$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/iby6ByNv2P5qKSUpBfHE3R3nIJc.roa File: iby6ByNv2P5qKSUpBfHE3R3nIJc.roa (raw, json) Hash identifier: veK8oti1Wkv5YdwnEXFEyQVv2Y827LzccsTC5xp4AA0= Subject key identifier: 89:BC:BA:07:23:6F:D8:FE:6A:29:25:29:05:F1:C4:DD:1D:E7:20:97 Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892 Certificate serial: A0 Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/iby6ByNv2P5qKSUpBfHE3R3nIJc.roa Signing time: Tue 01 Apr 2025 01:29:36 +0000 ROA not before: Tue 01 Apr 2025 01:29:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 7521 IP address blocks: 210.173.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892 Validity Not Before: Apr 1 01:29:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=89BCBA07236FD8FE6A29252905F1C4DD1DE72097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:5e:eb:cf:4a:13:38:16:89:b3:94:cf:f3: e2:37:e8:6e:9e:36:52:61:13:77:10:9e:3d:d0:d8: 00:55:ce:dc:7c:05:9e:14:3d:86:c2:a8:e2:63:65: 7c:5d:f7:41:80:64:c3:e6:e8:b7:c9:e5:89:d8:03: c8:b0:93:69:33:91:a0:6f:bf:0f:67:6a:eb:25:96: f7:46:92:d6:63:66:9b:fa:bb:d1:54:d5:3d:1c:c0: f4:ea:81:0b:e2:bc:1e:23:07:15:49:92:21:90:02: f3:d5:4e:e0:41:32:fb:af:d0:73:a6:2b:aa:2a:fe: c7:87:8a:1d:ea:e1:b4:d4:bc:e0:3a:f3:bf:e7:3e: 74:85:5e:bb:cc:85:80:ce:10:50:7b:3d:7e:08:36: 07:9e:28:6f:dd:4f:23:3c:ea:af:99:ac:f5:1f:12: d9:a6:e4:d9:2c:6c:72:07:cf:fc:8c:c3:e6:12:09: 08:ac:c4:2c:9d:f0:a5:4f:95:44:03:f2:8a:b3:5a: ca:9d:e2:0d:5e:b9:0c:20:a4:a5:24:cd:d9:2b:d2: 5f:7e:68:f1:ff:a2:bc:cc:eb:fa:7e:27:c6:7a:29: 1f:ea:fb:91:58:33:f5:af:6c:f6:dd:3f:72:ef:a7: 41:e4:50:6f:7c:a2:da:47:22:1f:a3:a8:f8:3d:00: a7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BC:BA:07:23:6F:D8:FE:6A:29:25:29:05:F1:C4:DD:1D:E7:20:97 X509v3 Authority Key Identifier: keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/iby6ByNv2P5qKSUpBfHE3R3nIJc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.173.168.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:3d:53:b6:f3:92:84:8d:b3:98:92:22:08:c7:84:e7:be:15: 65:9a:6c:95:0d:3e:08:d9:9e:d2:6c:ab:f4:9d:d8:6d:0b:0b: d5:75:20:cb:42:e5:b0:66:00:c0:98:20:f5:cb:cc:8d:e3:84: 9a:6e:0e:47:06:62:92:af:ef:07:42:58:db:45:b2:52:e7:02: 83:a7:15:f7:97:91:38:eb:a0:76:76:c2:14:6c:ae:22:f3:62: 1f:13:83:43:a2:a8:ee:48:12:e3:7e:ff:70:35:cf:74:e3:c1: 34:80:a7:4f:8c:00:62:c8:e9:e7:09:51:0e:fc:68:f3:d3:47: 79:19:cc:11:c4:65:40:78:4a:11:c9:cb:cb:c7:d4:9c:52:4c: 3d:a8:5c:6f:45:12:4b:b0:b6:ee:1c:16:95:0c:2a:34:b8:05: 66:05:17:c7:e0:e5:19:c1:0b:43:38:b7:b3:2a:57:35:40:af: 25:cf:48:b9:fe:57:13:c5:2e:8c:9f:5d:c0:a9:17:2d:65:32: 57:46:5b:12:cc:66:dc:40:d3:98:cc:7e:dd:5e:d6:94:73:d1: 40:14:05:75:cd:98:a7:a6:bd:7f:01:1b:c8:bc:48:ff:71:21: 39:5e:6c:b8:22:61:e7:96:07:f8:92:23:9a:45:6a:00:66:c9: 3a:04:b6:44 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjcw MThCNERGRTU0QkQ2NDRFMDAwNjQxQTIzNEI0NzFEQjIwQjg5MjAeFw0yNTA0MDEw MTI5MzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg5QkNCQTA3MjM2RkQ4 RkU2QTI5MjUyOTA1RjFDNEREMURFNzIwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE517rz0oTOBaJs5TP8+I36G6eNlJhE3cQnj3Q2ABVztx8BZ4U PYbCqOJjZXxd90GAZMPm6LfJ5YnYA8iwk2kzkaBvvw9nausllvdGktZjZpv6u9FU 1T0cwPTqgQvivB4jBxVJkiGQAvPVTuBBMvuv0HOmK6oq/seHih3q4bTUvOA687/n PnSFXrvMhYDOEFB7PX4INgeeKG/dTyM86q+ZrPUfEtmm5NksbHIHz/yMw+YSCQis xCyd8KVPlUQD8oqzWsqd4g1euQwgpKUkzdkr0l9+aPH/orzM6/p+J8Z6KR/q+5FY M/WvbPbdP3Lvp0HkUG98otpHIh+jqPg9AKdvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUiby6ByNv2P5qKSUpBfHE3R3nIJcwHwYDVR0jBBgwFoAUZwGLTf5UvWROAAZB ojS0cdsguJIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwNy9ad0dMVGY1VXZXUk9BQVpCb2pTMGNkc2d1SkkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ad0dMVGY1VXZXUk9BQVpCb2pTMGNk c2d1SkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjA3L2lieTZCeU52MlA1cUtTVXBCZkhFM1IzbklKYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADSragwDQYJKoZIhvcNAQELBQADggEBADs9U7bzkoSNs5iSIgjHhOe+FWWa bJUNPgjZntJsq/Sd2G0LC9V1IMtC5bBmAMCYIPXLzI3jhJpuDkcGYpKv7wdCWNtF slLnAoOnFfeXkTjroHZ2whRsriLzYh8Tg0OiqO5IEuN+/3A1z3TjwTSAp0+MAGLI 6ecJUQ78aPPTR3kZzBHEZUB4ShHJy8vH1JxSTD2oXG9FEkuwtu4cFpUMKjS4BWYF F8fg5RnBC0M4t7MqVzVAryXPSLn+VxPFLoyfXcCpFy1lMldGWxLMZtxA05jMft1e 1pRz0UAUBXXNmKemvX8BG8i8SP9xITlebLgiYeeWB/iSI5pFagBmyToEtkQ= -----END CERTIFICATE-----Generated at Sun Apr 6 01:44:21 2025 by rpki-client