$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/K-LCmkYP0PdHe-fYttYjcQlfoME.roa File: K-LCmkYP0PdHe-fYttYjcQlfoME.roa (raw, json) Hash identifier: rJgydkNG1LR2lISSMU/nCrvLeILEnxn4OLQqIMOU3o4= Subject key identifier: 2B:E2:C2:9A:46:0F:D0:F7:47:7B:E7:D8:B6:D6:23:71:09:5F:A0:C1 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0554 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/K-LCmkYP0PdHe-fYttYjcQlfoME.roa Signing time: Fri 31 Jan 2025 01:36:11 +0000 ROA not before: Fri 31 Jan 2025 01:36:11 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 112.137.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:36:11 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=2BE2C29A460FD0F7477BE7D8B6D62371095FA0C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6f:4b:1f:74:d8:67:3e:7d:e0:9b:05:5a:5d: 9a:bc:ec:f9:21:86:43:c1:05:46:e5:4c:81:00:c8: 36:ea:31:7e:d1:9a:14:85:ce:28:b1:50:e2:d8:0c: 6c:d8:5f:96:cc:bf:cd:3c:bc:1f:f9:36:38:32:68: 15:e2:01:84:d8:c6:fa:f9:8e:e6:b8:ca:0c:71:9a: 49:42:aa:f3:2b:7d:8c:7c:f5:d2:ad:e4:b8:25:37: 57:a7:e7:e4:c9:88:0b:f8:e8:cc:db:19:4e:67:d5: a7:aa:db:83:66:e7:bb:b7:d3:e1:d1:35:d9:05:06: 54:b1:29:99:ef:b4:24:80:e9:00:0d:c7:fb:71:2e: d5:06:43:86:81:83:a5:0e:db:7c:6d:92:3e:9d:c6: 6e:fb:c2:fc:11:83:12:1c:d6:0a:ac:0d:d1:62:c8: 61:6c:f2:9f:92:8b:a9:82:f4:c7:11:f9:a1:67:32: 4f:cb:ee:ca:30:17:ac:86:92:be:c8:05:7b:dd:7b: 8a:b3:2f:4f:fc:fe:55:cf:d2:0d:27:41:0d:75:a6: 55:f3:67:90:c9:f1:39:83:cb:69:c5:75:74:e4:90: b3:68:85:2b:ac:f1:0f:01:30:f8:b7:58:f9:7c:0d: 10:97:a5:0c:88:ee:5c:bd:d2:e7:77:88:d1:20:e7: 32:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E2:C2:9A:46:0F:D0:F7:47:7B:E7:D8:B6:D6:23:71:09:5F:A0:C1 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/K-LCmkYP0PdHe-fYttYjcQlfoME.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.137.192.0/18 Signature Algorithm: sha256WithRSAEncryption 0a:d8:a9:cf:3f:52:02:63:4a:9e:6c:46:48:a0:98:a6:89:5d: 11:5e:0e:5d:20:84:1f:93:7c:b5:4f:5b:83:76:ce:41:2d:e1: 7b:10:fc:4d:bf:b2:e7:ac:d8:41:85:35:88:40:a6:c4:e1:08: 91:95:c5:a9:80:03:b9:53:8e:7d:4b:b5:b2:f3:8d:dd:09:2f: a3:21:a2:4c:6a:cd:f1:36:9d:64:d5:e0:e9:26:48:3c:43:50: a8:09:8a:54:0f:87:38:ce:3b:02:7a:c1:4b:7f:e0:5d:04:45: f8:5c:bc:e2:2c:61:c9:ac:9f:4a:5b:99:ec:a9:db:84:6a:5b: f7:4a:eb:71:4a:25:11:c8:a8:cc:62:98:ef:bd:7a:ed:e4:5f: db:77:41:3d:7f:be:ad:47:21:6d:dc:8a:1b:fa:0e:73:02:06: 96:5e:25:3f:0c:e0:20:df:ad:a6:08:d8:ab:70:1d:23:2c:1c: 3f:9d:54:cb:bd:1b:fd:10:e3:06:16:91:76:a3:bc:5a:6e:5e: c5:88:2c:7c:c8:ba:0e:7d:55:76:2b:da:ce:7f:6e:0f:88:b1: 1c:f5:2d:f9:9a:1f:18:23:70:11:eb:b1:8f:6a:2f:0f:9e:a4: 0c:3e:9c:a7:62:b8:af:0f:d3:96:3e:32:e1:06:b7:d2:d2:a1: 00:48:1d:35 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM2MTFaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJCRTJDMjlBNDYwRkQw Rjc0NzdCRTdEOEI2RDYyMzcxMDk1RkEwQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpb0sfdNhnPn3gmwVaXZq87PkhhkPBBUblTIEAyDbqMX7RmhSF ziixUOLYDGzYX5bMv808vB/5NjgyaBXiAYTYxvr5jua4ygxxmklCqvMrfYx89dKt 5LglN1en5+TJiAv46MzbGU5n1aeq24Nm57u30+HRNdkFBlSxKZnvtCSA6QANx/tx LtUGQ4aBg6UO23xtkj6dxm77wvwRgxIc1gqsDdFiyGFs8p+Si6mC9McR+aFnMk/L 7sowF6yGkr7IBXvde4qzL0/8/lXP0g0nQQ11plXzZ5DJ8TmDy2nFdXTkkLNohSus 8Q8BMPi3WPl8DRCXpQyI7ly90ud3iNEg5zLbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUK+LCmkYP0PdHe+fYttYjcQlfoMEwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L0stTENta1lQMFBkSGUtZll0dFlqY1FsZm9NRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZwicAwDQYJKoZIhvcNAQELBQADggEBAArYqc8/UgJjSp5sRkigmKaJXRFe Dl0ghB+TfLVPW4N2zkEt4XsQ/E2/sues2EGFNYhApsThCJGVxamAA7lTjn1LtbLz jd0JL6MhokxqzfE2nWTV4OkmSDxDUKgJilQPhzjOOwJ6wUt/4F0ERfhcvOIsYcms n0pbmeyp24RqW/dK63FKJRHIqMximO+9eu3kX9t3QT1/vq1HIW3cihv6DnMCBpZe JT8M4CDfraYI2KtwHSMsHD+dVMu9G/0Q4wYWkXajvFpuXsWILHzIug59VXYr2s5/ bg+IsRz1LfmaHxgjcBHrsY9qLw+epAw+nKdiuK8P05Y+MuEGt9LSoQBIHTU= -----END CERTIFICATE-----Generated at Sat Apr 5 23:04:44 2025 by rpki-client