$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/MhIc--ZDc2NcII1JR7uSge2FzJ8.roa File: MhIc--ZDc2NcII1JR7uSge2FzJ8.roa (raw, json) Hash identifier: QnhvUMlB8Q2PfKu/7QaF/l1vC2NKukCedgHGo60vbwo= Subject key identifier: 32:12:1C:FB:E6:43:73:63:5C:20:8D:49:47:BB:92:81:ED:85:CC:9F Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0580 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MhIc--ZDc2NcII1JR7uSge2FzJ8.roa Signing time: Fri 31 Jan 2025 01:39:52 +0000 ROA not before: Fri 31 Jan 2025 01:39:52 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 203.95.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:39:52 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=32121CFBE64373635C208D4947BB9281ED85CC9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:47:a6:99:13:ff:b6:70:9c:88:69:25:3a: 54:ec:37:da:65:80:5d:68:69:d9:24:37:33:f2:c0: 9e:a2:2f:1a:14:10:50:fc:13:54:47:2c:f0:8d:cb: b7:a9:d6:ca:3c:9b:d9:cd:1d:41:18:75:cc:3c:3c: 5a:68:f0:e9:ba:8f:a0:3f:2b:c6:03:40:f3:b1:c9: 49:63:82:ab:1f:85:ed:72:2b:ed:9e:7b:13:f1:a9: f2:17:8b:0a:5d:9c:b8:be:80:7a:3a:8c:df:77:8b: d0:fe:ac:3f:ca:05:f6:3f:0c:d0:5c:55:b2:25:0d: a0:cf:e9:bb:d1:67:81:10:50:70:dd:b0:50:1d:b3: 36:aa:34:7c:6e:6c:21:03:b9:a4:6b:67:d8:d6:63: ac:87:bd:a0:58:ee:65:65:88:4f:97:0f:b2:67:f3: 39:17:5e:db:b6:9f:d8:44:91:05:95:fe:39:68:ff: 46:4f:7f:3c:9e:c8:34:b5:06:14:6a:82:82:a9:b6: c7:4f:45:9b:e1:56:a8:00:ef:07:11:40:7a:64:1d: ae:f5:cb:48:f9:c7:60:d5:56:eb:bf:26:4a:45:e5: 3f:a8:59:3c:a6:48:6d:b4:c1:11:81:92:49:76:eb: 1d:ef:c2:65:c9:ed:d0:45:b2:1f:8c:e7:5a:ef:e2: 52:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:12:1C:FB:E6:43:73:63:5C:20:8D:49:47:BB:92:81:ED:85:CC:9F X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MhIc--ZDc2NcII1JR7uSge2FzJ8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.95.48.0/21 Signature Algorithm: sha256WithRSAEncryption af:08:47:bc:93:c0:b2:25:4c:e4:1c:07:e2:5a:93:a7:e9:4c: 85:e8:f1:25:fd:6e:d0:ec:18:7d:6f:b5:c7:2c:f3:68:fc:37: cf:1c:5c:b8:e2:62:8b:cc:ed:da:45:5c:b5:0d:bc:0a:cb:a6: ee:aa:59:40:65:30:29:4b:b2:f6:31:5a:e3:d6:7f:06:5b:fa: a7:1a:87:21:9f:10:83:21:de:65:a9:dd:6f:a6:de:be:37:c9: 7c:ec:12:7e:d0:09:21:ed:fc:47:29:30:a3:8b:de:a0:05:aa: 3e:15:89:fb:ea:07:cc:3a:64:ac:f4:f7:e1:03:25:6c:8e:fc: 5a:43:76:bf:52:c1:44:df:0f:9d:75:65:b1:57:dd:50:a2:4a: 13:85:83:c0:0c:63:17:aa:e6:d3:dc:6c:b6:e4:f2:4b:39:da: 1f:9e:d1:ec:3f:f5:58:fd:cd:d5:24:20:e6:b9:48:df:d5:36: fd:55:96:ed:b2:25:35:68:ff:99:d0:d4:c9:e7:19:a5:4e:0b: a4:27:e2:70:7e:e4:26:03:a0:f8:11:19:61:50:b6:d5:af:98: c8:e3:5a:3e:fd:1a:46:4b:de:ec:f8:fc:8e:01:bd:d9:54:a9: e5:bd:5d:3b:78:99:b1:b4:16:03:0c:c2:b0:0b:e5:a0:ed:b6: 5c:29:67:c0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM5NTJaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMyMTIxQ0ZCRTY0Mzcz NjM1QzIwOEQ0OTQ3QkI5MjgxRUQ4NUNDOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKQkemmRP/tnCciGklOlTsN9plgF1oadkkNzPywJ6iLxoUEFD8 E1RHLPCNy7ep1so8m9nNHUEYdcw8PFpo8Om6j6A/K8YDQPOxyUljgqsfhe1yK+2e exPxqfIXiwpdnLi+gHo6jN93i9D+rD/KBfY/DNBcVbIlDaDP6bvRZ4EQUHDdsFAd szaqNHxubCEDuaRrZ9jWY6yHvaBY7mVliE+XD7Jn8zkXXtu2n9hEkQWV/jlo/0ZP fzyeyDS1BhRqgoKptsdPRZvhVqgA7wcRQHpkHa71y0j5x2DVVuu/JkpF5T+oWTym SG20wRGBkkl26x3vwmXJ7dBFsh+M51rv4lJnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMhIc++ZDc2NcII1JR7uSge2FzJ8wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L01oSWMtLVpEYzJOY0lJMUpSN3VTZ2UyRnpKOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPLXzAwDQYJKoZIhvcNAQELBQADggEBAK8IR7yTwLIlTOQcB+Jak6fpTIXo 8SX9btDsGH1vtccs82j8N88cXLjiYovM7dpFXLUNvArLpu6qWUBlMClLsvYxWuPW fwZb+qcahyGfEIMh3mWp3W+m3r43yXzsEn7QCSHt/EcpMKOL3qAFqj4VifvqB8w6 ZKz09+EDJWyO/FpDdr9SwUTfD511ZbFX3VCiShOFg8AMYxeq5tPcbLbk8ks52h+e 0ew/9Vj9zdUkIOa5SN/VNv1Vlu2yJTVo/5nQ1MnnGaVOC6Qn4nB+5CYDoPgRGWFQ ttWvmMjjWj79GkZL3uz4/I4BvdlUqeW9XTt4mbG0FgMMwrAL5aDttlwpZ8A= -----END CERTIFICATE-----Generated at Sat Apr 5 20:05:41 2025 by rpki-client