$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/uDn4GgV1R6DTKPzFb4T_gByvXbU.roa File: uDn4GgV1R6DTKPzFb4T_gByvXbU.roa (raw, json) Hash identifier: 3elcu+lHXsA2knA0/byRNOmcQvP5tckjQlsmKMNbqvE= Subject key identifier: B8:39:F8:1A:05:75:47:A0:D3:28:FC:C5:6F:84:FF:80:1C:AF:5D:B5 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 057F Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/uDn4GgV1R6DTKPzFb4T_gByvXbU.roa Signing time: Fri 31 Jan 2025 01:39:52 +0000 ROA not before: Fri 31 Jan 2025 01:39:52 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 218.219.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:39:52 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=B839F81A057547A0D328FCC56F84FF801CAF5DB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:ea:8a:ad:0a:fc:79:06:a7:1a:0d:65:29: 6c:95:80:cd:73:d4:b4:9b:0e:36:36:5a:39:c3:4e: d1:06:d6:bd:f3:a6:2b:c6:01:45:28:ca:b7:2c:2b: 11:e9:9b:d5:4a:9c:34:96:58:36:66:8b:58:4b:62: 4c:63:aa:92:ff:c9:95:74:59:5b:32:75:c6:b4:26: 57:70:ac:c7:f5:9d:59:10:0d:b8:01:6c:d7:3d:bf: 72:6a:4e:66:7f:07:fb:d1:68:af:ff:f2:f5:55:cc: 22:15:1b:e5:16:0d:c0:e1:1d:84:31:e8:c9:ff:38: 01:9f:a1:fd:f3:80:09:ba:d4:9e:95:c0:bc:a3:92: 25:3f:1a:c2:7d:12:e0:c0:4b:56:d9:85:e6:e9:6e: 1b:59:91:6f:0f:3c:c5:38:55:8f:73:4a:ed:54:b1: 29:0b:9f:5e:d8:89:d3:63:8f:98:33:18:46:7f:73: 73:35:42:9c:0f:5d:b5:10:83:45:60:09:12:3a:6f: 76:33:09:42:b4:85:e9:21:7b:87:0d:f0:0f:2e:a5: 46:8c:dc:63:0a:fb:64:33:16:5f:81:7b:9c:40:f4: 98:ca:03:dd:fe:72:0a:0f:51:53:ab:28:94:91:1b: 36:20:86:89:63:5d:92:c8:c8:49:e4:42:2d:08:b9: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:39:F8:1A:05:75:47:A0:D3:28:FC:C5:6F:84:FF:80:1C:AF:5D:B5 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/uDn4GgV1R6DTKPzFb4T_gByvXbU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.219.48.0/22 Signature Algorithm: sha256WithRSAEncryption 39:d3:4c:51:68:48:e3:02:69:40:40:a1:5e:92:32:bf:fc:76: ef:40:35:95:85:4c:0f:df:fd:82:7f:37:ca:9a:08:e3:29:7a: 92:f1:e9:1d:9b:7c:d1:5c:da:eb:85:83:0f:ef:d4:49:10:15: 4c:93:37:7a:bd:95:9b:70:4d:07:2a:f5:b9:44:6a:30:46:b0: 77:55:f0:f4:08:73:19:06:97:bf:c2:f4:85:0f:f7:6d:80:8d: da:9b:8f:2c:a2:07:b2:e1:20:aa:28:73:46:5a:97:11:cc:dc: 39:1d:40:00:55:f4:02:7d:bf:9d:12:47:5d:08:44:de:50:5f: 24:26:20:f1:ce:17:e2:f0:19:1e:0b:91:81:e5:82:ba:8d:47: da:b7:80:0f:18:18:42:48:47:6e:a6:f0:f8:3e:01:e4:46:0d: f5:d3:fc:c2:7d:a9:23:63:97:8a:eb:54:97:fd:af:1f:84:06: f8:2b:f4:f0:68:67:98:03:b2:5d:d4:49:1c:02:8f:8d:da:04: 44:6c:3e:0e:78:98:0c:e1:4a:6f:bc:d8:56:2a:73:64:38:c3: f6:47:84:1b:a6:bf:8d:41:a0:1c:8a:4c:d5:96:71:66:21:b0: 92:5e:8c:2a:b4:83:3c:8c:bf:ca:f3:2e:e0:c2:1b:0d:b8:e7: a7:99:d0:fe -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM5NTJaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI4MzlGODFBMDU3NTQ3 QTBEMzI4RkNDNTZGODRGRjgwMUNBRjVEQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3x+qKrQr8eQanGg1lKWyVgM1z1LSbDjY2WjnDTtEG1r3zpivG AUUoyrcsKxHpm9VKnDSWWDZmi1hLYkxjqpL/yZV0WVsydca0JldwrMf1nVkQDbgB bNc9v3JqTmZ/B/vRaK//8vVVzCIVG+UWDcDhHYQx6Mn/OAGfof3zgAm61J6VwLyj kiU/GsJ9EuDAS1bZhebpbhtZkW8PPMU4VY9zSu1UsSkLn17YidNjj5gzGEZ/c3M1 QpwPXbUQg0VgCRI6b3YzCUK0hekhe4cN8A8upUaM3GMK+2QzFl+Be5xA9JjKA93+ cgoPUVOrKJSRGzYgholjXZLIyEnkQi0IucuTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUuDn4GgV1R6DTKPzFb4T/gByvXbUwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L3VEbjRHZ1YxUjZEVEtQekZiNFRfZ0J5dlhiVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALa2zAwDQYJKoZIhvcNAQELBQADggEBADnTTFFoSOMCaUBAoV6SMr/8du9A NZWFTA/f/YJ/N8qaCOMpepLx6R2bfNFc2uuFgw/v1EkQFUyTN3q9lZtwTQcq9blE ajBGsHdV8PQIcxkGl7/C9IUP922AjdqbjyyiB7LhIKooc0ZalxHM3DkdQABV9AJ9 v50SR10IRN5QXyQmIPHOF+LwGR4LkYHlgrqNR9q3gA8YGEJIR26m8Pg+AeRGDfXT /MJ9qSNjl4rrVJf9rx+EBvgr9PBoZ5gDsl3USRwCj43aBERsPg54mAzhSm+82FYq c2Q4w/ZHhBumv41BoByKTNWWcWYhsJJejCq0gzyMv8rzLuDCGw2456eZ0P4= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:30 2025 by rpki-client