$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ObGHWCcjerEtbldLGg9ie8xIEyU.roa File: ObGHWCcjerEtbldLGg9ie8xIEyU.roa (raw, json) Hash identifier: ILJdQVU4FoLxUUbYMTwFfvapMl4LYr7WMDlOgdSjQZo= Subject key identifier: 39:B1:87:58:27:23:7A:B1:2D:6E:57:4B:1A:0F:62:7B:CC:48:13:25 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0320 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ObGHWCcjerEtbldLGg9ie8xIEyU.roa Signing time: Thu 24 Oct 2024 01:24:06 +0000 ROA not before: Thu 24 Oct 2024 01:24:06 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 210.159.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 800 (0x320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 24 01:24:06 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=39B1875827237AB12D6E574B1A0F627BCC481325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:58:ae:76:ea:f7:b8:b4:33:89:d7:f5:aa: 9c:e5:ac:0e:c8:2f:37:13:24:9b:1e:23:9e:82:75: b4:10:57:73:28:f7:05:ad:be:9e:26:63:c5:de:cb: e2:40:0d:73:1f:d0:79:7f:91:49:e0:32:48:83:81: a7:3a:aa:26:fe:35:8a:7d:cc:73:65:7e:7a:94:d4: 0e:c9:0a:ff:47:01:98:1e:e3:74:14:17:b9:82:21: 6d:ab:2d:95:05:ab:07:c5:27:be:6b:2f:ec:da:08: f5:96:4b:03:79:d6:ba:70:dc:e9:12:ed:a7:3e:50: 70:0d:65:ff:ab:45:2a:49:18:03:b1:f8:ee:16:77: 77:7e:12:c3:0b:db:25:ed:85:a6:57:d5:bc:7a:48: 4a:36:bc:e2:92:2b:da:3b:a0:77:90:e4:74:c9:25: 26:85:b6:58:ca:fe:97:b8:a0:27:58:4d:99:b2:71: 26:73:2e:88:0f:e2:65:25:8c:3d:22:83:f4:49:8c: a8:f6:cc:67:d9:8d:d2:62:c8:6d:44:0b:6d:08:2f: e0:47:40:af:4f:73:13:0a:6b:19:e3:50:86:f3:e3: fe:e6:45:9d:9a:ad:14:cd:0c:ae:b1:f3:22:ec:2d: 0f:f6:4b:64:a1:d2:7b:84:b4:f7:7b:8a:fc:ee:a2: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:87:58:27:23:7A:B1:2D:6E:57:4B:1A:0F:62:7B:CC:48:13:25 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ObGHWCcjerEtbldLGg9ie8xIEyU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.159.144.0/22 Signature Algorithm: sha256WithRSAEncryption 32:04:1c:05:e2:38:e3:41:71:c3:25:8c:f4:ff:ab:41:1d:b3: d1:03:9b:38:27:e2:14:26:d5:62:3b:7d:07:ef:85:bc:4f:50: e5:c3:4d:f0:49:31:e8:8e:70:88:5c:7d:c2:4a:ed:93:a5:a2: 15:05:08:b5:79:1d:58:f3:b7:6e:10:fb:03:7d:35:01:4a:1b: ee:e0:af:aa:cc:c1:3c:fb:cb:4b:1c:10:5a:ce:82:be:6f:0e: 23:bd:e7:4b:e4:95:86:54:26:cc:55:30:68:a8:b5:12:c3:65: 85:e9:f5:c3:5b:e1:98:e7:ab:81:89:3d:d1:fd:09:0d:85:23: 75:79:01:93:48:5f:7c:41:8b:2b:b4:33:c2:f8:eb:f1:5b:06: e5:29:e6:59:c4:23:bb:26:a4:d6:d8:ca:e3:58:b2:d3:22:fe: 89:6e:61:51:94:2a:9c:3d:9b:73:8a:55:86:eb:47:f6:40:ed: 7d:29:bd:e4:6e:52:7a:b9:eb:73:f5:50:51:68:07:c8:4b:3f: ac:69:ef:12:9d:cb:6d:db:a6:37:36:2d:65:2b:bb:31:28:e1: e8:4e:8c:e0:a8:1a:a6:b4:2e:ab:67:15:a0:cd:b3:67:bc:62: ee:d8:d7:69:24:20:7f:10:ec:b3:74:01:96:3d:41:98:2a:07: 5c:f2:f6:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjQw MTI0MDZaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5QjE4NzU4MjcyMzdB QjEyRDZFNTc0QjFBMEY2MjdCQ0M0ODEzMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ6liudur3uLQzidf1qpzlrA7ILzcTJJseI56CdbQQV3Mo9wWt vp4mY8Xey+JADXMf0Hl/kUngMkiDgac6qib+NYp9zHNlfnqU1A7JCv9HAZge43QU F7mCIW2rLZUFqwfFJ75rL+zaCPWWSwN51rpw3OkS7ac+UHANZf+rRSpJGAOx+O4W d3d+EsML2yXthaZX1bx6SEo2vOKSK9o7oHeQ5HTJJSaFtljK/pe4oCdYTZmycSZz LogP4mUljD0ig/RJjKj2zGfZjdJiyG1EC20IL+BHQK9PcxMKaxnjUIbz4/7mRZ2a rRTNDK6x8yLsLQ/2S2Sh0nuEtPd7ivzuooA9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUObGHWCcjerEtbldLGg9ie8xIEyUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L09iR0hXQ2NqZXJFdGJsZExHZzlpZTh4SUV5VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALSn5AwDQYJKoZIhvcNAQELBQADggEBADIEHAXiOONBccMljPT/q0Eds9ED mzgn4hQm1WI7fQfvhbxPUOXDTfBJMeiOcIhcfcJK7ZOlohUFCLV5HVjzt24Q+wN9 NQFKG+7gr6rMwTz7y0scEFrOgr5vDiO950vklYZUJsxVMGiotRLDZYXp9cNb4Zjn q4GJPdH9CQ2FI3V5AZNIX3xBiyu0M8L46/FbBuUp5lnEI7smpNbYyuNYstMi/olu YVGUKpw9m3OKVYbrR/ZA7X0pveRuUnq563P1UFFoB8hLP6xp7xKdy23bpjc2LWUr uzEo4ehOjOCoGqa0LqtnFaDNs2e8Yu7Y12kkIH8Q7LN0AZY9QZgqB1zy9kI= -----END CERTIFICATE-----Generated at Sat Apr 5 17:30:23 2025 by rpki-client