$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/FWZxeuK4FmAlZTY7bBHKX7fHNSk.roa File: FWZxeuK4FmAlZTY7bBHKX7fHNSk.roa (raw, json) Hash identifier: wAuMEfzwgKdk2wsu1KsCgzFaEuI7AcSW7gimkQ9T6zc= Subject key identifier: 15:66:71:7A:E2:B8:16:60:25:65:36:3B:6C:11:CA:5F:B7:C7:35:29 Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB Certificate serial: 6E Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/FWZxeuK4FmAlZTY7bBHKX7fHNSk.roa Signing time: Fri 31 Jan 2025 01:32:18 +0000 ROA not before: Fri 31 Jan 2025 01:32:18 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 37892 IP address blocks: 202.145.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB Validity Not Before: Jan 31 01:32:18 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=1566717AE2B816602565363B6C11CA5FB7C73529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:60:15:24:b0:f7:02:f9:76:83:ee:c3:3b: a0:22:8d:28:69:58:7e:47:d8:6a:d5:58:41:0c:66: 9f:2b:7e:ab:17:2c:d0:24:b2:39:6f:4c:77:40:18: 99:4a:6d:51:33:2a:57:4b:d7:2d:b8:cf:dc:2e:a8: 22:af:f9:09:a8:50:bf:31:63:47:d4:c2:ae:c9:25: 51:e6:05:ee:c9:5e:9b:06:22:02:27:bf:3f:79:3e: e6:d1:d5:6c:65:eb:b8:90:e1:99:fb:29:ec:4e:0c: 1e:38:3d:91:c7:62:5b:39:aa:e2:c1:79:0f:57:c3: 4d:ab:df:c7:a4:21:af:63:01:1a:55:00:fa:76:0b: d4:3a:2e:bb:03:67:0b:cd:57:e7:dc:b8:41:d1:25: d7:9a:01:a3:a8:e1:71:7a:82:48:a1:61:b4:3a:51: c0:ae:ca:de:ee:0f:17:17:f0:37:f1:83:51:d9:15: 90:ab:c7:84:28:e9:18:c2:c9:eb:24:41:f7:7e:10: 9b:2a:2c:0f:76:f9:a0:c7:72:1c:46:1e:18:68:c1: 2b:a8:c8:26:6f:b8:de:48:65:db:2f:2f:c4:87:6d: 64:da:0f:71:a0:7c:9b:b9:b1:a3:6f:e2:89:fb:20: 08:4b:bb:0f:e4:7e:b3:6c:93:7c:98:42:6d:21:9f: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:66:71:7A:E2:B8:16:60:25:65:36:3B:6C:11:CA:5F:B7:C7:35:29 X509v3 Authority Key Identifier: keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/FWZxeuK4FmAlZTY7bBHKX7fHNSk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.145.26.0/23 Signature Algorithm: sha256WithRSAEncryption 98:9f:ec:0e:b7:38:3a:c3:e5:40:06:2b:85:41:ea:62:72:d6: c8:39:5c:e3:08:2f:99:e6:c6:c7:02:42:bc:c9:da:1e:e0:4e: 07:f2:27:4d:76:d0:76:dc:bf:7e:31:a0:bb:42:3b:1d:ee:0d: b1:98:43:86:71:1f:07:64:53:ed:ed:a5:07:eb:94:c0:8b:7c: 38:02:dd:be:8c:b4:d4:61:e7:27:75:68:9b:95:56:f5:2d:0c: 50:8d:6a:98:bc:39:43:29:c0:46:67:02:3d:75:43:58:65:16: 66:5b:94:01:a4:73:9e:11:90:cb:8d:ba:1f:54:d6:ce:d5:9c: 88:f7:d9:2d:6e:d6:5b:8f:07:ba:e5:f3:82:a1:d0:b1:37:39: 6e:17:c7:af:0e:34:df:f3:a8:c3:c4:12:52:88:4b:fd:f0:14: c0:86:cb:a1:fa:dc:70:be:9d:7e:c4:ed:da:45:c9:62:14:30: 9e:db:66:9c:67:5f:90:82:d2:27:cf:c8:c1:a6:b9:2c:60:99: be:10:fc:cd:67:ea:5c:e6:e6:6c:37:f8:de:1e:77:ed:ad:38: 67:84:c8:c7:37:9c:8f:fd:42:34:7b:fa:a2:2e:37:5c:08:40: 1e:ef:70:dd:1b:57:33:1d:82:4a:0f:69:7f:50:07:b0:c9:37: 15:f7:83:1b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQTRD RkU5MDlDQTU4MzA3RTdDQTg3MzVBRjI0NUQ3MThEOTlGN0ZCMB4XDTI1MDEzMTAx MzIxOFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoMTU2NjcxN0FFMkI4MTY2 MDI1NjUzNjNCNkMxMUNBNUZCN0M3MzUyOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALEQYBUksPcC+XaD7sM7oCKNKGlYfkfYatVYQQxmnyt+qxcs0CSy OW9Md0AYmUptUTMqV0vXLbjP3C6oIq/5CahQvzFjR9TCrsklUeYF7slemwYiAie/ P3k+5tHVbGXruJDhmfsp7E4MHjg9kcdiWzmq4sF5D1fDTavfx6Qhr2MBGlUA+nYL 1DouuwNnC81X59y4QdEl15oBo6jhcXqCSKFhtDpRwK7K3u4PFxfwN/GDUdkVkKvH hCjpGMLJ6yRB934QmyosD3b5oMdyHEYeGGjBK6jIJm+43khl2y8vxIdtZNoPcaB8 m7mxo2/iifsgCEu7D+R+s2yTfJhCbSGfOs8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQVZnF64rgWYCVlNjtsEcpft8c1KTAfBgNVHSMEGDAWgBQqTP6QnKWDB+fKhzWv JF1xjZn3+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTM0L0trei1rSnlsZ3dmbnlvYzFyeVJkY1kyWjlfcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0trei1rSnlsZ3dmbnlvYzFyeVJkY1ky Wjlfcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MzQvRldaeGV1SzRGbUFsWlRZN2JCSEtYN2ZITlNrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcqRGjANBgkqhkiG9w0BAQsFAAOCAQEAmJ/sDrc4OsPlQAYrhUHqYnLWyDlc 4wgvmebGxwJCvMnaHuBOB/InTXbQdty/fjGgu0I7He4NsZhDhnEfB2RT7e2lB+uU wIt8OALdvoy01GHnJ3Vom5VW9S0MUI1qmLw5QynARmcCPXVDWGUWZluUAaRznhGQ y426H1TWztWciPfZLW7WW48HuuXzgqHQsTc5bhfHrw403/Oow8QSUohL/fAUwIbL ofrccL6dfsTt2kXJYhQwnttmnGdfkILSJ8/Iwaa5LGCZvhD8zWfqXObmbDf43h53 7a04Z4TIxzecj/1CNHv6oi43XAhAHu9w3RtXMx2CSg9pf1AHsMk3FfeDGw== -----END CERTIFICATE-----Generated at Sat Apr 26 20:38:29 2025 by rpki-client