$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/0lpMuYzTsoxWmI0us59eJ9LmBeQ.roa File: 0lpMuYzTsoxWmI0us59eJ9LmBeQ.roa (raw, json) Hash identifier: YjIW1znVEKprb7nc4qRuQ/GqSyPYCnCaJcQ0Bpru8Jk= Subject key identifier: D2:5A:4C:B9:8C:D3:B2:8C:56:98:8D:2E:B3:9F:5E:27:D2:E6:05:E4 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 89 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/0lpMuYzTsoxWmI0us59eJ9LmBeQ.roa Signing time: Tue 03 Dec 2024 17:40:20 +0000 ROA not before: Tue 03 Dec 2024 17:40:20 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 59130 IP address blocks: 61.120.149.89/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 3 17:40:20 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=D25A4CB98CD3B28C56988D2EB39F5E27D2E605E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a3:c7:e2:fb:c7:e7:52:57:60:a2:26:f1:32: 7c:27:ea:85:d0:1e:de:d0:9e:59:56:8b:cd:7c:ca: 50:3a:40:a6:58:c8:f9:5f:0c:dc:12:dc:4d:e2:0b: a3:ef:a6:2a:8c:b6:24:e2:47:38:88:2f:a6:df:7f: ad:f2:6d:bb:46:d2:53:64:4c:52:46:dc:76:63:6d: 86:4a:17:bc:ca:6d:28:ed:9c:bb:82:cd:e4:7a:ce: 5c:de:6e:78:f4:4a:c5:f3:da:16:c0:04:ef:7e:62: 08:32:d2:4b:63:5b:9e:70:4a:ff:8c:02:71:9c:61: 5f:0f:dc:0f:5c:a7:b5:86:22:8f:bf:0a:88:3b:d8: 89:df:db:0a:6c:8e:a7:c5:7a:07:f3:7a:9e:4a:bd: 11:be:8a:90:b4:47:7b:e9:7c:13:c7:85:8d:c8:4e: 1f:6d:28:49:4d:ee:4a:71:37:79:d2:38:24:97:bf: 4a:76:20:8f:38:6e:79:b1:6c:f7:1d:14:a5:63:1f: 5c:ba:ab:57:eb:4f:4c:b2:f8:46:dc:3c:83:84:c3: cc:68:65:79:57:c3:f2:07:39:53:26:be:b2:af:51: 01:3a:1f:71:cb:90:cf:31:41:4b:ba:b1:0a:5e:0d: 4e:6d:61:db:7b:e1:1e:10:2d:a8:2b:28:2c:06:eb: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5A:4C:B9:8C:D3:B2:8C:56:98:8D:2E:B3:9F:5E:27:D2:E6:05:E4 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/0lpMuYzTsoxWmI0us59eJ9LmBeQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.120.149.89/32 Signature Algorithm: sha256WithRSAEncryption 07:ec:52:c0:73:06:da:51:9b:26:12:5f:a7:f6:3d:61:ad:c1: 0d:65:02:68:03:6b:a2:a2:91:46:8c:82:7c:00:ce:b8:9d:4b: b8:d0:f7:3e:7a:1b:8f:ac:ac:73:a0:a9:64:71:64:65:2d:89: 7c:b1:49:81:c8:c9:cd:1d:ba:05:63:74:13:71:59:dd:1d:96: 74:52:95:82:39:ab:ab:5c:37:70:90:35:3f:b9:84:88:1d:53: fd:75:27:f4:6b:6a:0f:87:b6:53:6a:b4:9d:5c:0a:9d:ef:a9: d3:e6:33:92:19:47:f8:8a:83:b8:90:33:e8:6d:3b:09:5d:61: 81:b7:bf:22:a9:97:6e:7d:25:32:8c:9c:e5:c2:29:32:40:b1: b4:9b:43:44:6d:04:f1:60:57:9c:9f:47:7b:21:70:80:1c:b4: 76:d5:7a:70:cf:70:b8:81:1b:73:f2:b4:26:99:81:3d:c1:6c: b7:ce:a5:11:7a:66:98:f3:06:3c:d1:af:51:4d:53:82:a2:23: 47:0a:cb:09:4e:0c:d1:a3:b1:cd:af:0e:45:2d:23:91:29:43: 83:db:81:15:14:90:61:80:28:5d:4b:69:1b:03:09:46:d3:f1: 12:53:84:49:ce:b0:ab:ab:4e:09:11:f7:5e:1a:85:41:07:06: 92:97:9e:23 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDMx NzQwMjBaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQyNUE0Q0I5OENEM0Iy OEM1Njk4OEQyRUIzOUY1RTI3RDJFNjA1RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqo8fi+8fnUldgoibxMnwn6oXQHt7QnllWi818ylA6QKZYyPlf DNwS3E3iC6PvpiqMtiTiRziIL6bff63ybbtG0lNkTFJG3HZjbYZKF7zKbSjtnLuC zeR6zlzebnj0SsXz2hbABO9+Yggy0ktjW55wSv+MAnGcYV8P3A9cp7WGIo+/Cog7 2Inf2wpsjqfFegfzep5KvRG+ipC0R3vpfBPHhY3ITh9tKElN7kpxN3nSOCSXv0p2 II84bnmxbPcdFKVjH1y6q1frT0yy+EbcPIOEw8xoZXlXw/IHOVMmvrKvUQE6H3HL kM8xQUu6sQpeDU5tYdt74R4QLagrKCwG64YFAgMBAAGjggIpMIICJTAdBgNVHQ4E FgQU0lpMuYzTsoxWmI0us59eJ9LmBeQwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC8wbHBNdVl6VHNveFdtSTB1czU5ZUo5TG1CZVEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAATAHAwUAPXiVWTANBgkqhkiG9w0BAQsFAAOCAQEAB+xSwHMG2lGbJhJfp/Y9 Ya3BDWUCaANroqKRRoyCfADOuJ1LuND3Pnobj6ysc6CpZHFkZS2JfLFJgcjJzR26 BWN0E3FZ3R2WdFKVgjmrq1w3cJA1P7mEiB1T/XUn9GtqD4e2U2q0nVwKne+p0+Yz khlH+IqDuJAz6G07CV1hgbe/IqmXbn0lMoyc5cIpMkCxtJtDRG0E8WBXnJ9HeyFw gBy0dtV6cM9wuIEbc/K0JpmBPcFst86lEXpmmPMGPNGvUU1TgqIjRwrLCU4M0aOx za8ORS0jkSlDg9uBFRSQYYAoXUtpGwMJRtPxElOESc6wq6tOCRH3XhqFQQcGkpee Iw== -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:46 2025 by rpki-client