$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/LOHQFI8LajI-vAI5r3OX8mgcp84.roa File: LOHQFI8LajI-vAI5r3OX8mgcp84.roa (raw, json) Hash identifier: EM/cO8HsTA/KouBC7ShGxK329TEdDeFAUMY9LU+pVgY= Subject key identifier: 2C:E1:D0:14:8F:0B:6A:32:3E:BC:02:39:AF:73:97:F2:68:1C:A7:CE Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Certificate serial: 7F Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/LOHQFI8LajI-vAI5r3OX8mgcp84.roa Signing time: Fri 31 Jan 2025 01:32:00 +0000 ROA not before: Fri 31 Jan 2025 01:32:00 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18260 IP address blocks: 210.141.214.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Validity Not Before: Jan 31 01:32:00 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=2CE1D0148F0B6A323EBC0239AF7397F2681CA7CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2c:f3:ef:c7:50:77:5e:ba:24:26:fc:9f:4b: 77:f7:fa:91:7c:2a:87:79:44:53:67:a5:22:c1:9f: e1:e6:c2:cb:39:a3:72:e6:78:e0:69:bd:44:de:72: 80:c0:a0:55:eb:17:d0:dd:3e:1c:36:3e:61:bd:82: a4:4e:d3:a9:1d:cb:aa:10:c9:e9:24:35:4c:b8:c9: 6d:40:e3:2a:31:9a:ba:7e:d3:df:39:16:04:68:7b: c3:be:70:b8:4e:1a:d9:65:8d:72:9d:66:0e:c2:a6: 79:a9:1c:5c:4d:49:8a:dc:8c:2d:da:40:84:b7:79: 66:dd:69:5e:76:77:43:ed:0d:2a:4e:bf:12:df:67: 03:e6:c4:27:d0:00:19:97:b9:74:b7:49:17:4b:2c: 37:23:ba:ef:5a:39:10:8b:85:46:b9:74:1e:0c:87: 9f:9d:bb:2c:6f:4e:ec:88:47:d7:43:91:29:82:5f: 3b:58:12:3e:2b:0c:55:99:ef:a0:12:fe:09:7a:9b: ac:69:78:ac:a2:d3:4a:6c:b4:4c:2f:44:e2:55:12: 9b:fe:20:b4:53:60:5b:75:8b:4e:b4:27:2e:4d:fd: 98:ba:b9:ac:7d:5f:51:c0:26:f2:45:5f:c0:23:be: 0a:76:34:dc:a3:b7:6d:37:d1:a5:a5:4e:44:05:cc: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E1:D0:14:8F:0B:6A:32:3E:BC:02:39:AF:73:97:F2:68:1C:A7:CE X509v3 Authority Key Identifier: keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/LOHQFI8LajI-vAI5r3OX8mgcp84.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.141.214.0/23 Signature Algorithm: sha256WithRSAEncryption 60:ae:22:c0:59:d3:a9:ad:05:60:09:20:a1:9d:e1:63:49:5c: ef:ab:8f:66:1f:83:a1:ab:99:bc:98:b9:95:35:eb:be:8b:ae: b0:3e:92:0c:b3:db:92:da:68:32:6d:0d:f6:d8:39:a7:35:99: 3d:0b:b3:db:0b:e0:6e:93:f6:13:cc:9f:13:b0:7c:4e:6c:51: f6:97:fb:f4:a7:e1:08:e8:16:d7:ea:de:51:3b:c8:fa:e3:a2: 00:1d:b2:e9:86:c2:bf:53:7d:1b:5d:42:95:41:3b:88:7c:d0: 17:10:b5:7d:38:f0:b7:f7:58:00:fa:a5:7c:52:ed:cd:aa:86: c4:fd:fd:b1:2c:6d:99:bb:63:dc:34:cc:76:79:c7:92:f1:19: 3e:2d:6e:ce:40:f5:97:3f:57:1a:ce:25:b3:0c:bc:17:87:f0: d7:70:86:3a:6a:34:05:12:68:9d:e8:84:d0:38:91:ca:1a:42: 36:dd:61:f3:03:23:82:93:59:32:0d:d9:68:00:dd:7b:31:3f: 7a:46:ab:6d:0c:a5:8b:68:1c:d7:3e:05:c1:e0:09:b5:9a:61: 45:65:5e:90:5c:72:86:4a:ea:bd:46:51:1b:41:3a:b3:9a:ef: 6e:e8:ca:63:c1:13:1b:9e:93:1b:bf:d0:6b:68:df:83:be:8b: a5:d1:a5:c1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTI1MDEzMTAx MzIwMFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoMkNFMUQwMTQ4RjBCNkEz MjNFQkMwMjM5QUY3Mzk3RjI2ODFDQTdDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKYs8+/HUHdeuiQm/J9Ld/f6kXwqh3lEU2elIsGf4ebCyzmjcuZ4 4Gm9RN5ygMCgVesX0N0+HDY+Yb2CpE7TqR3LqhDJ6SQ1TLjJbUDjKjGaun7T3zkW BGh7w75wuE4a2WWNcp1mDsKmeakcXE1JityMLdpAhLd5Zt1pXnZ3Q+0NKk6/Et9n A+bEJ9AAGZe5dLdJF0ssNyO671o5EIuFRrl0HgyHn527LG9O7IhH10ORKYJfO1gS PisMVZnvoBL+CXqbrGl4rKLTSmy0TC9E4lUSm/4gtFNgW3WLTrQnLk39mLq5rH1f UcAm8kVfwCO+CnY03KO3bTfRpaVORAXMm/UCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQs4dAUjwtqMj68Ajmvc5fyaBynzjAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MzEvTE9IUUZJOExhakktdkFJNXIzT1g4bWdjcDg0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAdKN1jANBgkqhkiG9w0BAQsFAAOCAQEAYK4iwFnTqa0FYAkgoZ3hY0lc76uP Zh+DoauZvJi5lTXrvouusD6SDLPbktpoMm0N9tg5pzWZPQuz2wvgbpP2E8yfE7B8 TmxR9pf79KfhCOgW1+reUTvI+uOiAB2y6YbCv1N9G11ClUE7iHzQFxC1fTjwt/dY APqlfFLtzaqGxP39sSxtmbtj3DTMdnnHkvEZPi1uzkD1lz9XGs4lswy8F4fw13CG Omo0BRJoneiE0DiRyhpCNt1h8wMjgpNZMg3ZaADdezE/ekarbQyli2gc1z4FweAJ tZphRWVekFxyhkrqvUZRG0E6s5rvbujKY8ETG56TG7/Qa2jfg76LpdGlwQ== -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:17 2025 by rpki-client