$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1175/QY2z08QoWHcbX6UJwUVZlm4BiqQ.roa File: QY2z08QoWHcbX6UJwUVZlm4BiqQ.roa (raw, json) Hash identifier: /lwLOJlJ93pJL027CjqRk1LqIQ3pqxxdYL5j5TTKWqo= Subject key identifier: 41:8D:B3:D3:C4:28:58:77:1B:5F:A5:09:C1:45:59:96:6E:01:8A:A4 Certificate issuer: /CN=8A57051C84A2BF078749E7BB34BE19678E131119 Certificate serial: 4A Authority key identifier: 8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/QY2z08QoWHcbX6UJwUVZlm4BiqQ.roa Signing time: Fri 31 Jan 2025 01:34:54 +0000 ROA not before: Fri 31 Jan 2025 01:34:54 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 14418 IP address blocks: 150.35.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A57051C84A2BF078749E7BB34BE19678E131119 Validity Not Before: Jan 31 01:34:54 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=418DB3D3C42858771B5FA509C14559966E018AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:33:23:e6:27:9a:b8:de:a1:32:7b:f2:25: a6:ba:17:58:86:4d:8e:93:8e:9c:d9:fe:1a:d7:fe: 32:a6:a6:9a:dd:ad:10:45:a2:4a:7e:1a:e8:27:a4: 0b:27:e8:4d:bc:aa:b4:2c:d7:ec:a4:e7:f6:7c:68: f7:3e:8e:fd:c3:87:5b:57:03:20:61:74:6d:ea:6b: a9:be:e1:6d:b6:61:7e:a5:5b:d4:74:e4:44:0d:fd: 02:df:90:4f:22:42:4f:c3:6e:e0:63:2a:76:a0:0d: c9:5a:4f:96:d6:96:45:f9:77:0b:d5:8d:cb:32:af: a6:45:89:e3:59:1b:7b:27:44:5e:21:d2:bf:29:14: 9d:b4:c7:96:cc:b2:88:d2:2a:c3:33:36:55:31:66: da:59:48:b4:2f:e9:80:be:cd:29:55:8a:be:c1:7a: e5:21:fa:dd:95:9a:33:f5:46:02:13:fa:db:49:e9: 92:45:3f:b5:7b:d2:fb:73:02:64:7f:35:67:9b:7e: b8:e0:0b:74:46:26:ec:71:cf:78:78:08:71:18:1a: 14:4d:ce:b7:3d:d9:de:85:47:f9:ff:63:a8:c3:64: 9f:5d:4f:a6:c8:ac:5a:ea:31:da:b6:37:9e:c3:17: 55:03:92:d2:d3:84:46:63:8b:b0:90:f0:2e:ed:1a: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8D:B3:D3:C4:28:58:77:1B:5F:A5:09:C1:45:59:96:6E:01:8A:A4 X509v3 Authority Key Identifier: keyid:8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/QY2z08QoWHcbX6UJwUVZlm4BiqQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.35.240.0/24 Signature Algorithm: sha256WithRSAEncryption 68:6e:ad:e3:26:2a:72:af:2e:8f:67:16:8f:72:35:19:99:b6: 96:63:fb:28:1c:93:ec:aa:60:df:5e:cd:a4:74:8d:3d:37:e8: 4b:75:ab:ca:86:c3:02:1b:98:94:77:10:8f:b2:29:d9:73:81: a0:48:0c:07:77:be:e2:9c:0a:86:04:05:30:ea:42:40:1e:51: 67:35:39:a9:9d:aa:27:1a:f7:85:5c:9b:4e:71:d4:e6:7c:b0: bf:af:c3:a5:de:bb:4c:f8:f2:19:4d:80:0b:e9:48:58:0d:6b: f7:12:34:49:05:de:e1:37:fa:42:5f:77:6d:59:68:cf:79:b0: 50:01:ac:58:e3:27:e5:4b:50:df:2a:05:29:5c:83:25:c3:14: c0:3c:c3:d8:e5:e4:a0:f1:ff:17:5e:15:21:d9:ee:9f:7e:2a: a4:9f:27:67:f2:5f:36:e2:6a:ab:ab:3c:9e:c3:23:c3:e3:45: 62:17:0a:2a:e6:5e:57:1f:03:c9:9f:20:bd:cf:9d:b9:fc:df: 38:b9:30:09:95:5f:ab:24:77:f2:58:22:0e:bb:bd:74:0b:5c: c6:23:1b:b7:81:15:46:40:a8:1f:4b:5d:56:40:2e:3f:85:87: 62:c1:d4:8b:ad:f4:f5:06:54:a9:1e:8f:75:71:78:6c:81:d9: 3a:8f:d6:6a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTU3 MDUxQzg0QTJCRjA3ODc0OUU3QkIzNEJFMTk2NzhFMTMxMTE5MB4XDTI1MDEzMTAx MzQ1NFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNDE4REIzRDNDNDI4NTg3 NzFCNUZBNTA5QzE0NTU5OTY2RTAxOEFBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALw8MyPmJ5q43qEye/IlproXWIZNjpOOnNn+Gtf+Mqammt2tEEWi Sn4a6CekCyfoTbyqtCzX7KTn9nxo9z6O/cOHW1cDIGF0beprqb7hbbZhfqVb1HTk RA39At+QTyJCT8Nu4GMqdqANyVpPltaWRfl3C9WNyzKvpkWJ41kbeydEXiHSvykU nbTHlsyyiNIqwzM2VTFm2llItC/pgL7NKVWKvsF65SH63ZWaM/VGAhP620npkkU/ tXvS+3MCZH81Z5t+uOALdEYm7HHPeHgIcRgaFE3Otz3Z3oVH+f9jqMNkn11Ppsis Wuox2rY3nsMXVQOS0tOERmOLsJDwLu0aub8CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBRBjbPTxChYdxtfpQnBRVmWbgGKpDAfBgNVHSMEGDAWgBSKVwUchKK/B4dJ57s0 vhlnjhMRGTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTE3NS9pbGNGSElTaXZ3ZUhTZWU3Tkw0Wlo0NFRFUmsuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9pbGNGSElTaXZ3ZUhTZWU3Tkw0Wlo0 NFRFUmsuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTE3NS9RWTJ6MDhRb1dIY2JYNlVKd1VWWmxtNEJpcVEucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAliPwMA0GCSqGSIb3DQEBCwUAA4IBAQBobq3jJipyry6PZxaPcjUZmbaW Y/soHJPsqmDfXs2kdI09N+hLdavKhsMCG5iUdxCPsinZc4GgSAwHd77inAqGBAUw 6kJAHlFnNTmpnaonGveFXJtOcdTmfLC/r8Ol3rtM+PIZTYAL6UhYDWv3EjRJBd7h N/pCX3dtWWjPebBQAaxY4yflS1DfKgUpXIMlwxTAPMPY5eSg8f8XXhUh2e6ffiqk nydn8l824mqrqzyewyPD40ViFwoq5l5XHwPJnyC9z525/N84uTAJlV+rJHfyWCIO u710C1zGIxu3gRVGQKgfS11WQC4/hYdiwdSLrfT1BlSpHo91cXhsgdk6j9Zq -----END CERTIFICATE-----Generated at Sat Apr 5 17:30:20 2025 by rpki-client