$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/kdmvYaSX6d2ltTGVcbdZQhcWkuM.roa File: kdmvYaSX6d2ltTGVcbdZQhcWkuM.roa (raw, json) Hash identifier: RUGypG1Bfvbu81JITZWG7nEJ8TffTyOuL0ybjQA3p+A= Subject key identifier: 91:D9:AF:61:A4:97:E9:DD:A5:B5:31:95:71:B7:59:42:17:16:92:E3 Certificate issuer: /CN=28CD95AF0B878E0161E628A0CC240CEADA9198B5 Certificate serial: 2B Authority key identifier: 28:CD:95:AF:0B:87:8E:01:61:E6:28:A0:CC:24:0C:EA:DA:91:98:B5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/kdmvYaSX6d2ltTGVcbdZQhcWkuM.roa Signing time: Tue 01 Apr 2025 01:28:21 +0000 ROA not before: Tue 01 Apr 2025 01:28:21 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 17958 IP address blocks: 157.112.160.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28CD95AF0B878E0161E628A0CC240CEADA9198B5 Validity Not Before: Apr 1 01:28:21 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=91D9AF61A497E9DDA5B5319571B75942171692E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:eb:ad:43:e9:29:b6:68:1d:aa:2c:19:02:da: 1c:aa:cf:09:a9:22:07:be:ad:3e:a0:c8:b7:1f:3f: f7:6d:ba:a3:80:4b:d8:24:50:5a:a8:7c:5a:20:a5: 5c:a4:e6:13:df:45:5c:92:01:ef:6f:b6:e5:6a:0a: 16:79:62:4e:10:df:e3:5a:4f:a2:07:b5:a2:92:0f: 2d:8b:8d:73:53:39:cb:ca:11:f9:95:ab:55:1d:af: 4b:6f:ea:ee:00:f3:5c:d3:6e:0a:ab:5d:d9:c2:92: f2:73:f6:87:20:96:81:64:7a:3f:e9:3f:a0:46:85: c3:04:5a:43:c3:94:2c:cd:d2:28:ef:3f:a8:06:fe: 00:d2:19:94:9e:84:4c:53:15:58:ee:ee:5d:66:59: 0c:0c:1b:45:b6:61:65:c9:33:e6:ee:e6:37:25:52: 06:7f:1c:d6:ca:17:8a:e9:cc:88:25:62:92:cc:bb: fd:f7:e7:2c:a6:01:d0:38:6d:d2:35:cd:c8:a0:0e: e4:5f:a6:7a:45:63:f1:c7:05:4c:f1:58:05:30:f8: aa:c7:53:23:c0:7a:7f:19:af:e8:20:f5:87:f2:95: 91:d4:2c:b2:f0:6d:af:2e:e6:76:d7:b0:8b:64:b2: e2:f8:61:d8:5d:fd:ad:1e:02:83:bd:d5:0f:92:61: 4a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D9:AF:61:A4:97:E9:DD:A5:B5:31:95:71:B7:59:42:17:16:92:E3 X509v3 Authority Key Identifier: keyid:28:CD:95:AF:0B:87:8E:01:61:E6:28:A0:CC:24:0C:EA:DA:91:98:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/kdmvYaSX6d2ltTGVcbdZQhcWkuM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.112.160.0/20 Signature Algorithm: sha256WithRSAEncryption 79:71:1c:66:f4:e4:08:ba:3f:20:64:8d:28:c6:bd:c9:40:7c: 2e:b3:82:11:a3:ca:51:a5:d8:ba:c3:2c:e5:a7:0c:0b:b6:e1: eb:5c:c1:02:94:32:65:da:e0:88:0e:76:e5:60:96:2c:30:a3: 39:6c:37:83:8e:ab:59:0d:8c:4e:12:4e:83:8e:13:8f:5d:2c: 1d:ac:d2:36:fa:14:1c:41:ed:07:e0:6d:96:4b:a2:d8:37:b3: cf:19:7b:9d:93:f8:0d:94:3e:70:d2:92:58:1f:cf:c8:b1:ae: 82:86:2f:9e:76:90:ad:df:83:dc:ab:b4:8f:df:5f:60:78:fe: 0e:de:41:a9:8b:88:8d:0a:c6:d7:6d:d2:4f:de:25:e1:63:0a: d5:6b:07:73:a8:17:5d:2d:47:d7:04:a6:9f:89:b6:7e:9e:61: 8f:5d:ae:34:af:3d:fd:b7:45:e0:32:33:b8:bc:3b:ba:a6:e2: 18:cd:4e:50:64:f9:86:a4:66:ff:9f:05:3b:c3:ed:d8:f9:7a: da:56:70:42:c9:80:2c:87:0c:fa:15:37:e4:c2:49:e1:3e:a5: a4:bb:8e:eb:6c:8e:90:3e:cc:fb:26:b6:e6:65:b7:0c:b9:a9: c4:fd:25:ed:ec:52:58:52:4c:9f:1c:c5:33:d2:f1:8d:ae:d2: cb:8f:f2:04 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOENE OTVBRjBCODc4RTAxNjFFNjI4QTBDQzI0MENFQURBOTE5OEI1MB4XDTI1MDQwMTAx MjgyMVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoOTFEOUFGNjFBNDk3RTlE REE1QjUzMTk1NzFCNzU5NDIxNzE2OTJFMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM3rrUPpKbZoHaosGQLaHKrPCakiB76tPqDItx8/9226o4BL2CRQ Wqh8WiClXKTmE99FXJIB72+25WoKFnliThDf41pPoge1opIPLYuNc1M5y8oR+ZWr VR2vS2/q7gDzXNNuCqtd2cKS8nP2hyCWgWR6P+k/oEaFwwRaQ8OULM3SKO8/qAb+ ANIZlJ6ETFMVWO7uXWZZDAwbRbZhZckz5u7mNyVSBn8c1soXiunMiCViksy7/ffn LKYB0Dht0jXNyKAO5F+mekVj8ccFTPFYBTD4qsdTI8B6fxmv6CD1h/KVkdQssvBt ry7mdtewi2Sy4vhh2F39rR4Cg73VD5JhSt0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSR2a9hpJfp3aW1MZVxt1lCFxaS4zAfBgNVHSMEGDAWgBQozZWvC4eOAWHmKKDM JAzq2pGYtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjc5L0tNMlZyd3VIamdGaDVpaWd6Q1FNNnRxUm1MVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0tNMlZyd3VIamdGaDVpaWd6Q1FNNnRx Um1MVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82Nzkva2RtdllhU1g2ZDJsdFRHVmNiZFpRaGNXa3VNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ1woDANBgkqhkiG9w0BAQsFAAOCAQEAeXEcZvTkCLo/IGSNKMa9yUB8LrOC EaPKUaXYusMs5acMC7bh61zBApQyZdrgiA525WCWLDCjOWw3g46rWQ2MThJOg44T j10sHazSNvoUHEHtB+Btlkui2Dezzxl7nZP4DZQ+cNKSWB/PyLGugoYvnnaQrd+D 3Ku0j99fYHj+Dt5BqYuIjQrG123ST94l4WMK1WsHc6gXXS1H1wSmn4m2fp5hj12u NK89/bdF4DIzuLw7uqbiGM1OUGT5hqRm/58FO8Pt2Pl62lZwQsmALIcM+hU35MJJ 4T6lpLuO62yOkD7M+ya25mW3DLmpxP0l7exSWFJMnxzFM9Lxja7Sy4/yBA== -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:31 2025 by rpki-client