$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/4wm5PTYRURSLRV_SlKqxskIo7Fs.roa File: 4wm5PTYRURSLRV_SlKqxskIo7Fs.roa (raw, json) Hash identifier: u1upxFwgxwGMm+4XHgx9wjgAy07v5t5Dy0kt1xlB2ZE= Subject key identifier: E3:09:B9:3D:36:11:51:14:8B:45:5F:D2:94:AA:B1:B2:42:28:EC:5B Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 012F Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/4wm5PTYRURSLRV_SlKqxskIo7Fs.roa Signing time: Thu 31 Oct 2024 01:30:28 +0000 ROA not before: Thu 31 Oct 2024 01:30:28 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10021 IP address blocks: 117.55.216.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Oct 31 01:30:28 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=E309B93D361151148B455FD294AAB1B24228EC5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:11:86:eb:59:b0:8e:b4:57:52:a7:c0:c8:cd: db:e7:f2:8f:ac:2d:77:ae:f0:82:ba:dc:9d:34:aa: ce:5e:5d:de:fa:a3:9c:ad:45:35:88:cc:29:f7:2c: e2:94:27:0f:e1:bf:99:7c:99:c4:ec:a6:36:6d:6f: 8b:cb:3e:3b:be:a5:28:8a:3f:8b:12:fa:d8:a1:6d: 61:ed:68:c2:3c:17:d3:bc:b9:64:0e:10:81:63:fc: 83:bd:a4:3d:50:d9:8e:37:68:9c:c8:98:f3:d3:e2: 36:7e:ec:09:33:90:84:a8:41:f9:ff:32:47:3e:2e: 3b:50:ca:92:ea:04:bb:c1:26:49:33:ff:d4:ab:0b: f4:87:44:93:fb:a5:8d:a8:33:7d:a3:ee:c1:ed:e2: 75:10:a7:7c:b3:a1:6f:01:ca:67:a4:f8:98:7c:5f: 6b:01:1c:8c:da:66:2e:37:2d:bf:e1:98:d7:b0:c8: bf:86:9c:6c:4e:6b:4c:ef:bb:e4:28:91:b2:d8:4a: 6f:e6:b5:bc:8a:db:25:b1:0e:81:5d:70:9f:0a:b3: 8e:f9:9e:60:66:60:3a:a2:3e:85:04:2a:12:37:dd: d7:5e:4f:73:1c:62:21:3e:c7:d5:ba:0b:fb:c5:07: 19:14:81:96:c9:e7:5e:17:95:25:af:7c:ab:17:43: 5d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:09:B9:3D:36:11:51:14:8B:45:5F:D2:94:AA:B1:B2:42:28:EC:5B X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/4wm5PTYRURSLRV_SlKqxskIo7Fs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.55.216.0/21 Signature Algorithm: sha256WithRSAEncryption 20:4e:45:18:95:82:4b:89:97:43:74:0a:bc:74:7e:bc:d7:3f: 9d:cf:14:b7:49:dc:ae:fe:35:2b:8b:bd:5a:40:fb:b8:8d:f0: 2e:e5:0f:48:ef:d1:58:e6:d4:4b:cb:aa:a3:9d:63:8b:fb:1f: db:9b:62:56:4c:31:5c:c0:bf:f0:a1:64:d4:4e:a8:7f:cb:d2: 4e:a6:10:fc:60:b7:45:2d:13:1b:88:09:fb:ca:1e:dd:db:dd: bd:64:2e:36:3c:d2:a7:a7:38:aa:39:c8:5d:2a:19:9b:bc:30: 94:70:76:1d:36:2b:bf:c8:5b:a6:f3:53:7c:19:0b:45:a7:c8: 57:95:f6:c6:c8:15:9f:39:b0:db:72:ad:c0:24:e9:4a:06:40: 5e:1e:dd:7d:eb:94:a8:d3:32:a7:3a:15:94:99:63:12:2b:fe: b1:4a:f5:fb:4a:41:09:0b:98:d2:f6:ba:0d:10:40:f1:90:8e: 7b:7b:1c:55:7e:2e:9f:13:55:99:79:60:04:b4:64:63:83:28: 9c:ef:1f:9f:2a:a6:9f:ed:18:6a:e2:29:08:55:8f:3d:bf:3f: 60:2a:14:fb:43:1f:e5:bb:31:24:03:e9:5b:1c:02:74:49:20: b2:58:37:89:fd:2b:02:7c:72:a9:fa:bf:2e:4d:dd:82:b3:84: b2:a3:25:cf -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNDEwMzEw MTMwMjhaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUzMDlCOTNEMzYxMTUx MTQ4QjQ1NUZEMjk0QUFCMUIyNDIyOEVDNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcEYbrWbCOtFdSp8DIzdvn8o+sLXeu8IK63J00qs5eXd76o5yt RTWIzCn3LOKUJw/hv5l8mcTspjZtb4vLPju+pSiKP4sS+tihbWHtaMI8F9O8uWQO EIFj/IO9pD1Q2Y43aJzImPPT4jZ+7AkzkISoQfn/Mkc+LjtQypLqBLvBJkkz/9Sr C/SHRJP7pY2oM32j7sHt4nUQp3yzoW8Bymek+Jh8X2sBHIzaZi43Lb/hmNewyL+G nGxOa0zvu+QokbLYSm/mtbyK2yWxDoFdcJ8Ks475nmBmYDqiPoUEKhI33ddeT3Mc YiE+x9W6C/vFBxkUgZbJ514XlSWvfKsXQ13xAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4wm5PTYRURSLRV/SlKqxskIo7FswHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5LzR3bTVQVFlSVVJTTFJWX1NsS3F4c2tJbzdGcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN1N9gwDQYJKoZIhvcNAQELBQADggEBACBORRiVgkuJl0N0Crx0frzXP53P FLdJ3K7+NSuLvVpA+7iN8C7lD0jv0Vjm1EvLqqOdY4v7H9ubYlZMMVzAv/ChZNRO qH/L0k6mEPxgt0UtExuICfvKHt3b3b1kLjY80qenOKo5yF0qGZu8MJRwdh02K7/I W6bzU3wZC0WnyFeV9sbIFZ85sNtyrcAk6UoGQF4e3X3rlKjTMqc6FZSZYxIr/rFK 9ftKQQkLmNL2ug0QQPGQjnt7HFV+Lp8TVZl5YAS0ZGODKJzvH58qpp/tGGriKQhV jz2/P2AqFPtDH+W7MSQD6VscAnRJILJYN4n9KwJ8cqn6vy5N3YKzhLKjJc8= -----END CERTIFICATE-----Generated at Sat Apr 5 17:16:17 2025 by rpki-client