$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/HYz_x2gcGVmrMSvylhXtGYzuQc8.roa File: HYz_x2gcGVmrMSvylhXtGYzuQc8.roa (raw, json) Hash identifier: BUciu2KrcTc9jvy5BcsQ9d/aofyPW3pSB9UG13V0BuQ= Subject key identifier: 1D:8C:FF:C7:68:1C:19:59:AB:31:2B:F2:96:15:ED:19:8C:EE:41:CF Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 053D Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HYz_x2gcGVmrMSvylhXtGYzuQc8.roa Signing time: Fri 31 Jan 2025 01:30:25 +0000 ROA not before: Fri 31 Jan 2025 01:30:25 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 124.47.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:30:25 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=1D8CFFC7681C1959AB312BF29615ED198CEE41CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:82:ab:83:3b:aa:d8:e8:fc:59:7d:ce:87:45: d4:13:ab:25:5c:54:27:a1:07:06:d1:d9:02:7c:84: c4:c7:67:ee:7d:ec:5a:23:45:be:bf:49:8d:9e:8f: a3:c1:77:fc:f7:e9:91:74:37:a2:a9:b5:e5:fb:de: 92:ae:b4:9e:a6:7f:48:fb:a6:fd:0a:67:97:8f:6d: 64:e7:9a:d0:57:fb:c2:41:06:ab:71:18:ec:ff:de: 46:da:49:ae:b1:38:57:2a:e7:29:07:87:d1:81:85: 39:90:2f:03:74:65:b1:96:5e:02:14:65:ed:59:d3: 81:a6:5f:cd:64:56:34:ac:9b:b3:4a:34:f4:fa:aa: 39:14:68:14:3f:81:2f:61:4e:ea:7c:8d:99:59:2b: f7:32:47:87:fb:33:aa:e7:ce:54:fc:01:1b:32:42: fe:d5:d0:69:ee:6e:2c:7a:c8:90:d5:54:46:98:1d: d9:52:1b:67:24:b0:52:fe:e8:c5:20:f8:40:e4:c2: e3:5b:eb:f7:57:a7:7f:34:cb:5d:31:43:51:7c:c4: 68:4a:e9:89:e4:1f:38:08:93:ac:35:3f:9d:4b:e8: 3a:87:9d:1a:7a:dc:7e:de:5d:d9:ac:48:e1:ce:d0: 05:0c:39:db:b3:4e:ff:4e:9e:2e:28:45:90:99:84: 60:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8C:FF:C7:68:1C:19:59:AB:31:2B:F2:96:15:ED:19:8C:EE:41:CF X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HYz_x2gcGVmrMSvylhXtGYzuQc8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.47.192.0/18 Signature Algorithm: sha256WithRSAEncryption 28:b5:e5:45:da:8e:aa:ec:b9:c7:b3:45:d5:98:ef:45:30:f4: 8d:c6:c6:28:10:45:60:84:a0:ed:f2:12:24:e5:5a:91:21:1e: da:33:d8:1b:f2:81:94:fb:92:8e:b7:19:96:8b:d8:f0:49:f2: 9a:59:7c:47:2d:66:63:53:97:92:ee:45:29:60:43:1c:3e:f0: 58:3e:d8:c5:fb:a3:cd:99:70:49:46:7c:95:f0:e4:f6:cc:ff: 3d:3e:7c:5a:b2:79:38:19:f0:34:48:22:0c:69:e0:a2:1a:44: 44:84:49:25:28:52:cc:d0:49:27:ab:c7:7d:93:a4:8a:71:d5: ac:98:cc:ec:d5:fc:f8:ce:52:a1:bd:7a:d4:9d:ac:e3:02:41: 22:97:90:6c:aa:78:8c:91:98:89:ac:ca:77:62:e0:41:f4:58: fd:63:47:34:72:92:36:e8:c2:00:b2:bc:2a:5c:df:f9:8c:6d: 9d:8f:96:a0:73:70:bc:d2:3a:c3:12:c1:3d:0c:22:e2:2e:28: 82:b8:50:b8:37:82:41:f2:a8:e6:ee:3c:26:5d:7b:1e:a3:b5: ad:af:c8:e1:85:89:06:a2:28:a2:d9:21:e2:37:82:fb:af:5e: 54:8d:6d:d8:04:1d:b5:4a:51:fb:5f:de:5f:d7:a1:d6:29:0a: 42:3c:34:7c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTMwMjVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFEOENGRkM3NjgxQzE5 NTlBQjMxMkJGMjk2MTVFRDE5OENFRTQxQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDugquDO6rY6PxZfc6HRdQTqyVcVCehBwbR2QJ8hMTHZ+597Foj Rb6/SY2ej6PBd/z36ZF0N6KpteX73pKutJ6mf0j7pv0KZ5ePbWTnmtBX+8JBBqtx GOz/3kbaSa6xOFcq5ykHh9GBhTmQLwN0ZbGWXgIUZe1Z04GmX81kVjSsm7NKNPT6 qjkUaBQ/gS9hTup8jZlZK/cyR4f7M6rnzlT8ARsyQv7V0Gnubix6yJDVVEaYHdlS G2cksFL+6MUg+EDkwuNb6/dXp380y10xQ1F8xGhK6YnkHzgIk6w1P51L6DqHnRp6 3H7eXdmsSOHO0AUMOduzTv9Oni4oRZCZhGBRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHYz/x2gcGVmrMSvylhXtGYzuQc8wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L0hZel94MmdjR1Ztck1TdnlsaFh0R1l6dVFjOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ8L8AwDQYJKoZIhvcNAQELBQADggEBACi15UXajqrsucezRdWY70Uw9I3G xigQRWCEoO3yEiTlWpEhHtoz2BvygZT7ko63GZaL2PBJ8ppZfEctZmNTl5LuRSlg Qxw+8Fg+2MX7o82ZcElGfJXw5PbM/z0+fFqyeTgZ8DRIIgxp4KIaRESESSUoUszQ SSerx32TpIpx1ayYzOzV/PjOUqG9etSdrOMCQSKXkGyqeIyRmImsyndi4EH0WP1j RzRykjbowgCyvCpc3/mMbZ2PlqBzcLzSOsMSwT0MIuIuKIK4ULg3gkHyqObuPCZd ex6jta2vyOGFiQaiKKLZIeI3gvuvXlSNbdgEHbVKUftf3l/XodYpCkI8NHw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:23 2025 by rpki-client