$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/erK43hcnJDCRx5pvnMJQm5dq6-o.roa File: erK43hcnJDCRx5pvnMJQm5dq6-o.roa (raw, json) Hash identifier: FM8PaKyvu+McXxBrxxg3jE246I6b3aHOMOdGr1L7wxk= Subject key identifier: 7A:B2:B8:DE:17:27:24:30:91:C7:9A:6F:9C:C2:50:9B:97:6A:EB:EA Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: BD Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/erK43hcnJDCRx5pvnMJQm5dq6-o.roa Signing time: Thu 05 Dec 2024 16:47:12 +0000 ROA not before: Thu 05 Dec 2024 16:47:12 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2914 IP address blocks: 101.110.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 5 16:47:12 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=7AB2B8DE1727243091C79A6F9CC2509B976AEBEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:08:b9:f8:e0:fa:1f:1e:37:32:d5:d2:93:f4: f2:e1:bb:55:82:7c:ff:cd:97:65:c2:c9:83:9c:02: 5f:f0:b4:bb:c0:79:93:e1:12:13:9c:f3:a5:fa:b7: 7f:5f:4e:f4:94:70:1f:e3:67:e8:e0:55:d5:75:d0: f6:41:5e:a4:24:3f:03:09:56:10:97:73:14:d8:3b: 89:ec:72:1c:1d:92:44:0a:39:75:25:7c:69:25:40: 18:e7:47:13:0b:b6:bb:62:84:27:c9:22:51:38:8e: 85:04:53:2c:03:45:06:bc:62:91:9c:04:97:7a:4c: a9:e9:3e:09:1c:d1:20:c4:75:07:ab:24:05:40:e7: 44:2a:2c:c8:07:f4:ed:8a:e8:15:ec:ae:50:c6:3f: 9a:30:89:f0:94:cc:0b:ae:86:1d:2e:34:ee:86:f5: ba:93:30:16:c9:52:d9:f9:52:36:ea:fe:d3:7c:a0: 1e:71:fa:c0:03:ba:90:94:f3:6b:90:73:e5:25:ae: d7:77:2e:3d:63:18:22:d2:53:7e:c1:ef:26:7e:00: 88:48:c0:aa:23:d1:5f:d3:e0:f3:c0:13:98:ea:ea: 7e:16:b1:84:80:95:e5:41:09:3d:5b:5c:09:53:ea: cd:4c:46:5a:e6:ef:13:c4:ab:b4:71:4f:3f:c8:7a: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B2:B8:DE:17:27:24:30:91:C7:9A:6F:9C:C2:50:9B:97:6A:EB:EA X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/erK43hcnJDCRx5pvnMJQm5dq6-o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.110.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6d:97:f2:7e:92:e1:b9:9e:43:b4:95:a2:fc:a4:23:8c:b1:97: c6:c0:c5:40:b6:f8:19:f9:66:d7:3d:7e:a1:53:38:e6:35:99: a5:30:59:62:a6:17:e0:99:ff:36:60:c3:49:39:d0:08:0e:8c: 92:a1:d0:c9:80:70:61:7c:d4:cb:f3:62:ef:7c:3b:f7:05:1a: f1:05:df:33:38:fa:d7:a0:06:53:2d:ca:2b:ba:bd:bb:7f:25: 00:fb:f9:8e:8d:f5:3e:79:00:c0:7c:88:bf:f6:63:c6:ad:f0: 24:14:a4:4e:f3:15:fe:25:1d:b4:0b:a6:58:1d:82:52:c7:f3: b9:ac:c6:94:f9:ba:6d:42:54:b8:36:e3:9a:56:1a:2c:c4:fc: 44:b1:c0:36:bd:72:fa:d7:18:b8:6c:12:88:bd:13:11:76:05: 55:49:1e:f3:b0:1f:29:bc:9d:47:6d:0e:63:43:b6:56:bc:61: 88:6a:f2:28:6b:8e:45:3f:33:75:b9:ae:36:3b:55:d6:73:f7: 56:4b:ec:52:8e:63:94:1b:8b:b9:64:dc:d3:b4:0c:8a:69:0d: c7:28:66:6b:d1:6d:89:11:05:e6:ba:a6:a3:6e:ba:4c:5b:08: 96:ee:3d:7c:d6:7c:5c:39:48:c7:7a:f4:c0:08:e7:5e:b8:24: 8b:21:76:23 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDUx NjQ3MTJaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdBQjJCOERFMTcyNzI0 MzA5MUM3OUE2RjlDQzI1MDlCOTc2QUVCRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlCLn44PofHjcy1dKT9PLhu1WCfP/Nl2XCyYOcAl/wtLvAeZPh EhOc86X6t39fTvSUcB/jZ+jgVdV10PZBXqQkPwMJVhCXcxTYO4nschwdkkQKOXUl fGklQBjnRxMLtrtihCfJIlE4joUEUywDRQa8YpGcBJd6TKnpPgkc0SDEdQerJAVA 50QqLMgH9O2K6BXsrlDGP5owifCUzAuuhh0uNO6G9bqTMBbJUtn5Ujbq/tN8oB5x +sADupCU82uQc+Ulrtd3Lj1jGCLSU37B7yZ+AIhIwKoj0V/T4PPAE5jq6n4WsYSA leVBCT1bXAlT6s1MRlrm7xPEq7RxTz/Iega7AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUerK43hcnJDCRx5pvnMJQm5dq6+owHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9lcks0M2hjbkpEQ1J4NXB2bk1KUW01ZHE2LW8u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQHZW6AMA0GCSqGSIb3DQEBCwUAA4IBAQBtl/J+kuG5nkO0laL8pCOM sZfGwMVAtvgZ+WbXPX6hUzjmNZmlMFliphfgmf82YMNJOdAIDoySodDJgHBhfNTL 82LvfDv3BRrxBd8zOPrXoAZTLcorur27fyUA+/mOjfU+eQDAfIi/9mPGrfAkFKRO 8xX+JR20C6ZYHYJSx/O5rMaU+bptQlS4NuOaVhosxPxEscA2vXL61xi4bBKIvRMR dgVVSR7zsB8pvJ1HbQ5jQ7ZWvGGIavIoa45FPzN1ua42O1XWc/dWS+xSjmOUG4u5 ZNzTtAyKaQ3HKGZr0W2JEQXmuqajbrpMWwiW7j181nxcOUjHevTACOdeuCSLIXYj -----END CERTIFICATE-----Generated at Sat Apr 5 17:37:34 2025 by rpki-client