$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/HJnchISqIOQnXFELk-EmV_H-tzg.roa File: HJnchISqIOQnXFELk-EmV_H-tzg.roa (raw, json) Hash identifier: cgwt9ngr/+LB6JQ3Cj+tPLzGRTfd67aV3sSqdiDihng= Subject key identifier: 1C:99:DC:84:84:AA:20:E4:27:5C:51:0B:93:E1:26:57:F1:FE:B7:38 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0342 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HJnchISqIOQnXFELk-EmV_H-tzg.roa Signing time: Thu 23 Jan 2025 01:10:45 +0000 ROA not before: Thu 23 Jan 2025 01:10:45 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 182.236.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 03:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 834 (0x342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 23 01:10:45 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=1C99DC8484AA20E4275C510B93E12657F1FEB738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a4:ff:31:c8:0f:20:93:8f:ff:60:6d:19:99: c7:8a:5e:55:0c:06:b4:7f:a6:a6:bf:a4:7f:7d:37: 4c:34:56:7c:85:81:59:00:8c:9c:e7:50:d2:f3:9b: 35:42:d1:80:08:0b:56:09:33:82:11:48:a4:93:b8: 22:91:59:0f:c9:c8:49:54:6a:d2:b0:ee:f2:89:84: ca:fd:d0:16:5d:c5:ed:cc:70:76:a4:0f:4c:d1:ca: 97:6e:da:1a:22:39:11:01:48:c8:fb:b9:d4:d1:a4: ad:98:46:71:47:c2:ed:63:01:7a:ea:57:b5:b6:9b: d4:42:57:92:36:52:a9:5d:4f:f3:a4:b4:57:61:e2: c5:a3:44:dd:55:b6:4d:0a:cd:47:71:05:24:e3:fa: 00:46:b4:ce:db:4b:eb:4b:af:61:e1:06:72:28:c0: 0e:b0:4f:d3:ed:64:6b:5f:45:e0:10:6c:37:e1:7a: 16:86:01:b7:60:45:e9:36:b3:80:d4:b2:91:56:6a: 3a:c1:96:d7:14:b1:3c:c6:fc:e4:9b:91:ca:6b:84: 82:b0:e2:bf:d6:61:c3:90:5c:16:fb:92:08:4c:88: 90:44:63:7a:d0:81:2e:aa:e6:d9:02:61:f0:7d:03: 99:90:dd:6a:40:b9:b9:fc:3e:a2:7e:41:ec:c5:5a: bd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:99:DC:84:84:AA:20:E4:27:5C:51:0B:93:E1:26:57:F1:FE:B7:38 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HJnchISqIOQnXFELk-EmV_H-tzg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.236.0.0/22 Signature Algorithm: sha256WithRSAEncryption 26:0e:ec:e8:c5:df:9c:2d:ee:7d:dd:5a:76:01:b2:02:43:99: ac:15:18:d6:9c:e6:f3:af:6f:22:fb:43:c1:6c:50:53:5e:b5: c7:b0:9a:6b:28:22:23:fa:05:65:0c:4f:92:e2:b4:c2:74:21: 14:27:9c:69:12:e0:df:b0:dd:83:61:01:8f:6e:da:48:69:40: 3e:cb:02:ca:6e:9b:77:ff:c3:46:8f:57:f4:b8:8e:5c:df:3b: e8:5b:3d:d8:27:71:44:5d:53:e4:a1:b8:24:bd:0b:50:09:d5: 1a:65:7c:6e:d6:96:68:de:b3:28:92:16:78:b6:4a:30:55:92: f1:3a:9a:9e:74:52:ac:51:2c:99:06:32:75:59:36:ff:1d:c5: 57:ae:c4:94:e4:61:d7:e2:36:ea:2e:6d:cd:17:6a:f5:fb:77: 4a:08:cf:78:e0:8d:a9:fb:a4:b1:71:63:f5:3b:95:d0:24:67: 58:7a:39:66:27:84:ff:e6:25:51:df:8b:c7:fd:fe:50:71:17: 87:26:9a:f3:80:a0:79:c8:be:65:de:a5:30:ed:68:7a:07:af: 03:ff:fb:fc:56:d3:b7:67:1f:fb:c4:40:42:76:e7:df:e3:5d: 84:0f:35:15:02:b9:bd:a6:29:cc:e8:a7:c1:f6:31:19:06:62: 62:b2:af:c9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjMw MTEwNDVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFDOTlEQzg0ODRBQTIw RTQyNzVDNTEwQjkzRTEyNjU3RjFGRUI3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTpP8xyA8gk4//YG0ZmceKXlUMBrR/pqa/pH99N0w0VnyFgVkA jJznUNLzmzVC0YAIC1YJM4IRSKSTuCKRWQ/JyElUatKw7vKJhMr90BZdxe3McHak D0zRypdu2hoiOREBSMj7udTRpK2YRnFHwu1jAXrqV7W2m9RCV5I2UqldT/OktFdh 4sWjRN1Vtk0KzUdxBSTj+gBGtM7bS+tLr2HhBnIowA6wT9PtZGtfReAQbDfhehaG AbdgRek2s4DUspFWajrBltcUsTzG/OSbkcprhIKw4r/WYcOQXBb7kghMiJBEY3rQ gS6q5tkCYfB9A5mQ3WpAubn8PqJ+QezFWr1/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHJnchISqIOQnXFELk+EmV/H+tzgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0hKbmNoSVNxSU9RblhGRUxrLUVtVl9ILXR6Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK27AAwDQYJKoZIhvcNAQELBQADggEBACYO7OjF35wt7n3dWnYBsgJDmawV GNac5vOvbyL7Q8FsUFNetcewmmsoIiP6BWUMT5LitMJ0IRQnnGkS4N+w3YNhAY9u 2khpQD7LAspum3f/w0aPV/S4jlzfO+hbPdgncURdU+ShuCS9C1AJ1RplfG7Wlmje syiSFni2SjBVkvE6mp50UqxRLJkGMnVZNv8dxVeuxJTkYdfiNuoubc0XavX7d0oI z3jgjan7pLFxY/U7ldAkZ1h6OWYnhP/mJVHfi8f9/lBxF4cmmvOAoHnIvmXepTDt aHoHrwP/+/xW07dnH/vEQEJ259/jXYQPNRUCub2mKczop8H2MRkGYmKyr8k= -----END CERTIFICATE-----Generated at Fri Apr 18 08:31:28 2025 by rpki-client