$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/GFbo4pRGo7sjXdd4hvbHDkth5Mg.roa File: GFbo4pRGo7sjXdd4hvbHDkth5Mg.roa (raw, json) Hash identifier: OKZ4rhOtrdN+uxTP0hIUJKEEnz57jLepf0/MyxxUf40= Subject key identifier: 18:56:E8:E2:94:46:A3:BB:23:5D:D7:78:86:F6:C7:0E:4B:61:E4:C8 Certificate issuer: /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0 Certificate serial: 1C Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/GFbo4pRGo7sjXdd4hvbHDkth5Mg.roa Signing time: Thu 24 Apr 2025 07:06:51 +0000 ROA not before: Thu 24 Apr 2025 07:06:51 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 24279 IP address blocks: 202.162.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0 Validity Not Before: Apr 24 07:06:51 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=1856E8E29446A3BB235DD77886F6C70E4B61E4C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:bc:e0:05:89:1f:98:9c:bc:4b:c8:1b:b4: a2:9c:33:bd:4c:dc:d5:7d:9b:57:8e:68:21:e1:11: 8c:c6:30:2d:c6:92:cf:d0:00:e5:66:5d:97:af:27: dd:c5:1e:96:65:bc:05:4c:08:da:6a:70:42:d5:ff: 53:98:22:0e:36:e0:08:67:b5:e6:03:08:0b:f6:03: 91:75:5e:3e:43:0f:bb:67:78:d7:04:9d:58:72:b4: 06:63:5c:ce:bb:c9:08:01:c6:8b:f0:a8:73:ad:3d: 39:e3:b3:ae:6a:49:b7:ed:d9:47:60:8d:5e:1a:71: 75:06:61:0b:86:43:a4:87:7c:1b:2e:8b:ea:9b:84: cc:f0:35:e6:08:99:be:d9:4e:62:29:e1:d0:6a:1e: aa:2e:62:5b:4f:4d:0a:21:e2:66:88:7f:49:6f:e8: 6e:5b:0a:2e:6f:de:99:8e:87:96:9e:d8:60:65:dc: ea:c8:e9:d4:3d:25:86:fd:92:1a:b4:12:ee:6e:04: c7:7b:be:33:1d:c5:c9:5c:15:31:4a:10:73:be:7a: 5b:47:8a:1c:88:1b:bd:56:e9:a0:a5:f6:51:13:90: c4:1a:1a:3e:60:6d:6a:b2:a4:09:0b:cf:db:1a:ea: 7a:32:5c:53:9f:0c:eb:11:ab:a1:c9:3b:27:0d:49: d2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:56:E8:E2:94:46:A3:BB:23:5D:D7:78:86:F6:C7:0E:4B:61:E4:C8 X509v3 Authority Key Identifier: keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/GFbo4pRGo7sjXdd4hvbHDkth5Mg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.162.80.0/20 Signature Algorithm: sha256WithRSAEncryption 06:7d:c1:42:5e:9b:4f:ac:40:ec:07:ab:dc:48:f4:62:b4:7b: 97:33:14:33:2e:3c:50:f3:d5:2d:c4:dc:4b:2a:f7:ed:a6:93: 6d:c3:d7:a4:d7:88:4c:58:cd:f7:16:b1:a7:d1:17:af:3b:bb: 35:24:ff:a7:8f:4e:07:70:0e:09:69:55:b4:c4:86:62:4c:64: 2c:f9:16:14:66:9b:f6:9e:72:fc:d3:39:52:6e:3e:83:ea:17: ac:0b:57:ad:83:d9:64:54:08:ca:c2:83:67:c4:83:95:b3:8f: 34:09:66:17:25:85:c1:46:a4:78:23:90:7d:68:8e:16:fb:4a: 7b:cb:97:6a:15:49:72:2b:9a:8e:f4:41:65:28:80:e9:8f:30: 86:c4:27:34:f5:c0:3f:f7:95:81:bc:72:d7:32:cf:f2:7c:23: 99:3e:44:d1:3f:cc:13:4e:f6:a4:a0:d8:57:5f:1a:90:d7:46: 20:51:1e:33:8b:06:11:98:a3:bd:38:b6:f0:9e:ca:4e:01:ed: c4:c8:15:af:2d:e1:5e:02:8b:4a:46:a0:c5:3e:80:fb:4f:1c: a2:c5:63:e9:74:34:33:7f:26:61:85:82:31:01:34:a2:32:12: 66:8a:bc:2f:90:a0:58:07:26:25:9e:8a:e0:df:49:b5:a2:f4: 96:9a:be:ec -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODkz MDE1NTUwMEI1OEZGNzNBOEEwODgyMTg1QzY2QUM2QTBEM0EwMB4XDTI1MDQyNDA3 MDY1MVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMTg1NkU4RTI5NDQ2QTNC QjIzNURENzc4ODZGNkM3MEU0QjYxRTRDODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMFtvOAFiR+YnLxLyBu0opwzvUzc1X2bV45oIeERjMYwLcaSz9AA 5WZdl68n3cUelmW8BUwI2mpwQtX/U5giDjbgCGe15gMIC/YDkXVePkMPu2d41wSd WHK0BmNczrvJCAHGi/Coc609OeOzrmpJt+3ZR2CNXhpxdQZhC4ZDpId8Gy6L6puE zPA15giZvtlOYinh0Goeqi5iW09NCiHiZoh/SW/oblsKLm/emY6Hlp7YYGXc6sjp 1D0lhv2SGrQS7m4Ex3u+Mx3FyVwVMUoQc756W0eKHIgbvVbpoKX2UROQxBoaPmBt arKkCQvP2xrqejJcU58M6xGrock7Jw1J0nkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQYVujilEajuyNd13iG9scOS2HkyDAfBgNVHSMEGDAWgBTIkwFVUAtY/3OooIgh hcZqxqDToDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTIwL3lKTUJWVkFMV1A5enFLQ0lJWVhHYXNhZzA2QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lKTUJWVkFMV1A5enFLQ0lJWVhHYXNh ZzA2QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MjAvR0ZibzRwUkdvN3NqWGRkNGh2YkhEa3RoNU1nLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMqiUDANBgkqhkiG9w0BAQsFAAOCAQEABn3BQl6bT6xA7Aer3Ej0YrR7lzMU My48UPPVLcTcSyr37aaTbcPXpNeITFjN9xaxp9EXrzu7NST/p49OB3AOCWlVtMSG YkxkLPkWFGab9p5y/NM5Um4+g+oXrAtXrYPZZFQIysKDZ8SDlbOPNAlmFyWFwUak eCOQfWiOFvtKe8uXahVJciuajvRBZSiA6Y8whsQnNPXAP/eVgbxy1zLP8nwjmT5E 0T/ME072pKDYV18akNdGIFEeM4sGEZijvTi28J7KTgHtxMgVry3hXgKLSkagxT6A +08cosVj6XQ0M38mYYWCMQE0ojISZoq8L5CgWAcmJZ6K4N9JtaL0lpq+7A== -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:39 2025 by rpki-client