$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30013/tjNuA1KutDIp1MHDpYAWIXTJdOM.roa File: tjNuA1KutDIp1MHDpYAWIXTJdOM.roa (raw, json) Hash identifier: fqGBOT5LqpiDvoge95TXrvuy6qVFk7ajC7Al3wqHaAw= Subject key identifier: B6:33:6E:03:52:AE:B4:32:29:D4:C1:C3:A5:80:16:21:74:C9:74:E3 Certificate issuer: /CN=E251D339AB1EB6305AEB1493B4DA380011FA3329 Certificate serial: 12 Authority key identifier: E2:51:D3:39:AB:1E:B6:30:5A:EB:14:93:B4:DA:38:00:11:FA:33:29 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4lHTOasetjBa6xSTtNo4ABH6Myk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/tjNuA1KutDIp1MHDpYAWIXTJdOM.roa Signing time: Fri 31 Jan 2025 01:33:46 +0000 ROA not before: Fri 31 Jan 2025 01:33:46 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7679 IP address blocks: 2001:348::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/4lHTOasetjBa6xSTtNo4ABH6Myk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/4lHTOasetjBa6xSTtNo4ABH6Myk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4lHTOasetjBa6xSTtNo4ABH6Myk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E251D339AB1EB6305AEB1493B4DA380011FA3329 Validity Not Before: Jan 31 01:33:46 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=B6336E0352AEB43229D4C1C3A580162174C974E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:39:97:a8:ee:db:a6:08:b5:34:b5:52:21: 47:9f:0a:2b:a1:fd:ce:ab:30:1d:b7:07:2c:7f:49: bc:5b:22:42:5d:40:7b:60:d9:1b:de:1f:74:65:0b: d4:3f:f0:2d:82:da:fd:4f:ce:17:c1:64:db:ee:b4: 49:32:55:e3:75:c7:49:f6:dc:fe:1b:c1:9a:44:97: fa:61:0c:56:83:a0:d2:50:fa:34:cb:c0:b1:1c:b6: 00:25:2e:fb:2a:fd:a5:f6:f3:2f:d0:97:1f:39:cf: 1f:b2:39:1a:09:73:e3:de:24:4e:cf:f4:5c:40:54: 31:bf:64:12:31:2a:22:46:40:4b:06:12:b6:c3:10: ac:8e:da:ac:cc:e0:4d:ae:cb:97:e5:c4:88:5f:9d: 96:1c:e9:0e:1a:a5:97:90:ab:b8:92:ca:f5:3f:8f: 23:2d:d8:bf:66:2d:cc:08:40:5f:97:fd:e8:60:1e: d8:0a:ef:82:36:0c:f1:7b:5c:82:02:26:8b:74:75: 30:0d:e5:41:b7:f0:08:0d:56:aa:a0:37:8f:96:29: 70:a6:00:84:84:7a:a2:07:08:bd:d0:1c:93:88:42: 2f:c4:3a:af:b9:c1:4c:98:5e:2b:54:c8:4a:38:08: cd:a4:91:82:ff:f7:28:96:e4:f3:d2:8d:18:9f:29: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:33:6E:03:52:AE:B4:32:29:D4:C1:C3:A5:80:16:21:74:C9:74:E3 X509v3 Authority Key Identifier: keyid:E2:51:D3:39:AB:1E:B6:30:5A:EB:14:93:B4:DA:38:00:11:FA:33:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/4lHTOasetjBa6xSTtNo4ABH6Myk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4lHTOasetjBa6xSTtNo4ABH6Myk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/tjNuA1KutDIp1MHDpYAWIXTJdOM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:348::/32 