$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/zUKUOWbvlQEe7PN3nign3K-loao.roa File: zUKUOWbvlQEe7PN3nign3K-loao.roa (raw, json) Hash identifier: SsH2BSkMhb90QWSNEs8xDnymihPVJOk2siGU8WlvNB0= Subject key identifier: CD:42:94:39:66:EF:95:01:1E:EC:F3:77:9E:28:27:DC:AF:A5:A1:AA Certificate issuer: /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10 Certificate serial: 08 Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/zUKUOWbvlQEe7PN3nign3K-loao.roa Signing time: Thu 16 Jan 2025 01:34:48 +0000 ROA not before: Thu 16 Jan 2025 01:34:48 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 59108 IP address blocks: 182.23.224.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10 Validity Not Before: Jan 16 01:34:48 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=CD42943966EF95011EECF3779E2827DCAFA5A1AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:3c:0b:75:63:a6:23:54:bb:aa:d6:e4:d5: 6c:33:13:28:52:3f:32:eb:91:01:2f:26:e4:11:27: 2a:7e:a7:57:aa:ec:6d:d3:12:f0:9a:22:c1:6c:6f: dd:93:c8:3d:79:f0:7a:38:35:f5:9c:99:e8:d7:fa: ff:8a:1b:e4:ad:b7:62:16:28:9a:cb:fd:81:03:a4: 87:d8:bb:b8:77:b6:76:d1:3b:16:fc:69:3f:18:bd: 30:11:cb:dd:73:91:dc:60:0f:cb:37:9d:cd:c1:fa: df:48:d9:0b:62:3b:ae:fb:56:de:ec:80:f2:9d:40: 61:66:6f:26:89:45:a4:ff:b2:35:95:8c:c6:93:eb: 68:e0:09:c3:a2:07:f3:75:a8:04:91:d2:fe:a2:f8: dc:43:4e:d2:69:f5:f2:c5:75:a5:f9:7e:d3:cb:e0: 51:26:fc:3e:03:9e:d6:6a:09:71:3f:b6:a8:ef:69: ec:4a:bf:c7:41:a0:92:8e:64:e4:e1:8b:9d:be:69: 96:32:a3:5b:4a:6d:b3:1a:76:68:fe:b8:ae:6c:1f: 33:a4:25:ff:d2:06:8c:5a:d0:fb:a0:c1:96:d6:89: b9:79:9d:93:c6:75:ac:c3:10:20:7f:4c:53:d7:76: 84:01:cf:bd:2c:39:15:60:19:f7:d3:87:9f:9f:e2: 03:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:42:94:39:66:EF:95:01:1E:EC:F3:77:9E:28:27:DC:AF:A5:A1:AA X509v3 Authority Key Identifier: keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/zUKUOWbvlQEe7PN3nign3K-loao.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.23.224.0/19 Signature Algorithm: sha256WithRSAEncryption 7c:72:9f:f8:8a:5f:62:b5:f8:b4:71:d0:1d:64:e1:95:51:82: 10:0f:6d:c7:f5:56:a0:4e:17:3e:dd:1d:49:01:5a:d8:17:b3: 40:ba:dc:f5:64:d4:72:49:91:2f:13:e0:4b:88:c9:b4:bb:17: 73:37:f0:21:9f:00:e9:8d:f0:25:cd:62:a5:bb:e1:74:b9:c2: 30:1f:d0:49:e9:bc:20:26:4e:21:28:a0:47:1c:cc:22:d1:74: 76:ab:d7:07:22:ba:71:6a:fd:bc:4f:6f:bb:18:14:1a:be:ee: 84:33:0d:22:56:61:3e:b3:76:1e:74:21:8c:c1:a1:1e:b4:80: 2d:94:54:95:75:ea:57:77:30:f2:5c:1e:a3:26:11:8f:c7:da: 34:06:fe:bc:06:b3:8b:f9:8a:98:cc:e9:39:8f:22:7e:a8:92: 21:98:44:f5:2d:22:69:c0:1c:89:30:77:39:00:73:f4:44:59: 1d:10:18:e2:e3:57:c8:ac:58:75:e7:51:e8:3f:fa:ac:60:96: 1d:1f:6c:54:c7:3c:4b:38:eb:5d:93:86:27:b0:3d:d0:f9:ba: f8:0e:f2:f7:ef:9a:2b:87:ce:c7:67:42:c1:2b:0e:03:c8:43: bd:e2:ea:17:ed:0d:12:74:e4:db:3b:e8:06:6c:4f:38:34:20: ff:27:ec:5c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTRC MDE1RUM5QTBBNUMwM0Q4ODc5NDY5Q0RBN0M3QzRCOUE2QzEwMB4XDTI1MDExNjAx MzQ0OFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQ0Q0Mjk0Mzk2NkVGOTUw MTFFRUNGMzc3OUUyODI3RENBRkE1QTFBQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMuAPAt1Y6YjVLuq1uTVbDMTKFI/MuuRAS8m5BEnKn6nV6rsbdMS 8JoiwWxv3ZPIPXnwejg19ZyZ6Nf6/4ob5K23YhYomsv9gQOkh9i7uHe2dtE7Fvxp Pxi9MBHL3XOR3GAPyzedzcH630jZC2I7rvtW3uyA8p1AYWZvJolFpP+yNZWMxpPr aOAJw6IH83WoBJHS/qL43ENO0mn18sV1pfl+08vgUSb8PgOe1moJcT+2qO9p7Eq/ x0Ggko5k5OGLnb5pljKjW0ptsxp2aP64rmwfM6Ql/9IGjFrQ+6DBltaJuXmdk8Z1 rMMQIH9MU9d2hAHPvSw5FWAZ99OHn5/iA9cCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTNQpQ5Zu+VAR7s83eeKCfcr6WhqjAfBgNVHSMEGDAWgBRZSwFeyaClwD2IeUac 2nx8S5psEDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjcxL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1YWJCQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1 YWJCQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNzEvelVLVU9XYnZsUUVlN1BOM25pZ24zSy1sb2FvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBbYX4DANBgkqhkiG9w0BAQsFAAOCAQEAfHKf+IpfYrX4tHHQHWThlVGCEA9t x/VWoE4XPt0dSQFa2BezQLrc9WTUckmRLxPgS4jJtLsXczfwIZ8A6Y3wJc1ipbvh dLnCMB/QSem8ICZOISigRxzMItF0dqvXByK6cWr9vE9vuxgUGr7uhDMNIlZhPrN2 HnQhjMGhHrSALZRUlXXqV3cw8lweoyYRj8faNAb+vAazi/mKmMzpOY8ifqiSIZhE 9S0iacAciTB3OQBz9ERZHRAY4uNXyKxYdedR6D/6rGCWHR9sVMc8SzjrXZOGJ7A9 0Pm6+A7y9++aK4fOx2dCwSsOA8hDveLqF+0NEnTk2zvoBmxPODQg/yfsXA== -----END CERTIFICATE-----Generated at Sat Apr 5 17:37:58 2025 by rpki-client