$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Lo0BdYZmsfkiRCSMH0RJIOaXCDE.roa File: Lo0BdYZmsfkiRCSMH0RJIOaXCDE.roa (raw, json) Hash identifier: kEA17+QNpLm005ZsywFekLPSiapo7CZ8ib/UrZAXt5M= Subject key identifier: 2E:8D:01:75:86:66:B1:F9:22:44:24:8C:1F:44:49:20:E6:97:08:31 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 01E5 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Lo0BdYZmsfkiRCSMH0RJIOaXCDE.roa Signing time: Fri 31 May 2024 01:31:05 +0000 ROA not before: Fri 31 May 2024 01:31:05 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 7684 IP address blocks: 182.48.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: May 31 01:31:05 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=2E8D01758666B1F92244248C1F444920E6970831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:c2:9e:77:55:91:3a:bb:13:dc:82:3b:62: c0:8e:ef:fa:28:3b:af:b0:36:30:58:bf:bc:f8:f9: 23:d7:6f:3f:5f:b0:87:e3:dc:60:87:f3:2f:c4:ee: 2c:3e:fe:f2:ff:08:7d:48:8c:3d:ae:0e:d6:bd:5e: 54:56:f1:70:69:38:39:8c:2d:24:99:54:d9:42:47: 6b:58:c9:94:ce:9f:e6:02:52:0b:79:5f:9f:73:72: 93:d3:d3:9b:6d:5f:aa:a9:f7:53:27:8c:aa:83:0a: 26:6b:ac:28:c2:9a:46:1b:45:74:8e:7c:69:2e:4f: 23:1d:4a:40:4d:d1:74:9d:e7:5b:9c:a6:4d:5e:02: 49:3e:70:03:da:e9:5d:70:f7:c4:2a:f5:81:ad:78: f3:2e:8a:4b:6a:8f:ed:34:c8:b4:08:9b:08:b0:24: 3b:7c:f3:40:26:4f:1d:2b:8a:dc:df:f1:1e:cd:9e: 65:37:bf:20:5d:a1:20:f9:4e:74:29:5b:76:ff:92: 67:cc:d4:e3:85:59:f5:7b:f4:c6:44:e7:df:0b:05: 1a:d4:c5:af:15:f9:b0:8c:e5:0c:dc:c2:7d:ea:a7: 4d:78:7a:c1:19:c0:57:1f:99:d7:31:29:f2:53:3b: a4:81:d8:0a:d1:f4:42:45:86:89:33:45:42:e8:41: 00:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8D:01:75:86:66:B1:F9:22:44:24:8C:1F:44:49:20:E6:97:08:31 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Lo0BdYZmsfkiRCSMH0RJIOaXCDE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.48.39.0/24 Signature Algorithm: sha256WithRSAEncryption d6:90:08:0c:60:ba:61:ee:da:c8:74:12:de:7a:ce:58:92:eb: 2b:ae:89:4d:2c:fd:79:20:07:14:46:ce:79:de:eb:90:14:d7: 61:ed:a5:08:a9:34:18:e2:6c:9f:41:0b:88:cc:00:fe:2e:ff: 73:13:54:45:e1:d5:db:eb:d9:0c:19:0d:20:93:c8:ae:64:6f: d2:ee:5a:80:a1:bb:22:8c:9f:4b:c9:e8:30:6b:6a:29:21:7b: b5:68:37:46:d8:e9:a0:8a:2c:07:3a:8f:2b:f9:1f:4a:c6:cc: b6:ce:62:7c:f7:09:69:d8:ff:23:eb:72:f3:c3:fc:2d:e7:c0: dd:80:9f:95:03:0f:79:24:a4:07:b0:a0:1a:d0:4e:ce:9b:f9: 7c:33:cd:7c:1a:b3:38:fb:99:cd:c8:4d:3b:31:ec:11:3a:79: 29:49:3f:a8:1d:8b:6b:b3:31:fb:5c:20:60:4e:7f:c1:a7:62: 95:34:d5:7c:cd:9a:be:16:a0:01:45:4f:47:a7:2d:21:44:e2: 61:12:c0:9e:07:90:69:8d:84:8e:5d:05:1d:3b:bb:83:4a:14: 7e:cb:5f:6f:1b:d5:10:5b:2b:9d:ba:3d:3b:41:01:6b:21:18: c8:7b:86:eb:73:57:b5:c8:45:ab:1f:7b:98:c8:9a:e5:4a:16: 09:b7:81:f1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA1MzEw MTMxMDVaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJFOEQwMTc1ODY2NkIx RjkyMjQ0MjQ4QzFGNDQ0OTIwRTY5NzA4MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw88Ked1WROrsT3II7YsCO7/ooO6+wNjBYv7z4+SPXbz9fsIfj 3GCH8y/E7iw+/vL/CH1IjD2uDta9XlRW8XBpODmMLSSZVNlCR2tYyZTOn+YCUgt5 X59zcpPT05ttX6qp91MnjKqDCiZrrCjCmkYbRXSOfGkuTyMdSkBN0XSd51ucpk1e Akk+cAPa6V1w98Qq9YGtePMuiktqj+00yLQImwiwJDt880AmTx0ritzf8R7NnmU3 vyBdoSD5TnQpW3b/kmfM1OOFWfV79MZE598LBRrUxa8V+bCM5Qzcwn3qp014esEZ wFcfmdcxKfJTO6SB2ArR9EJFhokzRULoQQDTAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQULo0BdYZmsfkiRCSMH0RJIOaXCDEwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9MbzBCZFlabXNma2lSQ1NNSDBSSklPYVhDREUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAtjAnMA0GCSqGSIb3DQEBCwUAA4IBAQDWkAgMYLph7trIdBLees5Y kusrrolNLP15IAcURs553uuQFNdh7aUIqTQY4myfQQuIzAD+Lv9zE1RF4dXb69kM GQ0gk8iuZG/S7lqAobsijJ9Lyegwa2opIXu1aDdG2OmgiiwHOo8r+R9Kxsy2zmJ8 9wlp2P8j63Lzw/wt58DdgJ+VAw95JKQHsKAa0E7Om/l8M818GrM4+5nNyE07MewR OnkpST+oHYtrszH7XCBgTn/Bp2KVNNV8zZq+FqABRU9Hpy0hROJhEsCeB5BpjYSO XQUdO7uDShR+y19vG9UQWyuduj07QQFrIRjIe4brc1e1yEWrH3uYyJrlShYJt4Hx -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:40 2025 by rpki-client