$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/Htn5TbuZ0ywFb2QUrta39pHLTsM.roa File: Htn5TbuZ0ywFb2QUrta39pHLTsM.roa (raw, json) Hash identifier: W8JiYZ8GhlKTsZI0eWdZQICZ8luw3Ek3h9OwUiFN7yw= Subject key identifier: 1E:D9:F9:4D:BB:99:D3:2C:05:6F:64:14:AE:D6:B7:F6:91:CB:4E:C3 Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Certificate serial: 6F Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/Htn5TbuZ0ywFb2QUrta39pHLTsM.roa Signing time: Fri 31 Jan 2025 01:30:41 +0000 ROA not before: Fri 31 Jan 2025 01:30:41 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 55391 IP address blocks: 217.178.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Validity Not Before: Jan 31 01:30:41 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=1ED9F94DBB99D32C056F6414AED6B7F691CB4EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:cc:6e:3e:fa:37:60:0d:1c:5b:66:a3:1b: f1:19:2a:32:c2:38:90:33:33:ab:a9:04:7e:39:37: 2f:32:38:73:2f:63:47:8b:6f:fc:fc:4e:26:31:a8: 6e:db:10:1e:98:82:5c:b0:c6:5f:ad:0b:1b:0c:f9: 5b:b7:f9:01:dd:f8:46:4f:9b:40:3d:f9:df:b1:f6: 97:d2:18:d9:8c:3e:74:7a:50:60:98:de:b1:83:6e: 12:90:4a:d0:e0:b3:66:90:87:7e:b7:df:38:76:66: 3e:87:a2:e1:7a:c3:07:71:be:d4:65:04:37:6f:a2: 12:25:82:b1:c4:15:98:d8:ed:97:02:b2:7b:14:0b: f3:b9:32:05:51:8f:4e:15:db:3a:64:a8:19:09:b4: de:3e:4f:f1:6d:a5:a7:78:e9:70:8b:3b:f2:79:a1: eb:f9:71:b4:2d:cf:2b:51:06:d7:32:c9:2a:8a:c5: 68:f7:90:18:ab:e5:47:56:03:fc:28:5c:bc:d2:d1: 22:85:aa:06:c5:81:59:4b:65:55:71:a7:70:f1:28: f3:d6:d2:48:37:c2:50:ed:dc:21:e7:32:8f:2f:d7: 7a:e6:65:78:68:c7:85:c4:3b:03:72:8a:70:10:bd: 8a:83:a7:29:96:70:9a:ec:a1:f0:8d:21:9e:8a:4a: 10:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D9:F9:4D:BB:99:D3:2C:05:6F:64:14:AE:D6:B7:F6:91:CB:4E:C3 X509v3 Authority Key Identifier: keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/Htn5TbuZ0ywFb2QUrta39pHLTsM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 217.178.128.0/17 Signature Algorithm: sha256WithRSAEncryption 86:62:ba:ab:a7:c2:3b:a6:d9:f7:e9:76:28:09:0a:81:ed:51: 92:cb:bc:c4:0e:a3:53:f4:5c:4c:e0:3a:ea:22:1e:c8:da:34: ec:3e:a4:6a:e7:40:9f:a9:ef:87:3c:13:96:a6:4a:28:7a:95: 38:9a:a4:34:ff:ba:f7:31:12:37:26:90:9e:d0:7b:bb:3f:7f: aa:af:4d:e6:0d:3e:1e:66:aa:8f:38:21:74:42:ec:76:94:5a: 3b:9f:40:bc:9d:3a:02:61:7f:25:c6:f6:a1:d0:c3:7d:b0:88: 6e:8a:9f:05:da:9d:b5:23:0e:ad:da:b7:c3:8f:e1:83:39:15: 28:46:d2:7b:6e:35:20:ee:77:f2:44:80:66:f7:88:be:a3:1e: 01:f6:c7:80:87:95:d1:b8:8d:d9:f9:a4:bd:8d:8a:4d:0e:f4: bb:74:8e:c6:ba:4d:2d:54:a1:bb:de:2c:7b:60:b1:4a:c5:d6: 9b:15:90:d7:85:58:a0:ae:c0:95:cd:ee:fa:a3:54:dc:d2:1b: 64:48:9d:00:64:87:50:94:7a:b4:9b:28:50:28:8f:b2:a8:9c: c8:b1:45:77:2b:50:ce:0f:31:1e:d9:45:db:b4:db:a1:f9:73: 31:e2:0d:9a:3f:16:37:22:53:ea:da:10:67:dc:e1:e4:cd:17: 6b:81:e9:81 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDU2 RDA1MDFENDMwQ0UwRkNGMERCMDY3NUJBRkM5MEIwNUQ5QkY1MB4XDTI1MDEzMTAx MzA0MVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoMUVEOUY5NERCQjk5RDMy QzA1NkY2NDE0QUVENkI3RjY5MUNCNEVDMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANRkzG4++jdgDRxbZqMb8RkqMsI4kDMzq6kEfjk3LzI4cy9jR4tv /PxOJjGobtsQHpiCXLDGX60LGwz5W7f5Ad34Rk+bQD3537H2l9IY2Yw+dHpQYJje sYNuEpBK0OCzZpCHfrffOHZmPoei4XrDB3G+1GUEN2+iEiWCscQVmNjtlwKyexQL 87kyBVGPThXbOmSoGQm03j5P8W2lp3jpcIs78nmh6/lxtC3PK1EG1zLJKorFaPeQ GKvlR1YD/ChcvNLRIoWqBsWBWUtlVXGncPEo89bSSDfCUO3cIecyjy/XeuZleGjH hcQ7A3KKcBC9ioOnKZZwmuyh8I0hnopKEAcCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQe2flNu5nTLAVvZBSu1rf2kctOwzAfBgNVHSMEGDAWgBTgVtBQHUMM4Pzw2wZ1 uvyQsF2b9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyMDcvNEZiUVVCMURET0Q4OE5zR2RicjhrTEJkbV9VLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEZiUVVCMURET0Q4OE5zR2Ricjhr TEJkbV9VLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjA3L0h0bjVUYnVaMHl3RmIyUVVydGEzOXBITFRzTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAfZsoAwDQYJKoZIhvcNAQELBQADggEBAIZiuqunwjum2ffpdigJCoHt UZLLvMQOo1P0XEzgOuoiHsjaNOw+pGrnQJ+p74c8E5amSih6lTiapDT/uvcxEjcm kJ7Qe7s/f6qvTeYNPh5mqo84IXRC7HaUWjufQLydOgJhfyXG9qHQw32wiG6KnwXa nbUjDq3at8OP4YM5FShG0ntuNSDud/JEgGb3iL6jHgH2x4CHldG4jdn5pL2Nik0O 9Lt0jsa6TS1UobveLHtgsUrF1psVkNeFWKCuwJXN7vqjVNzSG2RInQBkh1CUerSb KFAoj7KonMixRXcrUM4PMR7ZRdu026H5czHiDZo/FjciU+raEGfc4eTNF2uB6YE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:15 2025 by rpki-client