$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/rXkPE4gh7X5I1jPWRvishCokeSA.roa File: rXkPE4gh7X5I1jPWRvishCokeSA.roa (raw, json) Hash identifier: K1NvtGypQtM9pwawIZJoz92+XPzmvMiCfrGgb76YTyA= Subject key identifier: AD:79:0F:13:88:21:ED:7E:48:D6:33:D6:46:F8:AC:84:2A:24:79:20 Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: E4 Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/rXkPE4gh7X5I1jPWRvishCokeSA.roa Signing time: Fri 31 May 2024 01:31:26 +0000 ROA not before: Fri 31 May 2024 01:31:26 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 9370 IP address blocks: 153.121.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: May 31 01:31:26 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=AD790F138821ED7E48D633D646F8AC842A247920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:f6:2d:de:f1:de:6a:3b:e8:75:d6:8d:cb: 88:0c:46:56:da:4a:58:8f:d2:cb:95:91:89:1d:af: 1b:b4:12:97:af:22:bc:11:63:d0:a8:41:a0:67:1e: 88:c0:4c:bb:c4:5d:f1:bc:5a:f6:fb:9a:62:77:dc: 75:d7:3f:4a:d5:0f:73:49:5d:81:64:56:c3:d8:80: 40:d8:3e:91:b3:aa:0a:2b:ef:d1:ae:c9:b9:32:ba: ba:77:3c:31:7c:5a:47:9f:6d:4c:1d:7d:15:5a:18: da:48:ea:3a:35:15:22:73:59:16:aa:6b:95:eb:a2: bb:f2:cd:18:0f:f2:59:a3:bc:75:3d:8a:06:40:94: 4e:d9:20:cf:94:66:ae:3c:0b:95:55:d3:99:e4:05: 39:e5:c3:8e:ef:e2:8d:1b:78:8e:92:aa:46:0c:47: a3:97:c5:5f:20:5e:fd:c5:e1:fc:03:70:da:d6:c3: 81:11:ed:29:6f:29:f3:84:05:8b:76:8e:e6:cd:95: 0b:a3:73:5d:30:d0:43:f9:fa:f7:ad:27:70:7c:75: 09:aa:94:7f:a2:26:f7:67:59:9c:c5:45:41:11:1e: a0:d4:83:8a:1a:e0:c9:01:bf:76:83:9e:98:a4:d1: 6f:e8:16:d9:d9:6e:43:23:e2:c4:83:9f:8e:80:3b: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:79:0F:13:88:21:ED:7E:48:D6:33:D6:46:F8:AC:84:2A:24:79:20 X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/rXkPE4gh7X5I1jPWRvishCokeSA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.121.32.0/19 Signature Algorithm: sha256WithRSAEncryption 24:ab:31:85:e9:04:3c:38:9b:93:be:aa:ee:bb:1c:bb:f6:a7: e9:1e:ea:e5:99:10:9d:79:67:2e:a1:5f:ef:85:78:9a:76:98: 38:31:23:7e:93:62:f1:b5:c6:7d:d8:95:b6:3d:ee:af:fa:f5: 87:b7:97:d8:63:70:c5:d2:b4:50:aa:10:dc:c8:c0:c2:93:70: d1:44:cd:26:ba:3d:5b:1a:93:32:6d:e3:e8:ef:9d:50:96:b9: d3:91:00:cf:6a:a9:7e:b9:cf:c6:7f:6a:d4:92:ba:43:eb:16: 91:66:67:07:8e:47:c3:68:f5:a2:a6:9f:ef:74:41:62:46:46: 92:3e:4c:99:8e:5e:08:56:bc:e1:7c:4d:23:4e:96:07:32:fa: 6d:6a:81:6a:3d:be:84:05:3b:bb:26:e0:04:07:d1:53:76:d8: 62:48:2d:8f:49:13:1c:47:da:7a:9d:1b:04:1f:a6:ba:fe:87: 62:00:e7:16:33:67:8b:db:3f:2f:77:d0:ba:f0:b9:05:a3:3e: c1:9b:60:83:62:67:7c:5a:19:47:70:0c:4f:cd:05:0b:af:7b: f6:75:76:99:6d:7f:a9:af:fa:86:66:b5:07:61:dd:5b:14:fe: 8a:c3:d6:37:e8:62:7a:3f:43:90:7b:f4:10:27:c8:34:b5:86: 46:cb:c2:e8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNDA1MzEw MTMxMjZaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFENzkwRjEzODgyMUVE N0U0OEQ2MzNENjQ2RjhBQzg0MkEyNDc5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6E/Yt3vHeajvoddaNy4gMRlbaSliP0suVkYkdrxu0EpevIrwR Y9CoQaBnHojATLvEXfG8Wvb7mmJ33HXXP0rVD3NJXYFkVsPYgEDYPpGzqgor79Gu ybkyurp3PDF8WkefbUwdfRVaGNpI6jo1FSJzWRaqa5XrorvyzRgP8lmjvHU9igZA lE7ZIM+UZq48C5VV05nkBTnlw47v4o0beI6SqkYMR6OXxV8gXv3F4fwDcNrWw4ER 7SlvKfOEBYt2jubNlQujc10w0EP5+vetJ3B8dQmqlH+iJvdnWZzFRUERHqDUg4oa 4MkBv3aDnpik0W/oFtnZbkMj4sSDn46AO26/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrXkPE4gh7X5I1jPWRvishCokeSAwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ3L3JYa1BFNGdoN1g1STFqUFdSdmlzaENva2VTQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWZeSAwDQYJKoZIhvcNAQELBQADggEBACSrMYXpBDw4m5O+qu67HLv2p+ke 6uWZEJ15Zy6hX++FeJp2mDgxI36TYvG1xn3YlbY97q/69Ye3l9hjcMXStFCqENzI wMKTcNFEzSa6PVsakzJt4+jvnVCWudORAM9qqX65z8Z/atSSukPrFpFmZweOR8No 9aKmn+90QWJGRpI+TJmOXghWvOF8TSNOlgcy+m1qgWo9voQFO7sm4AQH0VN22GJI LY9JExxH2nqdGwQfprr+h2IA5xYzZ4vbPy930LrwuQWjPsGbYINiZ3xaGUdwDE/N BQuve/Z1dpltf6mv+oZmtQdh3VsU/orD1jfoYno/Q5B79BAnyDS1hkbLwug= -----END CERTIFICATE-----Generated at Sun Apr 6 15:23:07 2025 by rpki-client