$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30299/r7umhPD94LHQiDyR4A-OTUL7EXE.roa File: r7umhPD94LHQiDyR4A-OTUL7EXE.roa (raw, json) Hash identifier: 047wsKda4MH7l4C4p1EdfwsMpOnRXhj5dvF4llKUdok= Subject key identifier: AF:BB:A6:84:F0:FD:E0:B1:D0:88:3C:91:E0:0F:8E:4D:42:FB:11:71 Certificate issuer: /CN=C441193AC56882F9FD638B6CA5F07811C61F16E0 Certificate serial: 1E Authority key identifier: C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/r7umhPD94LHQiDyR4A-OTUL7EXE.roa Signing time: Tue 31 Dec 2024 01:31:49 +0000 ROA not before: Tue 31 Dec 2024 01:31:49 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 131923 IP address blocks: 2401:5ac0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C441193AC56882F9FD638B6CA5F07811C61F16E0 Validity Not Before: Dec 31 01:31:49 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=AFBBA684F0FDE0B1D0883C91E00F8E4D42FB1171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:13:f1:92:58:b8:4e:c1:05:ec:99:60:e3: eb:5d:e3:25:e6:e5:8a:1b:15:1c:e6:2b:09:20:6f: 03:ee:c0:e4:dc:bc:53:1a:3b:01:55:94:6b:6b:0e: 86:2d:bd:4a:b8:d1:81:4c:ed:b2:ad:17:7e:e4:83: fe:75:7a:c7:19:9c:bf:66:02:35:86:6e:32:90:99: 77:39:de:0c:bd:af:f0:fe:57:fc:21:79:72:53:de: 4b:63:0e:62:03:39:6a:e5:a0:85:7b:d4:2e:6b:1c: 5c:c3:24:fb:28:83:b3:a2:b2:57:14:2c:bf:fe:03: 63:f3:3b:d3:2e:56:8a:bf:bd:bd:5b:1e:91:c2:3a: 8e:f8:76:0f:1a:5f:2c:ab:00:dd:b0:19:37:97:eb: dd:03:8c:43:bf:58:67:71:24:01:0a:7d:b3:6b:23: 21:7c:92:18:a3:29:95:58:2f:af:43:80:2f:43:5a: 96:51:68:da:ec:40:7c:80:00:41:0b:5c:17:85:d3: a4:6c:ee:fc:73:c4:e7:82:ac:97:cc:c6:fa:79:51: 97:0d:51:8a:53:7e:a3:2b:df:db:cf:4c:a2:22:92: ee:47:d8:fa:5f:5d:22:bc:ae:d8:e7:a7:ab:6f:98: 13:64:fd:57:bd:3b:ff:d3:0a:4b:2f:cd:40:52:43: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BB:A6:84:F0:FD:E0:B1:D0:88:3C:91:E0:0F:8E:4D:42:FB:11:71 X509v3 Authority Key Identifier: keyid:C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/r7umhPD94LHQiDyR4A-OTUL7EXE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:5ac0::/32 Signature Algorithm: sha256WithRSAEncryption 2b:6c:03:85:58:f6:51:69:0d:f1:81:9b:1f:ff:3d:76:c7:c9: 21:9d:6e:a0:a4:fc:d7:ac:eb:7d:30:14:f6:40:0f:cc:d3:61: cf:e2:31:7f:a3:25:7f:b5:ba:83:29:6a:f7:cd:f1:35:ba:67: 0a:c2:4a:b8:f4:9f:42:3e:be:16:db:cf:bd:66:62:e4:f2:15: 23:51:d4:36:92:f2:a4:cc:01:89:8f:fd:5e:89:42:8c:cd:65: 61:dd:78:fe:5a:5c:7d:c2:91:8c:24:8f:2c:a1:f7:de:28:a1: bd:7e:ca:75:9d:f2:e3:c3:61:53:8c:1f:69:3f:be:51:f1:e8: 93:81:30:72:f0:bb:34:50:e5:64:6d:b3:51:25:6b:33:1b:2c: 1c:a0:e0:a0:70:a1:7a:d7:17:ed:21:0f:2d:82:8f:c1:10:74: 65:08:8e:91:93:c9:24:0a:3f:dd:6b:5e:2b:2f:c4:15:19:6d: d1:f4:ad:16:68:39:ae:1f:7f:f6:24:1c:69:35:34:74:09:24: f1:c9:09:2d:7a:8c:ec:0d:63:de:85:b4:eb:c4:93:7e:56:12: 70:97:d1:72:c2:15:e7:fc:43:df:ba:47:60:4c:b8:e3:b1:49: ad:0e:6a:57:51:2e:9d:6b:16:b8:63:bb:7c:5f:b9:5e:1c:b7: 64:13:f9:0f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDQx MTkzQUM1Njg4MkY5RkQ2MzhCNkNBNUYwNzgxMUM2MUYxNkUwMB4XDTI0MTIzMTAx MzE0OVoXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoQUZCQkE2ODRGMEZERTBC MUQwODgzQzkxRTAwRjhFNEQ0MkZCMTE3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK82E/GSWLhOwQXsmWDj613jJeblihsVHOYrCSBvA+7A5Ny8Uxo7 AVWUa2sOhi29SrjRgUztsq0XfuSD/nV6xxmcv2YCNYZuMpCZdzneDL2v8P5X/CF5 clPeS2MOYgM5auWghXvULmscXMMk+yiDs6KyVxQsv/4DY/M70y5Wir+9vVsekcI6 jvh2DxpfLKsA3bAZN5fr3QOMQ79YZ3EkAQp9s2sjIXySGKMplVgvr0OAL0NallFo 2uxAfIAAQQtcF4XTpGzu/HPE54Ksl8zG+nlRlw1RilN+oyvf289MoiKS7kfY+l9d Iryu2Oenq2+YE2T9V707/9MKSy/NQFJDlesCAwEAAaOCAikwggIlMB0GA1UdDgQW BBSvu6aE8P3gsdCIPJHgD45NQvsRcTAfBgNVHSMEGDAWgBTEQRk6xWiC+f1ji2yl 8HgRxh8W4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyOTkveEVFWk9zVm9ndm45WTR0c3BmQjRFY1lmRnVBLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEVFWk9zVm9ndm45WTR0c3BmQjRF Y1lmRnVBLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjk5L3I3dW1oUEQ5NExIUWlEeVI0QS1PVFVMN0VYRS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAVrAMA0GCSqGSIb3DQEBCwUAA4IBAQArbAOFWPZRaQ3xgZsf/z12 x8khnW6gpPzXrOt9MBT2QA/M02HP4jF/oyV/tbqDKWr3zfE1umcKwkq49J9CPr4W 28+9ZmLk8hUjUdQ2kvKkzAGJj/1eiUKMzWVh3Xj+Wlx9wpGMJI8soffeKKG9fsp1 nfLjw2FTjB9pP75R8eiTgTBy8Ls0UOVkbbNRJWszGywcoOCgcKF61xftIQ8tgo/B EHRlCI6Rk8kkCj/da14rL8QVGW3R9K0WaDmuH3/2JBxpNTR0CSTxyQkteozsDWPe hbTrxJN+VhJwl9FywhXn/EPfukdgTLjjsUmtDmpXUS6daxa4Y7t8X7leHLdkE/kP -----END CERTIFICATE-----Generated at Sat Apr 5 17:23:04 2025 by rpki-client