$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/RInYmvdvghgnIuKjtUkT4Bg1FVo.roa File: RInYmvdvghgnIuKjtUkT4Bg1FVo.roa (raw, json) Hash identifier: JEl50Qw9QY5KvSVwXwm45PmmS0/ejinO7mWBoDiuQpY= Subject key identifier: 44:89:D8:9A:F7:6F:82:18:27:22:E2:A3:B5:49:13:E0:18:35:15:5A Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 025D Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RInYmvdvghgnIuKjtUkT4Bg1FVo.roa Signing time: Fri 31 May 2024 01:37:35 +0000 ROA not before: Fri 31 May 2024 01:37:35 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 59.156.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:37:35 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=4489D89AF76F82182722E2A3B54913E01835155A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:cb:de:70:22:40:04:f9:d5:e4:a9:d8:35: ab:81:e8:2e:d9:c1:24:c0:3e:5d:2b:d5:16:50:90: b7:b2:56:1e:70:0e:8c:ee:f7:05:6c:1f:37:ec:15: e3:f5:c6:aa:8f:a6:06:39:46:cc:49:9f:51:9e:d2: 99:c2:80:6a:0b:1b:ee:57:6a:41:0c:70:bb:3e:24: 63:ac:c2:74:ff:72:e3:a1:97:8c:d5:c6:15:51:0a: 82:6e:db:de:dd:43:dd:e7:50:08:37:48:ce:88:61: 6a:5a:2e:87:bd:79:5d:34:fe:66:08:d2:3a:c4:e6: 48:57:ff:f0:eb:75:a7:57:76:fd:a2:84:02:8d:60: 5b:90:2a:c2:1f:45:b1:7a:e9:76:30:f8:3f:3f:43: 4f:e2:f7:33:1f:ee:5f:b2:5e:64:2b:e2:c0:ed:e0: 55:74:45:bb:b4:b5:8e:85:dc:f7:b2:33:a5:64:93: bf:0e:94:78:13:5e:0b:3f:10:2b:90:ea:c1:8e:0c: 0b:7e:35:04:a6:eb:b5:b8:83:cd:01:e8:2b:55:f3: 06:0e:65:78:c3:97:a2:1d:91:44:a7:8c:d4:40:c2: 5a:59:b1:f6:83:6a:78:17:e4:70:ce:98:7f:e7:af: 53:9e:cb:ce:0a:60:fd:07:03:e3:83:7d:0c:08:79: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:89:D8:9A:F7:6F:82:18:27:22:E2:A3:B5:49:13:E0:18:35:15:5A X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RInYmvdvghgnIuKjtUkT4Bg1FVo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.156.128.0/22 Signature Algorithm: sha256WithRSAEncryption 67:d0:a7:91:c7:39:fe:d9:c3:69:47:42:e2:35:1e:51:c2:bb: f6:39:7a:52:00:30:64:26:26:60:90:b1:f5:86:09:a1:08:4d: de:32:32:30:bf:e2:00:2f:8d:2c:c2:81:da:5e:9a:fe:c1:61: c3:b3:38:be:25:7b:89:df:14:8f:f2:f0:69:9e:6b:50:39:00: 92:12:7b:3f:61:2c:96:ee:47:df:f4:65:22:44:67:bf:67:d1: 9a:f3:4a:bb:ea:ec:f0:90:3c:64:49:a7:59:ab:c9:8d:10:3f: 6b:1a:49:87:cf:ab:9d:1d:4e:c4:81:c5:41:c7:aa:ce:80:cc: 95:9b:f6:d6:9e:9a:ff:5f:20:56:81:a9:20:5d:c9:b0:bc:49: 59:73:06:70:43:5d:1e:1e:1b:21:7b:71:be:be:a6:a4:fe:3c: 7a:cf:72:59:b3:8b:28:43:3a:d1:40:fc:c5:ef:d1:31:86:09: d0:de:ff:bd:1f:76:e8:f9:5a:6b:34:04:24:2a:52:97:bd:ae: ae:30:8b:30:e6:ba:c9:88:84:fb:82:c9:f7:ce:b5:8c:79:46: 6f:aa:d8:84:a7:1d:18:93:cc:d1:24:0e:75:19:68:28:37:e0: b0:ca:ab:55:91:69:b1:3e:e9:e0:16:de:87:ee:41:ce:e0:d0: c6:dd:1c:82 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM3MzVaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ0ODlEODlBRjc2Rjgy MTgyNzIyRTJBM0I1NDkxM0UwMTgzNTE1NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9JMvecCJABPnV5KnYNauB6C7ZwSTAPl0r1RZQkLeyVh5wDozu 9wVsHzfsFeP1xqqPpgY5RsxJn1Ge0pnCgGoLG+5XakEMcLs+JGOswnT/cuOhl4zV xhVRCoJu297dQ93nUAg3SM6IYWpaLoe9eV00/mYI0jrE5khX//DrdadXdv2ihAKN YFuQKsIfRbF66XYw+D8/Q0/i9zMf7l+yXmQr4sDt4FV0Rbu0tY6F3PeyM6Vkk78O lHgTXgs/ECuQ6sGODAt+NQSm67W4g80B6CtV8wYOZXjDl6IdkUSnjNRAwlpZsfaD angX5HDOmH/nr1Oey84KYP0HA+ODfQwIeWSNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURInYmvdvghgnIuKjtUkT4Bg1FVowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1JJblltdmR2Z2hnbkl1S2p0VWtUNEJnMUZWby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI7nIAwDQYJKoZIhvcNAQELBQADggEBAGfQp5HHOf7Zw2lHQuI1HlHCu/Y5 elIAMGQmJmCQsfWGCaEITd4yMjC/4gAvjSzCgdpemv7BYcOzOL4le4nfFI/y8Gme a1A5AJISez9hLJbuR9/0ZSJEZ79n0ZrzSrvq7PCQPGRJp1mryY0QP2saSYfPq50d TsSBxUHHqs6AzJWb9taemv9fIFaBqSBdybC8SVlzBnBDXR4eGyF7cb6+pqT+PHrP clmziyhDOtFA/MXv0TGGCdDe/70fduj5Wms0BCQqUpe9rq4wizDmusmIhPuCyffO tYx5Rm+q2ISnHRiTzNEkDnUZaCg34LDKq1WRabE+6eAW3ofuQc7g0MbdHII= -----END CERTIFICATE-----Generated at Sat Apr 5 23:09:25 2025 by rpki-client