$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1455/vk0KF9Hnes8-XtTxq7QYHqTSjTI.roa File: vk0KF9Hnes8-XtTxq7QYHqTSjTI.roa (raw, json) Hash identifier: pfncDLL4IaerOshVST/mbYtNk53kIlpmvbb66EWqDzo= Subject key identifier: BE:4D:0A:17:D1:E7:7A:CF:3E:5E:D4:F1:AB:B4:18:1E:A4:D2:8D:32 Certificate issuer: /CN=20D7C331FBC35D08554D41BE2E9C3BF04B075FC9 Certificate serial: 02 Authority key identifier: 20:D7:C3:31:FB:C3:5D:08:55:4D:41:BE:2E:9C:3B:F0:4B:07:5F:C9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/INfDMfvDXQhVTUG-Lpw78EsHX8k.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/vk0KF9Hnes8-XtTxq7QYHqTSjTI.roa Signing time: Wed 12 Feb 2025 09:32:19 +0000 ROA not before: Wed 12 Feb 2025 09:32:19 +0000 ROA not after: Thu 12 Feb 2026 08:48:04 +0000 asID: 0 IP address blocks: 139.154.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/INfDMfvDXQhVTUG-Lpw78EsHX8k.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20D7C331FBC35D08554D41BE2E9C3BF04B075FC9 Validity Not Before: Feb 12 09:32:19 2025 GMT Not After : Feb 12 08:48:04 2026 GMT Subject: CN=BE4D0A17D1E77ACF3E5ED4F1ABB4181EA4D28D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:fe:ce:67:35:d5:da:e4:ab:f9:2f:a5:3b: 0a:c6:ef:4d:4b:03:bc:91:23:82:1a:64:1e:79:bd: 76:10:b0:d2:23:55:35:2b:31:1e:88:79:73:97:6d: 56:1f:46:3b:95:85:85:26:bc:be:04:85:db:77:df: e4:0c:d1:63:aa:91:8d:ae:c1:c3:81:74:42:b7:dd: d4:47:cd:67:53:40:cb:78:ca:d6:30:99:ea:73:d6: 91:70:ea:f1:08:0d:60:4c:ca:30:5a:b0:76:e4:3f: e9:48:95:7d:be:b0:95:5d:31:92:9a:02:63:85:ec: f7:f1:48:11:3d:80:3d:6d:49:e6:7c:f1:f4:55:29: db:ce:a6:c9:07:02:39:19:ea:b6:a2:37:b4:a8:6c: d7:2c:97:77:4f:24:3c:07:45:03:9e:48:d4:de:67: d3:f9:3f:7f:3b:91:ea:6f:0d:c5:78:92:9c:e6:e6: 9e:39:3d:c2:93:ca:e2:5c:5e:0d:3d:d7:46:78:77: ea:43:e3:65:6e:bf:ac:c0:8e:c3:92:ca:fa:15:94: 88:31:2a:8f:d3:38:25:fc:8e:77:c1:e6:c9:1a:4d: 2e:96:a0:dc:96:52:ad:8c:dd:d6:e6:72:2c:47:6c: 3e:3b:4d:8a:c4:a5:7c:59:70:66:24:74:b0:f9:0d: dc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4D:0A:17:D1:E7:7A:CF:3E:5E:D4:F1:AB:B4:18:1E:A4:D2:8D:32 X509v3 Authority Key Identifier: keyid:20:D7:C3:31:FB:C3:5D:08:55:4D:41:BE:2E:9C:3B:F0:4B:07:5F:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/INfDMfvDXQhVTUG-Lpw78EsHX8k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/vk0KF9Hnes8-XtTxq7QYHqTSjTI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.154.0.0/16 