$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/nl5TI5mhzV5q_rLn2RKMiLJOtRQ.roa File: nl5TI5mhzV5q_rLn2RKMiLJOtRQ.roa (raw, json) Hash identifier: vQQ4KqrA2x4h7e6qitnz74SZFbsAqckZuRgP93lfEIA= Subject key identifier: 9E:5E:53:23:99:A1:CD:5E:6A:FE:B2:E7:D9:12:8C:88:B2:4E:B5:14 Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437 Certificate serial: 82 Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/nl5TI5mhzV5q_rLn2RKMiLJOtRQ.roa Signing time: Fri 31 Jan 2025 01:32:14 +0000 ROA not before: Fri 31 Jan 2025 01:32:14 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 55900 IP address blocks: 103.100.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437 Validity Not Before: Jan 31 01:32:14 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=9E5E532399A1CD5E6AFEB2E7D9128C88B24EB514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:64:a2:c6:21:05:04:65:3a:01:e0:a2:f7: a8:b5:6c:05:f2:1a:3c:1f:47:4a:8d:62:44:11:49: e3:34:48:5b:07:6f:2a:06:9c:cc:fd:f1:32:5f:92: 14:dd:85:47:38:87:62:d1:f7:af:5e:6b:e7:9d:5f: 7b:57:30:5d:74:f6:bf:2f:51:77:4f:21:53:39:63: f9:02:f1:0d:53:64:e3:8e:23:f6:71:7d:a0:c5:e7: 38:cd:48:9f:de:70:c0:0a:11:ec:75:43:a7:00:16: f2:ad:8d:94:3e:7d:4a:15:3b:df:de:57:68:49:50: 90:5e:2b:70:9b:63:6f:69:86:81:12:33:c0:62:7f: d2:9f:10:d7:0b:5a:d9:c9:0a:d9:c8:ee:39:5b:d7: 71:ce:76:86:dc:3f:3f:34:81:df:49:2b:0e:57:94: d2:eb:59:28:b7:b9:e0:0e:01:39:01:ae:46:f3:c8: 58:12:5f:80:a8:eb:d1:3f:e3:ec:09:d8:ac:c6:cc: 5e:8b:cb:ee:8c:57:56:21:76:c1:eb:86:2d:99:17: 9d:d6:41:fd:0c:e0:d2:d0:df:27:7c:c3:0c:e8:c0: 9d:33:f8:47:30:f3:b6:54:23:47:ca:8d:68:e8:1d: 3a:c7:35:ba:a4:bc:d4:cd:2d:5d:9a:89:02:84:79: 28:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5E:53:23:99:A1:CD:5E:6A:FE:B2:E7:D9:12:8C:88:B2:4E:B5:14 X509v3 Authority Key Identifier: keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/nl5TI5mhzV5q_rLn2RKMiLJOtRQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.100.189.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:79:55:ca:d5:7b:53:70:c5:d1:31:15:d0:c2:30:6c:ba:f9: 72:75:58:a4:89:ae:34:cc:12:c9:fa:96:ef:3b:22:f8:d2:96: 0d:1b:ef:8d:a7:04:a6:5a:35:c9:02:95:e7:af:56:c0:d6:06: b4:13:70:ec:9e:2b:7f:00:ee:1e:b5:89:66:a3:b8:d0:9e:1b: 08:cd:5f:9a:69:f9:49:2b:84:f8:10:5c:cf:a1:cc:dc:5c:8a: 5c:53:de:70:a8:5c:e3:5b:53:ab:92:d9:90:cb:18:5c:f5:9a: 4f:1c:30:2d:a7:a6:d0:3f:92:30:75:42:44:16:60:cd:92:e2: 07:e5:90:55:6c:5f:98:1b:3d:15:f4:5f:5e:19:4d:69:2c:5d: 1b:68:ed:ac:63:18:f3:43:bc:ce:17:a0:f1:a2:61:98:1e:c4: da:31:25:86:3e:11:0d:d4:18:b5:52:76:7a:71:c0:8a:b9:96: ce:7d:90:25:4f:29:22:43:3e:52:4c:40:68:97:52:61:8f:e3: 8e:fb:8e:30:e3:b8:13:aa:05:48:c4:fd:91:bd:da:52:4b:f2: dc:d8:f7:f7:70:7d:cc:44:32:80:bc:17:5c:17:c0:66:57:28: a3:09:4c:c7:c7:ad:95:83:8c:fa:5f:ab:cd:ad:94:b4:9a:bf: 7d:67:f9:d5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUIw RDcyRjlGNDMwQjdENDAwMzM3NUYxMEQ1MDI1QjlFNUMwMDQzNzAeFw0yNTAxMzEw MTMyMTRaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlFNUU1MzIzOTlBMUNE NUU2QUZFQjJFN0Q5MTI4Qzg4QjI0RUI1MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxZWSixiEFBGU6AeCi96i1bAXyGjwfR0qNYkQRSeM0SFsHbyoG nMz98TJfkhTdhUc4h2LR969ea+edX3tXMF109r8vUXdPIVM5Y/kC8Q1TZOOOI/Zx faDF5zjNSJ/ecMAKEex1Q6cAFvKtjZQ+fUoVO9/eV2hJUJBeK3CbY29phoESM8Bi f9KfENcLWtnJCtnI7jlb13HOdobcPz80gd9JKw5XlNLrWSi3ueAOATkBrkbzyFgS X4Co69E/4+wJ2KzGzF6Ly+6MV1YhdsHrhi2ZF53WQf0M4NLQ3yd8wwzowJ0z+Ecw 87ZUI0fKjWjoHTrHNbqkvNTNLV2aiQKEeSgjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnl5TI5mhzV5q/rLn2RKMiLJOtRQwHwYDVR0jBBgwFoAUWw1y+fQwt9QAM3Xx DVAlueXABDcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUzOS9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVlWEFCRGMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVl WEFCRGMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTM5L25sNVRJNW1oelY1cV9yTG4yUktNaUxKT3RSUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnZL0wDQYJKoZIhvcNAQELBQADggEBAD15VcrVe1NwxdExFdDCMGy6+XJ1 WKSJrjTMEsn6lu87IvjSlg0b742nBKZaNckCleevVsDWBrQTcOyeK38A7h61iWaj uNCeGwjNX5pp+UkrhPgQXM+hzNxcilxT3nCoXONbU6uS2ZDLGFz1mk8cMC2nptA/ kjB1QkQWYM2S4gflkFVsX5gbPRX0X14ZTWksXRto7axjGPNDvM4XoPGiYZgexNox JYY+EQ3UGLVSdnpxwIq5ls59kCVPKSJDPlJMQGiXUmGP4477jjDjuBOqBUjE/ZG9 2lJL8tzY9/dwfcxEMoC8F1wXwGZXKKMJTMfHrZWDjPpfq82tlLSav31n+dU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:07 2025 by rpki-client