$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/toO20uXujvdNi1uTNnps8SLV3MY.roa File: toO20uXujvdNi1uTNnps8SLV3MY.roa (raw, json) Hash identifier: BU+yZl/L5YoGve8kS3hkGuUUntDtWKQNylRtYBY7G6s= Subject key identifier: B6:83:B6:D2:E5:EE:8E:F7:4D:8B:5B:93:36:7A:6C:F1:22:D5:DC:C6 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: B2 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/toO20uXujvdNi1uTNnps8SLV3MY.roa Signing time: Wed 04 Dec 2024 19:38:53 +0000 ROA not before: Wed 04 Dec 2024 19:38:53 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2914 IP address blocks: 61.213.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 4 19:38:53 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=B683B6D2E5EE8EF74D8B5B93367A6CF122D5DCC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bd:11:c3:eb:da:ac:70:71:d4:38:a3:f8:d7: 2c:23:fc:a9:f8:62:ea:98:69:c8:4d:4c:3b:eb:f0: a4:46:f5:1f:c4:73:67:be:2a:76:20:fe:b7:d0:ea: 4f:a4:a1:f4:52:c6:27:e2:db:03:b6:d6:45:7c:25: b5:19:1f:8c:b5:db:4b:e1:f5:1a:cd:af:04:81:98: fd:2c:46:45:95:1e:e9:46:5e:72:ce:bb:7c:18:ce: 6e:b3:51:21:e8:cc:2e:27:59:13:a2:3d:7b:d9:a8: ca:0a:9a:40:8e:c9:2a:ac:7c:68:2d:e2:f2:b1:a4: f4:84:b2:f4:e7:9a:8c:37:dd:de:0f:6c:0f:3d:a8: 43:99:74:65:9a:eb:01:94:07:39:2b:51:70:73:ac: 33:a8:9a:0c:b9:fc:dd:a5:e5:c5:d2:6d:85:43:51: 62:75:42:7f:f0:d3:db:21:96:57:32:a5:b4:d3:c4: 2b:68:2f:86:f3:01:1e:85:83:08:f4:8e:1d:ad:dd: 0c:63:6d:c2:f7:d6:6a:a2:3a:c0:85:3b:b4:f0:46: d5:ad:b4:e2:f0:a3:36:e6:96:01:7d:0b:ae:36:1c: d6:a3:80:4e:66:d1:a2:ba:f8:d2:4e:ca:8b:1b:ee: f8:57:4c:93:fc:07:48:0e:09:59:9a:d3:64:d4:74: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:83:B6:D2:E5:EE:8E:F7:4D:8B:5B:93:36:7A:6C:F1:22:D5:DC:C6 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/toO20uXujvdNi1uTNnps8SLV3MY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.213.160.0/19 Signature Algorithm: sha256WithRSAEncryption 33:56:22:75:6c:b9:27:00:35:76:88:6a:2c:5f:84:24:3e:a5: 36:f8:48:83:78:2f:6d:e6:b5:fc:2b:ef:3e:be:34:2c:35:73: b3:8a:5e:7a:47:2f:24:91:36:81:bf:b8:1a:05:83:39:b4:bb: 97:d7:84:6f:81:71:c9:1c:b4:41:ad:c4:be:8c:0e:41:89:b4: 90:c2:ea:4f:27:d4:2c:2f:14:d2:58:f8:bc:92:5a:49:0e:bb: c2:20:fc:0e:e3:2d:59:41:1c:70:f4:a3:cf:af:b3:b4:08:23: b1:0b:8c:eb:ff:9e:3f:87:16:5f:e7:df:40:a1:db:6c:5c:af: e1:d3:d7:82:45:b6:c9:6e:c9:3e:a3:78:f6:6b:73:c0:a5:d3: f9:ae:cf:89:f3:52:d9:75:55:dd:7a:9d:ff:5a:d7:d1:85:44: fa:f0:54:e3:d8:9a:f8:26:dd:e5:06:ee:b1:a4:e0:4e:0e:99: db:cc:cb:51:79:c9:af:36:f8:a0:0a:d6:35:2c:c8:ac:be:bf: 48:69:a9:79:fc:98:3e:d5:94:42:1b:0d:7e:03:e0:af:70:57: 1f:e5:cb:99:8c:8d:37:f8:e9:4b:81:50:f6:49:a4:64:b9:c6: b5:db:b8:33:ce:ab:3d:70:25:53:e4:54:ae:85:8e:3a:67:50: b8:86:3e:e7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICALIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDQx OTM4NTNaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI2ODNCNkQyRTVFRThF Rjc0RDhCNUI5MzM2N0E2Q0YxMjJENURDQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbvRHD69qscHHUOKP41ywj/Kn4YuqYachNTDvr8KRG9R/Ec2e+ KnYg/rfQ6k+kofRSxifi2wO21kV8JbUZH4y120vh9RrNrwSBmP0sRkWVHulGXnLO u3wYzm6zUSHozC4nWROiPXvZqMoKmkCOySqsfGgt4vKxpPSEsvTnmow33d4PbA89 qEOZdGWa6wGUBzkrUXBzrDOomgy5/N2l5cXSbYVDUWJ1Qn/w09shllcypbTTxCto L4bzAR6Fgwj0jh2t3QxjbcL31mqiOsCFO7TwRtWttOLwozbmlgF9C642HNajgE5m 0aK6+NJOyosb7vhXTJP8B0gOCVma02TUdHHHAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUtoO20uXujvdNi1uTNnps8SLV3MYwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC90b08yMHVYdWp2ZE5pMXVUTm5wczhTTFYzTVku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFPdWgMA0GCSqGSIb3DQEBCwUAA4IBAQAzViJ1bLknADV2iGosX4Qk PqU2+EiDeC9t5rX8K+8+vjQsNXOzil56Ry8kkTaBv7gaBYM5tLuX14RvgXHJHLRB rcS+jA5BibSQwupPJ9QsLxTSWPi8klpJDrvCIPwO4y1ZQRxw9KPPr7O0CCOxC4zr /54/hxZf599AodtsXK/h09eCRbbJbsk+o3j2a3PApdP5rs+J81LZdVXdep3/WtfR hUT68FTj2Jr4Jt3lBu6xpOBODpnbzMtRecmvNvigCtY1LMisvr9Iaal5/Jg+1ZRC Gw1+A+CvcFcf5cuZjI03+OlLgVD2SaRkuca127gzzqs9cCVT5FSuhY46Z1C4hj7n -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:25 2025 by rpki-client