$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/655/8LvSvQsw1CFypISCy02jrWDS718.roa File: 8LvSvQsw1CFypISCy02jrWDS718.roa (raw, json) Hash identifier: FRcBj+z066HPyI+A/kziunwAldTjaKUZ9uP7EyG/JXk= Subject key identifier: F0:BB:D2:BD:0B:30:D4:21:72:A4:84:82:CB:4D:A3:AD:60:D2:EF:5F Certificate issuer: /CN=67AE21A3C7D4782B45B6BDC14B8A120D0617AB42 Certificate serial: 13 Authority key identifier: 67:AE:21:A3:C7:D4:78:2B:45:B6:BD:C1:4B:8A:12:0D:06:17:AB:42 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/8LvSvQsw1CFypISCy02jrWDS718.roa Signing time: Tue 01 Apr 2025 01:31:23 +0000 ROA not before: Tue 01 Apr 2025 01:31:23 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 7690 IP address blocks: 158.199.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AE21A3C7D4782B45B6BDC14B8A120D0617AB42 Validity Not Before: Apr 1 01:31:23 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F0BBD2BD0B30D42172A48482CB4DA3AD60D2EF5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:28:3a:49:41:a8:38:da:ff:96:10:7f:ae: 19:90:ca:d3:10:d3:5d:c6:27:8c:07:c4:28:37:77: a8:36:1e:09:9b:af:10:40:9e:1b:88:76:90:bf:64: 2f:e2:e4:30:f8:f3:ce:39:d7:09:39:35:22:e2:da: 9d:8c:4d:3c:65:03:50:16:cb:94:76:42:8c:55:ef: 7a:da:0f:24:8b:aa:cc:a7:a8:ab:af:d6:4d:f2:b4: 1b:5b:66:33:5c:22:f0:73:35:f8:8b:5f:47:a3:3e: 86:13:20:51:94:79:94:cb:5d:c5:d1:64:0e:77:86: 10:85:e9:09:71:64:f3:ac:9a:5e:b6:8d:cd:2f:bc: 83:6b:26:00:60:29:f6:50:07:ff:ad:e1:4a:91:79: e4:3c:dd:a2:d5:fc:7d:34:7d:86:8a:03:c4:3b:12: 72:1b:8f:cf:52:b7:cc:11:18:06:a0:3b:39:54:a3: 09:0e:2a:65:e3:67:ef:0f:7b:d3:36:f6:1d:ae:88: e6:07:8c:cd:0c:33:ba:c8:65:ce:47:5d:77:bd:56: 68:4e:79:31:3d:eb:06:30:8b:c6:6c:6f:d6:52:a1: 6b:1b:2e:09:53:e2:4e:06:eb:f5:36:ed:94:82:8f: 03:d7:2f:1e:a5:4f:d5:fc:a2:1f:e4:cd:96:4a:b2: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BB:D2:BD:0B:30:D4:21:72:A4:84:82:CB:4D:A3:AD:60:D2:EF:5F X509v3 Authority Key Identifier: keyid:67:AE:21:A3:C7:D4:78:2B:45:B6:BD:C1:4B:8A:12:0D:06:17:AB:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/8LvSvQsw1CFypISCy02jrWDS718.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 158.199.112.0/20 Signature Algorithm: sha256WithRSAEncryption 0a:2f:a9:54:9b:68:9f:27:51:de:df:1b:da:a4:c5:d4:81:ae: 39:f8:32:30:c2:b6:cd:95:77:85:48:10:e5:53:00:d3:26:30: f3:b1:51:e8:ee:10:6e:2e:25:51:32:6e:66:ad:a5:39:5f:62: c2:cc:25:fd:de:db:eb:74:f0:71:7b:cb:5d:6c:f5:6c:cb:4f: 5d:00:1c:23:98:bc:94:df:38:5f:3b:e5:b9:ca:3f:0b:72:3b: 5c:9f:ed:97:7a:9b:40:08:48:49:b1:76:c1:28:07:ca:22:d6: 62:10:1d:df:8d:64:13:4b:29:dd:30:ce:1c:a3:68:7d:bc:53: a0:b8:8e:0a:5a:b1:f5:20:1e:e8:b7:e1:f9:8f:5b:51:d3:ec: 48:25:e8:e5:e3:a1:79:44:d3:95:96:6d:2b:f1:38:57:3b:3b: c3:d6:42:64:c0:aa:ca:bf:b3:e4:a9:e7:08:32:10:d2:53:08: 97:2d:6d:0f:d1:54:45:cf:55:8f:05:3c:46:1a:05:e4:43:04: d7:e5:87:14:6e:b9:b6:4e:11:b4:c1:31:4e:41:01:27:64:6d: 9d:1e:28:c5:18:99:40:b1:78:d6:e8:e4:6b:b3:92:86:01:af: 0b:af:1b:dd:40:61:fb:d4:4b:e9:75:12:09:dd:5b:e1:18:64: b5:8b:6a:82 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2N0FF MjFBM0M3RDQ3ODJCNDVCNkJEQzE0QjhBMTIwRDA2MTdBQjQyMB4XDTI1MDQwMTAx MzEyM1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRjBCQkQyQkQwQjMwRDQy MTcyQTQ4NDgyQ0I0REEzQUQ2MEQyRUY1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALzNKDpJQag42v+WEH+uGZDK0xDTXcYnjAfEKDd3qDYeCZuvEECe G4h2kL9kL+LkMPjzzjnXCTk1IuLanYxNPGUDUBbLlHZCjFXvetoPJIuqzKeoq6/W TfK0G1tmM1wi8HM1+ItfR6M+hhMgUZR5lMtdxdFkDneGEIXpCXFk86yaXraNzS+8 g2smAGAp9lAH/63hSpF55DzdotX8fTR9hooDxDsSchuPz1K3zBEYBqA7OVSjCQ4q ZeNn7w970zb2Ha6I5geMzQwzushlzkddd71WaE55MT3rBjCLxmxv1lKhaxsuCVPi Tgbr9TbtlIKPA9cvHqVP1fyiH+TNlkqyAu8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTwu9K9CzDUIXKkhILLTaOtYNLvXzAfBgNVHSMEGDAWgBRnriGjx9R4K0W2vcFL ihINBherQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjU1L1o2NGhvOGZVZUN0RnRyM0JTNG9TRFFZWHEwSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1o2NGhvOGZVZUN0RnRyM0JTNG9TRFFZ WHEwSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NTUvOEx2U3ZRc3cxQ0Z5cElTQ3kwMmpyV0RTNzE4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ7HcDANBgkqhkiG9w0BAQsFAAOCAQEACi+pVJtonydR3t8b2qTF1IGuOfgy MMK2zZV3hUgQ5VMA0yYw87FR6O4Qbi4lUTJuZq2lOV9iwswl/d7b63TwcXvLXWz1 bMtPXQAcI5i8lN84Xzvluco/C3I7XJ/tl3qbQAhISbF2wSgHyiLWYhAd341kE0sp 3TDOHKNofbxToLiOClqx9SAe6Lfh+Y9bUdPsSCXo5eOheUTTlZZtK/E4Vzs7w9ZC ZMCqyr+z5KnnCDIQ0lMIly1tD9FURc9VjwU8RhoF5EME1+WHFG65tk4RtMExTkEB J2RtnR4oxRiZQLF41ujka7OShgGvC68b3UBh+9RL6XUSCd1b4RhktYtqgg== -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:24 2025 by rpki-client