$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/W9HuITGx-sNn6oQafM_xQLYYrNw.roa File: W9HuITGx-sNn6oQafM_xQLYYrNw.roa (raw, json) Hash identifier: Ced219LJxcvLzER221+lbp5AeKvXFwCXH5ox6vzW87E= Subject key identifier: 5B:D1:EE:21:31:B1:FA:C3:67:EA:84:1A:7C:CF:F1:40:B6:18:AC:DC Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Certificate serial: 76 Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/W9HuITGx-sNn6oQafM_xQLYYrNw.roa Signing time: Fri 31 Jan 2025 01:34:45 +0000 ROA not before: Fri 31 Jan 2025 01:34:45 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9622 IP address blocks: 103.235.124.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Validity Not Before: Jan 31 01:34:45 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=5BD1EE2131B1FAC367EA841A7CCFF140B618ACDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:a0:7a:e2:4d:69:3a:24:56:67:46:5f:56: 4b:cc:14:0a:67:66:04:96:4a:b7:c7:d3:4c:f6:b1: b9:03:30:22:1d:ed:9c:6a:23:49:d5:22:6b:15:6e: bb:a9:73:bf:0b:cc:c0:8e:7e:d4:f6:4a:57:83:51: 3d:0a:07:68:f6:55:03:e2:a2:0f:73:52:a4:39:5a: 97:28:d5:8e:49:b8:f7:ea:d9:01:bb:0b:30:d9:5c: b3:f9:a6:00:21:73:ff:84:55:49:0d:11:c5:8e:9a: ba:f5:0e:bf:89:a8:9a:97:7c:8e:89:18:d6:42:70: 98:e7:fc:08:28:eb:7f:5e:04:e4:1e:4b:d8:8f:72: 4f:0e:a6:59:45:ad:1a:b5:2b:9f:56:94:50:02:17: 09:62:57:87:eb:0d:1a:61:40:cf:04:f2:6a:13:cd: d6:6a:d1:b6:9f:62:b7:bc:7a:a0:df:08:68:5f:11: 8d:e3:94:60:61:fc:4d:22:f2:3a:b8:65:4a:49:9d: cf:6c:9a:16:4e:64:51:8a:c3:ef:20:08:7f:cd:ba: 42:66:5c:9c:d1:30:7f:0c:46:15:64:25:5e:99:03: f2:7e:3d:7e:8b:66:0e:24:18:e5:11:a0:a4:63:dc: 40:c8:c7:3f:a3:b8:3d:12:ce:84:d8:30:ac:e0:63: 28:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:EE:21:31:B1:FA:C3:67:EA:84:1A:7C:CF:F1:40:B6:18:AC:DC X509v3 Authority Key Identifier: keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/W9HuITGx-sNn6oQafM_xQLYYrNw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.235.124.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:4b:45:f4:2f:8f:62:7a:66:62:89:17:3e:94:39:ca:b6:25: b3:f9:e3:a8:8a:52:60:bc:af:70:f0:4f:3f:bd:9c:7c:09:6e: ed:cd:db:5b:39:c9:e8:49:b9:29:31:12:34:e7:76:d6:30:41: e9:1e:bf:e8:ea:55:23:79:c9:2b:c8:93:ef:2d:0e:32:bd:a5: 8e:3b:c7:6a:2d:ec:a7:05:30:cd:6b:8b:3e:b8:4a:e7:54:91: 3e:7d:cb:74:05:d2:4c:54:a2:76:cf:4a:d8:1d:09:5d:7c:04: 00:74:48:68:37:f1:b2:ac:3e:92:47:77:01:37:b9:a6:7d:6d: 8d:c4:f2:11:62:fe:65:3e:1e:fc:ad:df:85:3a:09:1b:12:3c: 48:05:cf:e1:d7:be:22:46:f9:e3:5f:a2:90:2d:74:b1:c7:d2: 78:0e:bf:68:b9:92:51:94:9b:17:f1:c8:99:15:c3:86:cc:7e: 67:19:45:ef:92:98:f9:69:65:5b:fa:b9:6e:a2:0e:ad:d0:3c: 61:8d:17:be:d6:6b:9a:84:ac:f7:da:45:87:3e:a1:7e:29:51: 52:74:75:cd:6b:5d:d1:5a:62:59:94:f8:8b:e0:10:c0:75:b6: fe:c8:54:0b:e2:4e:85:88:1f:76:66:57:a7:0c:b5:de:5a:84: 6a:bc:a9:eb -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDA1 NUIyREFBQzQ4ODc4Q0M5QjExMjdBMjlDRjExNjY2OTIwQTIzMB4XDTI1MDEzMTAx MzQ0NVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNUJEMUVFMjEzMUIxRkFD MzY3RUE4NDFBN0NDRkYxNDBCNjE4QUNEQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN3CoHriTWk6JFZnRl9WS8wUCmdmBJZKt8fTTPaxuQMwIh3tnGoj SdUiaxVuu6lzvwvMwI5+1PZKV4NRPQoHaPZVA+KiD3NSpDlalyjVjkm49+rZAbsL MNlcs/mmACFz/4RVSQ0RxY6auvUOv4mompd8jokY1kJwmOf8CCjrf14E5B5L2I9y Tw6mWUWtGrUrn1aUUAIXCWJXh+sNGmFAzwTyahPN1mrRtp9it7x6oN8IaF8RjeOU YGH8TSLyOrhlSkmdz2yaFk5kUYrD7yAIf826QmZcnNEwfwxGFWQlXpkD8n49fotm DiQY5RGgpGPcQMjHP6O4PRLOhNgwrOBjKH0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRb0e4hMbH6w2fqhBp8z/FAthis3DAfBgNVHSMEGDAWgBRdBVstqsSIeMybESei nPEWZpIKIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzkzL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1hU0NpTS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1h U0NpTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zOTMvVzlIdUlUR3gtc05uNm9RYWZNX3hRTFlZck53LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfrfDANBgkqhkiG9w0BAQsFAAOCAQEAD0tF9C+PYnpmYokXPpQ5yrYls/nj qIpSYLyvcPBPP72cfAlu7c3bWznJ6Em5KTESNOd21jBB6R6/6OpVI3nJK8iT7y0O Mr2ljjvHai3spwUwzWuLPrhK51SRPn3LdAXSTFSids9K2B0JXXwEAHRIaDfxsqw+ kkd3ATe5pn1tjcTyEWL+ZT4e/K3fhToJGxI8SAXP4de+Ikb541+ikC10scfSeA6/ aLmSUZSbF/HImRXDhsx+ZxlF75KY+WllW/q5bqIOrdA8YY0XvtZrmoSs99pFhz6h filRUnR1zWtd0VpiWZT4i+AQwHW2/shUC+JOhYgfdmZXpwy13lqEaryp6w== -----END CERTIFICATE-----Generated at Sun Apr 6 20:01:33 2025 by rpki-client