$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/7IDOuq1ekfaeusbbbUhyEp_Ocv4.roa File: 7IDOuq1ekfaeusbbbUhyEp_Ocv4.roa (raw, json) Hash identifier: PoWU+RvFlkdhjgxWEftf6F9MA/AspUgQTdLqFcwb9Ds= Subject key identifier: EC:80:CE:BA:AD:5E:91:F6:9E:BA:C6:DB:6D:48:72:12:9F:CE:72:FE Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Certificate serial: 7E Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/7IDOuq1ekfaeusbbbUhyEp_Ocv4.roa Signing time: Fri 31 Jan 2025 01:32:00 +0000 ROA not before: Fri 31 Jan 2025 01:32:00 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18260 IP address blocks: 210.141.208.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Validity Not Before: Jan 31 01:32:00 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=EC80CEBAAD5E91F69EBAC6DB6D4872129FCE72FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:45:e7:5c:48:5c:6e:53:48:32:44:ef:91: be:db:ea:e2:5d:16:e7:93:cc:31:80:d8:43:3d:94: 08:63:05:df:e4:6f:1d:08:09:b3:8d:88:77:59:25: d3:ab:f4:ac:d7:1e:68:0c:e0:f8:cd:e7:cd:03:8c: f3:07:a6:fe:03:71:0f:d3:29:85:ee:33:24:4c:32: 86:6e:b5:1e:09:3f:ec:99:9b:01:34:d8:0d:f9:d1: 9e:5c:5a:f7:ef:b3:e6:c5:96:4c:4c:fe:4b:2f:0c: 6d:91:23:24:13:90:75:66:23:1c:b1:76:d8:6a:63: b6:ce:d8:ac:eb:5d:f9:ad:47:cd:77:98:24:89:d7: 7e:bb:37:85:12:3c:82:cc:8a:fa:47:3a:a9:6e:2e: e4:2c:1d:21:d3:50:77:55:4f:a9:c5:bd:d4:40:3e: 55:75:ee:b3:e8:2e:bf:71:0b:00:e5:e3:a0:fc:c2: d2:1f:92:3a:49:4c:19:1d:18:2c:d3:1f:ab:06:60: b7:bd:12:96:62:c7:1a:2f:bc:dd:50:2d:f4:93:56: f8:db:20:d5:a8:82:a7:20:bf:05:12:43:97:d3:8b: 3b:e8:d2:8b:e4:32:36:4c:d7:be:73:1b:67:13:ab: 2e:6c:f4:a8:77:cc:8c:24:35:40:70:ba:98:1e:48: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:80:CE:BA:AD:5E:91:F6:9E:BA:C6:DB:6D:48:72:12:9F:CE:72:FE X509v3 Authority Key Identifier: keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/7IDOuq1ekfaeusbbbUhyEp_Ocv4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.141.208.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:29:73:48:90:35:4b:2a:82:34:e4:1f:e0:d0:40:67:35:43: c3:d6:a3:56:2e:0d:d7:c9:db:d9:42:06:55:15:c8:e6:ad:d0: 01:15:ce:92:74:56:d6:1f:e4:19:05:01:ac:fc:5f:17:d4:f3: c0:f8:7b:f7:32:d5:04:95:fa:ec:20:c8:b2:dd:58:48:45:a6: ca:06:f1:d7:c7:a9:1e:7d:fb:0d:2d:66:54:b6:a8:09:cd:e8: dc:38:b1:43:7c:9e:b9:06:d8:bc:b7:85:4f:b2:f1:49:33:5c: 9c:39:6a:9e:e8:eb:d6:eb:2c:3c:f8:5e:83:b9:8c:9f:c5:2a: 23:0a:d8:9e:68:a0:c3:d2:73:e0:4d:56:60:5e:1b:d5:b3:bc: de:aa:78:32:44:4e:16:dd:37:2d:c4:d8:3f:65:cc:26:ea:06: fb:79:36:00:6b:de:d9:8a:84:e8:ac:ee:3d:5d:2a:cd:a2:68: b4:bd:b9:d9:75:fe:eb:c7:73:8b:76:05:a0:af:4d:67:05:19: df:6e:2c:58:c1:66:69:5a:c9:69:69:46:78:e7:e7:33:00:39: 2f:7e:c0:26:35:c6:76:07:76:7b:c8:99:8e:5f:2e:c2:e5:1c: d9:d2:5b:b0:62:cb:2c:6c:fa:fd:26:64:09:6c:4f:cb:8f:f2: 5f:0d:72:25 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTI1MDEzMTAx MzIwMFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoRUM4MENFQkFBRDVFOTFG NjlFQkFDNkRCNkQ0ODcyMTI5RkNFNzJGRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMw1RedcSFxuU0gyRO+Rvtvq4l0W55PMMYDYQz2UCGMF3+RvHQgJ s42Id1kl06v0rNceaAzg+M3nzQOM8wem/gNxD9Mphe4zJEwyhm61Hgk/7JmbATTY DfnRnlxa9++z5sWWTEz+Sy8MbZEjJBOQdWYjHLF22Gpjts7YrOtd+a1HzXeYJInX frs3hRI8gsyK+kc6qW4u5CwdIdNQd1VPqcW91EA+VXXus+guv3ELAOXjoPzC0h+S OklMGR0YLNMfqwZgt70SlmLHGi+83VAt9JNW+Nsg1aiCpyC/BRJDl9OLO+jSi+Qy NkzXvnMbZxOrLmz0qHfMjCQ1QHC6mB5IMa8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTsgM66rV6R9p66xtttSHISn85y/jAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MzEvN0lET3VxMWVrZmFldXNiYmJVaHlFcF9PY3Y0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtKN0DANBgkqhkiG9w0BAQsFAAOCAQEAmilzSJA1SyqCNOQf4NBAZzVDw9aj Vi4N18nb2UIGVRXI5q3QARXOknRW1h/kGQUBrPxfF9TzwPh79zLVBJX67CDIst1Y SEWmygbx18epHn37DS1mVLaoCc3o3DixQ3yeuQbYvLeFT7LxSTNcnDlqnujr1uss PPheg7mMn8UqIwrYnmigw9Jz4E1WYF4b1bO83qp4MkROFt03LcTYP2XMJuoG+3k2 AGve2YqE6KzuPV0qzaJotL252XX+68dzi3YFoK9NZwUZ324sWMFmaVrJaWlGeOfn MwA5L37AJjXGdgd2e8iZjl8uwuUc2dJbsGLLLGz6/SZkCWxPy4/yXw1yJQ== -----END CERTIFICATE-----Generated at Sat Apr 26 19:47:38 2025 by rpki-client