$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/qrhMn8YcSE7STVvLw-m4R9HD4Ac.roa File: qrhMn8YcSE7STVvLw-m4R9HD4Ac.roa (raw, json) Hash identifier: 31FyKHYQ2nwtZRVBGgmoB9VCZ+D1+5OakjQorDLhXEc= Subject key identifier: AA:B8:4C:9F:C6:1C:48:4E:D2:4D:5B:CB:C3:E9:B8:47:D1:C3:E0:07 Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 40 Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/qrhMn8YcSE7STVvLw-m4R9HD4Ac.roa Signing time: Sat 31 Aug 2024 01:31:27 +0000 ROA not before: Sat 31 Aug 2024 01:31:27 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 10000 IP address blocks: 14.1.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Aug 31 01:31:27 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=AAB84C9FC61C484ED24D5BCBC3E9B847D1C3E007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:74:44:b1:56:0f:1a:5e:b4:1b:25:97:82: aa:b5:92:b6:4a:0a:02:58:10:08:1f:c5:fe:fb:3f: 29:10:77:dd:34:75:85:9a:78:8a:68:c0:94:5e:52: cc:f2:48:b7:4e:f6:f3:55:79:e6:ab:ac:1b:11:fd: b0:07:5a:a7:4f:c0:dc:0e:b6:31:f4:df:a6:05:b1: 0d:a0:68:7c:6d:14:55:60:c3:f9:33:40:6b:54:a6: 31:63:bf:23:86:af:36:ee:dc:e2:da:69:96:35:e7: 26:b5:36:22:ae:27:87:a6:a0:27:41:ad:94:e7:7c: 0b:da:08:48:00:0e:2c:8b:75:51:73:2e:17:da:eb: 77:c6:d8:72:b4:94:c3:24:14:7c:0c:fe:f2:62:58: b6:c2:e9:e6:4f:9d:ef:ea:f3:93:97:29:4e:49:69: df:a7:ed:89:a9:fc:a7:e8:eb:6f:56:0a:d5:3e:71: c1:23:0b:45:67:49:25:d2:45:8e:d8:66:3a:b5:66: 1d:9b:18:84:a5:89:fe:47:7c:56:21:c7:17:c8:09: 34:b4:b1:d4:0d:4c:0d:4e:f9:54:46:11:fa:ba:fd: 6e:a8:c3:2d:d3:57:8a:3d:e8:b6:44:c9:46:9e:72: 73:df:c0:97:ed:6b:bb:69:6d:4b:16:e8:a8:74:f7: 2e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B8:4C:9F:C6:1C:48:4E:D2:4D:5B:CB:C3:E9:B8:47:D1:C3:E0:07 X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/qrhMn8YcSE7STVvLw-m4R9HD4Ac.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.1.8.0/21 Signature Algorithm: sha256WithRSAEncryption 19:de:dd:f1:eb:3c:77:c2:6b:3c:67:58:36:ce:89:7a:36:b8: 3c:fa:2b:ed:25:51:4b:b9:a7:01:89:d0:8d:36:7b:7a:09:0a: 6b:a4:2c:d5:a5:b6:67:21:fa:d2:1a:5f:87:a7:fe:04:6e:0b: 77:4f:dc:51:e1:2c:61:28:42:d1:52:97:d5:54:de:c5:99:00: 7a:26:a2:1a:38:fd:42:f8:b1:09:a7:33:d1:8d:cb:bb:d8:83: f4:62:85:31:2c:57:a4:bc:d4:7f:44:75:6d:4a:de:46:8f:77: c2:dd:52:9c:25:aa:49:59:16:9b:b2:03:09:c4:69:ea:68:e5: c9:76:99:87:a0:64:44:3a:46:51:d3:0b:c9:b4:c4:de:70:5b: ab:eb:19:1c:b6:65:86:08:0a:4b:49:cb:e3:85:6b:f5:fa:39: 5d:9f:b3:e9:2d:90:e3:24:68:64:ac:ec:5c:0b:e8:d3:12:72: 64:2a:c4:54:60:c9:57:4d:bc:4a:94:c5:7e:71:74:ff:b2:62: 8e:c1:f4:3d:55:c9:29:79:36:41:0c:07:dd:8a:1c:d6:df:21: d0:1c:bb:c9:62:e7:e8:c6:95:4f:21:65:28:40:d6:f4:2f:85: f5:f0:19:d5:66:90:20:3d:50:64:08:77:43:b8:c3:12:a5:c6: 79:15:5d:10 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3 NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI0MDgzMTAx MzEyN1oXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQUFCODRDOUZDNjFDNDg0 RUQyNEQ1QkNCQzNFOUI4NDdEMUMzRTAwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALHodESxVg8aXrQbJZeCqrWStkoKAlgQCB/F/vs/KRB33TR1hZp4 imjAlF5SzPJIt07281V55qusGxH9sAdap0/A3A62MfTfpgWxDaBofG0UVWDD+TNA a1SmMWO/I4avNu7c4tppljXnJrU2Iq4nh6agJ0GtlOd8C9oISAAOLIt1UXMuF9rr d8bYcrSUwyQUfAz+8mJYtsLp5k+d7+rzk5cpTklp36ftian8p+jrb1YK1T5xwSML RWdJJdJFjthmOrVmHZsYhKWJ/kd8ViHHF8gJNLSx1A1MDU75VEYR+rr9bqjDLdNX ij3otkTJRp5yc9/Al+1ru2ltSxboqHT3LgkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSquEyfxhxITtJNW8vD6bhH0cPgBzAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos 4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5 c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NTQvcXJoTW44WWNTRTdTVFZ2THctbTRSOUhENEFjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAw4BCDANBgkqhkiG9w0BAQsFAAOCAQEAGd7d8es8d8JrPGdYNs6Jeja4PPor 7SVRS7mnAYnQjTZ7egkKa6Qs1aW2ZyH60hpfh6f+BG4Ld0/cUeEsYShC0VKX1VTe xZkAeiaiGjj9QvixCacz0Y3Lu9iD9GKFMSxXpLzUf0R1bUreRo93wt1SnCWqSVkW m7IDCcRp6mjlyXaZh6BkRDpGUdMLybTE3nBbq+sZHLZlhggKS0nL44Vr9fo5XZ+z 6S2Q4yRoZKzsXAvo0xJyZCrEVGDJV028SpTFfnF0/7JijsH0PVXJKXk2QQwH3Yoc 1t8h0By7yWLn6MaVTyFlKEDW9C+F9fAZ1WaQID1QZAh3Q7jDEqXGeRVdEA== -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:42 2025 by rpki-client