$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/O_RGIZAFz59qyCcmCLBPl1x1ut8.roa File: O_RGIZAFz59qyCcmCLBPl1x1ut8.roa (raw, json) Hash identifier: R+L0on/bfCIEZAYHyqZG+zyOXNhRamkO2cZdwmqe8Qc= Subject key identifier: 3B:F4:46:21:90:05:CF:9F:6A:C8:27:26:08:B0:4F:97:5C:75:BA:DF Certificate issuer: /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Certificate serial: 5C Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/O_RGIZAFz59qyCcmCLBPl1x1ut8.roa Signing time: Tue 01 Apr 2025 01:29:41 +0000 ROA not before: Tue 01 Apr 2025 01:29:41 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 7687 IP address blocks: 160.246.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Validity Not Before: Apr 1 01:29:41 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=3BF446219005CF9F6AC8272608B04F975C75BADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:f6:fa:20:13:7e:e6:74:52:6c:f4:9b:14: c2:77:21:34:e4:59:bf:b5:90:0f:75:37:a0:78:68: 54:34:1b:f1:a0:46:a2:11:d8:5d:0b:70:0e:6b:d6: 83:59:d0:3e:64:44:5c:4a:f6:b8:28:4a:09:6a:52: 05:8c:be:d7:c2:f8:4a:f2:09:e1:e1:24:8a:8e:b3: 05:8d:9e:6a:78:ff:92:0b:52:8a:be:42:1e:65:53: a2:cf:00:3d:67:22:d8:d1:6a:e9:26:da:3b:d1:3a: 20:ea:48:76:9f:8a:9d:54:f3:a8:6e:36:b5:cf:e1: d0:96:54:b4:33:a0:e0:13:58:a9:6a:64:2f:62:86: db:73:ce:a5:48:4a:bb:0b:70:86:a8:bc:68:b3:eb: 85:c9:de:a5:4f:91:04:c3:97:55:8d:dd:65:03:3a: 25:0f:23:25:02:16:71:b5:0b:cc:9c:82:33:63:00: ee:5c:b7:e8:75:da:ca:34:0e:17:ad:fc:fb:b7:4b: 82:66:ea:38:9b:8d:12:6b:4d:f9:c7:00:6d:48:18: f3:ea:36:9a:ba:c9:ed:99:39:0d:87:b6:a8:53:5a: 5d:b9:54:98:75:44:40:9b:59:e1:2f:54:fe:68:42: 9d:4c:17:88:cc:ed:58:e9:65:7c:c4:c4:82:3f:79: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F4:46:21:90:05:CF:9F:6A:C8:27:26:08:B0:4F:97:5C:75:BA:DF X509v3 Authority Key Identifier: keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/O_RGIZAFz59qyCcmCLBPl1x1ut8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.246.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0a:5f:4d:4f:fd:01:25:f2:27:c4:f0:5b:35:3c:b2:f4:df:54: 21:15:56:e6:a0:7f:23:e0:06:0b:fa:f6:41:73:76:63:ae:ed: 02:09:29:60:50:6b:d2:68:61:79:9d:74:c3:a5:da:9c:77:a7: 80:d6:9e:16:f0:cf:ab:7d:2e:cb:d5:26:71:dd:b7:85:0c:a9: 58:50:1f:c6:84:89:82:9d:11:99:c0:58:08:87:2d:dd:a7:a6: 33:47:22:52:18:8b:71:93:7f:22:42:b9:6c:73:7d:e4:8f:1b: 8c:41:1c:e8:fd:66:f1:28:18:bd:9a:4d:7b:49:cf:11:69:e1: e1:5f:13:ca:32:a4:f8:ac:87:77:12:4f:d2:dc:6c:f3:bd:5f: 25:31:d4:d5:00:34:b0:9e:81:b3:cd:79:d0:0a:82:17:70:01: 7b:8f:f8:5f:d0:a7:43:73:e2:5c:87:77:c9:10:4c:35:4d:35: ce:a5:3c:ee:df:54:18:d9:f3:49:72:8b:2e:8b:be:e0:1a:4e: f2:62:a4:f6:e5:c5:90:2a:13:2d:0c:e4:16:7c:4c:5a:31:70: 24:6b:4e:18:35:c5:94:1e:06:ea:47:46:f6:a1:00:b1:76:84: 11:c0:c0:39:0a:aa:dd:e2:78:93:e8:55:d1:0e:01:f1:73:2b: 63:77:d0:42 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEU1 M0M1MjQ0QjdGOUE3NkQ1RjlERjlGQkFGNjFFNTdCMkVBOTNCMB4XDTI1MDQwMTAx Mjk0MVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoM0JGNDQ2MjE5MDA1Q0Y5 RjZBQzgyNzI2MDhCMDRGOTc1Qzc1QkFERjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK5X9vogE37mdFJs9JsUwnchNORZv7WQD3U3oHhoVDQb8aBGohHY XQtwDmvWg1nQPmREXEr2uChKCWpSBYy+18L4SvIJ4eEkio6zBY2eanj/kgtSir5C HmVTos8APWci2NFq6SbaO9E6IOpIdp+KnVTzqG42tc/h0JZUtDOg4BNYqWpkL2KG 23POpUhKuwtwhqi8aLPrhcnepU+RBMOXVY3dZQM6JQ8jJQIWcbULzJyCM2MA7ly3 6HXayjQOF638+7dLgmbqOJuNEmtN+ccAbUgY8+o2mrrJ7Zk5DYe2qFNaXblUmHVE QJtZ4S9U/mhCnUwXiMztWOllfMTEgj958s0CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQ79EYhkAXPn2rIJyYIsE+XXHW63zAfBgNVHSMEGDAWgBS45TxSRLf5p21fnfn7 r2Hley6pOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91T1U4VWtTMy1hZHRYNTM1LTY5aDVY c3VxVHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ5MC9PX1JHSVpBRno1OXF5Q2NtQ0xCUGwxeDF1dDgucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQHoPYAMA0GCSqGSIb3DQEBCwUAA4IBAQAKX01P/QEl8ifE8Fs1PLL031Qh FVbmoH8j4AYL+vZBc3Zjru0CCSlgUGvSaGF5nXTDpdqcd6eA1p4W8M+rfS7L1SZx 3beFDKlYUB/GhImCnRGZwFgIhy3dp6YzRyJSGItxk38iQrlsc33kjxuMQRzo/Wbx KBi9mk17Sc8RaeHhXxPKMqT4rId3Ek/S3GzzvV8lMdTVADSwnoGzzXnQCoIXcAF7 j/hf0KdDc+Jch3fJEEw1TTXOpTzu31QY2fNJcosui77gGk7yYqT25cWQKhMtDOQW fExaMXAka04YNcWUHgbqR0b2oQCxdoQRwMA5Cqrd4niT6FXRDgHxcytjd9BC -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:55 2025 by rpki-client