$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/-Q_rDlDzzEWyBGvcj8zcFuOsyjQ.roa File: -Q_rDlDzzEWyBGvcj8zcFuOsyjQ.roa (raw, json) Hash identifier: DDZlGz0wv+4A23I4UT7uNMUDGxt68HlTSFV0E2424M0= Subject key identifier: F9:0F:EB:0E:50:F3:CC:45:B2:04:6B:DC:8F:CC:DC:16:E3:AC:CA:34 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0575 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-Q_rDlDzzEWyBGvcj8zcFuOsyjQ.roa Signing time: Fri 31 Jan 2025 01:39:47 +0000 ROA not before: Fri 31 Jan 2025 01:39:47 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 219.124.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:39:47 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=F90FEB0E50F3CC45B2046BDC8FCCDC16E3ACCA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:74:35:c2:2d:6b:50:73:48:38:03:7f:d6: 36:02:b5:8f:5c:01:00:d4:64:68:a1:e9:c7:c6:ae: 3c:41:fe:71:02:84:59:06:67:08:84:e3:98:4f:89: 68:4b:4c:38:23:88:7a:c0:03:e3:82:42:8e:82:8c: 74:a0:b4:11:cb:57:10:20:c5:70:ab:0a:9c:3b:3f: 44:95:90:55:fc:80:ca:4e:2f:ce:69:d7:ec:a2:39: 42:92:28:b4:d1:e1:66:4b:c4:60:82:cd:cf:6a:2a: 6c:39:47:00:11:99:a8:05:24:1d:04:69:af:86:a5: 84:be:ff:e3:18:18:40:71:97:21:63:45:ce:c8:e7: 5d:42:a2:c5:37:22:d5:8b:e1:b7:41:6a:57:d3:3c: f8:2d:01:36:be:d9:f8:cf:14:5f:96:b5:76:e5:d2: 78:02:1d:d0:38:22:e5:a3:7a:81:af:0b:87:dc:b0: 54:95:ce:ad:e9:89:44:ed:a0:00:6c:a5:70:0b:05: f0:57:ee:2d:04:a0:79:b4:55:d9:58:94:fa:78:6a: fe:da:56:23:2f:88:15:56:8b:7f:d0:d5:33:e9:a7: ee:bf:57:38:a0:52:27:eb:6d:d1:3b:ee:d1:6e:b1: 55:0f:85:40:01:3a:37:6b:2a:12:9c:9d:07:31:ab: c7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0F:EB:0E:50:F3:CC:45:B2:04:6B:DC:8F:CC:DC:16:E3:AC:CA:34 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-Q_rDlDzzEWyBGvcj8zcFuOsyjQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.124.156.0/23 Signature Algorithm: sha256WithRSAEncryption ac:af:0f:aa:e0:d5:b4:1d:d8:f2:32:09:17:e3:72:e7:51:77: c6:1e:70:19:12:ba:5b:2d:c5:ee:24:0e:31:e2:05:ab:22:9f: 4c:92:3f:39:d4:fd:b1:36:4f:10:2e:2c:51:cf:5a:fb:36:3a: bc:12:a7:77:5a:23:9d:c6:fe:bc:86:b3:0d:3c:df:87:ad:8f: 6f:3c:5f:85:a1:18:71:92:0a:cf:39:39:59:90:fc:64:b5:bf: 8e:19:88:dc:f9:96:26:c9:c3:b3:10:92:da:4d:dd:1e:5e:67: 75:48:73:bd:2c:5b:0a:d9:65:88:a7:e0:d5:af:b0:87:40:5f: 84:b2:e6:1f:3c:7c:a5:56:b5:87:13:54:36:5e:c8:d8:e8:d7: 12:2d:4f:d4:a3:fa:28:e5:b4:98:e3:8f:21:b3:e8:25:ed:48: 50:b7:cd:33:ba:5f:29:e4:c2:35:f1:23:0b:81:0b:12:f0:4e: c7:eb:06:4f:18:73:93:a5:8e:ae:87:de:35:9d:1a:80:8a:22: b2:a5:2a:0a:6c:a3:1b:f1:f7:f6:b2:d6:a6:59:a5:8b:16:7c: f7:10:bf:ea:1e:3d:e8:9d:64:ed:d7:61:1f:af:dc:aa:c4:ec: 68:2c:83:bc:22:2e:a1:d9:5c:57:1e:e1:3b:48:a3:33:0a:74: 65:62:ef:a7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM5NDdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY5MEZFQjBFNTBGM0ND NDVCMjA0NkJEQzhGQ0NEQzE2RTNBQ0NBMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrinQ1wi1rUHNIOAN/1jYCtY9cAQDUZGih6cfGrjxB/nEChFkG ZwiE45hPiWhLTDgjiHrAA+OCQo6CjHSgtBHLVxAgxXCrCpw7P0SVkFX8gMpOL85p 1+yiOUKSKLTR4WZLxGCCzc9qKmw5RwARmagFJB0Eaa+GpYS+/+MYGEBxlyFjRc7I 511CosU3ItWL4bdBalfTPPgtATa+2fjPFF+WtXbl0ngCHdA4IuWjeoGvC4fcsFSV zq3piUTtoABspXALBfBX7i0EoHm0VdlYlPp4av7aViMviBVWi3/Q1TPpp+6/Vzig UifrbdE77tFusVUPhUABOjdrKhKcnQcxq8djAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+Q/rDlDzzEWyBGvcj8zcFuOsyjQwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1Ly1RX3JEbER6ekVXeUJHdmNqOHpjRnVPc3lqUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHbfJwwDQYJKoZIhvcNAQELBQADggEBAKyvD6rg1bQd2PIyCRfjcudRd8Ye cBkSulstxe4kDjHiBasin0ySPznU/bE2TxAuLFHPWvs2OrwSp3daI53G/ryGsw08 34etj288X4WhGHGSCs85OVmQ/GS1v44ZiNz5libJw7MQktpN3R5eZ3VIc70sWwrZ ZYin4NWvsIdAX4Sy5h88fKVWtYcTVDZeyNjo1xItT9Sj+ijltJjjjyGz6CXtSFC3 zTO6XynkwjXxIwuBCxLwTsfrBk8Yc5Oljq6H3jWdGoCKIrKlKgpsoxvx9/ay1qZZ pYsWfPcQv+oePeidZO3XYR+v3KrE7Ggsg7wiLqHZXFce4TtIozMKdGVi76c= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:35 2025 by rpki-client