$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/FwRkFlztSt3bcb43udZzSYzfAeo.roa File: FwRkFlztSt3bcb43udZzSYzfAeo.roa (raw, json) Hash identifier: qFnlr3EBO7mR/sZExOEeUVwLY00YzJoRmgUVDJ1CXj4= Subject key identifier: 17:04:64:16:5C:ED:4A:DD:DB:71:BE:37:B9:D6:73:49:8C:DF:01:EA Certificate issuer: /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10 Certificate serial: 0D Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/FwRkFlztSt3bcb43udZzSYzfAeo.roa Signing time: Thu 16 Jan 2025 01:34:50 +0000 ROA not before: Thu 16 Jan 2025 01:34:50 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 59108 IP address blocks: 210.79.32.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10 Validity Not Before: Jan 16 01:34:50 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=170464165CED4ADDDB71BE37B9D673498CDF01EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d6:b0:82:d1:73:29:9e:59:70:2b:70:a1:45: 34:b6:db:53:58:95:35:bb:71:09:b7:5d:f8:6d:1f: f7:7c:c5:2a:c6:c4:28:57:06:a0:ed:10:cc:d8:c3: 8b:8b:83:e1:fe:a8:3d:66:3b:9d:76:35:cd:9f:7c: 70:cc:56:c4:45:11:5e:96:c8:e2:65:e0:ea:58:53: da:30:1c:8c:8c:85:48:b4:22:ba:c1:da:35:35:34: 37:7d:53:64:7a:fa:14:a1:4c:ad:aa:2f:58:2e:a1: 69:d1:b0:ca:51:dd:dd:6f:0c:8c:29:e6:78:7a:10: 75:dc:4e:6f:c8:1b:3a:42:3d:80:ff:49:3f:e6:6e: 03:df:b0:21:29:0d:91:8a:4e:b9:a1:34:7d:73:1d: 9f:43:0f:58:83:7e:71:34:0b:8f:b6:b5:c2:1e:2f: a2:3b:08:b2:ff:4d:3d:32:59:51:6f:32:a2:87:26: c5:2f:fb:6d:36:5c:bf:ab:8c:c5:6c:f9:a5:e7:78: 56:34:4a:43:48:24:cf:93:ce:d8:af:f1:fa:a3:65: d2:da:a7:c5:89:34:df:fd:4e:3b:29:06:10:02:ee: 0a:63:46:43:94:5a:2c:92:64:c6:56:35:0e:02:76: d0:92:ea:a9:16:7b:9d:11:e8:37:72:eb:7a:1d:88: 25:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:04:64:16:5C:ED:4A:DD:DB:71:BE:37:B9:D6:73:49:8C:DF:01:EA X509v3 Authority Key Identifier: keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/FwRkFlztSt3bcb43udZzSYzfAeo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.79.32.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:86:5f:33:f9:83:1e:2c:e1:55:d2:70:0f:da:04:55:a6:08: 22:23:1d:e4:4c:67:71:55:f6:74:11:bc:52:2d:cf:ba:0c:28: b9:a7:0b:13:89:19:2b:46:8d:8a:02:ec:59:cc:5c:1f:48:20: 71:8a:88:cd:e2:fe:bd:07:5e:cc:ba:6b:e2:af:2a:15:a8:48: e7:df:0e:0d:24:e7:4d:17:76:3e:23:36:51:5e:f6:59:64:81: dd:ba:7f:91:da:d6:59:5a:a1:cb:7c:ec:67:6b:68:f9:87:78: 86:4c:3c:b3:cb:47:2a:54:ae:7c:ab:0d:00:80:f3:ab:36:74: 33:19:03:7e:0c:12:49:34:0b:f7:1d:2d:88:e6:c0:84:20:68: d1:27:a7:80:24:b5:31:86:e9:ce:9f:bf:55:64:6f:88:28:45: c2:3d:1e:0b:a0:db:b8:30:c5:04:62:ee:f0:40:92:c4:b9:73: 9b:6e:e1:49:2a:9d:60:1a:30:24:8c:dd:3b:a4:72:17:c9:fc: 3f:06:37:5c:b0:b3:ef:28:d6:c0:ce:a1:79:5c:c8:00:c8:52: 17:fb:e4:f6:fd:3c:8e:1a:47:16:91:c0:bb:bc:36:36:de:55: f1:e7:ae:0e:48:77:73:b8:b7:eb:c3:4d:14:d8:40:99:aa:5a: 57:81:bc:e3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTRC MDE1RUM5QTBBNUMwM0Q4ODc5NDY5Q0RBN0M3QzRCOUE2QzEwMB4XDTI1MDExNjAx MzQ1MFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoMTcwNDY0MTY1Q0VENEFE RERCNzFCRTM3QjlENjczNDk4Q0RGMDFFQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANvWsILRcymeWXArcKFFNLbbU1iVNbtxCbdd+G0f93zFKsbEKFcG oO0QzNjDi4uD4f6oPWY7nXY1zZ98cMxWxEURXpbI4mXg6lhT2jAcjIyFSLQiusHa NTU0N31TZHr6FKFMraovWC6hadGwylHd3W8MjCnmeHoQddxOb8gbOkI9gP9JP+Zu A9+wISkNkYpOuaE0fXMdn0MPWIN+cTQLj7a1wh4vojsIsv9NPTJZUW8yoocmxS/7 bTZcv6uMxWz5ped4VjRKQ0gkz5PO2K/x+qNl0tqnxYk03/1OOykGEALuCmNGQ5Ra LJJkxlY1DgJ20JLqqRZ7nRHoN3Lreh2IJUsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQXBGQWXO1K3dtxvje51nNJjN8B6jAfBgNVHSMEGDAWgBRZSwFeyaClwD2IeUac 2nx8S5psEDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjcxL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1YWJCQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1 YWJCQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNzEvRndSa0ZsenRTdDNiY2I0M3VkWnpTWXpmQWVvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNJPIDANBgkqhkiG9w0BAQsFAAOCAQEAb4ZfM/mDHizhVdJwD9oEVaYIIiMd 5ExncVX2dBG8Ui3PugwouacLE4kZK0aNigLsWcxcH0ggcYqIzeL+vQdezLpr4q8q FahI598ODSTnTRd2PiM2UV72WWSB3bp/kdrWWVqhy3zsZ2to+Yd4hkw8s8tHKlSu fKsNAIDzqzZ0MxkDfgwSSTQL9x0tiObAhCBo0SengCS1MYbpzp+/VWRviChFwj0e C6DbuDDFBGLu8ECSxLlzm27hSSqdYBowJIzdO6RyF8n8PwY3XLCz7yjWwM6heVzI AMhSF/vk9v08jhpHFpHAu7w2Nt5V8eeuDkh3c7i368NNFNhAmapaV4G84w== -----END CERTIFICATE-----Generated at Sat Apr 26 17:54:25 2025 by rpki-client