$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/S2UNM0vuDDWaC4HPk1D-WRtlVcM.roa File: S2UNM0vuDDWaC4HPk1D-WRtlVcM.roa (raw, json) Hash identifier: etrMDktPThj8RlxawyUMyAe+ViLrDSmDELlhIKjdi8Y= Subject key identifier: 4B:65:0D:33:4B:EE:0C:35:9A:0B:81:CF:93:50:FE:59:1B:65:55:C3 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 054F Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/S2UNM0vuDDWaC4HPk1D-WRtlVcM.roa Signing time: Fri 31 Jan 2025 01:36:09 +0000 ROA not before: Fri 31 Jan 2025 01:36:09 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 219.106.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:36:09 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=4B650D334BEE0C359A0B81CF9350FE591B6555C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7f:f6:c0:e5:ad:e0:a5:6f:62:00:f0:8b:af: d2:5d:73:80:bd:cf:db:12:56:0e:b1:a3:29:c9:50: 02:e7:0e:f3:c2:d8:38:80:49:da:88:c2:6d:8d:53: c7:58:68:58:17:ba:a4:4b:ce:b3:04:ca:c4:c6:48: ad:62:a9:61:e1:0c:2d:12:39:50:a1:d9:b8:63:38: 1c:fb:28:c6:49:4f:45:7e:54:56:b0:13:60:44:c6: 01:73:fb:d5:ff:dd:4c:c3:4b:1b:be:bf:90:47:d9: b3:f6:89:6d:9a:76:08:a1:6e:51:b0:e2:db:d1:db: 36:b9:43:f0:8f:a2:49:d6:11:c2:fc:47:e9:fd:b6: 89:e7:99:05:55:d7:6c:f4:c9:98:dd:48:5f:79:43: 42:ff:f7:c5:6d:ab:d4:4d:0a:9e:b4:9b:13:48:ee: 50:20:47:82:61:25:1d:ac:24:ab:ae:ce:ef:8c:0e: 1a:2b:0f:e4:c4:e5:3e:d8:fa:84:42:02:f0:52:f1: 39:66:b6:4f:2b:20:dc:55:41:95:78:ef:6f:6e:1c: fe:96:9f:7f:f2:e7:0a:3f:bc:b2:2a:1b:fe:4f:c4: db:45:98:c5:c5:7a:f7:9d:59:c2:58:ae:68:34:10: 3a:28:87:8a:5a:8d:32:19:c3:44:0e:8d:0a:11:7f: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:65:0D:33:4B:EE:0C:35:9A:0B:81:CF:93:50:FE:59:1B:65:55:C3 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/S2UNM0vuDDWaC4HPk1D-WRtlVcM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.106.221.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:12:37:0c:bf:04:06:ab:d2:71:60:a5:09:fc:c7:6e:be:d5: c3:79:3c:b7:80:3e:57:4a:a4:6e:af:f8:a3:bc:14:e4:46:ed: b8:50:49:02:03:f8:30:03:03:ec:c4:d6:cd:fb:32:5c:17:81: b1:7a:f4:2b:77:f1:9d:0d:6d:31:74:29:df:b4:e8:17:bd:aa: c1:80:2a:a6:cf:1c:d8:3d:b6:a1:9a:e9:6f:44:bc:a7:96:66: 79:a7:82:97:51:21:f7:7f:3e:0a:e7:03:83:2a:9b:c7:43:46: 86:73:84:9a:9f:71:0e:33:22:71:e4:88:dd:19:70:84:ba:7d: 15:83:9c:16:77:34:42:47:7f:3a:4c:12:a2:2d:00:3e:ac:64: 1d:1b:30:ef:86:f7:de:67:9d:c2:16:a5:84:2b:17:07:ed:c1: fc:47:31:2b:91:d6:44:cb:d7:70:45:e3:6e:78:d5:c2:8e:de: 04:91:fe:b7:a5:ed:cf:18:70:49:2b:65:4c:07:eb:fe:32:6f: cb:40:8a:52:49:e4:22:68:8c:50:96:c1:8b:eb:44:62:40:1b: ce:7d:27:66:70:d8:ff:42:d0:dd:db:15:8d:d8:77:1e:26:b3: 2b:c6:d7:2a:6a:90:9c:e3:bb:b0:dc:19:e0:22:15:76:c7:12: 97:26:b7:82 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM2MDlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRCNjUwRDMzNEJFRTBD MzU5QTBCODFDRjkzNTBGRTU5MUI2NTU1QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaf/bA5a3gpW9iAPCLr9Jdc4C9z9sSVg6xoynJUALnDvPC2DiA SdqIwm2NU8dYaFgXuqRLzrMEysTGSK1iqWHhDC0SOVCh2bhjOBz7KMZJT0V+VFaw E2BExgFz+9X/3UzDSxu+v5BH2bP2iW2adgihblGw4tvR2za5Q/CPoknWEcL8R+n9 tonnmQVV12z0yZjdSF95Q0L/98Vtq9RNCp60mxNI7lAgR4JhJR2sJKuuzu+MDhor D+TE5T7Y+oRCAvBS8Tlmtk8rINxVQZV4729uHP6Wn3/y5wo/vLIqG/5PxNtFmMXF evedWcJYrmg0EDooh4pajTIZw0QOjQoRf0RvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUS2UNM0vuDDWaC4HPk1D+WRtlVcMwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L1MyVU5NMHZ1RERXYUM0SFBrMUQtV1J0bFZjTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADbat0wDQYJKoZIhvcNAQELBQADggEBADwSNwy/BAar0nFgpQn8x26+1cN5 PLeAPldKpG6v+KO8FORG7bhQSQID+DADA+zE1s37MlwXgbF69Ct38Z0NbTF0Kd+0 6Be9qsGAKqbPHNg9tqGa6W9EvKeWZnmngpdRIfd/PgrnA4Mqm8dDRoZzhJqfcQ4z InHkiN0ZcIS6fRWDnBZ3NEJHfzpMEqItAD6sZB0bMO+G995nncIWpYQrFwftwfxH MSuR1kTL13BF42541cKO3gSR/rel7c8YcEkrZUwH6/4yb8tAilJJ5CJojFCWwYvr RGJAG859J2Zw2P9C0N3bFY3Ydx4msyvG1ypqkJzju7DcGeAiFXbHEpcmt4I= -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:52 2025 by rpki-client