$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/oRxy7gEYr6M88WdeyKMrfV5SfYQ.roa File: oRxy7gEYr6M88WdeyKMrfV5SfYQ.roa (raw, json) Hash identifier: b0vXQQRaZmHILeDZ1cHlWUPOO6kSedxpjj9oGQnHWPA= Subject key identifier: A1:1C:72:EE:01:18:AF:A3:3C:F1:67:5E:C8:A3:2B:7D:5E:52:7D:84 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02C0 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oRxy7gEYr6M88WdeyKMrfV5SfYQ.roa Signing time: Fri 31 May 2024 01:41:47 +0000 ROA not before: Fri 31 May 2024 01:41:47 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 210.159.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:41:47 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=A11C72EE0118AFA33CF1675EC8A32B7D5E527D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7d:60:2b:ff:88:28:5b:23:bd:f5:7c:da:21: 2a:6c:63:4d:db:75:17:6d:5f:dc:85:12:4e:e4:45: fc:5f:84:77:30:ce:73:20:67:1c:3e:e1:ca:45:99: 6c:0a:b3:46:ad:f1:39:a0:b3:06:5c:7d:72:98:0f: c8:9a:7a:ff:16:3e:76:76:dd:ba:a9:7d:48:71:25: 2e:58:f1:8b:5a:4f:0e:de:de:7a:d2:81:d5:d6:10: c1:ea:e0:0c:85:b5:66:28:c5:c2:63:75:72:34:4c: ed:e5:0c:3b:e0:2c:81:46:d2:92:7b:49:ba:24:f0: 06:6f:75:0e:63:22:80:63:da:2f:b6:c6:30:34:01: 9f:6e:e9:0f:d6:64:12:dc:59:8c:06:f7:68:71:c4: 0c:16:c6:e5:54:4c:b4:51:0c:5a:70:4e:35:4d:f2: 58:8a:5a:41:9b:28:5e:26:47:85:4c:04:07:f1:79: 3b:45:d4:16:89:5b:8c:34:da:5c:b5:2b:52:75:f7: 2e:e1:1a:ed:f3:41:36:f5:82:1a:c6:8a:71:af:e6: 99:77:37:b7:39:6a:d8:69:7f:9e:85:81:79:15:ca: b1:4e:ad:33:cd:f7:72:83:c6:cc:e9:4d:00:7d:ba: 33:0d:4c:ba:74:b5:c5:49:72:e4:34:18:a4:c2:1a: 88:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1C:72:EE:01:18:AF:A3:3C:F1:67:5E:C8:A3:2B:7D:5E:52:7D:84 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oRxy7gEYr6M88WdeyKMrfV5SfYQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.159.152.0/21 Signature Algorithm: sha256WithRSAEncryption 30:83:ee:6d:6b:df:dc:8f:19:dc:c0:bc:fb:00:40:0c:54:36: 49:a6:c0:de:55:80:99:52:c2:87:2f:f8:1b:39:eb:f9:8c:1f: 8c:da:d7:6c:a9:f1:0f:ca:6a:8d:20:46:5e:1a:1e:20:28:d9: 7e:33:f6:fb:d6:0f:8c:b1:72:6f:b5:c4:58:56:fe:50:2f:c7: d4:f7:d3:28:36:70:4d:ca:26:0f:a3:50:7d:df:1b:bf:08:35: 09:50:37:a7:ae:c3:97:66:74:d2:ca:9e:6a:80:29:22:d5:1c: e2:21:0a:41:e3:62:01:37:a0:8e:68:c2:61:0c:c5:7e:77:29: 56:d6:5f:3f:e8:63:9f:f0:f3:dc:84:31:a1:09:72:8c:ac:1b: 5a:36:b0:d8:33:c0:f8:5c:a1:f6:c8:20:6b:a1:95:2d:b0:48: 4d:18:80:db:48:95:c9:4a:f9:f5:b3:d7:a8:69:51:6d:49:ea: 2c:78:01:58:a4:65:10:cb:7f:79:ce:8a:2d:e1:27:9f:b7:84: 50:b7:a8:13:25:fb:f8:93:0d:fb:79:76:9b:ff:2a:80:92:4d: f8:fa:c5:09:b9:e0:9a:53:b8:be:1b:fe:99:88:22:63:74:d3: f1:2e:49:fb:8d:1e:67:38:50:53:58:13:3c:4b:59:8d:ab:0a: c5:fa:87:c9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTQxNDdaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEExMUM3MkVFMDExOEFG QTMzQ0YxNjc1RUM4QTMyQjdENUU1MjdEODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhfWAr/4goWyO99XzaISpsY03bdRdtX9yFEk7kRfxfhHcwznMg Zxw+4cpFmWwKs0at8TmgswZcfXKYD8iaev8WPnZ23bqpfUhxJS5Y8YtaTw7e3nrS gdXWEMHq4AyFtWYoxcJjdXI0TO3lDDvgLIFG0pJ7Sbok8AZvdQ5jIoBj2i+2xjA0 AZ9u6Q/WZBLcWYwG92hxxAwWxuVUTLRRDFpwTjVN8liKWkGbKF4mR4VMBAfxeTtF 1BaJW4w02ly1K1J19y7hGu3zQTb1ghrGinGv5pl3N7c5athpf56FgXkVyrFOrTPN 93KDxszpTQB9ujMNTLp0tcVJcuQ0GKTCGojLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoRxy7gEYr6M88WdeyKMrfV5SfYQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L29SeHk3Z0VZcjZNODhXZGV5S01yZlY1U2ZZUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPSn5gwDQYJKoZIhvcNAQELBQADggEBADCD7m1r39yPGdzAvPsAQAxUNkmm wN5VgJlSwocv+Bs56/mMH4za12yp8Q/Kao0gRl4aHiAo2X4z9vvWD4yxcm+1xFhW /lAvx9T30yg2cE3KJg+jUH3fG78INQlQN6euw5dmdNLKnmqAKSLVHOIhCkHjYgE3 oI5owmEMxX53KVbWXz/oY5/w89yEMaEJcoysG1o2sNgzwPhcofbIIGuhlS2wSE0Y gNtIlclK+fWz16hpUW1J6ix4AVikZRDLf3nOii3hJ5+3hFC3qBMl+/iTDft5dpv/ KoCSTfj6xQm54JpTuL4b/pmIImN00/EuSfuNHmc4UFNYEzxLWY2rCsX6h8k= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:48 2025 by rpki-client