$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/OnMOovgFe6Wh1ICp8jZIB-DRzPo.roa File: OnMOovgFe6Wh1ICp8jZIB-DRzPo.roa (raw, json) Hash identifier: iyevLsI8osh9npMC63He5+tSgirWqw8Kb7NtUC4c7IQ= Subject key identifier: 3A:73:0E:A2:F8:05:7B:A5:A1:D4:80:A9:F2:36:48:07:E0:D1:CC:FA Certificate issuer: /CN=4C11E03B4B88F3B90ADB73173864F7005132484F Certificate serial: 42 Authority key identifier: 4C:11:E0:3B:4B:88:F3:B9:0A:DB:73:17:38:64:F7:00:51:32:48:4F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TBHgO0uI87kK23MXOGT3AFEySE8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/OnMOovgFe6Wh1ICp8jZIB-DRzPo.roa Signing time: Sat 01 Mar 2025 01:31:30 +0000 ROA not before: Sat 01 Mar 2025 01:31:30 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 24284 IP address blocks: 157.112.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/TBHgO0uI87kK23MXOGT3AFEySE8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/TBHgO0uI87kK23MXOGT3AFEySE8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TBHgO0uI87kK23MXOGT3AFEySE8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C11E03B4B88F3B90ADB73173864F7005132484F Validity Not Before: Mar 1 01:31:30 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=3A730EA2F8057BA5A1D480A9F2364807E0D1CCFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bc:cf:93:c5:cd:99:08:14:0b:ec:29:8e:93: a2:91:61:96:5e:9a:6b:47:cd:7b:3a:c1:b4:be:34: 02:2e:79:a6:5b:34:d8:04:8c:74:a3:e2:37:92:a9: 35:0d:43:0d:b5:02:b4:f4:34:83:4c:37:67:be:ff: a6:32:0c:dd:cd:e8:ff:6b:e7:83:56:23:20:6b:a4: bb:04:c3:c8:57:69:1a:56:28:e9:4b:cf:df:f2:c3: 8e:72:6f:dd:7b:13:17:40:c8:e2:85:f7:b2:be:be: a0:8b:89:96:70:a7:e0:20:61:70:34:d7:f2:d9:ca: e2:3f:76:93:da:31:21:1b:2d:66:cd:96:bd:52:a8: 36:8b:14:21:89:97:6c:1c:8b:67:39:4e:b8:33:3c: 8f:a8:6a:fc:52:db:b8:86:9e:1e:15:ba:05:2f:ab: 34:97:d7:6e:54:af:fe:65:b2:3e:a7:77:6e:1b:de: 72:44:f6:4c:1d:8d:73:d1:5f:cf:cb:f1:2a:07:d6: 97:59:bd:1d:6c:da:3e:47:5e:bd:9e:e1:d4:6e:8c: 1d:2e:9c:7b:f9:a4:a0:a9:97:92:f3:31:6a:0b:24: ad:86:51:5e:ff:67:e3:83:88:63:55:6f:a7:1e:99: f6:b7:29:57:85:ea:29:17:bb:75:8c:57:7d:d3:ed: 42:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:73:0E:A2:F8:05:7B:A5:A1:D4:80:A9:F2:36:48:07:E0:D1:CC:FA X509v3 Authority Key Identifier: keyid:4C:11:E0:3B:4B:88:F3:B9:0A:DB:73:17:38:64:F7:00:51:32:48:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/TBHgO0uI87kK23MXOGT3AFEySE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TBHgO0uI87kK23MXOGT3AFEySE8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/OnMOovgFe6Wh1ICp8jZIB-DRzPo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.112.64.0/20 