$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/kue_m323lBAJEfPSCR95BAziN_s.roa File: kue_m323lBAJEfPSCR95BAziN_s.roa (raw, json) Hash identifier: 4EuL5YYSSIAxFsGJO/5QU9Bbs/s3lb+uaSPcnI0MhqA= Subject key identifier: 92:E7:BF:9B:7D:B7:94:10:09:11:F3:D2:09:1F:79:04:0C:E2:37:FB Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Certificate serial: 7D Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kue_m323lBAJEfPSCR95BAziN_s.roa Signing time: Fri 31 Jan 2025 01:32:00 +0000 ROA not before: Fri 31 Jan 2025 01:32:00 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18260 IP address blocks: 202.165.48.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Validity Not Before: Jan 31 01:32:00 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=92E7BF9B7DB794100911F3D2091F79040CE237FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2b:c8:40:24:3b:6c:8a:f9:ac:47:00:01:2d: d5:eb:82:39:a9:c0:85:e1:d5:28:fb:8c:be:08:5d: 4d:ca:a7:1f:51:d0:0c:1c:0d:8d:f5:4b:bc:dc:1b: ba:12:3e:55:7c:ec:bc:e1:e6:1f:e8:31:3c:7d:31: f7:b4:57:fd:c6:ba:11:af:74:74:b1:1e:66:f4:b8: f1:81:b9:5e:14:bb:a1:7d:80:17:e9:02:df:79:87: 76:76:62:2d:c7:c7:61:47:7c:54:ee:37:9c:b9:b7: 65:ac:39:a9:cb:29:13:6f:9a:fa:80:9e:8f:ea:b3: f5:43:5a:96:3e:58:ca:34:ac:44:9c:ea:10:91:e0: bd:9f:88:a8:1f:d5:94:5e:1f:91:36:24:f2:73:f7: 78:48:13:f2:63:72:30:28:94:f5:a7:c7:d4:df:42: a0:07:79:69:e1:a0:c4:1b:a6:03:d0:73:6b:8c:d7: eb:64:ef:d0:e4:ee:b3:c0:bf:a8:a9:ed:ef:b4:c5: 83:a4:b3:30:6c:93:d8:7f:68:13:d0:6e:1a:b2:1e: 19:a1:c8:8f:45:8f:e2:a6:25:1b:07:97:aa:b9:82: a1:e0:8a:c4:dc:68:a7:72:19:07:35:e2:03:d0:18: bf:73:81:5a:66:b6:0c:24:7e:72:42:5b:ce:af:60: 9c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E7:BF:9B:7D:B7:94:10:09:11:F3:D2:09:1F:79:04:0C:E2:37:FB X509v3 Authority Key Identifier: keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kue_m323lBAJEfPSCR95BAziN_s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.165.48.0/21 Signature Algorithm: sha256WithRSAEncryption 42:cc:e8:09:3b:50:e5:fd:af:ee:93:0a:72:27:46:7b:63:32: e0:27:85:85:92:28:81:07:75:2f:85:27:9c:b5:5c:a7:8d:e7: 80:cf:55:78:6f:e4:75:ec:13:c7:0e:22:1f:59:5a:eb:cc:2c: 7c:5b:10:e8:e9:85:51:12:34:a7:9b:79:b9:01:49:50:1a:f4: 19:59:ae:b4:ae:3c:cc:6f:f0:cb:c7:b0:69:62:07:78:57:f9: ef:f9:1f:58:ae:64:df:a7:98:cb:50:d8:06:48:cd:2b:c3:51: ce:42:64:c5:55:15:7e:25:e3:c5:30:b1:46:4c:19:59:10:e1: 81:06:2e:bf:1b:3f:3b:b5:4f:02:6f:8b:07:d0:7f:e3:b0:c8: a7:41:75:30:d0:a2:86:1d:17:b4:f3:d9:4a:0f:b7:86:d9:e5: 25:ff:ba:d5:0b:0e:0d:20:bb:f2:61:68:9b:d4:f0:21:a8:64: d9:ee:cc:89:0d:ce:88:4a:98:82:de:dc:94:ac:24:e0:b5:ae: a9:f2:e4:5b:24:b8:4c:22:9f:94:4e:18:19:e4:e9:3b:70:0c: c0:03:93:5a:9e:80:83:24:02:5b:6c:87:68:52:70:4f:26:28: a4:37:6b:bd:7d:9c:3b:6a:dc:a0:eb:e2:08:94:36:55:4a:5d: 40:1b:c2:e8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTI1MDEzMTAx MzIwMFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoOTJFN0JGOUI3REI3OTQx MDA5MTFGM0QyMDkxRjc5MDQwQ0UyMzdGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANQryEAkO2yK+axHAAEt1euCOanAheHVKPuMvghdTcqnH1HQDBwN jfVLvNwbuhI+VXzsvOHmH+gxPH0x97RX/ca6Ea90dLEeZvS48YG5XhS7oX2AF+kC 33mHdnZiLcfHYUd8VO43nLm3Zaw5qcspE2+a+oCej+qz9UNalj5YyjSsRJzqEJHg vZ+IqB/VlF4fkTYk8nP3eEgT8mNyMCiU9afH1N9CoAd5aeGgxBumA9Bza4zX62Tv 0OTus8C/qKnt77TFg6SzMGyT2H9oE9BuGrIeGaHIj0WP4qYlGweXqrmCoeCKxNxo p3IZBzXiA9AYv3OBWma2DCR+ckJbzq9gnP0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSS57+bfbeUEAkR89IJH3kEDOI3+zAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MzEva3VlX20zMjNsQkFKRWZQU0NSOTVCQXppTl9zLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8qlMDANBgkqhkiG9w0BAQsFAAOCAQEAQszoCTtQ5f2v7pMKcidGe2My4CeF hZIogQd1L4UnnLVcp43ngM9VeG/kdewTxw4iH1la68wsfFsQ6OmFURI0p5t5uQFJ UBr0GVmutK48zG/wy8ewaWIHeFf57/kfWK5k36eYy1DYBkjNK8NRzkJkxVUVfiXj xTCxRkwZWRDhgQYuvxs/O7VPAm+LB9B/47DIp0F1MNCihh0XtPPZSg+3htnlJf+6 1QsODSC78mFom9TwIahk2e7MiQ3OiEqYgt7clKwk4LWuqfLkWyS4TCKflE4YGeTp O3AMwAOTWp6AgyQCW2yHaFJwTyYopDdrvX2cO2rcoOviCJQ2VUpdQBvC6A== -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:40 2025 by rpki-client