Signature Algorithm: sha256WithRSAEncryption 37:b2:b6:11:c8:18:fe:35:66:14:15:72:42:e4:a8:db:22:0b: 70:ac:32:26:5a:d6:a0:40:9c:db:4f:3d:e2:63:f7:f0:31:be: fa:e9:c6:31:d0:34:2b:a3:ee:36:7f:43:59:0f:17:fc:0f:68: 98:ee:40:d3:5b:6c:3a:61:a8:df:73:51:a1:54:26:7c:b4:ac: a9:5c:7a:88:ab:da:56:ee:fb:c6:d5:6b:aa:87:68:a0:b3:1c: 18:3d:ec:30:a5:0a:ba:f9:1c:0c:0f:00:ef:a9:77:26:6b:92: 7e:10:c4:52:19:5b:f2:a6:96:3c:45:ee:39:92:0e:90:f1:55: 81:c4:87:4b:44:6a:d9:8a:03:b6:ae:2e:7a:d2:e7:d6:5a:a3: f5:56:69:90:5d:17:f3:50:db:5c:05:3e:57:04:e5:65:dc:2d: b0:c2:df:b3:8d:da:de:ed:3e:b7:60:40:99:bd:31:83:f7:c7: ee:bc:62:ad:06:a2:a6:ab:ef:81:7f:6e:c6:5e:fd:55:fd:ba: 3b:9a:3a:16:bf:f5:14:34:3f:3a:01:8f:ea:95:4e:6c:8c:9b: 90:02:f4:51:15:19:7d:a4:bd:2b:a0:39:20:27:45:1a:7a:fb: 70:87:aa:db:00:c8:0b:5d:1a:ee:be:de:4c:d3:36:b3:2a:62: 38:58:fe:c5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMEQ3 QzMzMUZCQzM1RDA4NTU0RDQxQkUyRTlDM0JGMDRCMDc1RkM5MB4XDTI1MDIxMjA5 MzIxOVoXDTI2MDIxMjA4NDgwNFowMzExMC8GA1UEAxMoQkU0RDBBMTdEMUU3N0FD RjNFNUVENEYxQUJCNDE4MUVBNEQyOEQzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALBI/s5nNdXa5Kv5L6U7CsbvTUsDvJEjghpkHnm9dhCw0iNVNSsx Hoh5c5dtVh9GO5WFhSa8vgSF23ff5AzRY6qRja7Bw4F0Qrfd1EfNZ1NAy3jK1jCZ 6nPWkXDq8QgNYEzKMFqwduQ/6UiVfb6wlV0xkpoCY4Xs9/FIET2APW1J5nzx9FUp 286myQcCORnqtqI3tKhs1yyXd08kPAdFA55I1N5n0/k/fzuR6m8NxXiSnObmnjk9 wpPK4lxeDT3XRnh36kPjZW6/rMCOw5LK+hWUiDEqj9M4JfyOd8HmyRpNLpag3JZS rYzd1uZyLEdsPjtNisSlfFlwZiR0sPkN3GsCAwEAAaOCAiUwggIhMB0GA1UdDgQW BBS+TQoX0ed6zz5e1PGrtBgepNKNMjAfBgNVHSMEGDAWgBQg18Mx+8NdCFVNQb4u nDvwSwdfyTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTQ1NS9JTmZETWZ2RFhRaFZUVUctTHB3NzhFc0hYOGsuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9JTmZETWZ2RFhRaFZUVUctTHB3NzhF c0hYOGsuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTQ1NS92azBLRjlIbmVzOC1YdFR4cTdRWUhxVFNqVEkucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAi5owDQYJKoZIhvcNAQELBQADggEBADeythHIGP41ZhQVckLkqNsiC3Cs MiZa1qBAnNtPPeJj9/AxvvrpxjHQNCuj7jZ/Q1kPF/wPaJjuQNNbbDphqN9zUaFU Jny0rKlceoir2lbu+8bVa6qHaKCzHBg97DClCrr5HAwPAO+pdyZrkn4QxFIZW/Km ljxF7jmSDpDxVYHEh0tEatmKA7auLnrS59Zao/VWaZBdF/NQ21wFPlcE5WXcLbDC 37ON2t7tPrdgQJm9MYP3x+68Yq0Goqar74F/bsZe/VX9ujuaOha/9RQ0PzoBj+qV TmyMm5AC9FEVGX2kvSugOSAnRRp6+3CHqtsAyAtdGu6+3kzTNrMqYjhY/sU= -----END CERTIFICATE-----Generated at Sat Apr 26 15:27:15 2025 by rpki-client