$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/3myaD36xPbc1glQA4w1trqz10gk.roa File: 3myaD36xPbc1glQA4w1trqz10gk.roa (raw, json) Hash identifier: TsQDrM/nLOSNYPgccOg7WjT/B2fQtvs6sRS0iunxoHU= Subject key identifier: DE:6C:9A:0F:7E:B1:3D:B7:35:82:54:00:E3:0D:6D:AE:AC:F5:D2:09 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 059E Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3myaD36xPbc1glQA4w1trqz10gk.roa Signing time: Fri 31 Jan 2025 01:42:15 +0000 ROA not before: Fri 31 Jan 2025 01:42:15 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 116.68.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:42:15 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=DE6C9A0F7EB13DB735825400E30D6DAEACF5D209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:b9:69:5b:3e:ab:6b:95:b8:c2:fa:94:32: 65:a0:c6:df:d7:f8:5e:3d:c0:75:6f:e8:53:62:cc: da:2f:70:2d:64:60:46:df:d4:8d:23:33:b1:62:f4: 50:83:fd:c2:3a:9b:f9:64:f8:d0:4d:93:43:fe:2d: 27:22:51:fc:d9:52:36:f5:8c:05:bf:f4:c1:4f:35: e3:ca:64:c5:3e:b3:89:6b:12:25:e8:60:32:25:92: 15:94:66:f1:54:31:c6:d3:25:ba:c0:43:78:1d:1d: 22:55:57:c0:69:b4:a8:0d:5f:90:5d:57:e8:e3:91: ce:57:17:21:7b:7a:23:19:48:0d:27:21:d0:51:01: 82:be:b3:34:70:a2:b9:1d:0a:bd:58:2b:61:90:7b: 08:64:1d:e4:1a:44:5b:12:5e:c0:d7:1f:94:c4:37: f5:6a:74:21:11:66:65:26:5a:00:3a:25:41:37:bd: b9:a3:70:6d:13:3f:4a:d2:96:c7:b6:d1:83:98:d3: 94:6a:ad:c6:eb:12:a5:91:d3:b9:f6:92:bd:f5:73: 45:45:be:c6:ce:40:5c:cc:ad:fe:d8:ce:6a:e2:52: 0e:59:72:e4:2e:1c:c5:2d:7c:ef:c6:1d:6f:5a:ee: d4:14:60:60:2d:30:a5:a3:0d:78:76:46:2c:69:85: 94:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6C:9A:0F:7E:B1:3D:B7:35:82:54:00:E3:0D:6D:AE:AC:F5:D2:09 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3myaD36xPbc1glQA4w1trqz10gk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.68.217.0/24 Signature Algorithm: sha256WithRSAEncryption be:1a:d4:57:b9:55:6b:43:f5:37:c9:c0:e8:cb:45:38:46:bd: 7f:73:6c:5a:9c:85:8b:d9:71:30:36:e5:86:59:87:8c:ea:70: fa:17:86:e6:ee:57:16:5d:df:00:16:c2:28:d6:37:d0:8a:6c: 8f:ec:f0:fa:1b:7d:68:ba:5f:40:55:c3:99:c5:2a:05:17:71: fa:14:c8:f4:6f:eb:51:4e:49:c1:a8:ba:59:78:36:8c:fa:71: 7c:5e:55:f8:8a:6f:45:39:2a:74:ed:35:db:10:48:45:ad:ec: f0:2b:df:fd:7f:25:7f:21:57:12:a3:2b:78:c7:90:b4:a0:bb: 70:aa:b5:b6:ba:60:e0:4e:98:94:22:71:e5:29:d8:17:f9:b6: 33:6c:3a:08:45:a7:12:76:56:11:f6:8e:30:59:31:98:78:6c: 35:15:29:db:23:a1:bc:fd:00:29:60:10:c0:1c:b1:12:95:22: b2:c5:7b:9c:80:2a:05:b6:e7:5d:f2:64:cd:5d:4a:3b:9d:6a: 26:fe:c9:5a:e1:aa:f1:0f:d9:91:4d:20:39:d5:95:69:f3:9d: 8c:ca:aa:5f:ed:17:78:0f:5a:5d:dc:34:25:1b:7f:d2:fb:7a: 2e:c6:73:c2:ca:09:77:10:1d:db:69:9d:8f:5c:45:62:ef:60: a2:c4:59:6b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTQyMTVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERFNkM5QTBGN0VCMTNE QjczNTgyNTQwMEUzMEQ2REFFQUNGNUQyMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5zLlpWz6ra5W4wvqUMmWgxt/X+F49wHVv6FNizNovcC1kYEbf 1I0jM7Fi9FCD/cI6m/lk+NBNk0P+LSciUfzZUjb1jAW/9MFPNePKZMU+s4lrEiXo YDIlkhWUZvFUMcbTJbrAQ3gdHSJVV8BptKgNX5BdV+jjkc5XFyF7eiMZSA0nIdBR AYK+szRworkdCr1YK2GQewhkHeQaRFsSXsDXH5TEN/VqdCERZmUmWgA6JUE3vbmj cG0TP0rSlse20YOY05RqrcbrEqWR07n2kr31c0VFvsbOQFzMrf7YzmriUg5ZcuQu HMUtfO/GHW9a7tQUYGAtMKWjDXh2RixphZRVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3myaD36xPbc1glQA4w1trqz10gkwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1LzNteWFEMzZ4UGJjMWdsUUE0dzF0cnF6MTBnay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB0RNkwDQYJKoZIhvcNAQELBQADggEBAL4a1Fe5VWtD9TfJwOjLRThGvX9z bFqchYvZcTA25YZZh4zqcPoXhubuVxZd3wAWwijWN9CKbI/s8PobfWi6X0BVw5nF KgUXcfoUyPRv61FOScGoull4Noz6cXxeVfiKb0U5KnTtNdsQSEWt7PAr3/1/JX8h VxKjK3jHkLSgu3Cqtba6YOBOmJQiceUp2Bf5tjNsOghFpxJ2VhH2jjBZMZh4bDUV Kdsjobz9AClgEMAcsRKVIrLFe5yAKgW2513yZM1dSjudaib+yVrhqvEP2ZFNIDnV lWnznYzKql/tF3gPWl3cNCUbf9L7ei7Gc8LKCXcQHdtpnY9cRWLvYKLEWWs= -----END CERTIFICATE-----Generated at Sat Apr 5 17:39:56 2025 by rpki-client