$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/6oAcheCWmTKwGPtzWnx7S2eSFRc.roa File: 6oAcheCWmTKwGPtzWnx7S2eSFRc.roa (raw, json) Hash identifier: xs71ilgK/inmiODixvzBALXHIQDu7barsX62CPtHjLk= Subject key identifier: EA:80:1C:85:E0:96:99:32:B0:18:FB:73:5A:7C:7B:4B:67:92:15:17 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 8B Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/6oAcheCWmTKwGPtzWnx7S2eSFRc.roa Signing time: Tue 03 Dec 2024 17:40:21 +0000 ROA not before: Tue 03 Dec 2024 17:40:21 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 3949 IP address blocks: 61.120.151.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 3 17:40:21 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=EA801C85E0969932B018FB735A7C7B4B67921517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:25:b3:9f:42:41:b4:30:93:7b:a6:f9:4b: f1:6d:53:77:f4:03:9f:98:e3:0d:44:44:77:02:3e: 5b:40:70:c6:f1:16:f7:22:b4:3d:3b:fa:0a:95:35: db:7a:c5:9c:f1:0b:95:ca:7c:2a:7c:bf:65:8e:b3: 2d:78:31:5d:bb:13:d0:a3:a0:30:3e:86:81:45:e5: 0f:90:60:da:cd:7d:9d:0e:fe:3f:30:2e:05:14:25: da:6e:d6:38:79:00:5f:51:a7:5e:a9:45:55:91:8d: 2d:40:15:e6:b3:58:84:30:9e:3e:2f:18:4c:5e:10: 79:f8:1d:c7:f3:1a:87:e8:19:08:87:f3:a3:c0:3b: dc:37:ec:3a:c0:6e:01:e1:2b:da:c1:13:74:c3:67: 8e:73:e6:e3:ab:b9:41:a8:76:9c:ea:bb:8b:6d:2f: c4:b0:c7:a4:03:52:22:07:13:e4:a7:38:01:1c:97: 16:8a:c1:56:a5:86:e3:cd:e5:e3:1b:d4:8f:67:33: 14:5b:99:11:47:9c:26:68:58:37:6e:5a:ee:3f:a1: 1f:66:e8:ce:cd:94:48:31:fd:33:36:cc:b0:e6:fb: 03:19:2d:e4:c1:eb:b2:32:95:44:08:60:13:2d:58: 1a:15:61:9b:79:a1:66:2f:a0:71:11:0e:39:5c:f6: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:80:1C:85:E0:96:99:32:B0:18:FB:73:5A:7C:7B:4B:67:92:15:17 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/6oAcheCWmTKwGPtzWnx7S2eSFRc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.120.151.0/27 Signature Algorithm: sha256WithRSAEncryption 21:65:27:11:1d:85:9e:1b:b8:12:e4:81:3f:af:48:5f:23:62: 0f:30:cd:bc:74:66:34:3c:33:0b:a3:dc:95:9b:19:c6:fd:eb: ae:4c:d7:b9:38:2c:48:70:35:c2:94:ba:54:c6:d9:5c:e9:74: b9:fe:25:c2:61:3d:4b:98:92:f1:1b:a3:d4:40:24:04:51:0f: 3a:86:35:2e:a3:c0:cb:40:e3:75:98:bc:2e:f9:b7:bb:c5:46: 1c:21:54:ea:44:25:ff:3b:29:98:49:45:b0:0a:84:fc:c8:18: e9:35:3f:49:66:a1:ad:81:3b:18:25:35:60:c8:29:89:ed:7e: 76:a5:f7:21:26:4e:05:36:c4:e1:86:6e:4b:ce:b4:62:15:3f: b7:a6:e8:55:4d:47:37:63:73:b7:47:bf:c8:6f:8a:66:40:f6: 73:f1:f2:4b:2e:01:5e:41:92:8c:34:2f:ec:4b:2d:a5:04:23: 79:0e:1e:d3:70:35:f8:a4:36:90:37:9a:aa:c8:da:33:eb:7c: 82:6c:d8:75:68:5a:e0:a8:95:77:a5:e4:63:41:d4:05:4d:24: aa:7f:b3:bb:41:5b:98:da:61:47:b7:34:b1:0f:ce:cd:71:34: 4c:17:7f:fa:ab:b9:13:4b:82:ee:22:f9:90:c5:8b:b3:85:89: 82:f9:f6:13 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDMx NzQwMjFaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVBODAxQzg1RTA5Njk5 MzJCMDE4RkI3MzVBN0M3QjRCNjc5MjE1MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOQyWzn0JBtDCTe6b5S/FtU3f0A5+Y4w1ERHcCPltAcMbxFvci tD07+gqVNdt6xZzxC5XKfCp8v2WOsy14MV27E9CjoDA+hoFF5Q+QYNrNfZ0O/j8w LgUUJdpu1jh5AF9Rp16pRVWRjS1AFeazWIQwnj4vGExeEHn4HcfzGofoGQiH86PA O9w37DrAbgHhK9rBE3TDZ45z5uOruUGodpzqu4ttL8Swx6QDUiIHE+SnOAEclxaK wValhuPN5eMb1I9nMxRbmRFHnCZoWDduWu4/oR9m6M7NlEgx/TM2zLDm+wMZLeTB 67IylUQIYBMtWBoVYZt5oWYvoHERDjlc9ou3AgMBAAGjggIpMIICJTAdBgNVHQ4E FgQU6oAcheCWmTKwGPtzWnx7S2eSFRcwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC82b0FjaGVDV21US3dHUHR6V254N1MyZVNGUmMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAATAHAwUFPXiXADANBgkqhkiG9w0BAQsFAAOCAQEAIWUnER2Fnhu4EuSBP69I XyNiDzDNvHRmNDwzC6PclZsZxv3rrkzXuTgsSHA1wpS6VMbZXOl0uf4lwmE9S5iS 8Ruj1EAkBFEPOoY1LqPAy0DjdZi8Lvm3u8VGHCFU6kQl/zspmElFsAqE/MgY6TU/ SWahrYE7GCU1YMgpie1+dqX3ISZOBTbE4YZuS860YhU/t6boVU1HN2Nzt0e/yG+K ZkD2c/HySy4BXkGSjDQv7EstpQQjeQ4e03A1+KQ2kDeaqsjaM+t8gmzYdWha4KiV d6XkY0HUBU0kqn+zu0FbmNphR7c0sQ/OzXE0TBd/+qu5E0uC7iL5kMWLs4WJgvn2 Ew== -----END CERTIFICATE-----Generated at Sat Apr 5 19:49:17 2025 by rpki-client