$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/jnkBnEsbk6Gb0gakYXHpeCdyvn0.roa File: jnkBnEsbk6Gb0gakYXHpeCdyvn0.roa (raw, json) Hash identifier: 0oUc2AemaydyqA0j3KRdcLhENDeOAPVWoS4SqPiTEy4= Subject key identifier: 8E:79:01:9C:4B:1B:93:A1:9B:D2:06:A4:61:71:E9:78:27:72:BE:7D Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 47 Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/jnkBnEsbk6Gb0gakYXHpeCdyvn0.roa Signing time: Sat 01 Mar 2025 01:29:45 +0000 ROA not before: Sat 01 Mar 2025 01:29:45 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 17698 IP address blocks: 219.101.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 1 01:29:45 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=8E79019C4B1B93A19BD206A46171E9782772BE7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:9b:22:84:11:e3:79:eb:88:cf:be:c1:d3: 47:17:7d:7a:3a:73:2b:20:b4:10:cd:9f:41:64:36: fd:9b:c6:44:c5:f6:e8:ed:50:02:17:e0:d6:6b:bf: 51:c3:2d:8e:e2:1c:e6:7f:a7:c2:f7:11:18:99:61: 33:9c:98:dc:e4:b6:14:7a:be:c1:c3:29:a0:28:d8: 9d:31:f3:de:65:76:1e:b7:36:bb:00:45:0a:aa:5a: 35:bb:14:c7:d2:db:7d:f0:1c:da:33:33:2b:b5:e3: 70:e7:ea:98:af:93:88:18:e6:5c:26:1e:e2:90:29: 4e:91:70:d7:2c:fe:b9:b2:07:c8:b2:26:14:d6:d9: 7a:1b:3d:10:34:57:44:d5:3f:3e:24:ed:3c:7f:33: 43:b1:67:43:32:81:72:7e:92:2f:32:33:8e:dc:ea: 85:5f:e7:30:42:01:a6:5b:18:eb:5f:00:7e:e3:8e: 1c:d8:46:79:46:39:15:ed:bf:34:8f:64:fa:2b:eb: f3:86:bb:e8:f7:f5:90:eb:1a:49:7b:04:44:9e:c2: bd:e2:3e:b4:1c:a5:0a:d1:b9:df:5a:cd:f8:5f:a9: 82:15:51:5c:fd:87:c7:52:1f:df:37:87:4a:f1:8e: 09:72:c6:eb:6d:91:26:9d:7e:f8:e3:86:25:f5:2e: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:79:01:9C:4B:1B:93:A1:9B:D2:06:A4:61:71:E9:78:27:72:BE:7D X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/jnkBnEsbk6Gb0gakYXHpeCdyvn0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.101.0.0/19 Signature Algorithm: sha256WithRSAEncryption c3:5a:2a:28:27:22:8b:49:7c:77:43:87:73:b4:2e:61:ac:f9: 90:b7:5a:f4:a2:fd:83:7a:52:a8:c9:72:58:ae:62:2e:1c:f3: e5:36:25:86:35:e9:9a:1d:83:9d:a7:f6:7c:9b:35:6d:65:bc: e2:91:95:2b:80:6d:10:ba:de:2e:c9:f8:93:62:7a:1b:da:02: 6b:ea:9e:e0:89:d6:d1:67:1d:d2:31:95:c1:57:9f:f0:9b:55: 80:c5:8e:6e:ed:d6:a8:1f:5a:21:74:f6:7f:1c:b6:a9:bc:cb: 8f:dc:dc:59:c1:f1:02:96:04:9a:69:c3:d1:03:b2:51:93:e9: 6e:75:0c:ed:4d:c6:48:6a:3d:e9:27:9e:83:44:bc:51:2c:0f: 89:95:25:c5:4d:77:81:ad:8e:bc:93:f7:f4:11:0e:1d:c6:97: 6a:1f:ee:f2:76:dd:87:e7:18:7a:8b:f6:9f:ff:7e:22:db:c6: e1:47:f5:d9:5c:9d:25:b6:de:21:f2:dc:f7:2d:dc:1a:ea:b8: 1d:34:45:20:bd:1c:b8:14:56:0d:a1:4d:53:9d:10:c3:e3:dc: 6e:4e:18:03:e4:4f:51:19:df:4d:94:bd:af:7b:9c:5c:29:28: 43:82:18:5b:b1:e6:9d:2e:74:9e:54:bc:dd:16:be:b3:9b:7e: 08:28:0f:00 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI1MDMwMTAx Mjk0NVoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoOEU3OTAxOUM0QjFCOTNB MTlCRDIwNkE0NjE3MUU5NzgyNzcyQkU3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKxrmyKEEeN564jPvsHTRxd9ejpzKyC0EM2fQWQ2/ZvGRMX26O1Q Ahfg1mu/UcMtjuIc5n+nwvcRGJlhM5yY3OS2FHq+wcMpoCjYnTHz3mV2Hrc2uwBF CqpaNbsUx9LbffAc2jMzK7XjcOfqmK+TiBjmXCYe4pApTpFw1yz+ubIHyLImFNbZ ehs9EDRXRNU/PiTtPH8zQ7FnQzKBcn6SLzIzjtzqhV/nMEIBplsY618AfuOOHNhG eUY5Fe2/NI9k+ivr84a76Pf1kOsaSXsERJ7CveI+tBylCtG531rN+F+pghVRXP2H x1If3zeHSvGOCXLG622RJp1++OOGJfUu/m8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBSOeQGcSxuToZvSBqRhcel4J3K+fTAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwODIyL2pua0JuRXNiazZHYjBnYWtZWEhwZUNkeXZuMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAXbZQAwDQYJKoZIhvcNAQELBQADggEBAMNaKignIotJfHdDh3O0LmGs +ZC3WvSi/YN6UqjJcliuYi4c8+U2JYY16Zodg52n9nybNW1lvOKRlSuAbRC63i7J +JNiehvaAmvqnuCJ1tFnHdIxlcFXn/CbVYDFjm7t1qgfWiF09n8ctqm8y4/c3FnB 8QKWBJppw9EDslGT6W51DO1NxkhqPeknnoNEvFEsD4mVJcVNd4GtjryT9/QRDh3G l2of7vJ23YfnGHqL9p//fiLbxuFH9dlcnSW23iHy3Pct3BrquB00RSC9HLgUVg2h TVOdEMPj3G5OGAPkT1EZ302Uva97nFwpKEOCGFux5p0udJ5UvN0WvrObfggoDwA= -----END CERTIFICATE-----Generated at Sat Apr 5 17:41:38 2025 by rpki-client