Signature Algorithm: sha256WithRSAEncryption 90:be:17:c4:b7:dc:9e:29:87:df:80:97:2e:8c:fb:22:ad:26: 85:2c:7f:c5:a1:a7:46:4a:bf:93:15:43:4e:02:be:bb:1b:e2: b9:3e:43:69:09:d4:8d:d6:5e:68:de:d9:98:a0:b4:b6:fe:af: 4e:ca:4b:d3:f4:fa:b6:1c:c1:e6:a2:0d:3d:f8:bd:fa:5c:f1: 36:28:3c:b9:a4:02:25:19:00:2e:71:9f:44:1a:42:24:d1:65: fd:9e:61:11:d0:f4:16:c9:96:43:de:98:ea:0f:6a:8e:ea:28: c2:62:43:0a:6c:54:18:ce:40:ee:04:63:b9:34:8a:42:cb:fc: c1:a2:a0:63:65:38:97:04:5c:60:fa:2e:16:d8:d7:40:ba:06: 55:c3:26:4b:24:f2:6a:ea:6e:fb:d8:3a:7d:1b:51:22:f2:2c: 5d:07:c7:ce:5c:3a:0c:6e:d2:b8:0c:0a:61:b1:f2:14:02:c0: 2e:d2:1e:f7:d5:22:fa:c0:c7:3c:cc:65:ee:14:b1:67:28:6e: a9:8a:b4:8e:71:db:d8:27:6e:15:de:71:0b:f3:40:4a:29:89: 17:e6:bc:46:36:da:7a:16:61:26:d8:71:a8:48:7b:f6:a2:57: 0c:6b:5c:c4:cd:6e:5d:41:bc:3d:f3:3d:28:7d:32:90:91:e8: 0c:1f:9b:a2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QzEx RTAzQjRCODhGM0I5MEFEQjczMTczODY0RjcwMDUxMzI0ODRGMB4XDTI1MDMwMTAx MzEzMFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoM0E3MzBFQTJGODA1N0JB NUExRDQ4MEE5RjIzNjQ4MDdFMEQxQ0NGQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANy8z5PFzZkIFAvsKY6TopFhll6aa0fNezrBtL40Ai55pls02ASM dKPiN5KpNQ1DDbUCtPQ0g0w3Z77/pjIM3c3o/2vng1YjIGukuwTDyFdpGlYo6UvP 3/LDjnJv3XsTF0DI4oX3sr6+oIuJlnCn4CBhcDTX8tnK4j92k9oxIRstZs2WvVKo NosUIYmXbByLZzlOuDM8j6hq/FLbuIaeHhW6BS+rNJfXblSv/mWyPqd3bhveckT2 TB2Nc9Ffz8vxKgfWl1m9HWzaPkdevZ7h1G6MHS6ce/mkoKmXkvMxagskrYZRXv9n 44OIY1Vvpx6Z9rcpV4XqKRe7dYxXfdPtQrkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ6cw6i+AV7paHUgKnyNkgH4NHM+jAfBgNVHSMEGDAWgBRMEeA7S4jzuQrbcxc4 ZPcAUTJITzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI0L1RCSGdPMHVJODdrSzIzTVhPR1QzQUZFeVNFOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1RCSGdPMHVJODdrSzIzTVhPR1QzQUZF eVNFOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MjQvT25NT292Z0ZlNldoMUlDcDhqWklCLURSelBvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ1wQDANBgkqhkiG9w0BAQsFAAOCAQEAkL4XxLfcnimH34CXLoz7Iq0mhSx/ xaGnRkq/kxVDTgK+uxviuT5DaQnUjdZeaN7ZmKC0tv6vTspL0/T6thzB5qINPfi9 +lzxNig8uaQCJRkALnGfRBpCJNFl/Z5hEdD0FsmWQ96Y6g9qjuoowmJDCmxUGM5A 7gRjuTSKQsv8waKgY2U4lwRcYPouFtjXQLoGVcMmSyTyaupu+9g6fRtRIvIsXQfH zlw6DG7SuAwKYbHyFALALtIe99Ui+sDHPMxl7hSxZyhuqYq0jnHb2CduFd5xC/NA SimJF+a8RjbaehZhJthxqEh79qJXDGtcxM1uXUG8PfM9KH0ykJHoDB+bog== -----END CERTIFICATE-----Generated at Sat Apr 26 17:54:47 2025 by rpki-client