$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/bXuRdqPr9zrV0rxKeZcRRLkds5I.roa File: bXuRdqPr9zrV0rxKeZcRRLkds5I.roa (raw, json) Hash identifier: svpclaZDawn8vUOY5aCUE4ZIbvQRsFkhG+cNkG9DFtI= Subject key identifier: 6D:7B:91:76:A3:EB:F7:3A:D5:D2:BC:4A:79:97:11:44:B9:1D:B3:92 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: B4 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/bXuRdqPr9zrV0rxKeZcRRLkds5I.roa Signing time: Wed 04 Dec 2024 19:47:07 +0000 ROA not before: Wed 04 Dec 2024 19:47:07 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2914 IP address blocks: 202.69.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 4 19:47:07 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=6D7B9176A3EBF73AD5D2BC4A79971144B91DB392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:04:ab:24:43:42:ce:70:c9:25:f9:62:c4:6a: 6f:64:3e:0a:85:9d:01:e2:ff:86:f2:dc:ee:47:32: 2f:27:13:d5:c6:a0:fc:7f:9e:50:e8:51:41:2c:d9: c5:32:b4:f7:e6:6d:d4:38:0e:22:26:76:35:3b:95: b5:63:00:7b:8b:c2:94:c5:4d:3e:62:b7:11:f5:ae: 61:47:85:e9:70:f6:7f:04:6f:36:41:a0:67:be:48: b3:f3:02:63:ac:d7:db:94:f8:12:ac:5c:65:b8:38: 86:93:3f:71:76:ab:32:94:30:fc:58:f7:fc:d7:90: 45:9d:e0:df:d5:57:c6:d8:d5:a9:4b:6f:01:3c:cb: ef:35:f1:d5:1e:57:20:b4:d1:9a:70:14:3e:e7:45: b3:5b:9f:19:f2:75:24:a6:64:b7:1d:e5:5a:dd:36: 68:da:52:75:41:66:4e:25:a4:f9:86:1f:4e:8b:16: b0:88:87:8e:5d:a2:1e:0f:96:02:04:a7:9e:fa:1e: 55:26:2e:81:01:4a:36:3c:52:b2:62:7a:33:ed:37: 2e:6b:1e:d8:b1:dd:6d:cc:e0:80:51:e1:17:48:62: 0f:ac:f9:7d:76:c0:4a:ed:08:a0:2b:0e:12:a4:44: dc:5e:72:ad:0e:6a:2b:10:db:9a:09:3a:3a:fb:39: b0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7B:91:76:A3:EB:F7:3A:D5:D2:BC:4A:79:97:11:44:B9:1D:B3:92 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/bXuRdqPr9zrV0rxKeZcRRLkds5I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.69.224.0/20 Signature Algorithm: sha256WithRSAEncryption b0:39:d2:af:b7:63:99:77:51:b6:29:3b:ff:54:57:90:d4:87: 84:27:65:e9:77:7d:c4:a5:5e:ec:24:c3:65:a3:ac:c2:4b:ad: c7:cf:e9:04:a5:94:7a:1a:72:e6:92:0f:f1:f0:21:10:45:b4: fc:60:41:2d:24:bc:74:22:fd:e6:ca:7c:3b:84:c2:e9:04:4e: 5a:fc:39:9a:6b:b1:ce:8e:06:59:ee:15:0e:87:1e:c7:c8:9a: cb:44:39:d5:7a:31:d4:97:25:c8:a9:ae:fd:f5:20:82:c3:b2: fc:31:60:36:39:f3:08:fe:45:6d:c8:56:a6:68:53:f5:a6:f2: b3:2f:f7:fa:fe:3a:53:b0:ba:57:e6:e2:42:e2:e2:40:71:11: 03:ee:9d:74:5b:34:25:e9:96:86:23:4d:f4:3e:dd:2a:be:d0: cd:ad:b8:e9:76:22:db:77:4f:e0:43:73:28:a6:88:ad:f6:66: 4d:e7:c1:76:cf:a9:44:f0:22:3a:bf:87:e6:27:f4:d5:f7:3b: 18:35:aa:0b:9a:5d:55:73:67:c9:39:18:71:64:65:ba:90:17: b2:49:24:5f:c4:75:6c:a1:9b:66:c6:1f:a5:4d:05:0d:15:4c: 24:42:0e:9b:ef:9c:6c:81:49:e3:69:52:f5:88:0d:43:50:cf: 60:97:65:95 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICALQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDQx OTQ3MDdaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZEN0I5MTc2QTNFQkY3 M0FENUQyQkM0QTc5OTcxMTQ0QjkxREIzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6BKskQ0LOcMkl+WLEam9kPgqFnQHi/4by3O5HMi8nE9XGoPx/ nlDoUUEs2cUytPfmbdQ4DiImdjU7lbVjAHuLwpTFTT5itxH1rmFHhelw9n8EbzZB oGe+SLPzAmOs19uU+BKsXGW4OIaTP3F2qzKUMPxY9/zXkEWd4N/VV8bY1alLbwE8 y+818dUeVyC00ZpwFD7nRbNbnxnydSSmZLcd5VrdNmjaUnVBZk4lpPmGH06LFrCI h45doh4PlgIEp576HlUmLoEBSjY8UrJiejPtNy5rHtix3W3M4IBR4RdIYg+s+X12 wErtCKArDhKkRNxecq0OaisQ25oJOjr7ObDdAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUbXuRdqPr9zrV0rxKeZcRRLkds5IwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9iWHVSZHFQcjl6clYwcnhLZVpjUlJMa2RzNUku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEykXgMA0GCSqGSIb3DQEBCwUAA4IBAQCwOdKvt2OZd1G2KTv/VFeQ 1IeEJ2Xpd33EpV7sJMNlo6zCS63Hz+kEpZR6GnLmkg/x8CEQRbT8YEEtJLx0Iv3m ynw7hMLpBE5a/Dmaa7HOjgZZ7hUOhx7HyJrLRDnVejHUlyXIqa799SCCw7L8MWA2 OfMI/kVtyFamaFP1pvKzL/f6/jpTsLpX5uJC4uJAcRED7p10WzQl6ZaGI030Pt0q vtDNrbjpdiLbd0/gQ3Mopoit9mZN58F2z6lE8CI6v4fmJ/TV9zsYNaoLml1Vc2fJ ORhxZGW6kBeySSRfxHVsoZtmxh+lTQUNFUwkQg6b75xsgUnjaVL1iA1DUM9gl2WV -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:29 2025 by rpki-client