$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/tmWCknOkvqWyRp5cS88mQkBs5uo.roa File: tmWCknOkvqWyRp5cS88mQkBs5uo.roa (raw, json) Hash identifier: 9UaWN8UV4cYimlcOamNF/tPZNK0ej5KrV2//4GMi1jA= Subject key identifier: B6:65:82:92:73:A4:BE:A5:B2:46:9E:5C:4B:CF:26:42:40:6C:E6:EA Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2 Certificate serial: 68 Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/tmWCknOkvqWyRp5cS88mQkBs5uo.roa Signing time: Fri 31 Jan 2025 01:32:25 +0000 ROA not before: Fri 31 Jan 2025 01:32:25 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9370 IP address blocks: 2001:e44::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2 Validity Not Before: Jan 31 01:32:25 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=B665829273A4BEA5B2469E5C4BCF2642406CE6EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:fc:f5:60:2c:68:46:5b:89:bd:64:42:82: 3c:58:cb:dd:1c:9f:71:d1:a7:ef:64:fb:f7:fb:81: f9:2a:aa:9a:d0:ee:eb:a6:a9:5b:04:c8:fe:e9:1a: 2e:9f:95:44:ba:ed:81:7f:0b:db:8c:b7:20:8a:f2: 93:d6:91:77:eb:03:34:a1:09:86:6f:2f:f0:f8:6f: cb:74:50:f9:64:3a:d8:6c:a3:09:e4:87:95:f5:e1: 91:85:25:92:b7:f3:eb:5b:75:01:d7:54:d1:c0:9b: b7:ec:a6:f7:76:3d:58:b9:9f:87:f8:40:c2:3e:75: 9d:50:de:98:e8:59:14:11:c9:3b:9c:57:af:0a:37: 21:29:4a:95:9d:cc:83:80:7a:cb:c6:ec:33:ce:9f: f2:8b:9c:17:22:65:ff:c0:25:4a:c4:1d:da:49:e8: fa:1c:a2:ad:2f:12:0a:d9:3f:f8:9e:ad:9c:1d:95: ea:e2:12:7c:d9:36:45:ac:a7:2e:48:b6:af:6b:00: 77:b2:a9:23:f0:15:87:a6:cb:37:91:bb:6b:66:46: 0a:bb:f8:49:82:76:14:b1:16:32:e4:95:29:0c:b7: 36:63:bd:05:cd:3b:98:8a:c5:cb:e9:57:83:85:6a: 81:cf:b0:18:2d:be:e4:cf:bd:b8:90:aa:ec:c8:46: 49:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:65:82:92:73:A4:BE:A5:B2:46:9E:5C:4B:CF:26:42:40:6C:E6:EA X509v3 Authority Key Identifier: keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/tmWCknOkvqWyRp5cS88mQkBs5uo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:e44::/31 Signature Algorithm: sha256WithRSAEncryption 64:d8:08:f9:15:19:33:68:54:ca:da:24:03:44:a0:38:12:02: 9d:f6:06:5b:85:7f:6b:c6:2b:eb:7e:66:ae:ec:03:16:40:64: 10:1b:51:e3:b6:99:21:ed:bd:f0:c0:85:07:b9:16:aa:5b:d9: eb:28:ac:2e:15:e8:ac:15:5d:96:e6:50:bd:88:dd:77:54:3c: c6:ec:77:37:35:7d:18:a4:dc:22:b8:72:44:a1:b5:6c:36:90: 0e:34:cd:cc:4e:8d:56:22:31:c4:70:86:f8:9a:d3:8f:3d:d1: 34:0f:5b:6b:7b:b7:1a:69:c6:27:aa:65:91:9f:e5:9a:49:60: eb:b9:b0:53:ae:21:84:9f:00:f0:f0:2c:80:a8:6b:a1:66:f6: 19:2f:eb:b4:5a:99:96:ad:af:7d:13:f8:29:0f:69:bf:78:e6: 6a:a8:03:9a:2f:7e:93:4d:b6:d8:e6:32:6d:68:40:72:4f:44: d8:e9:e7:6b:f5:ba:cb:45:0f:2e:ff:2e:a5:f0:31:7f:27:2c: 5b:4e:b4:74:13:9b:b5:42:fa:17:9f:63:8b:81:c9:8d:9c:c9: 65:85:53:e0:6a:a1:35:b3:b8:8e:6d:c4:50:c8:72:19:fd:08: 9b:42:0f:17:22:a2:b2:7f:16:c8:32:7d:fa:98:c5:15:d0:69: 19:1a:af:06 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQTAy QzVDNDNDMDBGMTRFODVCNUIwNzU5OUVERDI2N0M1QTJCNEQyMB4XDTI1MDEzMTAx MzIyNVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQjY2NTgyOTI3M0E0QkVB NUIyNDY5RTVDNEJDRjI2NDI0MDZDRTZFQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL4l/PVgLGhGW4m9ZEKCPFjL3RyfcdGn72T79/uB+SqqmtDu66ap WwTI/ukaLp+VRLrtgX8L24y3IIryk9aRd+sDNKEJhm8v8Phvy3RQ+WQ62GyjCeSH lfXhkYUlkrfz61t1AddU0cCbt+ym93Y9WLmfh/hAwj51nVDemOhZFBHJO5xXrwo3 ISlKlZ3Mg4B6y8bsM86f8oucFyJl/8AlSsQd2kno+hyirS8SCtk/+J6tnB2V6uIS fNk2RaynLki2r2sAd7KpI/AVh6bLN5G7a2ZGCrv4SYJ2FLEWMuSVKQy3NmO9Bc07 mIrFy+lXg4Vqgc+wGC2+5M+9uJCq7MhGSdkCAwEAAaOCAikwggIlMB0GA1UdDgQW BBS2ZYKSc6S+pbJGnlxLzyZCQGzm6jAfBgNVHSMEGDAWgBTKAsXEPADxToW1sHWZ 7dJnxaK00jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNjgveWdMRnhEd0E4VTZGdGJCMW1lM1NaOFdpdE5JLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveWdMRnhEd0E4VTZGdGJCMW1lM1Na OFdpdE5JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDY4L3RtV0Nrbk9rdnFXeVJwNWNTODhtUWtCczV1by5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQEgAQ5EMA0GCSqGSIb3DQEBCwUAA4IBAQBk2Aj5FRkzaFTK2iQDRKA4 EgKd9gZbhX9rxivrfmau7AMWQGQQG1Hjtpkh7b3wwIUHuRaqW9nrKKwuFeisFV2W 5lC9iN13VDzG7Hc3NX0YpNwiuHJEobVsNpAONM3MTo1WIjHEcIb4mtOPPdE0D1tr e7caacYnqmWRn+WaSWDrubBTriGEnwDw8CyAqGuhZvYZL+u0WpmWra99E/gpD2m/ eOZqqAOaL36TTbbY5jJtaEByT0TY6edr9brLRQ8u/y6l8DF/JyxbTrR0E5u1QvoX n2OLgcmNnMllhVPgaqE1s7iObcRQyHIZ/QibQg8XIqKyfxbIMn36mMUV0GkZGq8G -----END CERTIFICATE-----Generated at Sat Apr 5 23:09:13 2025 by rpki-client