$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/mcs_AxAm819ebRm3otR7mPQk9RM.roa File: mcs_AxAm819ebRm3otR7mPQk9RM.roa (raw, json) Hash identifier: It4TyeoGwHgq+rvU0tWpLdXHgwpF7MJblvhr3BXt+RA= Subject key identifier: 99:CB:3F:03:10:26:F3:5F:5E:6D:19:B7:A2:D4:7B:98:F4:24:F5:13 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 48 Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/mcs_AxAm819ebRm3otR7mPQk9RM.roa Signing time: Sat 01 Mar 2025 01:29:46 +0000 ROA not before: Sat 01 Mar 2025 01:29:46 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 17698 IP address blocks: 219.113.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 1 01:29:46 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=99CB3F031026F35F5E6D19B7A2D47B98F424F513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:79:68:42:85:f9:1b:f7:53:c3:7e:36:44: f3:f5:8e:1a:88:ef:35:8e:c6:e7:97:52:b6:a8:6d: 07:eb:41:8c:54:7c:92:cd:f0:d5:9d:33:47:6a:72: 26:a1:28:f2:44:82:2c:4f:e6:42:86:e3:22:59:7b: b2:cf:bd:cb:01:ea:b2:19:1c:e3:10:57:e1:40:a8: 13:61:29:72:53:fd:c4:eb:19:09:01:ee:36:8c:0f: 1c:c9:a0:71:cd:ca:77:07:b6:fd:59:c0:5a:9e:6e: 40:ec:81:0a:fa:b7:a8:d2:c9:e3:b1:60:a6:0c:a4: 67:4d:5d:90:65:8a:d4:ff:04:dc:ad:89:71:3e:f6: d3:a2:19:d0:c9:7c:d2:15:80:81:b0:ac:9a:56:95: a0:91:dd:ee:f1:9c:38:4a:e8:a3:a0:9d:85:6c:b4: a4:ad:da:47:52:bd:92:a8:e7:24:8b:d6:40:f1:83: 7b:e1:8c:c4:6a:4e:87:a3:40:3e:e5:14:98:58:9b: ea:69:6c:53:fe:cb:19:96:34:54:1f:88:82:79:71: 98:1b:a6:2c:44:97:5d:74:54:ca:6f:c4:6e:98:67: 5f:00:d6:12:76:67:a1:0d:93:42:3c:21:82:0c:ad: 27:89:09:83:17:fd:80:9f:16:f9:da:8c:b9:09:3d: 99:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CB:3F:03:10:26:F3:5F:5E:6D:19:B7:A2:D4:7B:98:F4:24:F5:13 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/mcs_AxAm819ebRm3otR7mPQk9RM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.113.48.0/20 Signature Algorithm: sha256WithRSAEncryption a2:de:0a:eb:35:eb:15:1f:da:bf:3a:24:da:0d:a8:ee:80:97: 0b:59:bf:2a:1c:6f:11:53:79:7d:6a:3d:ab:f6:7a:d8:ef:1f: ff:5f:65:71:f2:f2:27:8a:31:9c:64:23:e2:e3:d6:19:a2:86: 73:4d:03:bc:eb:61:df:67:d8:c0:ff:2b:99:08:5a:4d:00:d1: cb:84:a8:85:f2:f1:72:45:03:f9:0a:e6:f8:23:8e:72:08:2a: db:23:4c:1b:ea:45:f4:cb:55:a8:79:7e:78:0c:eb:93:17:f9: 83:b0:d8:0f:dd:6a:d4:b8:38:18:07:59:d9:2b:49:8f:fe:a1: 1a:82:c4:3f:5b:21:8e:74:2e:a3:fd:b7:d3:7a:10:57:06:9d: 9c:99:4a:84:e0:15:83:d7:7c:27:a3:2f:62:32:a4:1c:89:80: 5e:c1:f2:bb:92:e5:a3:1e:10:04:0a:eb:a8:ae:26:e2:78:89: 06:1e:07:a6:cf:93:64:cf:75:e9:ce:a3:03:43:14:d8:3e:95: 09:4a:b5:ff:68:56:2e:61:f8:12:31:8c:51:cb:fe:dd:9e:d0: bb:dc:9e:09:30:3c:aa:cf:bf:5b:ea:c5:9f:4f:f8:35:7b:de: 25:ce:84:6b:d9:e5:b0:58:2e:84:2e:53:33:b1:99:2f:15:9c: 52:49:d9:21 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI1MDMwMTAx Mjk0NloXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoOTlDQjNGMDMxMDI2RjM1 RjVFNkQxOUI3QTJENDdCOThGNDI0RjUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMQceWhChfkb91PDfjZE8/WOGojvNY7G55dStqhtB+tBjFR8ks3w 1Z0zR2pyJqEo8kSCLE/mQobjIll7ss+9ywHqshkc4xBX4UCoE2EpclP9xOsZCQHu NowPHMmgcc3Kdwe2/VnAWp5uQOyBCvq3qNLJ47FgpgykZ01dkGWK1P8E3K2JcT72 06IZ0Ml80hWAgbCsmlaVoJHd7vGcOEroo6CdhWy0pK3aR1K9kqjnJIvWQPGDe+GM xGpOh6NAPuUUmFib6mlsU/7LGZY0VB+IgnlxmBumLESXXXRUym/EbphnXwDWEnZn oQ2TQjwhggytJ4kJgxf9gJ8W+dqMuQk9mY8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBSZyz8DECbzX15tGbei1HuY9CT1EzAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwODIyL21jc19BeEFtODE5ZWJSbTNvdFI3bVBRazlSTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBATbcTAwDQYJKoZIhvcNAQELBQADggEBAKLeCus16xUf2r86JNoNqO6A lwtZvyocbxFTeX1qPav2etjvH/9fZXHy8ieKMZxkI+Lj1hmihnNNA7zrYd9n2MD/ K5kIWk0A0cuEqIXy8XJFA/kK5vgjjnIIKtsjTBvqRfTLVah5fngM65MX+YOw2A/d atS4OBgHWdkrSY/+oRqCxD9bIY50LqP9t9N6EFcGnZyZSoTgFYPXfCejL2IypByJ gF7B8ruS5aMeEAQK66iuJuJ4iQYeB6bPk2TPdenOowNDFNg+lQlKtf9oVi5h+BIx jFHL/t2e0LvcngkwPKrPv1vqxZ9P+DV73iXOhGvZ5bBYLoQuUzOxmS8VnFJJ2SE= -----END CERTIFICATE-----Generated at Sun Apr 6 21:11:57 2025 by rpki-client