$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/eOhn8jqjOExACAmq51BSt1tuF2s.roa File: eOhn8jqjOExACAmq51BSt1tuF2s.roa (raw, json) Hash identifier: EdEA2oQf3Iqg8es/1r4/wvKt824OMoPBdWMhose3eUQ= Subject key identifier: 78:E8:67:F2:3A:A3:38:4C:40:08:09:AA:E7:50:52:B7:5B:6E:17:6B Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0541 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eOhn8jqjOExACAmq51BSt1tuF2s.roa Signing time: Fri 31 Jan 2025 01:30:27 +0000 ROA not before: Fri 31 Jan 2025 01:30:27 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 220.148.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:30:27 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=78E867F23AA3384C400809AAE75052B75B6E176B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:f8:28:61:8d:12:18:b5:b4:d1:7f:f5:9c: b7:0f:cb:1d:a7:64:cd:d5:b4:d6:77:83:46:eb:39: 6d:4a:9f:49:2c:df:4e:ca:f8:8e:4e:56:dd:f3:34: c6:54:c2:b6:6e:92:00:ab:e8:b8:dc:8e:04:39:82: dd:75:1e:94:82:87:22:a2:75:4e:85:21:47:a4:82: fa:99:5c:8b:4e:47:6f:c7:33:b4:fa:4d:a5:ae:04: 16:db:39:b3:8e:30:ba:93:34:c8:e3:4a:64:23:d0: 9e:87:a1:d1:7e:3b:d3:04:21:96:42:1c:91:91:89: f7:b0:07:b9:c0:8b:92:b3:c5:ec:4c:f7:62:b6:68: ff:12:9f:84:f3:d9:d7:89:5b:3b:f9:49:ec:7b:63: b3:74:16:53:7e:7e:bc:d6:23:15:9f:71:d6:5d:fb: cf:d9:18:18:76:4d:52:d3:1e:ad:c2:e6:7f:e5:48: 55:a0:3c:75:2c:84:5c:4b:78:aa:d3:16:b3:34:e3: 76:59:31:c1:01:e4:d2:e9:65:05:26:7c:78:93:7c: 35:03:84:c9:c7:54:54:3d:87:df:c8:24:94:ea:0e: da:c8:b7:b4:7f:0a:b0:c1:65:35:3e:ab:25:93:82: dd:31:81:bd:41:60:aa:76:85:62:6b:04:35:18:28: c4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E8:67:F2:3A:A3:38:4C:40:08:09:AA:E7:50:52:B7:5B:6E:17:6B X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eOhn8jqjOExACAmq51BSt1tuF2s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.148.188.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:66:22:01:df:8f:bd:16:54:70:08:93:4f:cb:e9:86:65:64: e2:32:bb:90:eb:04:70:81:b3:6d:8c:fe:be:9a:50:a2:e4:5d: c1:f5:d5:61:62:cb:87:5b:0f:ad:71:29:8d:0a:e7:9e:de:2b: dd:13:02:65:fd:ed:7a:98:e8:0f:42:3f:10:63:84:04:02:d7: cf:3f:16:9e:15:36:f9:a4:c5:91:f1:76:bf:33:a5:e7:25:e4: 9a:a9:37:b0:f0:4b:9e:ab:d4:71:cb:4b:b3:9e:94:de:d4:c9: b3:53:8f:1d:9a:d5:68:64:d7:1c:fb:07:b0:f7:db:af:ef:a1: 40:00:d5:45:18:bc:d7:03:a5:22:02:4b:06:07:10:28:3b:9e: ec:91:dc:a9:95:2e:7c:2a:89:cd:1f:8d:39:f5:22:a7:81:f3: 9b:f9:63:b9:8e:02:f6:65:16:91:50:e0:60:8d:36:4b:8d:22: b2:95:5c:c9:53:bf:3e:47:fe:e4:cf:12:0e:da:58:d8:cd:08: b7:1f:24:19:8f:e8:d6:24:be:7f:90:00:e6:fe:99:55:0e:e8: 7a:b0:77:1a:23:90:8d:78:af:87:c7:15:14:db:c3:66:a6:36: a8:00:33:89:6a:25:8f:1e:cc:eb:5b:e2:a5:06:9b:00:84:77: c5:75:8a:75 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTMwMjdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc4RTg2N0YyM0FBMzM4 NEM0MDA4MDlBQUU3NTA1MkI3NUI2RTE3NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD5PgoYY0SGLW00X/1nLcPyx2nZM3VtNZ3g0brOW1Kn0ks307K +I5OVt3zNMZUwrZukgCr6LjcjgQ5gt11HpSChyKidU6FIUekgvqZXItOR2/HM7T6 TaWuBBbbObOOMLqTNMjjSmQj0J6HodF+O9MEIZZCHJGRifewB7nAi5KzxexM92K2 aP8Sn4Tz2deJWzv5Sex7Y7N0FlN+frzWIxWfcdZd+8/ZGBh2TVLTHq3C5n/lSFWg PHUshFxLeKrTFrM043ZZMcEB5NLpZQUmfHiTfDUDhMnHVFQ9h9/IJJTqDtrIt7R/ CrDBZTU+qyWTgt0xgb1BYKp2hWJrBDUYKMQLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUeOhn8jqjOExACAmq51BSt1tuF2swHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L2VPaG44anFqT0V4QUNBbXE1MUJTdDF0dUYycy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHclLwwDQYJKoZIhvcNAQELBQADggEBAFxmIgHfj70WVHAIk0/L6YZlZOIy u5DrBHCBs22M/r6aUKLkXcH11WFiy4dbD61xKY0K557eK90TAmX97XqY6A9CPxBj hAQC188/Fp4VNvmkxZHxdr8zpecl5JqpN7DwS56r1HHLS7OelN7UybNTjx2a1Whk 1xz7B7D326/voUAA1UUYvNcDpSICSwYHECg7nuyR3KmVLnwqic0fjTn1IqeB85v5 Y7mOAvZlFpFQ4GCNNkuNIrKVXMlTvz5H/uTPEg7aWNjNCLcfJBmP6NYkvn+QAOb+ mVUO6HqwdxojkI14r4fHFRTbw2amNqgAM4lqJY8ezOtb4qUGmwCEd8V1inU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:59 2025 by rpki-client