$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/4xy2CWQ9PPM5I9ah5rfoVxupEBk.roa File: 4xy2CWQ9PPM5I9ah5rfoVxupEBk.roa (raw, json) Hash identifier: vtasrQjhyW9VQgbtAwIYMT3fBNNafdDFdd7m91AWZtQ= Subject key identifier: E3:1C:B6:09:64:3D:3C:F3:39:23:D6:A1:E6:B7:E8:57:1B:A9:10:19 Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: D0 Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/4xy2CWQ9PPM5I9ah5rfoVxupEBk.roa Signing time: Fri 31 Jan 2025 01:31:25 +0000 ROA not before: Fri 31 Jan 2025 01:31:25 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18126 IP address blocks: 14.192.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Jan 31 01:31:25 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=E31CB609643D3CF33923D6A1E6B7E8571BA91019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f0:1b:a4:5f:b0:21:2f:d8:65:5c:fe:a4:b9: 14:0c:33:cb:73:83:bc:af:70:1a:e9:d4:b6:1e:45: 4c:86:c2:22:0c:fa:bb:23:1b:68:d4:86:9d:ac:21: 60:d1:c2:ac:2f:d5:e1:a8:e0:1e:c4:3b:5e:2a:0a: 0d:92:43:1a:fe:e3:b7:b6:24:f2:8f:5e:25:98:e6: 01:31:87:2a:d0:50:b0:42:de:d6:d3:9d:2d:b5:ec: 84:4e:18:7c:5d:84:29:92:b4:f3:b4:a7:da:55:bc: 2e:b6:f4:54:d4:ec:29:3a:16:aa:34:b0:86:3b:5d: 78:76:3a:f3:c1:c6:e2:30:81:6e:9e:aa:a6:bb:96: ba:d5:1e:47:9d:ee:15:e2:de:8d:71:79:1c:ad:21: 45:94:24:3e:24:39:ad:2d:17:21:ba:9b:79:f1:68: 1f:74:c0:46:12:b5:ed:ea:94:da:0c:dc:4a:bd:b6: e1:15:d6:11:9d:aa:2c:ed:b2:e2:82:20:2b:70:a6: 59:19:e2:f4:92:0d:ee:81:7a:ce:a6:0e:02:ee:82: 7f:28:3f:db:d8:16:52:de:16:48:e2:60:d5:17:ff: dc:e7:d8:e9:df:ab:24:e3:64:dc:7b:8a:e8:da:28: 67:20:39:b5:94:ec:24:37:2c:13:80:e4:2c:6e:a6: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1C:B6:09:64:3D:3C:F3:39:23:D6:A1:E6:B7:E8:57:1B:A9:10:19 X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/4xy2CWQ9PPM5I9ah5rfoVxupEBk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.32.0/20 Signature Algorithm: sha256WithRSAEncryption 7b:01:78:3e:d1:2c:00:35:6b:07:71:bd:b8:24:2a:cf:19:79: 78:8a:eb:66:2c:26:20:fc:62:6a:5a:16:ef:67:64:f5:51:7f: d6:27:79:b8:3e:4e:62:a8:61:ea:36:e3:0d:34:02:f5:f0:cf: e2:e0:21:f0:da:64:39:15:c5:2f:1a:7d:f0:dd:9f:e7:7b:d9: c9:90:4a:c6:59:50:78:1b:0a:59:0c:0c:c9:d0:fe:aa:c0:f7: 5f:68:70:78:fb:32:ca:c4:68:13:d1:9c:a9:6d:4b:76:80:0a: 61:92:e6:80:10:ba:98:d8:ca:f7:9e:a8:89:5f:2d:9a:b0:ef: 2a:51:65:03:33:e8:69:35:81:86:67:ab:36:2d:3d:51:0f:0b: 75:92:d7:12:f1:8f:5b:d9:14:2f:a7:0c:e6:a3:a6:ef:a4:bd: f4:68:e2:b3:39:04:f9:15:ed:47:de:cb:b1:55:00:30:97:af: e7:a8:4b:a0:4d:54:5d:d2:d6:c4:96:4b:e2:90:29:43:20:f5: 77:8c:b7:01:be:7e:40:33:04:e8:8f:6c:fb:56:de:a2:b9:ce: ca:e8:a0:03:dd:01:24:c3:6a:ee:aa:de:18:50:5b:20:de:0b: d1:2e:5f:78:49:08:0b:1c:73:a0:fd:2e:de:aa:40:6e:f4:d0: 56:ba:83:b8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNTAxMzEw MTMxMjVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUzMUNCNjA5NjQzRDND RjMzOTIzRDZBMUU2QjdFODU3MUJBOTEwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh8BukX7AhL9hlXP6kuRQMM8tzg7yvcBrp1LYeRUyGwiIM+rsj G2jUhp2sIWDRwqwv1eGo4B7EO14qCg2SQxr+47e2JPKPXiWY5gExhyrQULBC3tbT nS217IROGHxdhCmStPO0p9pVvC629FTU7Ck6Fqo0sIY7XXh2OvPBxuIwgW6eqqa7 lrrVHked7hXi3o1xeRytIUWUJD4kOa0tFyG6m3nxaB90wEYSte3qlNoM3Eq9tuEV 1hGdqiztsuKCICtwplkZ4vSSDe6Bes6mDgLugn8oP9vYFlLeFkjiYNUX/9zn2Onf qyTjZNx7iujaKGcgObWU7CQ3LBOA5Cxupl8JAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4xy2CWQ9PPM5I9ah5rfoVxupEBkwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTczLzR4eTJDV1E5UFBNNUk5YWg1cmZvVnh1cEVCay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQOwCAwDQYJKoZIhvcNAQELBQADggEBAHsBeD7RLAA1awdxvbgkKs8ZeXiK 62YsJiD8YmpaFu9nZPVRf9Ynebg+TmKoYeo24w00AvXwz+LgIfDaZDkVxS8affDd n+d72cmQSsZZUHgbClkMDMnQ/qrA919ocHj7MsrEaBPRnKltS3aACmGS5oAQupjY yveeqIlfLZqw7ypRZQMz6Gk1gYZnqzYtPVEPC3WS1xLxj1vZFC+nDOajpu+kvfRo 4rM5BPkV7Ufey7FVADCXr+eoS6BNVF3S1sSWS+KQKUMg9XeMtwG+fkAzBOiPbPtW 3qK5zsrooAPdASTDau6q3hhQWyDeC9EuX3hJCAscc6D9Lt6qQG700Fa6g7g= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:50 2025 by rpki-client