$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/oMVzokfJHfK7CgARbXxI6mMXVww.roa File: oMVzokfJHfK7CgARbXxI6mMXVww.roa (raw, json) Hash identifier: +aQDH8piJD1ZAedakWI/BLi2gk5cqFMAS+lAm5cCaZ0= Subject key identifier: A0:C5:73:A2:47:C9:1D:F2:BB:0A:00:11:6D:7C:48:EA:63:17:57:0C Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9 Certificate serial: 5A Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/oMVzokfJHfK7CgARbXxI6mMXVww.roa Signing time: Sat 01 Mar 2025 01:28:34 +0000 ROA not before: Sat 01 Mar 2025 01:28:34 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 63789 IP address blocks: 202.9.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9 Validity Not Before: Mar 1 01:28:34 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=A0C573A247C91DF2BB0A00116D7C48EA6317570C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:74:17:b9:ed:fd:1b:89:7d:64:bd:9b:e2: 09:7e:9a:83:d6:4e:4d:33:1e:1b:2a:5f:52:55:6a: 13:ff:4b:b4:87:df:47:4a:62:3b:9a:1f:88:ce:99: f5:43:4b:13:40:fd:89:a6:bc:92:01:60:f0:70:4c: b3:96:69:23:70:50:96:b6:b4:59:35:4c:2d:93:b7: d8:29:c3:2d:1f:90:b2:81:85:43:c0:ab:3f:a0:60: fc:32:9c:3d:69:6e:ff:14:54:09:18:6d:6e:90:5e: 61:64:86:53:7d:ec:7a:fa:2d:b7:45:e9:82:dd:9c: fe:11:a1:b2:de:3d:9d:7f:dd:f7:45:e5:bd:03:c9: 9d:b5:d3:31:77:85:64:fa:4a:76:44:40:87:7e:8d: 1c:e3:c0:70:be:62:61:1d:ad:ac:a6:0a:2b:4f:4c: d7:aa:dd:6a:b6:27:40:58:8a:1e:17:73:49:f8:d6: ec:c9:fb:23:72:77:f3:51:23:a4:f2:79:5d:ba:68: 50:da:0b:6f:63:b8:af:72:51:20:ac:75:25:d3:fd: f0:0d:05:1e:2e:87:10:eb:e9:3c:71:af:76:1d:49: b0:bc:97:a4:25:a1:e4:fc:43:55:2c:32:5e:01:8c: e7:b2:7d:bb:4f:4f:1f:dd:33:de:99:bd:9c:b4:e1: 45:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:73:A2:47:C9:1D:F2:BB:0A:00:11:6D:7C:48:EA:63:17:57:0C X509v3 Authority Key Identifier: keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/oMVzokfJHfK7CgARbXxI6mMXVww.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.9.209.0/24 Signature Algorithm: sha256WithRSAEncryption 77:6c:91:5b:17:e9:fe:01:00:cb:70:c0:89:11:6d:54:8d:cb: c3:03:a2:18:e0:37:d4:e6:15:02:24:84:c8:52:c5:d6:84:4e: 2b:12:1d:5c:22:da:52:da:d7:df:ca:bd:b6:17:f7:6c:76:9a: 6a:0b:54:55:44:ea:cf:fa:b9:d4:08:47:8f:54:1a:e7:07:d2: 49:fd:68:27:6a:35:f9:80:0e:67:ab:82:4d:1e:b3:5d:a6:43: 9e:98:6e:b1:da:4a:4c:81:fc:97:81:67:4e:8b:0e:70:b1:21: ed:96:df:78:0e:e1:0b:97:e7:4b:b4:6b:31:a6:8f:6a:69:b9: 74:c6:3b:c9:7d:2b:e6:4f:fb:76:5a:70:f2:13:06:0d:f7:60: 00:35:5c:84:bb:39:3e:9a:4a:7c:a4:77:97:9c:a4:f7:d4:02: 88:df:12:b0:07:ce:19:ae:99:4b:4b:8e:f0:a5:9c:38:49:ec: 11:ec:04:4d:80:0a:11:b6:6b:73:ce:6d:70:d0:b5:9c:51:75: b6:60:31:7d:f6:bb:fd:28:34:25:9a:62:5f:83:a0:2c:92:3b: ae:94:a2:59:3d:b5:ae:24:c6:3d:1b:5e:38:fc:d6:46:af:c2: 5e:b9:c7:09:62:8c:b3:8a:63:38:4c:40:69:60:cc:36:45:68: 79:2f:33:ad -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEOEYx NTE0NTA4QUZDMzhFNTE3NDNCNkNCNThCQTY1NjFFREQzQkI5MB4XDTI1MDMwMTAx MjgzNFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQTBDNTczQTI0N0M5MURG MkJCMEEwMDExNkQ3QzQ4RUE2MzE3NTcwQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALwkdBe57f0biX1kvZviCX6ag9ZOTTMeGypfUlVqE/9LtIffR0pi O5ofiM6Z9UNLE0D9iaa8kgFg8HBMs5ZpI3BQlra0WTVMLZO32CnDLR+QsoGFQ8Cr P6Bg/DKcPWlu/xRUCRhtbpBeYWSGU33sevott0Xpgt2c/hGhst49nX/d90XlvQPJ nbXTMXeFZPpKdkRAh36NHOPAcL5iYR2trKYKK09M16rdarYnQFiKHhdzSfjW7Mn7 I3J381EjpPJ5XbpoUNoLb2O4r3JRIKx1JdP98A0FHi6HEOvpPHGvdh1JsLyXpCWh 5PxDVSwyXgGM57J9u09PH90z3pm9nLThRT0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSgxXOiR8kd8rsKABFtfEjqYxdXDDAfBgNVHSMEGDAWgBTY8VFFCK/DjlF0O2y1 i6ZWHt07uTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjk5LzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3ZE83ay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3 ZE83ay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yOTkvb01Wem9rZkpIZks3Q2dBUmJYeEk2bU1YVnd3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMoJ0TANBgkqhkiG9w0BAQsFAAOCAQEAd2yRWxfp/gEAy3DAiRFtVI3LwwOi GOA31OYVAiSEyFLF1oROKxIdXCLaUtrX38q9thf3bHaaagtUVUTqz/q51AhHj1Qa 5wfSSf1oJ2o1+YAOZ6uCTR6zXaZDnphusdpKTIH8l4FnTosOcLEh7ZbfeA7hC5fn S7RrMaaPamm5dMY7yX0r5k/7dlpw8hMGDfdgADVchLs5PppKfKR3l5yk99QCiN8S sAfOGa6ZS0uO8KWcOEnsEewETYAKEbZrc85tcNC1nFF1tmAxffa7/Sg0JZpiX4Og LJI7rpSiWT21riTGPRteOPzWRq/CXrnHCWKMs4pjOExAaWDMNkVoeS8zrQ== -----END CERTIFICATE-----Generated at Sat Apr 26 20:39:05 2025 by rpki-client