$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/WA7KU9xSZxElFMdBN-jFM37rAZA.roa File: WA7KU9xSZxElFMdBN-jFM37rAZA.roa (raw, json) Hash identifier: SDh8Hx7QM+LiyGM4uIjvDBe+8bQnk7sne0tuxg9j88k= Subject key identifier: 58:0E:CA:53:DC:52:67:11:25:14:C7:41:37:E8:C5:33:7E:EB:01:90 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0565 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/WA7KU9xSZxElFMdBN-jFM37rAZA.roa Signing time: Fri 31 Jan 2025 01:36:19 +0000 ROA not before: Fri 31 Jan 2025 01:36:19 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 27.121.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1381 (0x565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:36:19 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=580ECA53DC5267112514C74137E8C5337EEB0190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:75:b3:53:e0:60:ef:e9:c0:86:9e:f4:ef: 8e:5c:2a:13:ea:89:1e:cb:b0:f2:0e:00:e1:bd:15: b3:0b:b4:cd:38:da:22:e9:96:d1:3b:b4:d7:13:e6: ec:35:ea:cc:7b:eb:dd:e9:f0:f5:ca:5c:64:ef:fa: 77:7c:7e:53:67:e3:a8:7d:98:f3:00:97:ff:a0:2d: 7a:da:06:90:7a:0c:a3:1c:93:5f:3f:fa:ba:40:3b: a3:a6:67:8a:d8:d3:c5:d2:a9:d6:5a:02:9c:b5:0f: c1:90:e5:ff:b9:08:b1:83:66:cf:a8:5a:5a:40:14: 5e:fc:87:fd:21:2d:31:0f:89:fb:5d:76:6d:9d:d9: ef:ce:ce:0f:bc:b1:e2:59:f6:b5:ea:60:97:ae:d9: e0:3c:93:c3:4c:c0:7e:c1:be:18:7e:15:a2:bf:82: e1:59:4a:0f:0f:d1:93:c2:15:2e:91:55:59:bb:ee: fb:74:de:0f:76:fd:1c:dd:c5:f3:9d:b1:38:d3:6b: ae:9e:3c:44:84:bb:37:b7:15:69:4f:4c:56:1b:23: 81:c0:52:8d:37:1b:66:21:6e:0a:8d:ed:5b:be:59: 0a:4f:dc:c4:d1:3e:44:c4:03:96:28:71:15:98:b5: df:73:59:b2:0b:42:65:70:d0:b9:f2:e0:cb:50:01: dd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0E:CA:53:DC:52:67:11:25:14:C7:41:37:E8:C5:33:7E:EB:01:90 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/WA7KU9xSZxElFMdBN-jFM37rAZA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.121.48.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:92:2c:b2:db:a1:8d:0d:9b:c0:9f:1b:46:eb:48:2e:b7:66: 54:8d:27:04:a2:fe:b4:d9:90:74:e7:b6:70:e8:a6:0a:45:a9: 62:83:13:c1:3c:fc:ff:c1:90:18:98:18:85:8f:13:00:0a:d1: 18:87:e9:ec:b2:93:f4:6d:7d:57:db:c9:c0:02:82:91:bd:f7: 11:e7:c4:cb:69:93:af:20:e0:0c:c5:ec:49:6d:f4:a7:13:0e: a8:b9:55:50:cb:17:07:20:30:c5:01:8b:59:81:4b:9d:33:37: 75:15:ea:70:ea:f0:52:aa:e5:f3:03:38:65:06:20:f6:a2:7c: 28:6f:50:b8:34:90:9f:ce:01:a1:db:28:69:c8:72:96:90:ec: af:98:a5:4e:94:40:56:16:a2:80:76:52:3a:5c:a5:55:1d:d6: a3:aa:14:b6:35:c5:e9:14:e3:3e:16:9e:4d:4e:62:7b:dc:ec: 0b:4a:70:15:83:f3:bc:63:48:a7:a9:8d:51:37:6a:15:be:95: ad:6d:63:95:21:88:eb:11:e6:e3:b5:63:24:03:bc:24:57:33: d2:0c:85:b3:6d:b1:3e:c7:69:03:ab:bb:c2:64:fc:8d:b7:8d: cd:f6:3c:b0:53:31:16:e5:67:35:1e:b7:a1:e1:c4:b4:98:80: a7:62:ec:88 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM2MTlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU4MEVDQTUzREM1MjY3 MTEyNTE0Qzc0MTM3RThDNTMzN0VFQjAxOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbinWzU+Bg7+nAhp70745cKhPqiR7LsPIOAOG9FbMLtM042iLp ltE7tNcT5uw16sx7693p8PXKXGTv+nd8flNn46h9mPMAl/+gLXraBpB6DKMck18/ +rpAO6OmZ4rY08XSqdZaApy1D8GQ5f+5CLGDZs+oWlpAFF78h/0hLTEPiftddm2d 2e/Ozg+8seJZ9rXqYJeu2eA8k8NMwH7Bvhh+FaK/guFZSg8P0ZPCFS6RVVm77vt0 3g92/RzdxfOdsTjTa66ePESEuze3FWlPTFYbI4HAUo03G2YhbgqN7Vu+WQpP3MTR PkTEA5YocRWYtd9zWbILQmVw0Lny4MtQAd0zAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWA7KU9xSZxElFMdBN+jFM37rAZAwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L1dBN0tVOXhTWnhFbEZNZEJOLWpGTTM3ckFaQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQbeTAwDQYJKoZIhvcNAQELBQADggEBADySLLLboY0Nm8CfG0brSC63ZlSN JwSi/rTZkHTntnDopgpFqWKDE8E8/P/BkBiYGIWPEwAK0RiH6eyyk/RtfVfbycAC gpG99xHnxMtpk68g4AzF7Elt9KcTDqi5VVDLFwcgMMUBi1mBS50zN3UV6nDq8FKq 5fMDOGUGIPaifChvULg0kJ/OAaHbKGnIcpaQ7K+YpU6UQFYWooB2UjpcpVUd1qOq FLY1xekU4z4Wnk1OYnvc7AtKcBWD87xjSKepjVE3ahW+la1tY5UhiOsR5uO1YyQD vCRXM9IMhbNtsT7HaQOru8Jk/I23jc32PLBTMRblZzUet6HhxLSYgKdi7Ig= -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:29 2025 by rpki-client