$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1175/qFR0pV79N9nIwok4TNYG6bYGvkc.roa File: qFR0pV79N9nIwok4TNYG6bYGvkc.roa (raw, json) Hash identifier: wPqx/oHOQwnS65qW91LuX4IuJ2vBsHcuW9b+erz+azA= Subject key identifier: A8:54:74:A5:5E:FD:37:D9:C8:C2:89:38:4C:D6:06:E9:B6:06:BE:47 Certificate issuer: /CN=8A57051C84A2BF078749E7BB34BE19678E131119 Certificate serial: 49 Authority key identifier: 8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/qFR0pV79N9nIwok4TNYG6bYGvkc.roa Signing time: Fri 31 Jan 2025 01:34:54 +0000 ROA not before: Fri 31 Jan 2025 01:34:54 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 16509 IP address blocks: 150.35.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A57051C84A2BF078749E7BB34BE19678E131119 Validity Not Before: Jan 31 01:34:54 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=A85474A55EFD37D9C8C289384CD606E9B606BE47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:66:c9:0f:49:2c:a4:e8:c5:e0:14:d2:bb: 65:91:c0:71:11:4f:85:99:c9:d7:63:46:5c:b2:e9: 5c:69:23:a6:a5:0e:28:4d:c5:d1:48:ed:2a:ce:cc: f6:87:ee:12:07:6f:08:8f:cc:6d:75:b2:7e:3a:fd: c4:03:ae:45:84:b7:7b:07:e2:e7:69:01:87:5a:89: ca:06:ad:5c:17:6d:13:45:e4:cd:36:6d:e2:fd:46: e7:b4:b3:12:96:36:70:dc:5c:64:c7:fc:e1:5e:16: ea:61:bd:32:3c:e2:91:c4:f6:f3:c2:f1:bc:24:a7: 62:6d:fc:80:ca:d5:4a:0c:eb:be:92:71:cf:02:2a: 49:93:03:2f:6f:bc:78:e0:9c:61:39:b2:01:2c:1f: 80:78:ce:92:c6:36:d1:b4:ab:1b:12:0a:99:c9:4c: 46:60:a6:56:6c:d3:39:33:9f:1e:fb:97:0c:fe:cd: b2:87:d2:ea:9c:ba:d5:b8:dd:f1:6f:1e:85:cc:fa: f5:ec:1f:f4:8c:ee:ab:52:54:cc:95:b4:fd:1b:a7: 09:9c:61:1a:c9:04:f1:ca:da:a5:18:ea:4d:be:3c: 9d:1b:e7:12:05:06:e0:86:24:78:30:ed:07:df:f6: cd:42:ee:77:20:58:18:e4:09:c4:ef:fb:ec:96:2f: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:54:74:A5:5E:FD:37:D9:C8:C2:89:38:4C:D6:06:E9:B6:06:BE:47 X509v3 Authority Key Identifier: keyid:8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/qFR0pV79N9nIwok4TNYG6bYGvkc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.35.240.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:ca:d8:6f:1f:1d:c3:b6:24:94:d3:9f:4f:2d:dd:1b:64:ed: cd:1e:14:e1:49:cd:f6:4f:11:43:ef:12:30:a5:f4:09:00:9a: 72:99:2d:c2:47:60:2d:44:4d:75:e1:ea:65:ac:c6:12:f1:73: f2:0d:30:c5:dc:70:fa:22:7c:df:00:4f:35:ad:83:c0:63:cf: df:07:b4:e6:7f:b3:dc:54:70:89:fc:3a:05:16:6c:59:b0:dd: 00:e9:8e:34:cf:e6:5f:ae:fa:2a:58:35:c5:05:4b:b6:b1:b1: 00:59:97:1c:4c:c9:9e:12:0e:a6:5b:a8:be:e3:cc:cb:dd:c0: 74:c4:d3:07:66:1c:58:96:1b:56:18:9c:d6:9b:bd:14:19:2c: 19:78:89:d4:ec:54:5f:0a:f8:e3:49:7b:c1:da:6b:a7:70:65: 43:40:d6:23:c0:21:6b:91:f1:b6:22:01:1f:3b:9c:79:3b:46: 3d:c6:5f:8f:ff:b9:0a:89:e5:55:8d:fc:59:58:67:2a:c9:cc: bc:85:52:87:69:a4:3c:9c:82:5e:1f:84:3a:f7:59:b7:1a:c4: d6:35:bd:a2:9e:8d:ab:95:75:1c:e9:b3:e0:0f:2a:4e:1d:03: 26:43:03:6c:86:81:a2:c9:79:c7:85:94:08:d5:90:35:f3:ce: aa:6e:4a:f5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTU3 MDUxQzg0QTJCRjA3ODc0OUU3QkIzNEJFMTk2NzhFMTMxMTE5MB4XDTI1MDEzMTAx MzQ1NFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQTg1NDc0QTU1RUZEMzdE OUM4QzI4OTM4NENENjA2RTlCNjA2QkU0NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALvTZskPSSyk6MXgFNK7ZZHAcRFPhZnJ12NGXLLpXGkjpqUOKE3F 0UjtKs7M9ofuEgdvCI/MbXWyfjr9xAOuRYS3ewfi52kBh1qJygatXBdtE0XkzTZt 4v1G57SzEpY2cNxcZMf84V4W6mG9MjzikcT288LxvCSnYm38gMrVSgzrvpJxzwIq SZMDL2+8eOCcYTmyASwfgHjOksY20bSrGxIKmclMRmCmVmzTOTOfHvuXDP7NsofS 6py61bjd8W8ehcz69ewf9Izuq1JUzJW0/RunCZxhGskE8crapRjqTb48nRvnEgUG 4IYkeDDtB9/2zULudyBYGOQJxO/77JYv+m0CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBSoVHSlXv032cjCiThM1gbptga+RzAfBgNVHSMEGDAWgBSKVwUchKK/B4dJ57s0 vhlnjhMRGTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTE3NS9pbGNGSElTaXZ3ZUhTZWU3Tkw0Wlo0NFRFUmsuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9pbGNGSElTaXZ3ZUhTZWU3Tkw0Wlo0 NFRFUmsuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTE3NS9xRlIwcFY3OU45bkl3b2s0VE5ZRzZiWUd2a2Mucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAliPwMA0GCSqGSIb3DQEBCwUAA4IBAQCMythvHx3DtiSU059PLd0bZO3N HhThSc32TxFD7xIwpfQJAJpymS3CR2AtRE114eplrMYS8XPyDTDF3HD6InzfAE81 rYPAY8/fB7Tmf7PcVHCJ/DoFFmxZsN0A6Y40z+ZfrvoqWDXFBUu2sbEAWZccTMme Eg6mW6i+48zL3cB0xNMHZhxYlhtWGJzWm70UGSwZeInU7FRfCvjjSXvB2muncGVD QNYjwCFrkfG2IgEfO5x5O0Y9xl+P/7kKieVVjfxZWGcqycy8hVKHaaQ8nIJeH4Q6 91m3GsTWNb2ino2rlXUc6bPgDypOHQMmQwNshoGiyXnHhZQI1ZA1886qbkr1 -----END CERTIFICATE-----Generated at Sat Apr 5 14:08:50 2025 by rpki-client