$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/VaSGjwDx8AliOT7hgiCm2NN-kdE.roa File: VaSGjwDx8AliOT7hgiCm2NN-kdE.roa (raw, json) Hash identifier: kCkCOyPdcFLZWOEbWuXeQQ9GeIjSd4eRhvG7YB1tY8o= Subject key identifier: 55:A4:86:8F:00:F1:F0:09:62:39:3E:E1:82:20:A6:D8:D3:7E:91:D1 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0563 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/VaSGjwDx8AliOT7hgiCm2NN-kdE.roa Signing time: Fri 31 Jan 2025 01:36:19 +0000 ROA not before: Fri 31 Jan 2025 01:36:19 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 219.96.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1379 (0x563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:36:19 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=55A4868F00F1F00962393EE18220A6D8D37E91D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:9e:b5:65:e5:bd:61:30:df:b8:e3:92:f6: de:ea:a9:9e:5f:8a:e5:64:46:2a:27:6a:d3:9a:df: 15:aa:28:45:d8:4a:ed:81:14:58:be:c4:98:69:0b: 88:d3:d6:fc:86:32:1b:70:da:3f:38:2c:4a:b9:e0: 33:f3:5d:37:ec:5b:38:6f:90:cc:e1:ba:36:a3:33: 65:a1:4c:1d:ed:71:8e:ab:46:af:78:f3:9b:71:da: 69:e7:b7:9d:f0:88:46:f3:9b:aa:d0:01:b0:06:49: f8:da:6e:ce:84:17:78:5b:05:1a:90:1e:c8:d0:c7: 21:57:aa:3e:78:89:ee:a1:d4:b2:5a:ca:08:e7:66: 60:2c:23:3f:66:8d:cf:cc:5e:33:54:78:bc:91:ed: 4f:40:67:ad:8d:d5:30:68:84:fd:e5:2f:93:8b:da: fd:4a:81:e5:3d:86:b8:8d:6e:24:30:9e:bc:43:5a: ba:5f:1b:2e:3c:84:d6:a0:41:4d:70:42:59:81:18: 3e:c1:84:f5:b9:80:f5:95:0b:13:e9:e6:71:1f:7b: 24:b3:d5:44:ec:a8:46:37:c7:ec:1d:95:b6:74:b1: ce:5b:79:04:c5:cf:73:80:63:a9:09:ba:ed:e8:06: 3c:6b:c3:5a:b0:03:c9:4d:b9:1a:f9:08:98:80:01: 88:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A4:86:8F:00:F1:F0:09:62:39:3E:E1:82:20:A6:D8:D3:7E:91:D1 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/VaSGjwDx8AliOT7hgiCm2NN-kdE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.96.59.0/24 Signature Algorithm: sha256WithRSAEncryption 43:1e:b3:f8:39:73:78:85:5e:d8:61:7d:d6:ad:9d:40:6c:49: e9:f1:5a:cb:44:47:89:c7:fe:40:9f:ad:26:e2:7c:d3:5c:08: 53:13:c3:13:63:32:4d:1b:5b:ea:f2:26:c9:9d:7a:f4:f3:18: f1:c5:29:1e:c2:16:d4:a1:2a:60:6a:45:97:6a:72:2c:25:0d: bd:8c:d7:0f:8d:3d:6f:85:9f:54:97:d1:e7:74:3f:0c:c7:b7: 4d:5b:cd:78:d0:9e:b8:f3:6c:f0:e6:56:81:08:79:f1:cf:62: 70:9f:ec:6f:23:0d:bb:27:1b:06:12:73:cf:1f:1b:1e:09:ff: 21:b3:ba:17:5f:50:6c:7c:2c:07:37:f6:f8:40:69:cd:c0:1e: a1:75:6c:04:2c:a6:d8:0b:60:cb:92:da:e9:b6:de:94:28:38: 18:6b:60:9c:25:85:6e:c6:75:b1:94:c9:a7:5a:90:04:3a:d9: 6e:a3:ab:8c:71:61:34:2d:0b:af:3f:2f:4d:20:58:ef:d4:fc: 1f:e5:be:a1:e3:bf:b3:45:dd:4f:88:8a:4c:16:dd:52:cf:08: 19:99:20:d8:fb:7c:df:ab:04:6b:5b:5e:0b:fe:ed:fc:7d:19: b2:d4:10:10:08:19:e3:bf:33:3a:2e:66:08:32:1c:6d:e1:a7: 79:16:50:e1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM2MTlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU1QTQ4NjhGMDBGMUYw MDk2MjM5M0VFMTgyMjBBNkQ4RDM3RTkxRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC50J61ZeW9YTDfuOOS9t7qqZ5fiuVkRionatOa3xWqKEXYSu2B FFi+xJhpC4jT1vyGMhtw2j84LEq54DPzXTfsWzhvkMzhujajM2WhTB3tcY6rRq94 85tx2mnnt53wiEbzm6rQAbAGSfjabs6EF3hbBRqQHsjQxyFXqj54ie6h1LJaygjn ZmAsIz9mjc/MXjNUeLyR7U9AZ62N1TBohP3lL5OL2v1KgeU9hriNbiQwnrxDWrpf Gy48hNagQU1wQlmBGD7BhPW5gPWVCxPp5nEfeySz1UTsqEY3x+wdlbZ0sc5beQTF z3OAY6kJuu3oBjxrw1qwA8lNuRr5CJiAAYgpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVaSGjwDx8AliOT7hgiCm2NN+kdEwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L1ZhU0dqd0R4OEFsaU9UN2hnaUNtMk5OLWtkRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADbYDswDQYJKoZIhvcNAQELBQADggEBAEMes/g5c3iFXthhfdatnUBsSenx WstER4nH/kCfrSbifNNcCFMTwxNjMk0bW+ryJsmdevTzGPHFKR7CFtShKmBqRZdq ciwlDb2M1w+NPW+Fn1SX0ed0PwzHt01bzXjQnrjzbPDmVoEIefHPYnCf7G8jDbsn GwYSc88fGx4J/yGzuhdfUGx8LAc39vhAac3AHqF1bAQsptgLYMuS2um23pQoOBhr YJwlhW7GdbGUyadakAQ62W6jq4xxYTQtC68/L00gWO/U/B/lvqHjv7NF3U+IikwW 3VLPCBmZINj7fN+rBGtbXgv+7fx9GbLUEBAIGeO/MzouZggyHG3hp3kWUOE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:46 2025 by rpki-client