$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKTYAYBfiyyTOMhbHiC1PvsRNek.roa File: IKTYAYBfiyyTOMhbHiC1PvsRNek.roa (raw, json) Hash identifier: HmDJLa9IGTIXRmkPw2Dam2WD4OhlXJben8TSzqMShrg= Subject key identifier: 20:A4:D8:01:80:5F:8B:2C:93:38:C8:5B:1E:20:B5:3E:FB:11:35:E9 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0243 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKTYAYBfiyyTOMhbHiC1PvsRNek.roa Signing time: Fri 31 May 2024 01:35:30 +0000 ROA not before: Fri 31 May 2024 01:35:30 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 110.74.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:35:30 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=20A4D801805F8B2C9338C85B1E20B53EFB1135E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:1c:37:ad:64:1f:c5:2f:e4:24:a5:46:8f: 97:5e:58:87:6c:35:b5:73:42:1c:85:68:f6:c8:6c: e9:c2:e8:eb:eb:ae:ce:1f:77:42:1b:71:da:92:6f: d1:85:13:57:d6:e6:8e:0b:6f:cf:ba:d9:9a:35:af: 9b:35:39:7b:be:81:da:b7:6e:c7:12:84:ac:37:b7: 60:a0:70:e3:b7:3e:23:ee:55:2e:7a:f0:88:cf:99: 57:7b:72:7f:50:06:7a:b1:f8:39:c6:43:9b:a3:f3: 02:3d:13:d1:e8:ad:39:21:2a:ba:47:47:c1:f3:bc: 8d:96:53:52:95:a6:c5:25:15:43:42:cc:e2:1d:ff: 1e:19:0c:fc:c3:7f:e1:62:a6:e9:2e:13:b3:d1:d8: 47:ca:cb:90:63:61:90:23:24:65:35:b4:0a:bb:17: 15:03:15:fb:04:15:88:b2:f2:53:d1:f7:fd:18:f0: df:cf:65:80:b1:3f:c3:7a:ea:88:fa:a9:39:b6:89: 11:8d:0a:38:be:d5:30:36:b0:c6:12:80:b6:e5:f6: 6b:b8:19:f9:f6:44:52:44:9d:f4:83:7a:49:d9:5a: 05:37:eb:df:f5:48:df:f1:ce:6a:5a:4d:c0:4e:e9: a2:db:ef:2f:56:6a:2b:63:43:f1:a1:c5:fc:d2:cb: 24:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A4:D8:01:80:5F:8B:2C:93:38:C8:5B:1E:20:B5:3E:FB:11:35:E9 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKTYAYBfiyyTOMhbHiC1PvsRNek.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.74.48.0/20 Signature Algorithm: sha256WithRSAEncryption 86:31:d4:03:e6:c7:fb:6b:06:5b:c7:a3:85:f9:50:6b:8a:5b: c6:d2:fc:a8:ae:31:0b:ad:94:61:dd:05:aa:71:ee:47:cd:cd: bb:8a:4c:5a:bf:d6:10:a4:97:7e:6b:05:99:6c:73:38:44:c4: 3e:d9:d9:fd:7e:ee:2b:02:c4:28:0e:94:ac:da:c5:4c:79:63: e1:9a:aa:2e:b6:ac:cc:b3:d9:e8:de:16:b4:99:0e:32:1b:27: 4e:ea:0f:57:4a:2b:55:a3:bb:91:2e:c3:2d:b1:c8:4c:a2:5c: 99:52:de:2c:d6:ba:c3:2d:b9:97:6f:e2:93:22:22:ff:85:53: 81:ef:87:ef:99:ec:bb:1f:16:8d:de:35:63:a9:c5:45:2a:13: d8:09:33:da:b7:8b:6c:4b:59:7a:e4:02:0c:da:d7:a3:1a:ca: 87:6b:22:c2:aa:c1:6b:c8:25:b4:40:75:a6:c8:44:64:15:6c: 48:f4:85:7e:7e:d1:4e:4a:e3:fc:b6:73:83:03:fc:4b:d1:6c: 4a:c3:d7:af:f2:f5:a1:15:ef:b8:16:36:4d:57:43:43:9d:63: f9:f6:27:48:b8:ec:74:b7:f9:90:ef:52:11:e6:79:f7:7c:7e: 80:f7:d5:e6:f8:c3:c7:be:c7:35:9c:ca:18:3b:2b:30:61:a1: 81:7c:96:53 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM1MzBaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDIwQTREODAxODA1RjhC MkM5MzM4Qzg1QjFFMjBCNTNFRkIxMTM1RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAARw3rWQfxS/kJKVGj5deWIdsNbVzQhyFaPbIbOnC6Ovrrs4f d0IbcdqSb9GFE1fW5o4Lb8+62Zo1r5s1OXu+gdq3bscShKw3t2CgcOO3PiPuVS56 8IjPmVd7cn9QBnqx+DnGQ5uj8wI9E9HorTkhKrpHR8HzvI2WU1KVpsUlFUNCzOId /x4ZDPzDf+FipukuE7PR2EfKy5BjYZAjJGU1tAq7FxUDFfsEFYiy8lPR9/0Y8N/P ZYCxP8N66oj6qTm2iRGNCji+1TA2sMYSgLbl9mu4Gfn2RFJEnfSDeknZWgU369/1 SN/xzmpaTcBO6aLb7y9WaitjQ/GhxfzSyyRjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIKTYAYBfiyyTOMhbHiC1PvsRNekwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0lLVFlBWUJmaXl5VE9NaGJIaUMxUHZzUk5lay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARuSjAwDQYJKoZIhvcNAQELBQADggEBAIYx1APmx/trBlvHo4X5UGuKW8bS /KiuMQutlGHdBapx7kfNzbuKTFq/1hCkl35rBZlsczhExD7Z2f1+7isCxCgOlKza xUx5Y+Gaqi62rMyz2ejeFrSZDjIbJ07qD1dKK1Wju5Euwy2xyEyiXJlS3izWusMt uZdv4pMiIv+FU4Hvh++Z7LsfFo3eNWOpxUUqE9gJM9q3i2xLWXrkAgza16Mayodr IsKqwWvIJbRAdabIRGQVbEj0hX5+0U5K4/y2c4MD/EvRbErD16/y9aEV77gWNk1X Q0OdY/n2J0i47HS3+ZDvUhHmefd8foD31eb4w8e+xzWcyhg7KzBhoYF8llM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:08 2025 by rpki-client