$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/mkWDdfuqM01d5p6atrFUcZ4XCHk.roa File: mkWDdfuqM01d5p6atrFUcZ4XCHk.roa (raw, json) Hash identifier: zwUMdwuOo/YbaLd1DK88kXJFJ3Xa2xDCyGRE3CvVgl0= Subject key identifier: 9A:45:83:75:FB:AA:33:4D:5D:E6:9E:9A:B6:B1:54:71:9E:17:08:79 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 056A Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/mkWDdfuqM01d5p6atrFUcZ4XCHk.roa Signing time: Fri 31 Jan 2025 01:39:42 +0000 ROA not before: Fri 31 Jan 2025 01:39:42 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 42.127.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:39:42 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=9A458375FBAA334D5DE69E9AB6B154719E170879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:a5:4f:c6:cf:61:37:a9:50:13:26:31:73: af:26:d6:42:b9:18:a3:05:38:db:d3:31:51:3e:c5: 36:c8:dd:1f:ef:e3:ae:fe:a9:18:50:38:e6:7f:2c: 84:fe:90:ef:5d:cb:3c:da:79:bb:29:ae:c3:84:d8: 57:69:38:fa:72:42:15:ae:c2:b8:de:08:c7:56:5f: cb:9c:78:d2:85:4e:62:63:6b:b5:cd:e7:e4:c8:f6: 94:50:da:3c:49:a8:aa:5c:43:99:2f:e3:dc:ed:c0: 18:5d:6a:31:0b:8f:c0:d1:86:6f:c8:c3:dd:89:6d: 66:b0:9d:f9:5f:cd:2d:76:63:b2:70:21:55:12:aa: 8d:2a:35:86:bb:e4:6d:2b:eb:d6:6a:b5:00:1b:d2: 0d:2c:07:be:28:dc:4e:e4:c2:12:30:71:d0:9a:8d: 34:82:8a:dd:77:09:48:8e:4f:6d:93:0d:6c:d0:8c: 28:7c:98:1e:77:d4:39:c8:67:31:f3:a7:24:e1:72: 38:e2:22:8d:f8:69:2a:2d:07:02:c1:ed:d5:98:92: 7d:17:1c:01:93:59:6f:86:f3:38:45:fd:a5:c5:72: 02:a1:cc:3e:d2:74:72:0a:ce:6c:25:78:0b:ee:2d: fb:00:92:d1:aa:63:27:7b:fb:4b:59:e6:a8:3f:d5: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:45:83:75:FB:AA:33:4D:5D:E6:9E:9A:B6:B1:54:71:9E:17:08:79 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/mkWDdfuqM01d5p6atrFUcZ4XCHk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 42.127.192.0/18 Signature Algorithm: sha256WithRSAEncryption 1a:c5:0e:0d:5c:0d:ef:44:1c:8e:2e:2c:1c:80:97:48:9c:01: 0d:21:93:0d:73:60:a0:2f:ab:78:be:1b:ca:3a:3c:c8:cc:8a: e8:36:8d:3f:02:0f:3e:b0:e0:b1:1f:db:ea:a4:a9:a6:ec:27: 9c:33:e4:fe:de:97:25:48:ce:3b:a4:d3:40:18:10:01:96:c5: f8:3f:70:f5:a4:ab:61:f6:05:81:d9:ec:fa:8a:7d:13:2f:a9: a0:b6:8c:4a:a7:88:6c:9b:38:dc:1e:30:f2:f3:0c:f6:c6:c0: ec:d0:02:0f:98:2e:bf:e9:de:f8:73:ac:54:a1:03:ea:21:47: e6:18:36:9a:af:af:9c:a7:6e:c6:88:3d:41:34:ba:76:21:39: 05:45:54:58:8f:7a:bd:48:ef:8f:cf:c5:2c:12:f4:83:b2:6d: 96:85:c0:a2:ce:b8:91:63:e3:12:2b:29:f7:ed:34:93:2f:08: 74:e0:9c:ba:61:dd:49:92:9b:e8:47:36:9c:88:a8:e8:22:b0: 16:48:8b:96:47:fa:bb:b5:c3:e6:d4:1c:66:7d:3e:41:70:d4: d5:48:b6:13:c9:41:f0:c4:77:c9:9a:31:77:83:9a:bc:6b:d6: 05:74:08:b2:ad:81:7f:99:79:ce:ae:65:13:2d:b9:70:36:6c: ee:dd:38:3a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM5NDJaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlBNDU4Mzc1RkJBQTMz NEQ1REU2OUU5QUI2QjE1NDcxOUUxNzA4NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLxqVPxs9hN6lQEyYxc68m1kK5GKMFONvTMVE+xTbI3R/v467+ qRhQOOZ/LIT+kO9dyzzaebsprsOE2FdpOPpyQhWuwrjeCMdWX8uceNKFTmJja7XN 5+TI9pRQ2jxJqKpcQ5kv49ztwBhdajELj8DRhm/Iw92JbWawnflfzS12Y7JwIVUS qo0qNYa75G0r69ZqtQAb0g0sB74o3E7kwhIwcdCajTSCit13CUiOT22TDWzQjCh8 mB531DnIZzHzpyThcjjiIo34aSotBwLB7dWYkn0XHAGTWW+G8zhF/aXFcgKhzD7S dHIKzmwleAvuLfsAktGqYyd7+0tZ5qg/1XDXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmkWDdfuqM01d5p6atrFUcZ4XCHkwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L21rV0RkZnVxTTAxZDVwNmF0ckZVY1o0WENIay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYqf8AwDQYJKoZIhvcNAQELBQADggEBABrFDg1cDe9EHI4uLByAl0icAQ0h kw1zYKAvq3i+G8o6PMjMiug2jT8CDz6w4LEf2+qkqabsJ5wz5P7elyVIzjuk00AY EAGWxfg/cPWkq2H2BYHZ7PqKfRMvqaC2jEqniGybONweMPLzDPbGwOzQAg+YLr/p 3vhzrFShA+ohR+YYNpqvr5ynbsaIPUE0unYhOQVFVFiPer1I74/PxSwS9IOybZaF wKLOuJFj4xIrKfftNJMvCHTgnLph3UmSm+hHNpyIqOgisBZIi5ZH+ru1w+bUHGZ9 PkFw1NVIthPJQfDEd8maMXeDmrxr1gV0CLKtgX+Zec6uZRMtuXA2bO7dODo= -----END CERTIFICATE-----Generated at Sat Apr 5 23:07:48 2025 by rpki-client