$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gL5cI4vmNzDQQgzXDpkPlIhWMOI.roa File: gL5cI4vmNzDQQgzXDpkPlIhWMOI.roa (raw, json) Hash identifier: If3nJbXIvk0epzW/oyHQv9q1CExO78Wxs1pXlsWxkY0= Subject key identifier: 80:BE:5C:23:8B:E6:37:30:D0:42:0C:D7:0E:99:0F:94:88:56:30:E2 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 03BB Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gL5cI4vmNzDQQgzXDpkPlIhWMOI.roa Signing time: Tue 31 Dec 2024 01:31:44 +0000 ROA not before: Tue 31 Dec 2024 01:31:44 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 9605 IP address blocks: 240a:61:5c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Dec 31 01:31:44 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=80BE5C238BE63730D0420CD70E990F94885630E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:9a:dc:af:9b:85:e0:bf:e4:c3:f2:94:d9: 17:df:0c:ae:ea:31:cf:f4:4c:26:38:08:79:d9:7d: 24:5e:b2:7e:e7:04:ff:e1:28:a9:92:57:6a:13:36: d4:27:05:e7:31:4d:d0:85:9f:d1:52:3c:a8:df:b1: 76:4a:a6:17:ae:c9:70:33:68:c9:9e:03:cc:6d:0c: 27:79:81:68:49:09:7e:85:72:c3:f1:ad:46:31:08: 31:b3:74:a6:a0:da:88:32:2c:5c:b1:89:0b:31:59: d6:9e:cc:2c:71:54:ed:7e:ac:60:c6:4d:88:a1:32: 0d:c4:f3:ab:b4:8d:31:cc:50:13:69:e1:d0:de:41: e9:8c:6a:91:6e:bc:4a:a5:4a:3d:cd:54:60:d0:9f: 3c:cf:e3:bb:6c:6c:52:a0:0d:83:bd:a9:cc:2f:cb: df:9a:9f:b8:e7:59:95:c2:b8:92:06:da:ee:f7:c7: 48:a2:d6:3f:39:d7:14:4d:65:a8:ef:5b:df:45:3f: 00:a7:d4:82:e8:b9:b8:20:3b:94:f7:d0:d3:ac:e5: 3f:2d:42:e4:ca:ab:98:66:4d:78:9f:6e:47:af:02: 14:8b:1c:38:ee:cc:24:e8:7a:c3:0f:64:e3:fc:d6: 8e:42:ff:bc:e2:a7:df:92:cf:27:87:32:06:d4:a1: a3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BE:5C:23:8B:E6:37:30:D0:42:0C:D7:0E:99:0F:94:88:56:30:E2 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gL5cI4vmNzDQQgzXDpkPlIhWMOI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:61:5c00::/40 Signature Algorithm: sha256WithRSAEncryption 7b:15:64:6e:89:eb:8f:ce:53:a5:4c:72:65:09:e9:81:82:79: a6:aa:0a:25:38:9b:91:cd:99:a5:96:45:40:ef:10:4c:a6:4f: 40:7f:c3:39:86:29:59:dc:ef:53:6f:3d:a8:59:7b:f5:d4:a2: 48:25:60:d0:5a:44:25:af:10:18:85:66:9e:a9:30:79:f8:2f: e8:96:58:da:c9:9b:e6:0e:65:e6:a5:a3:63:78:46:61:3f:08: db:d4:92:f8:aa:5a:db:b0:41:ad:9f:a7:6e:52:d7:99:14:97: c1:87:ca:dc:64:8b:4d:bf:b7:68:c5:88:13:33:41:32:ec:a0: 17:e9:5c:ba:46:a9:e4:e1:bc:72:6e:dc:ac:6a:91:0e:39:6c: 64:6c:ce:a1:05:ed:41:e6:53:7d:a6:6c:57:22:2f:05:92:36: bb:b0:27:ad:89:a4:ce:b2:dd:22:4a:4f:2a:8c:60:f8:6f:ce: 72:7f:a8:f4:c1:22:6c:c7:f0:c9:02:79:95:f5:65:10:9d:b5: 9f:72:d0:35:f7:d4:12:dd:d4:a6:cd:84:fb:05:95:df:1f:15: 50:66:76:53:d9:a2:a4:3c:d3:db:cb:d3:fa:99:07:57:2b:c8: 35:d2:78:1b:13:c6:59:84:3c:e4:46:1e:76:08:2e:23:31:20: c3:07:34:f4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICA7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDEyMzEw MTMxNDRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgwQkU1QzIzOEJFNjM3 MzBEMDQyMENENzBFOTkwRjk0ODg1NjMwRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtmZrcr5uF4L/kw/KU2RffDK7qMc/0TCY4CHnZfSResn7nBP/h KKmSV2oTNtQnBecxTdCFn9FSPKjfsXZKpheuyXAzaMmeA8xtDCd5gWhJCX6FcsPx rUYxCDGzdKag2ogyLFyxiQsxWdaezCxxVO1+rGDGTYihMg3E86u0jTHMUBNp4dDe QemMapFuvEqlSj3NVGDQnzzP47tsbFKgDYO9qcwvy9+an7jnWZXCuJIG2u73x0ii 1j851xRNZajvW99FPwCn1ILoubggO5T30NOs5T8tQuTKq5hmTXifbkevAhSLHDju zCToesMPZOP81o5C/7zip9+SzyeHMgbUoaNnAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUgL5cI4vmNzDQQgzXDpkPlIhWMOIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9nTDVjSTR2bU56RFFRZ3pYRHBrUGxJaFdNT0ku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAYVwwDQYJKoZIhvcNAQELBQADggEBAHsVZG6J64/OU6VMcmUJ 6YGCeaaqCiU4m5HNmaWWRUDvEEymT0B/wzmGKVnc71NvPahZe/XUokglYNBaRCWv EBiFZp6pMHn4L+iWWNrJm+YOZealo2N4RmE/CNvUkviqWtuwQa2fp25S15kUl8GH ytxki02/t2jFiBMzQTLsoBfpXLpGqeThvHJu3KxqkQ45bGRszqEF7UHmU32mbFci LwWSNruwJ62JpM6y3SJKTyqMYPhvznJ/qPTBImzH8MkCeZX1ZRCdtZ9y0DX31BLd 1KbNhPsFld8fFVBmdlPZoqQ809vL0/qZB1cryDXSeBsTxlmEPORGHnYILiMxIMMH NPQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:45 2025 by rpki-client