:80:34:7C:16 Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Certificate serial: 69 Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ujOwjRTg6J1LXV7W0JdMFoA0fBY.roa Signing time: Tue 01 Apr 2025 01:32:37 +0000 ROA not before: Tue 01 Apr 2025 01:32:37 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 7684 IP address blocks: 157.17.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Validity Not Before: Apr 1 01:32:37 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=BA33B08D14E0E89D4B5D5ED6D0974C1680347C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:3f:50:93:1e:ca:34:97:6b:af:cc:44:3c: fa:13:ef:15:f9:13:4f:94:ce:4f:1d:d4:42:1c:a6: 7d:a5:e0:87:10:09:4b:ca:33:08:7a:9d:94:a4:ac: d0:7d:fb:1e:86:81:da:1f:3f:6a:87:24:84:1b:78: 5d:2d:da:75:59:40:93:f3:67:f2:82:b5:d6:f0:5a: cb:02:5a:88:6d:1f:8e:dd:22:4b:0a:b4:8f:eb:9c: 69:19:0a:c4:ce:98:67:e9:8f:a3:45:ef:12:b1:be: b3:9b:00:9c:91:27:f8:c5:a4:57:a5:a5:77:2a:72: fc:5e:d6:73:df:71:40:bf:3b:f1:0d:e9:09:ed:a1: fc:72:e0:61:48:7e:ae:fa:10:04:c9:bc:dc:ab:06: 14:4a:14:64:2c:de:05:1b:ae:6b:86:97:85:40:63: 1a:0e:55:97:ef:03:0f:3e:c7:2d:17:b9:fb:2f:e3: 87:b9:ad:e9:b7:1a:f4:06:08:de:68:8d:60:41:fe: 48:b7:a2:49:83:0b:ae:43:36:02:05:c7:d2:94:c5: c6:c3:ec:c3:1a:13:62:9e:5c:b3:ff:31:00:56:4a: db:db:73:f1:ba:f1:6d:18:c1:5d:c4:1e:61:06:68: 18:b0:d6:8c:ac:b2:73:81:4a:a3:72:90:78:bb:71: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:33:B0:8D:14:E0:E8:9D:4B:5D:5E:D6:D0:97:4C:16:80:34:7C:16 X509v3 Authority Key Identifier: keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ujOwjRTg6J1LXV7W0JdMFoA0fBY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.17.82.0/23 Signature Algorithm: sha256WithRSAEncryption 32:67:79:cf:89:fc:69:b4:19:1f:bd:8e:aa:40:6d:34:f8:0c: fa:0a:32:87:fe:eb:d5:d6:9a:f0:c5:54:15:9b:a4:ec:8a:32: a3:c6:60:a2:0a:d9:e6:41:2e:1b:d5:05:13:5b:73:a2:b6:97: 76:60:39:65:dc:d5:bb:9e:6d:85:a3:dd:97:5e:f4:94:53:54: f8:13:64:2a:d3:f4:5f:6b:09:86:c5:51:d0:78:82:bf:c8:44: 03:cd:ce:fc:b0:27:88:32:21:70:90:e5:07:a6:c5:83:ac:33: df:48:c4:2c:48:71:b8:13:45:f4:96:64:8a:9c:fe:86:08:97: ad:59:d0:5d:77:64:ae:ed:e3:14:4a:84:80:2f:7e:a6:f0:9a: 22:4c:b9:1f:8f:31:17:36:3b:b0:60:5a:4d:1d:a9:7b:00:e7: 96:a5:6e:fd:1d:8d:4c:a9:c8:fb:46:68:4d:00:9c:7b:19:bc: 59:98:55:4b:38:01:df:32:01:71:ed:f9:79:53:71:c3:ec:70: 4f:41:05:1c:1e:68:9d:e5:ae:4b:52:48:92:97:b1:f6:80:92: 72:e8:fb:a0:14:5a:af:ce:b5:32:f2:3a:d8:87:db:19:cb:c0: 2d:51:34:3f:c8:8c:86:9e:8a:79:82:0d:4d:8a:3c:44:51:12: b6:c0:cf:f3 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkM0 NjI5NEE1RDU2NDM3RTE5QTExQUVGOUZCOUI4Nzc2OTAxNDNFMB4XDTI1MDQwMTAx MzIzN1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQkEzM0IwOEQxNEUwRTg5 RDRCNUQ1RUQ2RDA5NzRDMTY4MDM0N0MxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANCPP1CTHso0l2uvzEQ8+hPvFfkTT5TOTx3UQhymfaXghxAJS8oz CHqdlKSs0H37HoaB2h8/aockhBt4XS3adVlAk/Nn8oK11vBaywJaiG0fjt0iSwq0 j+ucaRkKxM6YZ+mPo0XvErG+s5sAnJEn+MWkV6Wldypy/F7Wc99xQL878Q3pCe2h /HLgYUh+rvoQBMm83KsGFEoUZCzeBRuua4aXhUBjGg5Vl+8DDz7HLRe5+y/jh7mt 6bca9AYI3miNYEH+SLeiSYMLrkM2AgXH0pTFxsPswxoTYp5cs/8xAFZK29tz8brx bRjBXcQeYQZoGLDWjKyyc4FKo3KQeLtxdMECAwEAAaOCAigwggIkMB0GA1UdDgQW BBS6M7CNFODonUtdXtbQl0wWgDR8FjAfBgNVHSMEGDAWgBT7xGKUpdVkN+GaEa75 +5uHdpAUPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyNDcvLThSaWxLWFZaRGZobWhHdS1mdWJoM2FRRkQ0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLThSaWxLWFZaRGZobWhHdS1mdWJo M2FRRkQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjQ3L3VqT3dqUlRnNkoxTFhWN1cwSmRNRm9BMGZCWS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGdEVIwDQYJKoZIhvcNAQELBQADggEBADJnec+J/Gm0GR+9jqpAbTT4 DPoKMof+69XWmvDFVBWbpOyKMqPGYKIK2eZBLhvVBRNbc6K2l3ZgOWXc1buebYWj 3Zde9JRTVPgTZCrT9F9rCYbFUdB4gr/IRAPNzvywJ4gyIXCQ5QemxYOsM99IxCxI cbgTRfSWZIqc/oYIl61Z0F13ZK7t4xRKhIAvfqbwmiJMuR+PMRc2O7BgWk0dqXsA 55albv0djUypyPtGaE0AnHsZvFmYVUs4Ad8yAXHt+XlTccPscE9BBRweaJ3lrktS SJKXsfaAknLo+6AUWq/OtTLyOtiH2xnLwC1RND/IjIaeinmCDU2KPERRErbAz/M= -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:32 2025 by rpki-client