$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/7NWJnS8oPxaAw6Dh9y89xbttV2w.roa File: 7NWJnS8oPxaAw6Dh9y89xbttV2w.roa (raw, json) Hash identifier: /YVrSb9gppTGswU7lY9yInFeGyG7NqUf4+mpY/8IJDI= Subject key identifier: EC:D5:89:9D:2F:28:3F:16:80:C3:A0:E1:F7:2F:3D:C5:BB:6D:57:6C Certificate issuer: /CN=C0EDE8C3879081138F9495306BE79EF7340A9451 Certificate serial: 56 Authority key identifier: C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/7NWJnS8oPxaAw6Dh9y89xbttV2w.roa Signing time: Fri 31 Jan 2025 01:30:37 +0000 ROA not before: Fri 31 Jan 2025 01:30:37 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7667 IP address blocks: 192.26.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0EDE8C3879081138F9495306BE79EF7340A9451 Validity Not Before: Jan 31 01:30:37 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=ECD5899D2F283F1680C3A0E1F72F3DC5BB6D576C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:db:49:0c:3e:58:c6:74:2e:21:34:03:e3: 76:e6:91:b5:b6:f3:04:1e:4d:f0:58:3f:8b:04:8f: 75:e2:a9:cd:2f:91:7e:e0:26:60:f8:26:04:30:fd: 33:a7:16:5f:5a:45:56:51:a2:61:42:87:be:20:92: 1d:ed:cb:f0:72:40:41:bd:cd:4a:c7:42:3b:2d:7c: 34:b8:9a:31:ce:65:e7:2a:d6:43:8d:9f:f8:2e:61: 1e:7f:cb:fd:50:a8:5f:79:29:e6:c5:12:70:73:63: 50:59:93:a0:7e:da:5f:74:97:77:55:10:bc:b4:b4: 32:59:02:9d:60:54:78:bc:f0:1a:3b:ae:44:49:2f: 93:21:e8:dc:a5:1b:63:89:b6:b1:33:7d:d7:54:ea: b3:ca:86:ac:b6:24:33:af:22:f8:ce:cf:11:35:65: 32:67:80:ef:5f:aa:f7:11:c8:b7:7d:59:4d:1d:2d: 3a:82:b2:34:66:d6:08:9d:9d:36:36:3d:5b:0d:33: 10:0d:67:60:38:95:bb:13:3c:36:67:a0:9a:59:a2: ca:85:90:0a:11:eb:1d:02:59:62:51:42:0b:09:fb: fa:98:cf:ed:00:85:ba:8f:ce:dc:58:f6:8d:5a:40: 56:7c:09:3a:dd:31:fd:fc:96:5f:33:1b:0d:82:71: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D5:89:9D:2F:28:3F:16:80:C3:A0:E1:F7:2F:3D:C5:BB:6D:57:6C X509v3 Authority Key Identifier: keyid:C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/7NWJnS8oPxaAw6Dh9y89xbttV2w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.26.91.0/24 Signature Algorithm: sha256WithRSAEncryption 99:06:15:1f:f2:9d:6a:af:ad:ea:ac:d6:b4:b8:93:d5:e9:30: 39:83:7c:84:8e:8b:eb:10:2a:8e:0d:51:67:81:17:22:a4:5c: 52:32:3c:c8:d2:51:08:96:04:02:0b:58:50:7b:78:0f:64:7c: 58:6d:2b:5d:51:9b:ff:a0:47:a3:a4:f0:4c:bd:43:f7:f2:20: b8:0f:37:ee:de:7b:a6:aa:93:02:44:a0:6d:fd:12:b2:6c:55: 65:e6:40:84:dd:26:ba:1a:64:e9:b4:49:33:f9:6e:9c:7d:5f: 21:d8:19:db:7e:a1:6a:4e:ac:76:79:ab:04:f8:d6:fe:7d:e0: cf:ea:ad:51:7a:67:c7:4e:e0:f5:ec:4a:71:1f:55:b5:4f:99: 88:0e:16:5a:de:be:3f:31:db:84:78:99:94:1e:88:29:8e:46: 1d:32:26:d5:39:81:d7:fa:d0:52:81:b9:f3:64:6d:d6:37:fe: 8a:e2:f8:61:92:a6:87:69:f5:86:f6:7c:67:7c:09:f4:8e:67: 1f:9f:7d:cb:fe:3c:57:71:c0:3e:bd:3d:f9:9d:86:6a:50:cb: 91:ba:7f:72:85:0a:07:1f:8e:13:d6:85:c5:aa:7f:2d:ce:a0: 27:51:33:63:96:48:93:32:75:dc:a6:f3:dc:da:f4:38:43:df: e6:d0:72:e6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMEVE RThDMzg3OTA4MTEzOEY5NDk1MzA2QkU3OUVGNzM0MEE5NDUxMB4XDTI1MDEzMTAx MzAzN1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoRUNENTg5OUQyRjI4M0Yx NjgwQzNBMEUxRjcyRjNEQzVCQjZENTc2QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKef20kMPljGdC4hNAPjduaRtbbzBB5N8Fg/iwSPdeKpzS+RfuAm YPgmBDD9M6cWX1pFVlGiYUKHviCSHe3L8HJAQb3NSsdCOy18NLiaMc5l5yrWQ42f +C5hHn/L/VCoX3kp5sUScHNjUFmToH7aX3SXd1UQvLS0MlkCnWBUeLzwGjuuREkv kyHo3KUbY4m2sTN911Tqs8qGrLYkM68i+M7PETVlMmeA71+q9xHIt31ZTR0tOoKy NGbWCJ2dNjY9Ww0zEA1nYDiVuxM8NmegmlmiyoWQChHrHQJZYlFCCwn7+pjP7QCF uo/O3Fj2jVpAVnwJOt0x/fyWXzMbDYJxffkCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTs1YmdLyg/FoDDoOH3Lz3Fu21XbDAfBgNVHSMEGDAWgBTA7ejDh5CBE4+UlTBr 5573NAqUUTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTYzOS93TzNvdzRlUWdST1BsSlV3YS1lZTl6UUtsRkUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC93TzNvdzRlUWdST1BsSlV3YS1lZTl6 UUtsRkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYzOS83TldKblM4b1B4YUF3NkRoOXk4OXhidHRWMncucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwBpbMA0GCSqGSIb3DQEBCwUAA4IBAQCZBhUf8p1qr63qrNa0uJPV6TA5 g3yEjovrECqODVFngRcipFxSMjzI0lEIlgQCC1hQe3gPZHxYbStdUZv/oEejpPBM vUP38iC4Dzfu3numqpMCRKBt/RKybFVl5kCE3Sa6GmTptEkz+W6cfV8h2BnbfqFq Tqx2easE+Nb+feDP6q1RemfHTuD17EpxH1W1T5mIDhZa3r4/MduEeJmUHogpjkYd MibVOYHX+tBSgbnzZG3WN/6K4vhhkqaHafWG9nxnfAn0jmcfn33L/jxXccA+vT35 nYZqUMuRun9yhQoHH44T1oXFqn8tzqAnUTNjlkiTMnXcpvPc2vQ4Q9/m0HLm -----END CERTIFICATE-----Generated at Sat Apr 26 20:38:09 2025 by rpki-client