$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/qn33yC4MdMQz26GNTbkrlbsJJiU.roa File: qn33yC4MdMQz26GNTbkrlbsJJiU.roa (raw, json) Hash identifier: fOm0tjGKeUjHvipxM+EIdBdWFLNQqHvvcwMdw/dYhe8= Subject key identifier: AA:7D:F7:C8:2E:0C:74:C4:33:DB:A1:8D:4D:B9:2B:95:BB:09:26:25 Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Certificate serial: 80 Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/qn33yC4MdMQz26GNTbkrlbsJJiU.roa Signing time: Fri 31 Jan 2025 01:32:01 +0000 ROA not before: Fri 31 Jan 2025 01:32:01 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18260 IP address blocks: 210.141.216.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Validity Not Before: Jan 31 01:32:01 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=AA7DF7C82E0C74C433DBA18D4DB92B95BB092625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:47:90:f0:7a:26:49:14:bc:aa:3b:37:5d: 17:7f:dc:63:48:4d:60:41:0b:67:0b:c2:df:38:5f: b4:3c:4b:27:8b:c9:43:0b:38:b8:7d:90:76:da:11: a6:ee:0d:a5:d8:91:8f:19:18:e3:43:79:24:ae:39: 94:45:35:53:b5:41:5d:90:d5:19:43:e0:b1:66:55: 52:00:32:03:4c:c6:ce:d9:3b:29:82:f8:4b:1c:27: 25:0e:04:48:b0:bb:7e:7a:ef:2e:f9:72:28:f0:09: e9:6f:17:5c:ff:f9:72:51:5b:6f:53:25:f3:df:2a: fc:7d:e6:18:3e:30:95:c7:0d:52:24:b9:4b:6d:96: e7:f8:41:69:9c:6b:ed:19:4e:3f:a0:a9:b0:ce:6f: c8:e1:7e:d3:71:bd:eb:4c:53:e4:01:07:69:c9:06: 41:8c:64:ff:01:7a:a7:cd:3d:0e:8e:7c:af:57:36: fb:86:29:9a:37:c8:ed:41:09:36:5e:cd:bb:5d:b5: da:3d:0a:41:04:fd:f5:c4:42:60:3e:9f:b1:6b:96: f6:6d:58:49:1c:4e:cd:ae:20:2d:0b:cc:60:d3:ea: ba:46:4c:7a:de:b9:53:ec:c5:75:a4:61:ea:87:4e: c4:70:90:a5:5b:7e:cd:1d:6f:77:5d:4f:a1:cf:27: bb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7D:F7:C8:2E:0C:74:C4:33:DB:A1:8D:4D:B9:2B:95:BB:09:26:25 X509v3 Authority Key Identifier: keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/qn33yC4MdMQz26GNTbkrlbsJJiU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.141.216.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:aa:03:50:29:89:b5:d2:1f:b2:04:19:49:c9:46:85:4e:1b: 2a:d9:8f:5c:f5:4d:25:d3:7d:3d:37:74:7d:85:e8:da:dc:02: 99:87:8b:39:2a:64:cd:8a:47:1d:38:04:02:53:9d:bb:67:b2: ab:72:fe:a8:65:56:57:29:fd:c3:ca:7e:6c:fb:b1:2b:84:c6: 19:e7:fa:47:e1:6a:66:1c:d6:77:60:ae:4c:5f:02:40:ce:dc: 83:49:33:d9:2e:c9:1f:e3:ed:7f:1e:02:70:9c:c4:fc:3a:7a: f5:3b:b7:65:bf:52:97:42:97:9f:67:b8:a0:0d:15:73:cf:61: dc:0d:09:af:e7:1b:f2:25:d1:46:61:5a:38:23:80:6a:cc:1d: 10:b9:3a:3a:e8:ca:29:2f:45:61:69:bb:90:7a:78:ec:26:48: 77:da:ac:18:b3:b4:89:37:8f:9c:0b:2d:e4:90:4b:04:3d:a2: 09:8d:ba:50:23:7c:a0:cd:21:62:d8:b6:dd:56:6e:5d:c4:77: 90:e5:3c:89:c0:59:3c:57:09:59:00:f4:01:77:a5:63:c3:f4: a7:e9:44:df:e3:37:70:73:08:4d:f1:93:08:d5:fd:50:cc:c3: 25:8f:d7:60:2f:c9:bf:09:5e:9d:1a:be:b9:f1:4d:77:c2:b7: 49:07:02:04 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTFB Q0E0NDI3NUVDMDU3MkJDNjkyMTUwMkIyNDFDMTRENDRBOUFBMTAeFw0yNTAxMzEw MTMyMDFaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFBN0RGN0M4MkUwQzc0 QzQzM0RCQTE4RDREQjkyQjk1QkIwOTI2MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7MkeQ8HomSRS8qjs3XRd/3GNITWBBC2cLwt84X7Q8SyeLyUML OLh9kHbaEabuDaXYkY8ZGONDeSSuOZRFNVO1QV2Q1RlD4LFmVVIAMgNMxs7ZOymC +EscJyUOBEiwu3567y75cijwCelvF1z/+XJRW29TJfPfKvx95hg+MJXHDVIkuUtt luf4QWmca+0ZTj+gqbDOb8jhftNxvetMU+QBB2nJBkGMZP8BeqfNPQ6OfK9XNvuG KZo3yO1BCTZezbtdtdo9CkEE/fXEQmA+n7FrlvZtWEkcTs2uIC0LzGDT6rpGTHre uVPsxXWkYeqHTsRwkKVbfs0db3ddT6HPJ7uhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqn33yC4MdMQz26GNTbkrlbsJJiUwHwYDVR0jBBgwFoAUkaykQnXsBXK8aSFQ KyQcFNRKmqEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzczMS9rYXlrUW5Yc0JYSzhhU0ZRS3lRY0ZOUkttcUUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9rYXlrUW5Yc0JYSzhhU0ZRS3lRY0ZO UkttcUUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNzMxL3FuMzN5QzRNZE1RejI2R05UYmtybGJzSkppVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPSjdgwDQYJKoZIhvcNAQELBQADggEBAGqqA1ApibXSH7IEGUnJRoVOGyrZ j1z1TSXTfT03dH2F6NrcApmHizkqZM2KRx04BAJTnbtnsqty/qhlVlcp/cPKfmz7 sSuExhnn+kfhamYc1ndgrkxfAkDO3INJM9kuyR/j7X8eAnCcxPw6evU7t2W/UpdC l59nuKANFXPPYdwNCa/nG/Il0UZhWjgjgGrMHRC5OjroyikvRWFpu5B6eOwmSHfa rBiztIk3j5wLLeSQSwQ9ogmNulAjfKDNIWLYtt1Wbl3Ed5DlPInAWTxXCVkA9AF3 pWPD9KfpRN/jN3BzCE3xkwjV/VDMwyWP12Avyb8JXp0avrnxTXfCt0kHAgQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:45:59 2025 by rpki-client