$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/WsnROE5sbgv0lz-fESMQjA0UTpI.roa File: WsnROE5sbgv0lz-fESMQjA0UTpI.roa (raw, json) Hash identifier: wHYElOxFAQdYlkAATddtnvvegpf9AnGtTXhgcn1cAZs= Subject key identifier: 5A:C9:D1:38:4E:6C:6E:0B:F4:97:3F:9F:11:23:10:8C:0D:14:4E:92 Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Certificate serial: 46 Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/WsnROE5sbgv0lz-fESMQjA0UTpI.roa Signing time: Fri 31 Jan 2025 01:33:37 +0000 ROA not before: Fri 31 Jan 2025 01:33:37 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7679 IP address blocks: 202.220.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Validity Not Before: Jan 31 01:33:37 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=5AC9D1384E6C6E0BF4973F9F1123108C0D144E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:d3:fb:95:b6:b4:78:5f:13:bc:a7:5c:1f: 23:39:8c:11:f0:ab:c5:1b:56:ec:d4:4f:82:93:3e: b9:ce:9b:7e:0e:69:8e:75:f0:d9:b6:c1:a0:75:e0: f9:f8:48:7d:92:80:9d:dd:0b:49:d1:53:8e:39:8e: ce:0f:64:46:e8:27:7e:f8:4d:fe:50:ec:9f:32:3e: 94:a8:26:75:9a:c7:73:69:97:87:63:88:c6:fe:da: d6:2a:20:f8:d1:75:51:a4:fe:b0:30:c7:58:a9:6d: d2:9a:bd:13:dc:2f:8f:7f:5f:c2:a6:d3:f7:57:f1: 88:8c:e4:10:71:52:2a:c0:c9:11:29:87:ba:25:7b: a5:96:fa:23:e5:2e:84:db:1f:0f:fb:53:d6:d7:32: 36:cd:77:fa:95:59:b2:bc:27:4c:9e:24:40:7a:8f: 1a:b2:d5:94:ff:5e:b0:53:0d:f3:e5:c4:a0:a3:28: e4:5f:d5:3b:30:34:e5:b6:d2:59:48:b3:23:ed:0a: 2e:88:15:d9:01:db:3d:53:6a:6c:2a:4b:bf:e7:d8: b2:07:06:18:15:80:ac:3e:d8:dd:34:57:1f:9c:fe: 7c:7b:d8:b8:95:40:8f:cd:db:98:06:c4:c5:d8:e5: 9a:cf:a3:ff:83:c8:e6:ad:c5:79:19:9b:08:b4:de: 80:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C9:D1:38:4E:6C:6E:0B:F4:97:3F:9F:11:23:10:8C:0D:14:4E:92 X509v3 Authority Key Identifier: keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/WsnROE5sbgv0lz-fESMQjA0UTpI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.220.40.0/21 Signature Algorithm: sha256WithRSAEncryption 28:49:57:71:1b:fc:73:fb:10:b0:4c:95:c0:fa:4b:3e:b0:59: 06:25:f8:aa:76:3f:65:07:14:2c:87:e0:c0:8a:92:5b:ea:65: 86:70:0e:28:7f:f6:a5:5d:32:87:eb:6a:43:31:6c:c6:84:9e: 8c:ff:35:2b:be:4a:d1:b6:a4:85:83:1b:23:fa:03:8f:57:1d: 0d:22:f9:26:39:09:1f:1c:d2:14:69:c8:60:65:e9:54:3d:3b: ea:46:60:14:b3:dd:c3:1e:3a:39:d5:62:f7:44:19:01:f9:00: a5:52:21:aa:41:4e:be:43:5b:3d:55:09:9c:7a:26:4f:60:85: 11:c8:f1:2e:d8:ca:78:b0:05:1b:db:7f:c5:3b:f1:1a:b8:8d: 07:2f:1e:d3:b1:52:12:61:30:df:0d:04:d0:32:a5:67:bb:a1: fd:4a:72:5a:f9:45:6d:0c:05:af:dc:83:90:7f:cd:15:ce:33: 40:e5:9f:e5:25:3e:3b:a6:90:c1:f7:df:59:08:76:26:e7:9a: 38:f1:bc:5c:97:25:0c:63:a9:2a:d3:df:72:86:24:a6:ec:70: cb:fe:80:7d:d7:d5:e8:28:8b:d9:30:f0:2b:45:67:8c:8d:0f: 6b:a4:e8:1d:a4:99:9e:a4:76:f5:24:f2:d1:bb:b8:f4:d2:c8: 8f:0e:98:56 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI1MDEzMTAx MzMzN1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNUFDOUQxMzg0RTZDNkUw QkY0OTczRjlGMTEyMzEwOEMwRDE0NEU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALqj0/uVtrR4XxO8p1wfIzmMEfCrxRtW7NRPgpM+uc6bfg5pjnXw 2bbBoHXg+fhIfZKAnd0LSdFTjjmOzg9kRugnfvhN/lDsnzI+lKgmdZrHc2mXh2OI xv7a1iog+NF1UaT+sDDHWKlt0pq9E9wvj39fwqbT91fxiIzkEHFSKsDJESmHuiV7 pZb6I+UuhNsfD/tT1tcyNs13+pVZsrwnTJ4kQHqPGrLVlP9esFMN8+XEoKMo5F/V OzA05bbSWUizI+0KLogV2QHbPVNqbCpLv+fYsgcGGBWArD7Y3TRXH5z+fHvYuJVA j83bmAbExdjlms+j/4PI5q3FeRmbCLTegBcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRaydE4TmxuC/SXP58RIxCMDRROkjAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDkvV3NuUk9FNXNiZ3YwbHotZkVTTVFqQTBVVHBJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8rcKDANBgkqhkiG9w0BAQsFAAOCAQEAKElXcRv8c/sQsEyVwPpLPrBZBiX4 qnY/ZQcULIfgwIqSW+plhnAOKH/2pV0yh+tqQzFsxoSejP81K75K0bakhYMbI/oD j1cdDSL5JjkJHxzSFGnIYGXpVD076kZgFLPdwx46OdVi90QZAfkApVIhqkFOvkNb PVUJnHomT2CFEcjxLtjKeLAFG9t/xTvxGriNBy8e07FSEmEw3w0E0DKlZ7uh/Upy WvlFbQwFr9yDkH/NFc4zQOWf5SU+O6aQwfffWQh2JueaOPG8XJclDGOpKtPfcoYk puxwy/6AfdfV6CiL2TDwK0VnjI0Pa6ToHaSZnqR29STy0bu49NLIjw6YVg== -----END CERTIFICATE-----Generated at Sat Apr 5 20:08:16 2025 by rpki-client