$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/clzB5IfBx7dVURSTg0q1aGFBPHI.roa File: clzB5IfBx7dVURSTg0q1aGFBPHI.roa (raw, json) Hash identifier: OkrCHB8JmjCrD/NrK7XNACH8uWC11Ojj3M4YlTwlgNY= Subject key identifier: 72:5C:C1:E4:87:C1:C7:B7:55:51:14:93:83:4A:B5:68:61:41:3C:72 Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Certificate serial: 68 Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/clzB5IfBx7dVURSTg0q1aGFBPHI.roa Signing time: Sat 01 Mar 2025 01:28:03 +0000 ROA not before: Sat 01 Mar 2025 01:28:03 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 10019 IP address blocks: 61.115.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Validity Not Before: Mar 1 01:28:03 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=725CC1E487C1C7B755511493834AB56861413C72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:19:13:f8:aa:38:4a:93:4a:0a:f2:49:9f: b2:3d:fb:88:ed:6d:88:08:06:8c:4f:57:68:8d:55: c8:d4:3d:d4:70:f9:98:0c:c9:79:ce:d4:d1:89:ac: 9d:7a:3d:26:a2:ad:82:ae:8a:81:7a:93:e4:e0:17: a3:62:8e:c7:62:b0:5a:20:ce:3a:4c:4d:86:a2:50: 5b:b4:9f:ca:bd:44:9d:3e:65:d8:c1:d8:ce:93:0c: 19:36:52:63:4d:9b:c2:9a:b9:83:d6:97:3a:92:4b: fe:a0:59:f9:f9:a0:a7:05:7e:a1:7a:fe:83:28:6e: 10:18:b5:2a:d4:a2:ff:11:8a:16:33:91:00:fb:e5: 45:d9:99:c4:e5:1c:df:4a:91:34:02:81:4b:91:5e: 67:e3:54:14:b6:8a:60:5d:c3:7c:bb:47:e8:5a:80: 17:5c:09:83:91:b3:18:23:59:99:96:33:a1:78:bf: 9d:5b:60:0b:81:d8:30:f2:95:48:1e:1f:6d:50:2e: 3a:7f:5b:66:d6:09:29:44:f2:bd:66:0a:63:e9:f9: 76:b2:ea:54:37:61:64:9f:2b:de:c2:44:9f:27:31: d5:5a:78:0b:73:bb:7d:43:5c:2a:0a:00:73:b7:78: 42:19:8f:76:fa:4f:8d:cf:95:52:21:08:30:c4:f5: b4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5C:C1:E4:87:C1:C7:B7:55:51:14:93:83:4A:B5:68:61:41:3C:72 X509v3 Authority Key Identifier: keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/clzB5IfBx7dVURSTg0q1aGFBPHI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.115.240.0/20 Signature Algorithm: sha256WithRSAEncryption 94:eb:83:47:1c:c3:f7:d2:22:70:9f:b7:d7:17:fe:6e:8f:a7: ac:25:e4:7d:65:a7:a9:e0:aa:3d:74:79:bc:ee:ff:e2:2a:c8: 4e:fd:6e:e1:94:a6:d2:6d:f5:b5:8b:d8:a3:df:7b:eb:d4:ec: 79:59:e1:b2:cc:c1:4c:93:8f:0b:9c:54:cf:4c:6a:15:b7:2a: 17:86:3c:f5:19:ab:b9:23:8d:c2:85:6e:ca:99:99:d4:fb:d0: 32:27:d5:62:d7:b9:9c:17:8d:fd:38:dc:04:af:f1:4e:b4:78: 77:ac:1a:de:5c:ad:b7:8e:25:bb:a3:51:df:e4:62:35:9b:24: 7b:ce:86:15:38:79:32:ad:a3:3a:3b:d5:2a:e8:44:ca:17:00: a3:db:22:86:5a:fe:f3:b9:08:81:41:5f:f0:35:e1:dd:c5:60: 97:94:de:db:3a:d9:b1:5b:4c:4c:de:0a:51:c8:71:48:3c:e8: 71:60:2d:30:96:65:63:0d:a1:c0:3e:7c:7f:d0:a4:64:08:b2: 02:56:d8:31:bc:dc:ad:5e:1d:09:97:38:90:4e:f1:d5:a2:cc: bd:1b:6f:a9:a3:45:ec:f9:ba:6f:a8:2e:da:93:a5:f0:f2:6d: fc:93:11:c2:6b:f5:6c:7e:d5:a6:fc:4f:2d:ca:a6:22:9f:7f: e9:76:ba:4c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Mzkx N0IyMzA3NDUyNEU5RTZFQThFNDBGQTRBMDY3MkM5NjIwMzE4MB4XDTI1MDMwMTAx MjgwM1oXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoNzI1Q0MxRTQ4N0MxQzdC NzU1NTExNDkzODM0QUI1Njg2MTQxM0M3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALCbGRP4qjhKk0oK8kmfsj37iO1tiAgGjE9XaI1VyNQ91HD5mAzJ ec7U0YmsnXo9JqKtgq6KgXqT5OAXo2KOx2KwWiDOOkxNhqJQW7Sfyr1EnT5l2MHY zpMMGTZSY02bwpq5g9aXOpJL/qBZ+fmgpwV+oXr+gyhuEBi1KtSi/xGKFjORAPvl RdmZxOUc30qRNAKBS5FeZ+NUFLaKYF3DfLtH6FqAF1wJg5GzGCNZmZYzoXi/nVtg C4HYMPKVSB4fbVAuOn9bZtYJKUTyvWYKY+n5drLqVDdhZJ8r3sJEnycx1Vp4C3O7 fUNcKgoAc7d4QhmPdvpPjc+VUiEIMMT1tPMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRyXMHkh8HHt1VRFJODSrVoYUE8cjAfBgNVHSMEGDAWgBRDkXsjB0Uk6ebqjkD6 SgZyyWIDGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDYyL1E1RjdJd2RGSk9ubTZvNUEta29HY3NsaUF4Zy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1E1RjdJd2RGSk9ubTZvNUEta29HY3Ns aUF4Zy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NjIvY2x6QjVJZkJ4N2RWVVJTVGcwcTFhR0ZCUEhJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD1z8DANBgkqhkiG9w0BAQsFAAOCAQEAlOuDRxzD99IicJ+31xf+bo+nrCXk fWWnqeCqPXR5vO7/4irITv1u4ZSm0m31tYvYo99769TseVnhsszBTJOPC5xUz0xq FbcqF4Y89RmruSONwoVuypmZ1PvQMifVYte5nBeN/TjcBK/xTrR4d6wa3lytt44l u6NR3+RiNZske86GFTh5Mq2jOjvVKuhEyhcAo9sihlr+87kIgUFf8DXh3cVgl5Te 2zrZsVtMTN4KUchxSDzocWAtMJZlYw2hwD58f9CkZAiyAlbYMbzcrV4dCZc4kE7x 1aLMvRtvqaNF7Pm6b6gu2pOl8PJt/JMRwmv1bH7VpvxPLcqmIp9/6Xa6TA== -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:33 2025 by rpki-client