$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/4Im10T4MO9uRWOKnEeKC7Bxc_AM.roa File: 4Im10T4MO9uRWOKnEeKC7Bxc_AM.roa (raw, json) Hash identifier: 1PnP4vhGMbqvp28Rx6rNS1P5B+2r05fwwKbYe9fBPoE= Subject key identifier: E0:89:B5:D1:3E:0C:3B:DB:91:58:E2:A7:11:E2:82:EC:1C:5C:FC:03 Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Certificate serial: 40 Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/4Im10T4MO9uRWOKnEeKC7Bxc_AM.roa Signing time: Fri 31 Jan 2025 01:33:34 +0000 ROA not before: Fri 31 Jan 2025 01:33:34 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7679 IP address blocks: 124.150.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Validity Not Before: Jan 31 01:33:34 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=E089B5D13E0C3BDB9158E2A711E282EC1C5CFC03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:23:6f:ea:54:5a:02:d3:db:69:f8:00:bd: 3c:63:99:7c:1b:8f:a8:29:d5:9f:f6:66:ea:9d:d7: 2c:23:a4:73:66:e5:de:cb:f7:be:fb:19:c5:ad:34: 7e:92:2e:15:61:1f:7a:c9:aa:69:d2:c9:0e:ec:3b: 01:7c:7e:c7:14:66:c6:31:64:24:3f:b9:7c:98:78: 5b:ce:43:ba:0c:80:42:73:63:03:ec:30:bb:43:45: a2:5c:49:24:33:c9:b4:46:e9:a9:64:e3:c5:f6:b3: be:9e:5b:39:24:79:8c:47:93:4a:74:2b:1c:91:f7: 08:5b:00:f6:21:87:73:a3:3e:ed:cb:9d:f4:d4:48: 17:6d:bb:cf:55:83:9b:1c:f4:51:4c:93:a9:69:ac: bf:93:65:d2:82:e8:1b:98:19:1f:31:b5:be:77:b6: 18:6e:ad:8e:12:e1:82:c5:57:99:eb:57:f6:e4:17: d4:27:8b:85:7d:c9:84:2b:e0:6a:c2:88:01:0d:51: f6:90:29:b3:e3:bc:ec:35:a5:7d:07:bf:55:74:25: 37:a0:a3:89:78:05:8b:93:da:eb:4e:37:9f:3a:b4: 2d:79:0a:4a:38:5c:18:63:fa:79:ff:12:08:8c:e5: 4a:1d:c8:2f:e9:37:02:44:1c:f4:1a:30:97:49:6a: a5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:89:B5:D1:3E:0C:3B:DB:91:58:E2:A7:11:E2:82:EC:1C:5C:FC:03 X509v3 Authority Key Identifier: keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/4Im10T4MO9uRWOKnEeKC7Bxc_AM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.150.176.0/20 Signature Algorithm: sha256WithRSAEncryption 4d:57:4a:56:b0:68:0b:b8:c8:3d:84:42:82:6a:c5:9f:e2:5a: e5:33:24:1b:6d:4b:6a:57:60:ab:89:7b:db:c5:ec:40:3f:be: 43:bd:ed:61:9a:90:7c:4c:44:82:0d:72:36:a2:da:a7:22:c4: 87:7b:33:dd:2e:99:13:f6:5d:c7:67:26:49:f1:23:81:5a:07: 38:c1:d2:c0:6d:0c:c5:a1:b3:6e:ab:f2:2b:4e:e8:df:45:b3: a6:09:64:9f:c3:52:59:bb:79:8e:08:7a:53:44:2b:df:19:3c: f5:f0:cc:8b:eb:bf:6b:6c:e1:ef:44:ef:4a:3c:f6:68:34:30: 4a:87:18:42:fc:f3:80:e7:6e:97:f7:1c:2b:ca:69:5e:24:5e: f0:f4:79:b5:b5:b8:6c:80:34:e0:d7:ef:03:c0:7d:2f:b0:dc: fa:ac:02:7c:3e:bf:11:8c:97:e1:03:23:fa:34:cd:12:4b:13: 72:fb:96:c6:0c:f7:9e:a7:db:4a:6d:86:3f:94:bd:29:bd:6c: 23:60:de:44:53:f8:8d:49:ad:d1:43:de:9e:a3:41:be:86:07: ca:bc:58:12:ab:77:2b:fc:e5:cc:d2:dd:46:1f:30:12:37:fa: 1a:c6:7f:6d:5b:a7:a6:e6:c1:0e:52:3f:53:67:86:e9:2b:b2: 0c:37:43:a5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI1MDEzMTAx MzMzNFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoRTA4OUI1RDEzRTBDM0JE QjkxNThFMkE3MTFFMjgyRUMxQzVDRkMwMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMbUI2/qVFoC09tp+AC9PGOZfBuPqCnVn/Zm6p3XLCOkc2bl3sv3 vvsZxa00fpIuFWEfesmqadLJDuw7AXx+xxRmxjFkJD+5fJh4W85DugyAQnNjA+ww u0NFolxJJDPJtEbpqWTjxfazvp5bOSR5jEeTSnQrHJH3CFsA9iGHc6M+7cud9NRI F227z1WDmxz0UUyTqWmsv5Nl0oLoG5gZHzG1vne2GG6tjhLhgsVXmetX9uQX1CeL hX3JhCvgasKIAQ1R9pAps+O87DWlfQe/VXQlN6CjiXgFi5Pa6043nzq0LXkKSjhc GGP6ef8SCIzlSh3IL+k3AkQc9Bowl0lqpZkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTgibXRPgw725FY4qcR4oLsHFz8AzAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDkvNEltMTBUNE1POXVSV09LbkVlS0M3QnhjX0FNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHyWsDANBgkqhkiG9w0BAQsFAAOCAQEATVdKVrBoC7jIPYRCgmrFn+Ja5TMk G21Laldgq4l728XsQD++Q73tYZqQfExEgg1yNqLapyLEh3sz3S6ZE/Zdx2cmSfEj gVoHOMHSwG0MxaGzbqvyK07o30Wzpglkn8NSWbt5jgh6U0Qr3xk89fDMi+u/a2zh 70TvSjz2aDQwSocYQvzzgOdul/ccK8ppXiRe8PR5tbW4bIA04NfvA8B9L7Dc+qwC fD6/EYyX4QMj+jTNEksTcvuWxgz3nqfbSm2GP5S9Kb1sI2DeRFP4jUmt0UPenqNB voYHyrxYEqt3K/zlzNLdRh8wEjf6GsZ/bVunpubBDlI/U2eG6SuyDDdDpQ== -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:41 2025 by rpki-client