$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/7mPmWLcS908PMohb3QV2WV43kB0.roa File: 7mPmWLcS908PMohb3QV2WV43kB0.roa (raw, json) Hash identifier: UHNjOl1RTqmVab5oDPS2ioXBjxqvdA3y0OClcsHPA8o= Subject key identifier: EE:63:E6:58:B7:12:F7:4F:0F:32:88:5B:DD:05:76:59:5E:37:90:1D Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554 Certificate serial: 46 Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/7mPmWLcS908PMohb3QV2WV43kB0.roa Signing time: Fri 31 Jan 2025 01:28:57 +0000 ROA not before: Fri 31 Jan 2025 01:28:57 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 131934 IP address blocks: 221.132.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D79B3890C2DA3795148976B954C2024056797554 Validity Not Before: Jan 31 01:28:57 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=EE63E658B712F74F0F32885BDD0576595E37901D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:d7:40:a7:83:f8:d3:1e:ab:c3:c4:7f:12: 81:3a:c8:0e:09:02:55:ec:c3:7a:23:40:47:fc:3d: 99:5d:ef:a5:84:5c:27:77:f1:f8:d4:37:bf:0c:cb: df:6a:bf:54:5c:56:29:de:0c:38:5d:4a:99:f3:cf: c6:3a:0a:76:75:e3:17:55:07:9f:81:a3:dd:e0:75: a1:92:a1:e1:f3:cc:95:a6:94:9f:47:f8:87:23:95: 09:79:e0:ec:9e:d8:e2:cd:9b:82:be:16:17:ef:85: 1c:80:31:25:1e:bd:0c:ed:58:9c:17:29:5b:53:ce: d2:1c:b1:c2:e5:98:bc:8c:8f:96:19:12:eb:ff:c7: cf:d6:43:ed:82:2b:ad:ad:dc:60:62:4c:f3:cb:5e: 1e:14:4a:65:2f:60:f7:43:f4:9d:a3:cf:eb:cd:31: f6:03:6b:62:47:22:d6:da:78:1f:38:e6:dd:8d:31: 96:9c:fe:ae:3c:c4:2d:27:e6:48:cd:72:60:13:3a: d8:7d:1e:b1:bf:23:a7:4a:79:6d:dc:e1:87:99:56: 29:f0:59:7f:82:c8:5c:c9:39:e1:38:d6:3d:25:ee: a7:c5:10:9f:9d:03:9f:df:ce:28:ff:54:e0:e7:f4: 0f:8f:0f:23:67:43:e5:80:00:a0:c7:1d:1d:a9:31: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:63:E6:58:B7:12:F7:4F:0F:32:88:5B:DD:05:76:59:5E:37:90:1D X509v3 Authority Key Identifier: keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/7mPmWLcS908PMohb3QV2WV43kB0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 221.132.96.0/20 Signature Algorithm: sha256WithRSAEncryption 0e:a9:8b:71:0b:d5:f7:bb:e5:61:64:bb:24:59:23:89:c2:ed: 8b:35:1a:32:68:77:61:9a:cc:ed:05:b4:e6:53:b4:76:1f:5b: ef:71:bb:65:92:ee:35:55:80:ba:f4:c0:74:b1:64:e0:ef:62: 09:77:02:12:63:8d:06:74:bc:14:c8:e1:7d:b8:43:79:0f:37: 9d:39:c4:ea:19:c3:c7:23:ee:75:85:d4:63:6f:72:98:cb:4a: 7a:ad:6c:c5:31:d2:93:9d:e8:15:8b:66:4e:ab:8d:cf:7a:02: 2b:81:a1:21:86:47:f8:c3:72:d6:b4:20:6f:e3:3f:b4:d8:49: 93:24:1d:f4:40:61:ec:c3:e2:57:c4:a5:78:52:95:69:4d:41: 11:ee:f0:99:76:cc:f8:f8:a6:60:17:54:4f:8a:e3:78:35:47: 7f:ca:a3:0e:c6:c1:8b:19:59:dc:b9:88:22:fe:c0:a3:29:ed: d7:bb:23:90:14:61:83:5c:20:ef:81:aa:6e:36:11:f9:b3:ff: 0c:da:06:34:3a:96:71:fb:9b:7d:62:27:fe:53:a7:45:bf:2f: 6a:b3:67:76:4b:82:36:d8:b2:b5:8c:4e:69:9e:43:59:2f:fe: d5:fc:80:e8:50:a6:7b:6a:c0:e1:45:e4:c7:95:49:80:bc:55: 19:0a:a5:7a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTI1MDEzMTAx Mjg1N1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoRUU2M0U2NThCNzEyRjc0 RjBGMzI4ODVCREQwNTc2NTk1RTM3OTAxRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMR310Cng/jTHqvDxH8SgTrIDgkCVezDeiNAR/w9mV3vpYRcJ3fx +NQ3vwzL32q/VFxWKd4MOF1KmfPPxjoKdnXjF1UHn4Gj3eB1oZKh4fPMlaaUn0f4 hyOVCXng7J7Y4s2bgr4WF++FHIAxJR69DO1YnBcpW1PO0hyxwuWYvIyPlhkS6//H z9ZD7YIrra3cYGJM88teHhRKZS9g90P0naPP680x9gNrYkci1tp4Hzjm3Y0xlpz+ rjzELSfmSM1yYBM62H0esb8jp0p5bdzhh5lWKfBZf4LIXMk54TjWPSXup8UQn50D n9/OKP9U4Of0D48PI2dD5YAAoMcdHakxKp8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTuY+ZYtxL3Tw8yiFvdBXZZXjeQHTAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NDAvN21QbVdMY1M5MDhQTW9oYjNRVjJXVjQza0IwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBN2EYDANBgkqhkiG9w0BAQsFAAOCAQEADqmLcQvV97vlYWS7JFkjicLtizUa Mmh3YZrM7QW05lO0dh9b73G7ZZLuNVWAuvTAdLFk4O9iCXcCEmONBnS8FMjhfbhD eQ83nTnE6hnDxyPudYXUY29ymMtKeq1sxTHSk53oFYtmTquNz3oCK4GhIYZH+MNy 1rQgb+M/tNhJkyQd9EBh7MPiV8SleFKVaU1BEe7wmXbM+PimYBdUT4rjeDVHf8qj DsbBixlZ3LmIIv7Aoynt17sjkBRhg1wg74GqbjYR+bP/DNoGNDqWcfubfWIn/lOn Rb8varNndkuCNtiytYxOaZ5DWS/+1fyA6FCme2rA4UXkx5VJgLxVGQqleg== -----END CERTIFICATE-----Generated at Wed Feb 19 22:34:32 2025 by rpki-client