$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/NAMn1afCARECE5vUVMtAYD75tTI.roa File: NAMn1afCARECE5vUVMtAYD75tTI.roa (raw, json) Hash identifier: Rx5R0Q3ISExp8EqhSw0eelilGT5MkxakecoZB8o5nro= Subject key identifier: 34:03:27:D5:A7:C2:01:11:02:13:9B:D4:54:CB:40:60:3E:F9:B5:32 Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Certificate serial: C3 Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/NAMn1afCARECE5vUVMtAYD75tTI.roa Signing time: Fri 31 Jan 2025 01:31:36 +0000 ROA not before: Fri 31 Jan 2025 01:31:36 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18126 IP address blocks: 118.106.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Validity Not Before: Jan 31 01:31:36 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=340327D5A7C2011102139BD454CB40603EF9B532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b5:91:e4:e9:5d:9c:d8:a6:f3:96:18:62:c8: 5f:aa:1b:3e:0d:fc:d1:cd:f0:17:43:1c:1b:60:db: 99:dc:34:bd:c4:96:78:48:f9:1d:c0:a8:7e:65:38: be:28:37:b2:8f:c8:0e:c1:76:08:19:72:81:6c:c9: f4:17:03:1a:61:37:9c:76:a7:03:f9:2f:61:8b:ea: 13:c6:ed:0e:2b:d5:f6:23:4c:7a:f2:ad:17:47:14: 80:f6:ab:f5:fe:34:f4:3c:93:62:e9:5f:4d:ad:0a: 68:85:c5:6d:2d:8d:38:37:3a:90:04:d9:2d:44:68: 87:7d:2f:41:fa:4e:35:c0:75:bb:e3:05:8b:20:97: de:95:16:26:4a:e0:47:e7:30:85:99:b8:cd:13:35: 7f:bf:97:a0:54:a6:63:73:19:ce:1c:77:97:f3:04: c0:74:f0:d0:52:42:16:6d:e3:b7:7d:36:be:f0:b7: 55:e9:de:8f:4f:c2:a0:b6:f4:78:c6:6e:39:b5:7b: 5d:91:00:e3:dd:cf:d1:ed:ae:97:55:20:9b:1d:2c: 4a:33:47:3f:cb:75:cc:b6:7a:dc:96:75:9d:8e:b8: e7:50:23:28:72:d4:92:c1:50:e0:43:86:d0:fe:5b: d5:cc:93:24:51:0c:a2:d2:85:ca:58:23:0c:cf:32: 92:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:03:27:D5:A7:C2:01:11:02:13:9B:D4:54:CB:40:60:3E:F9:B5:32 X509v3 Authority Key Identifier: keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/NAMn1afCARECE5vUVMtAYD75tTI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.106.0.0/16 Signature Algorithm: sha256WithRSAEncryption 50:e8:8a:5c:51:c2:1f:eb:23:44:36:5e:2c:1a:72:a7:3a:81: 66:b6:d1:07:9a:15:bd:65:76:cb:ac:af:6e:02:39:71:06:96: 27:b5:78:ef:b7:0b:ed:72:b6:81:e5:9d:e0:b2:c1:47:96:aa: 88:a1:5d:de:3f:e5:65:81:7f:6c:65:11:4e:cd:0d:99:c0:69: 78:fc:a4:a7:44:94:47:8f:3c:9b:d0:73:4b:58:e6:f0:f5:fe: 3f:5d:df:6f:d1:03:23:d7:67:bf:57:e7:2e:7a:ce:01:e4:9d: 82:35:8d:40:ed:6c:76:6d:1c:87:35:06:ff:75:a7:75:f3:61: ab:20:00:e6:10:5e:45:ad:7c:0d:ef:32:87:42:31:23:f4:9e: b4:76:a4:9e:cd:72:5f:3b:6e:d9:85:46:03:fb:22:0c:7e:7a: 13:5c:cc:28:c4:1c:06:59:61:b3:4a:0f:cb:f5:9e:ea:c2:a6: c3:38:bb:d6:0c:2c:e3:94:a8:15:ab:ab:1e:2b:0e:af:7f:94: d1:4f:98:6f:e6:e9:86:da:f7:0e:8c:f3:f5:e9:3e:04:ad:61: 0b:a5:d1:c2:a1:7d:45:a5:fc:97:7d:a6:fb:5a:07:d7:d4:b1: f1:2d:7f:22:e3:b2:a5:f9:ed:59:90:af:10:47:ba:41:4c:08: a9:46:3f:88 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNTAxMzEw MTMxMzZaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM0MDMyN0Q1QTdDMjAx MTEwMjEzOUJENDU0Q0I0MDYwM0VGOUI1MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDStZHk6V2c2KbzlhhiyF+qGz4N/NHN8BdDHBtg25ncNL3ElnhI +R3AqH5lOL4oN7KPyA7BdggZcoFsyfQXAxphN5x2pwP5L2GL6hPG7Q4r1fYjTHry rRdHFID2q/X+NPQ8k2LpX02tCmiFxW0tjTg3OpAE2S1EaId9L0H6TjXAdbvjBYsg l96VFiZK4EfnMIWZuM0TNX+/l6BUpmNzGc4cd5fzBMB08NBSQhZt47d9Nr7wt1Xp 3o9PwqC29HjGbjm1e12RAOPdz9HtrpdVIJsdLEozRz/Ldcy2etyWdZ2OuOdQIyhy 1JLBUOBDhtD+W9XMkyRRDKLShcpYIwzPMpK7AgMBAAGjggInMIICIzAdBgNVHQ4E FgQUNAMn1afCARECE5vUVMtAYD75tTIwHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDE3My9OQU1uMWFmQ0FSRUNFNXZVVk10QVlENzV0VEku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAdmowDQYJKoZIhvcNAQELBQADggEBAFDoilxRwh/rI0Q2Xiwacqc6 gWa20QeaFb1ldsusr24COXEGlie1eO+3C+1ytoHlneCywUeWqoihXd4/5WWBf2xl EU7NDZnAaXj8pKdElEePPJvQc0tY5vD1/j9d32/RAyPXZ79X5y56zgHknYI1jUDt bHZtHIc1Bv91p3XzYasgAOYQXkWtfA3vModCMSP0nrR2pJ7Ncl87btmFRgP7Igx+ ehNczCjEHAZZYbNKD8v1nurCpsM4u9YMLOOUqBWrqx4rDq9/lNFPmG/m6Yba9w6M 8/XpPgStYQul0cKhfUWl/Jd9pvtaB9fUsfEtfyLjsqX57VmQrxBHukFMCKlGP4g= -----END CERTIFICATE-----Generated at Sat Apr 5 17:20:23 2025 by rpki-client