Signature Algorithm: sha256WithRSAEncryption 05:e7:b9:d8:e0:da:ca:81:cc:c7:c8:be:0a:60:15:4f:00:d7: 26:3d:bf:13:20:5d:78:36:0c:c2:25:05:3a:e0:1c:b0:a0:30: 4e:26:65:44:f8:c2:9d:91:22:c4:85:87:d6:e8:26:47:5a:ec: 12:cd:33:06:eb:83:d1:1e:7d:6b:8c:f4:21:1b:bf:01:69:cb: da:43:1c:37:bb:46:59:09:5d:13:6f:30:8d:36:4f:95:5f:5c: a0:54:76:3e:e5:e6:02:ed:f1:f3:50:f8:9c:9a:77:cd:48:a4: ff:da:f1:75:a3:3c:4f:cd:4e:ae:63:9b:4c:c4:cd:78:c9:6c: 4d:2e:da:2c:60:ab:45:b1:b8:7e:20:bb:b9:9c:77:b9:ed:8c: df:d1:f8:b3:26:56:b4:5d:21:06:97:64:6d:66:fb:75:57:f0: a3:4b:a7:e9:a4:33:fb:97:14:01:51:78:8e:fe:e1:84:04:97: b0:e8:8c:fd:df:29:e8:70:e2:44:a3:4e:77:57:f3:aa:e9:6a: 34:81:43:49:11:48:6c:8e:b9:9a:5f:32:ca:e6:ea:76:10:15: 09:ee:10:71:b4:fd:c1:47:3a:84:22:96:f8:28:0e:34:7d:22: f2:16:15:3e:fd:a7:53:b7:1b:81:e8:0c:b6:b4:d1:00:d6:14: c3:b2:d3:50 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMjUx RDMzOUFCMUVCNjMwNUFFQjE0OTNCNERBMzgwMDExRkEzMzI5MB4XDTI1MDEzMTAx MzM0NloXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQjYzMzZFMDM1MkFFQjQz MjI5RDRDMUMzQTU4MDE2MjE3NEM5NzRFMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMaEOZeo7tumCLU0tVIhR58KK6H9zqswHbcHLH9JvFsiQl1Ae2DZ G94fdGUL1D/wLYLa/U/OF8Fk2+60STJV43XHSfbc/hvBmkSX+mEMVoOg0lD6NMvA sRy2ACUu+yr9pfbzL9CXHznPH7I5Gglz494kTs/0XEBUMb9kEjEqIkZASwYStsMQ rI7arMzgTa7Ll+XEiF+dlhzpDhqll5CruJLK9T+PIy3Yv2YtzAhAX5f96GAe2Arv gjYM8XtcggImi3R1MA3lQbfwCA1WqqA3j5YpcKYAhIR6ogcIvdAck4hCL8Q6r7nB TJheK1TISjgIzaSRgv/3KJbk89KNGJ8p/okCAwEAAaOCAikwggIlMB0GA1UdDgQW BBS2M24DUq60MinUwcOlgBYhdMl04zAfBgNVHSMEGDAWgBTiUdM5qx62MFrrFJO0 2jgAEfozKTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMTMvNGxIVE9hc2V0akJhNnhTVHRObzRBQkg2TXlrLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNGxIVE9hc2V0akJhNnhTVHRObzRB Qkg2TXlrLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDEzL3RqTnVBMUt1dERJcDFNSERwWUFXSVhUSmRPTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQNIMA0GCSqGSIb3DQEBCwUAA4IBAQAF57nY4NrKgczHyL4KYBVP ANcmPb8TIF14NgzCJQU64BywoDBOJmVE+MKdkSLEhYfW6CZHWuwSzTMG64PRHn1r jPQhG78BacvaQxw3u0ZZCV0TbzCNNk+VX1ygVHY+5eYC7fHzUPicmnfNSKT/2vF1 ozxPzU6uY5tMxM14yWxNLtosYKtFsbh+ILu5nHe57Yzf0fizJla0XSEGl2RtZvt1 V/CjS6fppDP7lxQBUXiO/uGEBJew6Iz93ynocOJEo053V/Oq6Wo0gUNJEUhsjrma XzLK5up2EBUJ7hBxtP3BRzqEIpb4KA40fSLyFhU+/adTtxuB6Ay2tNEA1hTDstNQ -----END CERTIFICATE-----Generated at Sat Apr 5 17:23:11 2025 by rpki-client