$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/02Tj6HHNwGmVKC3v3PbRA2YMSyo.roa File: 02Tj6HHNwGmVKC3v3PbRA2YMSyo.roa (raw, json) Hash identifier: N4iFYwBcr+5Hu0h7FXjIkwJiMAX9laB3dIhdwXMZgWY= Subject key identifier: D3:64:E3:E8:71:CD:C0:69:95:28:2D:EF:DC:F6:D1:03:66:0C:4B:2A Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0550 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/02Tj6HHNwGmVKC3v3PbRA2YMSyo.roa Signing time: Fri 31 Jan 2025 01:36:10 +0000 ROA not before: Fri 31 Jan 2025 01:36:10 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 220.148.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:36:10 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=D364E3E871CDC06995282DEFDCF6D103660C4B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:ec:31:5c:91:ca:48:98:8c:51:59:dd:7b: 4e:b6:8e:3b:f0:37:ee:93:2c:5e:2b:9a:10:e5:7c: 2c:93:43:00:89:c0:14:df:80:03:c2:e9:01:59:e6: 53:a8:7a:36:0d:f4:3e:aa:b0:b8:2a:74:62:aa:52: 06:6f:db:46:0a:7a:a5:d5:ff:f0:ba:6a:68:b1:ab: 21:f2:5a:55:6c:7a:1c:04:00:fd:49:2e:c7:87:ef: 32:df:ab:1b:fa:b3:67:70:29:8f:29:a2:d6:83:b1: 31:07:69:c8:53:89:f6:81:df:b0:d7:65:95:8f:29: 02:79:ef:cf:d5:a4:d5:a4:63:67:a8:f0:72:8f:81: d1:1c:47:5a:68:f0:87:dc:6c:50:95:e0:34:ec:d4: 77:2e:59:92:83:35:eb:22:d7:19:59:72:ff:40:83: 6e:67:9f:bc:ac:14:0f:9f:c2:36:47:6c:17:ac:4c: 63:35:fa:99:cf:a8:e8:a2:06:07:c4:95:af:3d:90: 1a:65:33:b7:4c:08:62:1c:04:8f:78:e1:bf:27:34: e1:b9:a8:48:76:6f:56:60:e6:f0:76:82:93:9d:61: cc:4c:aa:e2:db:00:26:f5:25:1f:93:fb:55:69:9a: db:ce:ba:3d:4f:62:18:f7:7d:8d:66:1d:ee:12:15: 88:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:64:E3:E8:71:CD:C0:69:95:28:2D:EF:DC:F6:D1:03:66:0C:4B:2A X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/02Tj6HHNwGmVKC3v3PbRA2YMSyo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.148.0.0/16 Signature Algorithm: sha256WithRSAEncryption 54:28:95:16:a9:00:d4:fe:33:0a:6f:fb:c5:31:f4:94:b7:aa: a7:d8:ae:3f:b9:66:49:fc:1e:18:74:19:13:4c:26:c8:4e:fe: 6d:ed:e4:5b:b2:bc:40:7a:90:4d:c9:4c:50:60:34:91:2e:6d: 97:80:33:d2:a4:5b:cf:bc:79:cc:16:86:1e:e2:6b:05:ee:44: 85:2c:26:5e:5a:a3:99:67:9e:4e:bd:76:f2:7d:01:47:52:37: d6:d7:0b:f2:15:59:e7:80:e3:69:3d:af:6e:ff:08:f1:c1:a4: 6c:8a:d3:78:fb:29:36:a8:5c:30:3c:cb:99:86:f3:74:5e:d6: 23:99:50:37:8f:af:a2:e8:05:33:13:34:04:46:d9:38:b8:85: f9:27:21:03:39:22:f9:9d:96:85:48:94:73:37:fc:59:c9:db: 43:d9:80:f9:bd:e1:39:50:41:15:ff:df:d0:44:d4:a4:92:30: 3d:a2:d7:c3:f9:01:57:58:d1:bc:57:5c:3c:c3:9e:24:19:f3: 43:0d:e7:27:1a:09:c6:60:87:8f:63:a2:48:0d:f1:8c:77:67: 4d:51:18:78:5f:78:3c:93:71:1b:32:db:3f:cb:98:1b:58:a6: 64:12:bb:bc:a3:c5:42:f2:a5:90:9b:9b:d3:13:c4:74:d5:28: 06:fc:84:40 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM2MTBaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQzNjRFM0U4NzFDREMw Njk5NTI4MkRFRkRDRjZEMTAzNjYwQzRCMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6wOwxXJHKSJiMUVnde062jjvwN+6TLF4rmhDlfCyTQwCJwBTf gAPC6QFZ5lOoejYN9D6qsLgqdGKqUgZv20YKeqXV//C6amixqyHyWlVsehwEAP1J LseH7zLfqxv6s2dwKY8potaDsTEHachTifaB37DXZZWPKQJ578/VpNWkY2eo8HKP gdEcR1po8IfcbFCV4DTs1HcuWZKDNesi1xlZcv9Ag25nn7ysFA+fwjZHbBesTGM1 +pnPqOiiBgfEla89kBplM7dMCGIcBI944b8nNOG5qEh2b1Zg5vB2gpOdYcxMquLb ACb1JR+T+1VpmtvOuj1PYhj3fY1mHe4SFYgnAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU02Tj6HHNwGmVKC3v3PbRA2YMSyowHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1LzAyVGo2SEhOd0dtVktDM3YzUGJSQTJZTVN5by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDclDANBgkqhkiG9w0BAQsFAAOCAQEAVCiVFqkA1P4zCm/7xTH0lLeqp9iu P7lmSfweGHQZE0wmyE7+be3kW7K8QHqQTclMUGA0kS5tl4Az0qRbz7x5zBaGHuJr Be5EhSwmXlqjmWeeTr128n0BR1I31tcL8hVZ54DjaT2vbv8I8cGkbIrTePspNqhc MDzLmYbzdF7WI5lQN4+vougFMxM0BEbZOLiF+SchAzki+Z2WhUiUczf8WcnbQ9mA +b3hOVBBFf/f0ETUpJIwPaLXw/kBV1jRvFdcPMOeJBnzQw3nJxoJxmCHj2OiSA3x jHdnTVEYeF94PJNxGzLbP8uYG1imZBK7vKPFQvKlkJub0xPEdNUoBvyEQA== -----END CERTIFICATE-----Generated at Sun Apr 6 01:46:54 2025 by rpki-client