$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/0srX8y3Jti07Hnnicc6k3BJYxP8.roa File: 0srX8y3Jti07Hnnicc6k3BJYxP8.roa (raw, json) Hash identifier: 61jZ1lE6xB9tfCWmSxBSU9uF8bAHLEcOth1NkEiAkMc= Subject key identifier: D2:CA:D7:F3:2D:C9:B6:2D:3B:1E:79:E2:71:CE:A4:DC:12:58:C4:FF Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Certificate serial: BF Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/0srX8y3Jti07Hnnicc6k3BJYxP8.roa Signing time: Fri 31 Jan 2025 01:31:34 +0000 ROA not before: Fri 31 Jan 2025 01:31:34 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18126 IP address blocks: 115.36.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Validity Not Before: Jan 31 01:31:34 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=D2CAD7F32DC9B62D3B1E79E271CEA4DC1258C4FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:91:a1:6b:b3:7b:be:3a:e9:e6:42:01:dc: f0:ac:a0:5c:c7:6d:26:3b:ef:ba:78:72:fa:64:58: 2b:e5:54:0f:56:cc:94:ff:df:72:2a:1e:f7:7c:fe: 25:c2:7e:4e:03:75:c5:d3:b3:8b:7c:d3:6f:9d:bd: 45:9b:a7:38:8a:80:ce:18:da:b8:7f:a8:3a:dc:3d: 69:f4:a5:7c:0c:15:ca:ec:ad:47:85:12:02:27:2e: a2:20:45:6f:09:29:36:eb:e8:ea:07:03:2b:d7:5a: 4a:e9:10:ee:17:e9:46:b8:f1:c5:f9:b3:18:e4:cd: 1c:7c:2d:f3:d8:2d:32:e6:a9:ef:d5:35:27:7a:9c: 73:ca:e2:71:1d:d8:e9:eb:c9:89:c9:f5:f9:9f:87: ee:f9:b9:40:37:86:f3:d3:ec:94:ae:b4:f5:20:36: ec:95:04:a9:0f:e7:63:00:60:21:03:86:97:af:24: 53:6f:33:b3:de:5f:e9:b5:59:a7:8b:74:a4:7d:d7: 21:5d:2d:8c:a7:cf:91:62:ed:9b:6e:92:35:02:d3: 5a:4b:11:ff:25:64:de:f0:60:62:f5:a7:81:44:d7: 3e:26:d2:10:d9:1f:7f:cd:9d:a4:7b:5c:74:3c:f5: 65:ec:9d:3e:da:fe:ca:6f:35:3e:22:5d:8a:5f:29: bd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CA:D7:F3:2D:C9:B6:2D:3B:1E:79:E2:71:CE:A4:DC:12:58:C4:FF X509v3 Authority Key Identifier: keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/0srX8y3Jti07Hnnicc6k3BJYxP8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.36.0.0/14 Signature Algorithm: sha256WithRSAEncryption 8e:2e:db:34:bc:f6:58:23:6d:ae:22:17:c0:40:18:1a:4a:1f: 85:43:21:09:f1:9e:48:b2:f2:36:23:34:f0:92:3c:00:64:95: 09:89:01:78:76:8c:fa:73:91:60:bb:f3:7f:d9:c5:6c:81:60: fe:0e:79:9f:de:c2:7d:86:57:6c:a6:e9:f3:b1:24:9d:fc:75: b1:43:29:b4:5d:d5:27:18:f7:d8:c2:1e:54:d2:6f:71:fd:90: ba:57:a9:7e:7b:60:33:21:fe:1d:f3:d2:96:c7:11:33:a4:a1: 7f:17:8a:20:f2:a9:c9:f5:97:dc:90:25:ea:87:8f:75:60:ad: 34:36:14:48:a2:fd:b8:c2:38:97:aa:63:e2:a7:96:70:06:24: ba:cc:f1:eb:69:1c:c9:c1:b5:46:d0:d6:3d:91:73:cf:65:03: ef:92:61:b6:d1:b5:f1:bf:a9:cc:47:f7:b3:17:92:a1:a2:83: 74:4e:fe:e5:c7:ab:7b:c4:b0:9d:7e:3a:95:15:6b:7c:26:7f: db:5f:f3:4d:5e:59:78:dc:d0:63:59:28:9a:88:aa:3e:2e:41: 9e:f6:9f:55:45:56:17:07:8d:d8:75:06:c9:61:86:aa:76:f6: 41:36:24:4d:19:1d:71:d9:3a:43:4d:99:e6:bc:a3:70:09:6a: 3d:da:5c:d1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNTAxMzEw MTMxMzRaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQyQ0FEN0YzMkRDOUI2 MkQzQjFFNzlFMjcxQ0VBNERDMTI1OEM0RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy3JGha7N7vjrp5kIB3PCsoFzHbSY777p4cvpkWCvlVA9WzJT/ 33IqHvd8/iXCfk4DdcXTs4t802+dvUWbpziKgM4Y2rh/qDrcPWn0pXwMFcrsrUeF EgInLqIgRW8JKTbr6OoHAyvXWkrpEO4X6Ua48cX5sxjkzRx8LfPYLTLmqe/VNSd6 nHPK4nEd2OnryYnJ9fmfh+75uUA3hvPT7JSutPUgNuyVBKkP52MAYCEDhpevJFNv M7PeX+m1WaeLdKR91yFdLYynz5Fi7ZtukjUC01pLEf8lZN7wYGL1p4FE1z4m0hDZ H3/NnaR7XHQ89WXsnT7a/spvNT4iXYpfKb2JAgMBAAGjggInMIICIzAdBgNVHQ4E FgQU0srX8y3Jti07Hnnicc6k3BJYxP8wHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDE3My8wc3JYOHkzSnRpMDdIbm5pY2M2azNCSll4UDgu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMCcyQwDQYJKoZIhvcNAQELBQADggEBAI4u2zS89lgjba4iF8BAGBpK H4VDIQnxnkiy8jYjNPCSPABklQmJAXh2jPpzkWC783/ZxWyBYP4OeZ/ewn2GV2ym 6fOxJJ38dbFDKbRd1ScY99jCHlTSb3H9kLpXqX57YDMh/h3z0pbHETOkoX8XiiDy qcn1l9yQJeqHj3VgrTQ2FEii/bjCOJeqY+KnlnAGJLrM8etpHMnBtUbQ1j2Rc89l A++SYbbRtfG/qcxH97MXkqGig3RO/uXHq3vEsJ1+OpUVa3wmf9tf801eWXjc0GNZ KJqIqj4uQZ72n1VFVhcHjdh1Bslhhqp29kE2JE0ZHXHZOkNNmea8o3AJaj3aXNE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:17 2025 by rpki-client