$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/tF8AZQpxFwQrAepGhnWtiQuVcV4.roa File: tF8AZQpxFwQrAepGhnWtiQuVcV4.roa (raw, json) Hash identifier: ptS5QPhZxk23OrV9Mpm8O5WXcZF6jKyTK3hs//dlenQ= Subject key identifier: B4:5F:00:65:0A:71:17:04:2B:01:EA:46:86:75:AD:89:0B:95:71:5E Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 01FD Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tF8AZQpxFwQrAepGhnWtiQuVcV4.roa Signing time: Sat 01 Mar 2025 01:31:01 +0000 ROA not before: Sat 01 Mar 2025 01:31:01 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 60.32.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:31:01 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=B45F00650A7117042B01EA468675AD890B95715E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:ed:82:c3:ea:e6:21:86:6b:c0:89:3c:fb: 81:c9:00:67:9b:0e:dc:ea:65:62:74:a0:56:53:d5: 27:79:ee:0a:c4:17:ad:a6:12:96:18:28:3c:6d:a9: dd:24:f3:77:e1:6c:07:48:66:82:71:ba:5b:94:ee: 1b:68:2f:d0:7a:64:80:c5:0d:72:c8:60:c6:e7:62: c2:c4:a9:01:b0:d9:7d:50:38:28:06:9a:54:91:00: ae:5b:b1:95:c9:88:57:6c:66:dd:3e:08:c0:a8:56: 68:b6:00:a7:96:57:93:67:0f:85:b9:02:1d:0e:9b: bd:b5:e6:03:0b:e6:74:13:96:bc:dd:db:35:8a:6e: c5:f7:8b:7f:56:d8:04:f3:1f:a9:a3:37:a1:99:19: 28:f3:f6:58:e7:66:c6:14:08:0d:b8:e8:92:37:db: fe:98:f1:0e:6c:ed:79:97:09:fd:47:b2:77:a0:3d: e8:62:ea:c1:ba:35:3b:96:4e:3e:00:1a:a6:79:62: 1e:89:e9:18:69:7b:7e:83:29:1c:33:b8:b7:0a:6b: 0b:7c:21:c8:54:7d:4c:05:ab:ff:47:76:98:1d:38: fa:86:7e:fd:b4:e8:16:e0:37:a4:c7:e4:47:53:76: 1f:01:20:0a:dd:e7:b8:fb:c5:f0:17:66:a2:49:a5: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5F:00:65:0A:71:17:04:2B:01:EA:46:86:75:AD:89:0B:95:71:5E X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tF8AZQpxFwQrAepGhnWtiQuVcV4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 60.32.0.0/12 Signature Algorithm: sha256WithRSAEncryption 1d:18:e7:82:76:ff:6e:65:32:cd:4b:ad:c4:f9:73:93:85:2a: f4:f9:c4:3f:c1:9d:00:c2:18:1d:68:20:61:08:21:f4:67:35: 93:54:78:1f:aa:a6:bd:9d:42:c2:9f:9f:f2:43:cc:6d:f0:77: 53:eb:3a:71:e3:ba:6e:bc:bc:45:82:cf:2b:e5:95:7b:a9:f4: 6b:27:46:85:cb:96:98:1b:16:32:68:f5:95:f0:2d:b5:9d:1d: b1:cb:c9:f3:fb:99:7c:7d:50:9e:28:cf:cf:b2:a6:8b:23:b6: 18:5b:40:7d:2a:87:3e:d3:a4:7b:b4:d2:f6:b6:52:1c:61:a7: 3f:54:29:1f:f6:07:66:4d:3d:9b:89:1f:c8:d7:0c:53:43:31: 5a:e9:83:a1:93:d7:c4:88:28:8e:0f:4c:71:78:c4:dd:34:27: df:2a:b3:70:85:8e:74:9c:96:fc:06:ef:3b:eb:5a:00:77:99: 27:e3:2b:60:c9:16:04:5d:6a:a1:4e:4e:a5:05:a6:85:36:0a: ef:69:4f:99:97:06:3d:bc:ad:ee:06:2d:41:4f:9c:e3:1d:43: 3f:62:c9:85:bb:22:39:24:ce:72:8f:5b:a8:91:6b:c0:b0:0a: a5:d0:83:26:5d:1e:42:2b:03:df:7e:58:c4:c0:05:36:cf:0c: e8:7a:63:ec -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMxMDFaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI0NUYwMDY1MEE3MTE3 MDQyQjAxRUE0Njg2NzVBRDg5MEI5NTcxNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3g+2Cw+rmIYZrwIk8+4HJAGebDtzqZWJ0oFZT1Sd57grEF62m EpYYKDxtqd0k83fhbAdIZoJxuluU7htoL9B6ZIDFDXLIYMbnYsLEqQGw2X1QOCgG mlSRAK5bsZXJiFdsZt0+CMCoVmi2AKeWV5NnD4W5Ah0Om7215gML5nQTlrzd2zWK bsX3i39W2ATzH6mjN6GZGSjz9ljnZsYUCA246JI32/6Y8Q5s7XmXCf1HsnegPehi 6sG6NTuWTj4AGqZ5Yh6J6Rhpe36DKRwzuLcKawt8IchUfUwFq/9HdpgdOPqGfv20 6BbgN6TH5EdTdh8BIArd57j7xfAXZqJJpecnAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUtF8AZQpxFwQrAepGhnWtiQuVcV4wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL3RGOEFaUXB4RndRckFlcEdobld0aVF1VmNWNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQ8IDANBgkqhkiG9w0BAQsFAAOCAQEAHRjngnb/bmUyzUutxPlzk4Uq9PnE P8GdAMIYHWggYQgh9Gc1k1R4H6qmvZ1Cwp+f8kPMbfB3U+s6ceO6bry8RYLPK+WV e6n0aydGhcuWmBsWMmj1lfAttZ0dscvJ8/uZfH1QnijPz7KmiyO2GFtAfSqHPtOk e7TS9rZSHGGnP1QpH/YHZk09m4kfyNcMU0MxWumDoZPXxIgojg9McXjE3TQn3yqz cIWOdJyW/AbvO+taAHeZJ+MrYMkWBF1qoU5OpQWmhTYK72lPmZcGPbyt7gYtQU+c 4x1DP2LJhbsiOSTOco9bqJFrwLAKpdCDJl0eQisD335YxMAFNs8M6Hpj7A== -----END CERTIFICATE-----Generated at Sat Apr 26 17:33:41 2025 by rpki-client