$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30040/D9wlSRMdwJhdWAy5bpX7z71z9DI.roa File: D9wlSRMdwJhdWAy5bpX7z71z9DI.roa (raw, json) Hash identifier: j/X2+wzvoea4B7MS4Kbw1f2zpFd/lvPY47vHdmdgr+M= Subject key identifier: 0F:DC:25:49:13:1D:C0:98:5D:58:0C:B9:6E:95:FB:CF:BD:73:F4:32 Certificate issuer: /CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Certificate serial: 21 Authority key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/D9wlSRMdwJhdWAy5bpX7z71z9DI.roa Signing time: Tue 31 Dec 2024 01:32:01 +0000 ROA not before: Tue 31 Dec 2024 01:32:01 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 9619 IP address blocks: 2001:cf8:ace::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Validity Not Before: Dec 31 01:32:01 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=0FDC2549131DC0985D580CB96E95FBCFBD73F432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:7c:d0:49:54:ce:b3:da:0b:01:a2:6c:64: 0d:83:6b:6e:fd:26:9a:62:85:d1:20:fb:16:bb:7e: ae:c3:61:58:4c:90:06:a1:42:da:84:64:c4:81:36: f2:d3:3b:40:ec:a3:53:98:96:60:e3:cd:ee:46:71: fc:f6:8a:49:b0:89:73:ba:dd:cd:1c:bd:ed:c5:61: 59:bb:69:d9:64:0c:d9:72:48:0a:fa:a9:54:da:f4: 8f:59:db:4d:0c:13:a4:1c:ab:31:04:65:ca:e0:4b: 69:7b:17:ef:81:4d:d7:76:3d:11:66:7c:69:60:82: 91:61:de:d0:7e:03:33:10:bc:09:e1:b8:56:1b:db: a9:3a:5e:76:6f:f8:98:0b:02:7e:c4:f3:04:80:aa: f1:36:bf:e7:f7:70:1f:28:38:5a:29:af:25:de:e7: e6:60:2a:94:32:eb:e5:fa:e8:69:92:2c:27:c8:cd: cf:41:62:5d:83:a6:6d:b7:4b:0c:eb:93:b6:42:fd: 53:27:db:fb:ee:f1:a6:4d:ac:4a:e6:81:eb:74:a8: 3f:89:1e:2d:a2:50:a1:b0:5e:56:99:c5:a8:8f:5f: 17:19:97:9b:99:db:19:f0:9c:36:c8:03:c7:65:8a: 1b:db:5d:59:b8:bb:1c:70:e5:21:36:c4:f2:44:bf: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DC:25:49:13:1D:C0:98:5D:58:0C:B9:6E:95:FB:CF:BD:73:F4:32 X509v3 Authority Key Identifier: keyid:5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/D9wlSRMdwJhdWAy5bpX7z71z9DI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:cf8:ace::/48 Signature Algorithm: sha256WithRSAEncryption 27:6c:ce:91:17:7d:2c:28:d2:e7:4f:20:c0:3c:58:ea:6d:d6: a1:e4:a3:37:1d:39:60:af:6c:45:6f:d4:70:bf:f0:65:88:3f: 39:3d:fa:d7:37:6d:96:8a:38:ac:62:24:50:12:16:df:a0:16: e2:9a:8b:16:bb:a9:a8:e0:f0:b4:8a:57:ec:06:5f:b6:fd:63: be:d1:0a:df:14:08:91:21:76:a0:d7:7c:09:c8:74:12:3e:49: 07:e1:ab:f1:68:1e:f7:1a:cf:df:98:9b:b3:15:2a:44:d8:21: 3c:b1:76:0f:cb:9b:9c:87:0c:7f:a0:ae:11:bd:98:2a:6c:ca: 1f:b3:dd:f5:b9:cb:36:3c:ee:26:47:a5:29:07:10:e7:da:2d: 28:0f:5d:11:f0:7b:b8:76:36:fd:c1:9e:71:2c:ff:d3:29:98: 4e:de:84:f2:42:4e:5b:0c:1b:b5:f7:c8:cf:6a:f4:0c:97:2a: 88:9a:17:b9:78:07:30:78:ad:13:b6:d6:a8:03:a6:fd:13:2c: fb:47:a9:55:7f:c5:4a:35:3a:38:0c:c9:4a:5d:fd:c4:1e:97: 78:72:36:0a:f9:1d:a1:5b:de:9e:59:ca:b5:25:91:51:a7:39: d4:be:84:d6:bb:30:86:66:b4:3f:e6:0d:8a:ac:47:e8:99:1a: 8d:c1:48:cc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1REVG RjlFMUE5N0Q0NkNDREMxMkY2MDZFRUIzOEEzRTY0REJDODFGMB4XDTI0MTIzMTAx MzIwMVoXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoMEZEQzI1NDkxMzFEQzA5 ODVENTgwQ0I5NkU5NUZCQ0ZCRDczRjQzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN0RfNBJVM6z2gsBomxkDYNrbv0mmmKF0SD7Frt+rsNhWEyQBqFC 2oRkxIE28tM7QOyjU5iWYOPN7kZx/PaKSbCJc7rdzRy97cVhWbtp2WQM2XJICvqp VNr0j1nbTQwTpByrMQRlyuBLaXsX74FN13Y9EWZ8aWCCkWHe0H4DMxC8CeG4Vhvb qTpedm/4mAsCfsTzBICq8Ta/5/dwHyg4WimvJd7n5mAqlDLr5froaZIsJ8jNz0Fi XYOmbbdLDOuTtkL9Uyfb++7xpk2sSuaB63SoP4keLaJQobBeVpnFqI9fFxmXm5nb GfCcNsgDx2WKG9tdWbi7HHDlITbE8kS/k0kCAwEAAaOCAiswggInMB0GA1UdDgQW BBQP3CVJEx3AmF1YDLlulfvPvXP0MjAfBgNVHSMEGDAWgBRd7/nhqX1GzNwS9gbu s4o+ZNvIHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQbVRieUI4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQ bVRieUI4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDQwL0Q5d2xTUk1kd0poZFdBeTVicFg3ejcxejlESS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQz4Cs4wDQYJKoZIhvcNAQELBQADggEBACdszpEXfSwo0udPIMA8 WOpt1qHkozcdOWCvbEVv1HC/8GWIPzk9+tc3bZaKOKxiJFASFt+gFuKaixa7qajg 8LSKV+wGX7b9Y77RCt8UCJEhdqDXfAnIdBI+SQfhq/FoHvcaz9+Ym7MVKkTYITyx dg/Lm5yHDH+grhG9mCpsyh+z3fW5yzY87iZHpSkHEOfaLSgPXRHwe7h2Nv3BnnEs /9MpmE7ehPJCTlsMG7X3yM9q9AyXKoiaF7l4BzB4rRO21qgDpv0TLPtHqVV/xUo1 OjgMyUpd/cQel3hyNgr5HaFb3p5ZyrUlkVGnOdS+hNa7MIZmtD/mDYqsR+iZGo3B SMw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:44 2025 by rpki-client