$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/7PaQZjqCefRmWBL5iT2SRqUNRaE.roa File: 7PaQZjqCefRmWBL5iT2SRqUNRaE.roa (raw, json) Hash identifier: DNVuYVrHHjsJYxFSEJRBP/a/TFRgzleETEzN0/BUIMU= Subject key identifier: EC:F6:90:66:3A:82:79:F4:66:58:12:F9:89:3D:92:46:A5:0D:45:A1 Certificate issuer: /CN=9E1460D2688F6D1068B97C1F914040434B8F0324 Certificate serial: 47 Authority key identifier: 9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/7PaQZjqCefRmWBL5iT2SRqUNRaE.roa Signing time: Thu 01 May 2025 01:29:21 +0000 ROA not before: Thu 01 May 2025 01:29:21 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 2518 IP address blocks: 192.47.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E1460D2688F6D1068B97C1F914040434B8F0324 Validity Not Before: May 1 01:29:21 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=ECF690663A8279F4665812F9893D9246A50D45A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d4:01:22:55:ae:82:14:df:4c:82:db:48:a6: 23:f7:66:f0:94:2a:ce:7b:0f:3b:f4:c2:73:86:1f: 83:f3:6a:91:77:4c:9b:00:69:c7:d9:f6:1d:18:5a: 6a:da:11:2a:3c:26:a8:29:e7:f1:8d:55:7c:0d:8f: 79:a0:7a:65:9c:bd:f9:75:22:a9:33:b2:5c:51:6e: 3e:88:6f:52:1b:2f:1c:19:66:db:57:e1:f1:fd:63: 95:22:ed:6f:79:7d:7a:36:ca:68:e6:29:43:1c:d2: bf:4d:a9:42:db:dd:f1:2f:6a:70:32:61:4f:e4:48: d8:34:e8:09:85:d4:74:b0:33:77:0f:08:44:3d:7a: 82:c9:a7:53:6b:3f:e4:46:a6:13:1b:63:fb:ad:41: d8:a5:f5:d3:f5:ba:d9:66:4e:e1:3f:5f:11:12:a7: f2:13:b0:b7:df:25:d5:61:d9:9e:12:8a:2c:ae:82: 1d:90:eb:0c:4d:a3:50:07:b6:0a:f4:6f:47:95:e3: c0:82:c4:fa:56:2e:c3:3f:a7:d7:ad:a8:d1:7b:c5: 2b:f7:d6:d0:c8:c1:a2:1f:6b:cd:c8:69:d0:5c:60: 0b:60:4f:45:58:ac:24:b6:63:60:7b:15:97:d7:27: aa:56:7c:25:fe:8f:b6:4c:8e:61:60:e2:5e:96:be: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F6:90:66:3A:82:79:F4:66:58:12:F9:89:3D:92:46:A5:0D:45:A1 X509v3 Authority Key Identifier: keyid:9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/7PaQZjqCefRmWBL5iT2SRqUNRaE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.47.117.0/24 Signature Algorithm: sha256WithRSAEncryption 58:d5:ef:b0:c4:b9:4e:4e:96:a0:36:17:0b:8e:a1:9f:7b:28: 9b:a5:bd:4e:e2:9a:ab:67:a8:b7:ae:5b:18:47:e3:19:b0:b2: b4:b8:1a:41:1c:53:02:5d:1a:7b:c6:27:68:06:96:ff:d5:88: 70:4e:b5:55:d9:d3:20:23:d1:b7:4f:9a:6c:29:14:62:e1:25: 44:39:b9:c8:f7:a4:03:dd:c8:8a:f7:2b:24:99:80:df:13:e2: 00:70:89:d9:b7:4d:85:95:9d:54:4b:ca:89:32:71:7b:61:1d: 45:f8:f9:a9:74:86:65:40:79:a1:a7:3f:ed:2c:83:4a:ea:eb: bc:9f:53:82:28:45:e1:f7:23:26:00:3c:70:ea:67:03:e6:8c: 41:21:8b:4b:63:9a:e1:23:d9:73:6b:82:7f:50:11:cd:39:d0: c9:f0:c5:52:0e:65:55:f0:22:92:c4:a6:96:09:aa:2d:53:61: dc:e4:c4:09:90:38:d5:6b:3a:fc:a1:13:31:ee:d6:4d:2b:2f: 3a:9f:d0:2f:fa:88:45:12:54:3c:7e:8a:45:b5:d0:4b:ec:1a: ec:49:68:a7:a0:23:b1:62:d0:0c:60:a9:db:40:5e:4f:81:02: c3:13:8e:2a:49:f1:b3:75:a0:3f:7a:bc:20:70:3c:a1:2a:d3: db:55:d4:17 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTE0 NjBEMjY4OEY2RDEwNjhCOTdDMUY5MTQwNDA0MzRCOEYwMzI0MB4XDTI1MDUwMTAx MjkyMVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRUNGNjkwNjYzQTgyNzlG NDY2NTgxMkY5ODkzRDkyNDZBNTBENDVBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOPUASJVroIU30yC20imI/dm8JQqznsPO/TCc4Yfg/NqkXdMmwBp x9n2HRhaatoRKjwmqCnn8Y1VfA2PeaB6ZZy9+XUiqTOyXFFuPohvUhsvHBlm21fh 8f1jlSLtb3l9ejbKaOYpQxzSv02pQtvd8S9qcDJhT+RI2DToCYXUdLAzdw8IRD16 gsmnU2s/5EamExtj+61B2KX10/W62WZO4T9fERKn8hOwt98l1WHZnhKKLK6CHZDr DE2jUAe2CvRvR5XjwILE+lYuwz+n162o0XvFK/fW0MjBoh9rzchp0FxgC2BPRVis JLZjYHsVl9cnqlZ8Jf6PtkyOYWDiXpa+jv8CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTs9pBmOoJ59GZYEvmJPZJGpQ1FoTAfBgNVHSMEGDAWgBSeFGDSaI9tEGi5fB+R QEBDS48DJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjI1MS9uaFJnMG1pUGJSQm91WHdma1VCQVEwdVBBeVEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9uaFJnMG1pUGJSQm91WHdma1VCQVEw dVBBeVEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjI1MS83UGFRWmpxQ2VmUm1XQkw1aVQyU1JxVU5SYUUucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwC91MA0GCSqGSIb3DQEBCwUAA4IBAQBY1e+wxLlOTpagNhcLjqGfeyib pb1O4pqrZ6i3rlsYR+MZsLK0uBpBHFMCXRp7xidoBpb/1YhwTrVV2dMgI9G3T5ps KRRi4SVEObnI96QD3ciK9yskmYDfE+IAcInZt02FlZ1US8qJMnF7YR1F+PmpdIZl QHmhpz/tLINK6uu8n1OCKEXh9yMmADxw6mcD5oxBIYtLY5rhI9lza4J/UBHNOdDJ 8MVSDmVV8CKSxKaWCaotU2Hc5MQJkDjVazr8oRMx7tZNKy86n9Av+ohFElQ8fopF tdBL7BrsSWinoCOxYtAMYKnbQF5PgQLDE44qSfGzdaA/erwgcDyhKtPbVdQX -----END CERTIFICATE-----Generated at Sun May 18 19:41:13 2025 by rpki-client