$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/UXDCWU15lhwbuVlYhqB-3IxMGzA.roa File: UXDCWU15lhwbuVlYhqB-3IxMGzA.roa (raw, json) Hash identifier: oPLTQKUZYIU/620vp0EvExWTwMltcqyj/Bb+JGe8CkU= Subject key identifier: 51:70:C2:59:4D:79:96:1C:1B:B9:59:58:86:A0:7E:DC:8C:4C:1B:30 Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Certificate serial: 6A Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/UXDCWU15lhwbuVlYhqB-3IxMGzA.roa Signing time: Sat 30 Nov 2024 01:31:46 +0000 ROA not before: Sat 30 Nov 2024 01:31:46 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 17676 IP address blocks: 61.206.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Validity Not Before: Nov 30 01:31:46 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=5170C2594D79961C1BB9595886A07EDC8C4C1B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dd:14:2d:1b:1b:75:05:fc:87:e7:3c:7f:b4: 63:eb:5c:8e:ab:38:4f:e2:2e:38:67:c3:dc:62:5e: c3:d3:72:ed:b1:26:b3:36:01:d6:72:1c:08:c7:21: 5d:96:dc:f5:ac:94:89:95:23:cd:03:fa:5b:9a:61: c9:53:ac:29:da:af:a2:77:6f:1e:63:8c:2a:0d:de: 96:71:7c:c8:bb:d1:52:40:8d:72:fa:6d:07:88:9c: 29:9d:df:15:c0:54:a9:a6:de:77:76:58:78:3d:15: e6:67:62:7f:88:60:0e:ea:27:e6:89:79:c8:06:f2: 31:ed:66:13:8d:2b:b9:ca:c8:ca:26:67:dc:ea:ef: d5:ad:91:c4:7c:ae:32:f4:d4:07:7c:12:78:bd:63: c5:68:38:c0:aa:7b:f9:19:9a:cd:2c:42:04:ed:42: 80:cf:c3:28:4b:cb:c6:02:c2:88:22:13:73:93:bf: c5:13:dc:b0:a6:8a:3f:97:5f:1d:f9:89:ca:0b:bd: 3e:0f:c2:54:5f:f5:f5:7f:b3:b2:57:d0:87:41:e9: 1e:5a:28:a3:9a:48:34:24:cf:26:cf:d7:36:5e:c6: c8:89:ff:fc:5b:31:cc:ee:20:bf:07:7a:de:a1:48: 6b:55:b2:cf:b2:18:a3:31:ef:93:e5:af:75:17:e5: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:70:C2:59:4D:79:96:1C:1B:B9:59:58:86:A0:7E:DC:8C:4C:1B:30 X509v3 Authority Key Identifier: keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/UXDCWU15lhwbuVlYhqB-3IxMGzA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.206.16.0/20 Signature Algorithm: sha256WithRSAEncryption 02:4c:d3:21:95:ec:a3:5f:d9:ba:c1:12:a3:de:fa:29:3f:a7: e7:86:05:17:ff:25:8b:78:e3:68:4c:88:8c:a7:2b:89:90:e6: a0:de:1f:88:c8:cc:88:26:70:d9:34:bb:25:35:db:df:33:9f: 29:3b:a4:1a:a2:d8:99:d7:f7:5c:4f:4a:39:19:e8:b0:91:79: 95:a0:e0:89:c1:03:1a:7d:da:70:d0:b5:8b:3c:bd:f4:38:4b: ab:ae:bf:e3:17:15:03:bb:da:df:39:94:9c:78:5e:27:15:5c: e5:86:da:df:26:94:7c:21:d9:3c:44:e1:e9:78:8a:63:3c:ee: 8e:58:eb:92:75:9b:37:2c:f0:9b:53:85:5d:e4:f5:b8:d3:02: c1:7b:20:ff:c8:3c:a9:4c:32:0c:fe:81:43:c2:ff:e2:b9:a5: 6f:c5:2a:22:b4:d9:f4:5d:25:14:f2:3c:1c:77:74:7e:ef:ec: 63:bb:50:ab:4b:3a:c3:c0:b2:07:1b:d3:26:7b:db:4c:4d:b1: b3:97:be:73:49:86:c9:b9:56:e7:4d:84:a2:a8:8a:21:62:c5: 05:14:15:2e:46:ee:fd:f9:63:eb:3c:58:74:df:1c:72:5c:56: fb:8c:b7:b0:d9:92:11:07:e7:f7:6b:73:4a:58:23:6f:e6:c3: bb:ae:a1:e0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTI0MTEzMDAx MzE0NloXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoNTE3MEMyNTk0RDc5OTYx QzFCQjk1OTU4ODZBMDdFREM4QzRDMUIzMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAObdFC0bG3UF/IfnPH+0Y+tcjqs4T+IuOGfD3GJew9Ny7bEmszYB 1nIcCMchXZbc9ayUiZUjzQP6W5phyVOsKdqvondvHmOMKg3elnF8yLvRUkCNcvpt B4icKZ3fFcBUqabed3ZYeD0V5mdif4hgDuon5ol5yAbyMe1mE40rucrIyiZn3Orv 1a2RxHyuMvTUB3wSeL1jxWg4wKp7+RmazSxCBO1CgM/DKEvLxgLCiCITc5O/xRPc sKaKP5dfHfmJygu9Pg/CVF/19X+zslfQh0HpHlooo5pINCTPJs/XNl7GyIn//Fsx zO4gvwd63qFIa1Wyz7IYozHvk+WvdRflXUECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRRcMJZTXmWHBu5WViGoH7cjEwbMDAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3 LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDAvVVhEQ1dVMTVsaHdidVZsWWhxQi0zSXhNR3pBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD3OEDANBgkqhkiG9w0BAQsFAAOCAQEAAkzTIZXso1/ZusESo976KT+n54YF F/8li3jjaEyIjKcriZDmoN4fiMjMiCZw2TS7JTXb3zOfKTukGqLYmdf3XE9KORno sJF5laDgicEDGn3acNC1izy99DhLq66/4xcVA7va3zmUnHheJxVc5Yba3yaUfCHZ PETh6XiKYzzujljrknWbNyzwm1OFXeT1uNMCwXsg/8g8qUwyDP6BQ8L/4rmlb8Uq IrTZ9F0lFPI8HHd0fu/sY7tQq0s6w8CyBxvTJnvbTE2xs5e+c0mGyblW502EoqiK IWLFBRQVLkbu/flj6zxYdN8cclxW+4y3sNmSEQfn92tzSlgjb+bDu66h4A== -----END CERTIFICATE-----Generated at Sat Apr 5 17:20:01 2025 by rpki-client