$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/RuxdsoCsL9SrWzfHdidddqnu-5E.roa File: RuxdsoCsL9SrWzfHdidddqnu-5E.roa (raw, json) Hash identifier: woPt9e/qONz9vUx79Qh8Pq8fA66mhOE9QI3a3f0z8X0= Subject key identifier: 46:EC:5D:B2:80:AC:2F:D4:AB:5B:37:C7:76:27:5D:76:A9:EE:FB:91 Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: D1 Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/RuxdsoCsL9SrWzfHdidddqnu-5E.roa Signing time: Fri 31 Jan 2025 01:31:26 +0000 ROA not before: Fri 31 Jan 2025 01:31:26 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18126 IP address blocks: 218.216.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Jan 31 01:31:26 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=46EC5DB280AC2FD4AB5B37C776275D76A9EEFB91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:d3:49:2f:d3:42:61:4e:3b:ca:26:c8:d6: f8:e2:48:2f:aa:8b:c2:98:18:39:5c:6b:9c:25:69: a1:35:2b:d2:71:62:48:2e:e1:f3:a2:7e:52:0c:9a: bb:af:c0:39:3a:84:0e:34:ee:fe:2f:51:14:c7:9c: 14:9e:e1:92:cd:6b:8e:56:7c:2d:2c:19:a1:84:37: 9c:65:70:cb:a0:3a:6d:e9:06:7b:84:70:ee:56:f8: f5:b4:3d:d6:36:9b:fd:63:f3:93:d5:b3:af:22:10: 24:43:b1:2d:7f:b4:78:31:6c:86:87:1b:ee:87:d3: 9a:da:80:df:17:3d:40:c6:13:d5:0f:7a:7a:b0:9c: 52:dd:8b:df:d3:8a:69:ad:03:9d:3f:58:24:87:21: 7f:ec:d0:c7:cf:c1:16:3a:0b:f0:42:09:4f:6c:d7: 27:d6:35:54:e2:51:6a:b0:86:95:23:67:68:cf:c4: 48:02:e3:59:c0:19:d2:60:1b:3c:37:1c:3e:86:26: c2:2a:45:06:e9:04:da:85:9d:d1:e2:be:d4:4b:43: 15:a8:2e:c1:bf:ef:26:cb:bf:69:ad:fa:b9:f4:82: d8:be:f4:3e:6f:c2:a8:5a:ca:c9:8a:20:65:e7:7a: 6a:2a:f6:7a:1d:54:81:d6:7c:34:17:0c:d5:ff:3f: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EC:5D:B2:80:AC:2F:D4:AB:5B:37:C7:76:27:5D:76:A9:EE:FB:91 X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/RuxdsoCsL9SrWzfHdidddqnu-5E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.216.176.0/20 Signature Algorithm: sha256WithRSAEncryption aa:6c:9b:25:b2:3b:f4:14:6f:33:cc:e0:29:f9:3f:98:e3:c9: 42:fc:1e:e8:3e:87:06:7f:29:7a:f5:85:d8:b8:4d:4e:46:a6: 56:b4:cc:0b:ce:80:07:1d:73:9b:fe:18:22:14:d3:e8:35:c3: 9e:c1:42:13:42:1c:4b:82:74:d3:a2:33:e6:9b:a6:c5:7e:7e: d5:47:79:f5:cf:b8:0b:ed:08:8b:ed:c6:33:2d:e8:6b:7a:bc: c7:b9:e2:5c:bd:9a:13:7a:f4:90:c5:f2:60:6f:67:90:d5:c9: 56:b8:dd:26:4a:a8:52:a3:a8:aa:6a:6f:c5:83:cf:bd:0e:93: 54:80:c1:5c:5c:05:49:9b:6e:5e:46:a3:77:ea:68:45:3b:a9: ee:a4:c7:c5:75:f5:47:d9:00:e4:ff:c0:f8:71:bc:c7:64:e5: d6:2e:79:e3:9e:40:3e:ac:a9:a1:25:cf:4d:49:ab:cb:a2:0c: 7d:a4:cd:02:35:bf:ed:e5:d9:c2:19:a3:b4:81:7f:40:d6:60: 69:b2:35:ff:de:c3:02:df:11:72:df:d5:ae:f8:b3:7c:0a:4e: 7e:c1:3e:3e:7f:bf:47:9e:14:9e:b5:03:37:ce:55:a7:a4:8f: b7:db:e5:b2:03:6c:0a:b1:c4:77:ce:db:6f:78:c2:9e:1a:06: e7:c0:7d:88 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNTAxMzEw MTMxMjZaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ2RUM1REIyODBBQzJG RDRBQjVCMzdDNzc2Mjc1RDc2QTlFRUZCOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs6NNJL9NCYU47yibI1vjiSC+qi8KYGDlca5wlaaE1K9JxYkgu 4fOiflIMmruvwDk6hA407v4vURTHnBSe4ZLNa45WfC0sGaGEN5xlcMugOm3pBnuE cO5W+PW0PdY2m/1j85PVs68iECRDsS1/tHgxbIaHG+6H05ragN8XPUDGE9UPenqw nFLdi9/TimmtA50/WCSHIX/s0MfPwRY6C/BCCU9s1yfWNVTiUWqwhpUjZ2jPxEgC 41nAGdJgGzw3HD6GJsIqRQbpBNqFndHivtRLQxWoLsG/7ybLv2mt+rn0gti+9D5v wqhaysmKIGXnemoq9nodVIHWfDQXDNX/P/1dAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURuxdsoCsL9SrWzfHdidddqnu+5EwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTczL1J1eGRzb0NzTDlTcld6ZkhkaWRkZHFudS01RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATa2LAwDQYJKoZIhvcNAQELBQADggEBAKpsmyWyO/QUbzPM4Cn5P5jjyUL8 Hug+hwZ/KXr1hdi4TU5Gpla0zAvOgAcdc5v+GCIU0+g1w57BQhNCHEuCdNOiM+ab psV+ftVHefXPuAvtCIvtxjMt6Gt6vMe54ly9mhN69JDF8mBvZ5DVyVa43SZKqFKj qKpqb8WDz70Ok1SAwVxcBUmbbl5Go3fqaEU7qe6kx8V19UfZAOT/wPhxvMdk5dYu eeOeQD6sqaElz01Jq8uiDH2kzQI1v+3l2cIZo7SBf0DWYGmyNf/ewwLfEXLf1a74 s3wKTn7BPj5/v0eeFJ61AzfOVaekj7fb5bIDbAqxxHfO2294wp4aBufAfYg= -----END CERTIFICATE-----Generated at Sun Apr 6 01:51:49 2025 by rpki-client