$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/3XipksrVG3JoyMy7lP8Rp8f5-bA.roa File: 3XipksrVG3JoyMy7lP8Rp8f5-bA.roa (raw, json) Hash identifier: zRjdToH2oS7V82ynK2rZJm3slmn9sTUxMfXlnOsOFes= Subject key identifier: DD:78:A9:92:CA:D5:1B:72:68:C8:CC:BB:94:FF:11:A7:C7:F9:F9:B0 Certificate issuer: /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Certificate serial: 5F Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/3XipksrVG3JoyMy7lP8Rp8f5-bA.roa Signing time: Fri 31 Jan 2025 01:31:47 +0000 ROA not before: Fri 31 Jan 2025 01:31:47 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 59125 IP address blocks: 103.246.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Validity Not Before: Jan 31 01:31:47 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=DD78A992CAD51B7268C8CCBB94FF11A7C7F9F9B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:6d:e0:08:89:eb:67:d7:26:58:f3:20:ca: 5b:eb:80:c7:a5:25:36:aa:6c:c4:42:ae:aa:da:0f: 22:f9:94:a8:91:6b:07:30:a3:f0:bf:51:43:8b:8b: aa:22:73:ed:21:54:d9:c3:94:8f:b9:ee:b0:30:e4: 32:7a:cf:2e:e8:11:17:01:72:d7:6a:e4:87:14:15: 52:ee:15:32:3c:93:7e:6b:fa:d2:cf:6b:e6:65:f7: 98:dc:eb:62:d9:63:7c:a2:bb:df:72:af:8c:7c:b1: 35:9a:21:6d:7f:2c:8b:8f:27:e7:9b:13:b3:da:6b: 38:ac:21:b8:11:70:49:af:a9:da:d7:89:5a:f4:d9: 95:18:4e:87:6e:e5:b6:85:91:fd:12:b5:ff:85:77: 5b:47:00:20:29:e5:a4:5b:99:a1:5b:08:f7:62:b5: 0f:cc:14:03:32:0b:e9:cd:09:dd:95:f0:36:d5:95: 0d:01:ae:f8:48:e5:f7:a9:fa:0a:f4:3f:c3:02:c2: da:c7:d6:26:a6:3a:79:e5:30:03:74:59:b6:ce:87: b5:01:7a:3a:81:51:17:13:c5:f6:fb:e5:dc:50:02: 75:9a:86:33:ee:4b:b2:48:50:b3:fe:69:6d:b4:5d: 79:1c:44:50:a0:6c:67:4d:f3:84:c6:6d:cd:5a:b2: 7b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:78:A9:92:CA:D5:1B:72:68:C8:CC:BB:94:FF:11:A7:C7:F9:F9:B0 X509v3 Authority Key Identifier: keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/3XipksrVG3JoyMy7lP8Rp8f5-bA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.246.80.0/22 Signature Algorithm: sha256WithRSAEncryption a6:5a:7e:04:ee:44:fe:3a:ec:6f:28:72:0a:88:21:be:fc:23: f8:c7:ba:fa:6d:26:23:3c:e7:5e:f0:59:54:8a:67:c8:58:7d: d8:65:26:0e:40:c3:1f:2b:3b:ec:06:01:e7:b5:53:ac:61:90: 3b:0e:4e:57:89:11:2d:1a:47:6d:1d:c6:61:75:d1:d5:0f:83: b7:2c:e1:b3:d2:d0:4c:6c:b4:27:a2:55:68:48:55:29:e0:ed: 55:47:0a:47:5e:63:c1:3f:fd:65:95:5c:de:71:53:dc:2b:38: 67:b3:91:9a:7c:71:b4:0b:65:1d:ec:53:26:fe:94:a8:b5:0a: a6:3c:94:6a:fa:9d:b7:33:fd:48:ee:3e:05:5b:4f:6c:60:ce: 71:8b:64:34:7b:13:9f:c2:d7:46:4a:3a:2c:58:26:80:3f:88: d5:e2:d1:b3:03:1e:fd:6b:d9:bc:ae:c1:aa:0b:36:8f:cd:10: 2c:b0:ef:57:55:0c:56:9e:f3:07:ce:cf:fa:4c:1c:cd:f9:d3: b4:3e:43:30:0a:e4:e1:6f:ad:d0:aa:16:3a:e6:4e:c5:64:58: 46:12:5c:4d:c8:e9:5f:a7:85:44:a9:55:ad:bb:5e:42:89:e2: 11:e7:77:51:e2:b4:bb:1a:2e:ac:ae:9c:d2:bf:c4:14:30:6c: 75:37:ee:f4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjIw QTA2QTIxMjA1ODIwQjI4RkQwNkNFMEE4NEYwM0ZDREFFQkM1MB4XDTI1MDEzMTAx MzE0N1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoREQ3OEE5OTJDQUQ1MUI3 MjY4QzhDQ0JCOTRGRjExQTdDN0Y5RjlCMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALMBbeAIietn1yZY8yDKW+uAx6UlNqpsxEKuqtoPIvmUqJFrBzCj 8L9RQ4uLqiJz7SFU2cOUj7nusDDkMnrPLugRFwFy12rkhxQVUu4VMjyTfmv60s9r 5mX3mNzrYtljfKK733KvjHyxNZohbX8si48n55sTs9prOKwhuBFwSa+p2teJWvTZ lRhOh27ltoWR/RK1/4V3W0cAICnlpFuZoVsI92K1D8wUAzIL6c0J3ZXwNtWVDQGu +Ejl96n6CvQ/wwLC2sfWJqY6eeUwA3RZts6HtQF6OoFRFxPF9vvl3FACdZqGM+5L skhQs/5pbbRdeRxEUKBsZ03zhMZtzVqye5sCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTdeKmSytUbcmjIzLuU/xGnx/n5sDAfBgNVHSMEGDAWgBQbIKBqISBYILKP0Gzg qE8D/NrrxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96YTY4VS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96 YTY4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvM1hpcGtzclZHM0pveU15N2xQOFJwOGY1LWJBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmf2UDANBgkqhkiG9w0BAQsFAAOCAQEAplp+BO5E/jrsbyhyCoghvvwj+Me6 +m0mIzznXvBZVIpnyFh92GUmDkDDHys77AYB57VTrGGQOw5OV4kRLRpHbR3GYXXR 1Q+Dtyzhs9LQTGy0J6JVaEhVKeDtVUcKR15jwT/9ZZVc3nFT3Cs4Z7ORmnxxtAtl HexTJv6UqLUKpjyUavqdtzP9SO4+BVtPbGDOcYtkNHsTn8LXRko6LFgmgD+I1eLR swMe/WvZvK7Bqgs2j80QLLDvV1UMVp7zB87P+kwczfnTtD5DMArk4W+t0KoWOuZO xWRYRhJcTcjpX6eFRKlVrbteQoniEed3UeK0uxourK6c0r/EFDBsdTfu9A== -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:42 2025 by rpki-client