$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/556/zT4baqvm1U7KCdYhMKfHwu_wvGg.roa File: zT4baqvm1U7KCdYhMKfHwu_wvGg.roa (raw, json) Hash identifier: obsPKHX2+Xi0ldUbWT0dLv7DcouXKGN2tK8whopXb80= Subject key identifier: CD:3E:1B:6A:AB:E6:D5:4E:CA:09:D6:21:30:A7:C7:C2:EF:F0:BC:68 Certificate issuer: /CN=5B940BB63134F9E9F2FE124FCD86E307EBF8B253 Certificate serial: 02 Authority key identifier: 5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/zT4baqvm1U7KCdYhMKfHwu_wvGg.roa Signing time: Tue 17 Dec 2024 10:47:24 +0000 ROA not before: Tue 17 Dec 2024 10:47:24 +0000 ROA not after: Wed 17 Dec 2025 04:31:27 +0000 asID: 58648 IP address blocks: 150.9.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B940BB63134F9E9F2FE124FCD86E307EBF8B253 Validity Not Before: Dec 17 10:47:24 2024 GMT Not After : Dec 17 04:31:27 2025 GMT Subject: CN=CD3E1B6AABE6D54ECA09D62130A7C7C2EFF0BC68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:b5:0f:a0:02:70:1d:cf:b2:af:ca:2e:cd: f7:48:e7:75:a5:b7:54:31:63:78:ea:40:a4:41:cb: 3e:2c:70:62:34:e1:ab:c6:1b:69:f3:81:3f:8a:d3: e4:62:b9:aa:36:46:13:b2:28:e2:76:f2:27:37:33: b1:40:c2:49:22:1c:12:b5:6c:6d:84:35:dc:1b:a1: 0d:f6:05:ea:57:6c:65:97:4f:66:8a:32:e9:ad:ae: 67:10:62:59:77:57:ac:be:98:e0:7c:fa:bd:6f:ad: 03:3b:85:b8:20:27:8e:36:21:69:0a:41:9d:15:55: c6:de:c7:99:86:06:53:01:f3:cd:b2:8f:4d:33:82: a9:05:f6:d7:c4:2b:4c:0f:0b:d2:29:12:61:5d:ee: 2c:e4:e3:b3:c0:38:a8:8f:65:68:ba:0c:ef:89:e5: 92:23:07:47:d6:f4:df:e6:69:c9:90:5e:5b:bc:1e: 5f:b0:dd:de:6c:af:4c:d1:ab:ce:af:48:40:15:9d: 1b:df:67:8c:89:af:c7:86:99:07:cf:e0:57:47:62: 3e:ad:e7:52:c7:50:97:a6:64:af:66:22:0e:68:0f: 94:69:55:2a:7a:fe:8b:63:42:5e:f6:f2:2c:8d:d0: 8b:26:47:37:0f:6b:5f:e8:af:5f:35:1d:d2:a6:60: 01:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3E:1B:6A:AB:E6:D5:4E:CA:09:D6:21:30:A7:C7:C2:EF:F0:BC:68 X509v3 Authority Key Identifier: keyid:5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/zT4baqvm1U7KCdYhMKfHwu_wvGg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.9.252.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:72:9f:2c:06:e8:f0:5e:25:c1:b5:4c:98:a2:c0:c0:3e:e7: f4:cc:29:c1:1f:05:b6:43:30:7a:6c:6d:e2:5d:d1:17:1a:c4: 20:02:08:06:16:3a:a1:37:f5:40:98:83:23:18:4f:72:fd:a9: d3:1a:c1:a9:8e:7e:9b:4f:c1:1d:3c:13:f9:dc:0a:44:ba:f4: 50:f4:6f:11:85:96:d5:9a:5e:0e:5c:9d:7f:22:75:65:b6:2c: cb:fd:00:97:3f:46:f9:bd:cd:0f:38:3e:24:af:ca:23:ad:86: 94:86:29:24:6b:7a:ea:03:a9:00:2c:e4:ad:6f:de:b1:52:a6: 5d:55:fa:86:85:d1:a3:ed:cf:45:67:a6:0a:d6:a9:22:ed:6f: a6:5c:95:ba:c4:17:0f:87:a4:bd:cc:0e:8e:64:4f:38:11:90: 1d:82:7b:97:b9:68:e5:ff:58:fc:d9:53:f7:ec:62:60:fa:7f: ef:25:17:6d:71:43:7f:28:fc:6d:2d:f5:7c:63:73:de:6c:06: 21:26:ef:82:c5:07:70:d4:1e:aa:e4:2b:e1:8c:a5:6d:91:bf: 2b:8c:5e:7f:7c:0f:6a:ac:df:a2:36:2b:97:32:a3:ce:d9:6f: ad:3f:05:56:8f:f3:e7:b8:1e:f1:06:66:ec:33:ca:00:32:09: 1d:9f:9d:1a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1Qjk0 MEJCNjMxMzRGOUU5RjJGRTEyNEZDRDg2RTMwN0VCRjhCMjUzMB4XDTI0MTIxNzEw NDcyNFoXDTI1MTIxNzA0MzEyN1owMzExMC8GA1UEAxMoQ0QzRTFCNkFBQkU2RDU0 RUNBMDlENjIxMzBBN0M3QzJFRkYwQkM2ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMnJtQ+gAnAdz7Kvyi7N90jndaW3VDFjeOpApEHLPixwYjThq8Yb afOBP4rT5GK5qjZGE7Io4nbyJzczsUDCSSIcErVsbYQ13BuhDfYF6ldsZZdPZooy 6a2uZxBiWXdXrL6Y4Hz6vW+tAzuFuCAnjjYhaQpBnRVVxt7HmYYGUwHzzbKPTTOC qQX218QrTA8L0ikSYV3uLOTjs8A4qI9laLoM74nlkiMHR9b03+ZpyZBeW7weX7Dd 3myvTNGrzq9IQBWdG99njImvx4aZB8/gV0diPq3nUsdQl6Zkr2YiDmgPlGlVKnr+ i2NCXvbyLI3QiyZHNw9rX+ivXzUd0qZgARcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTNPhtqq+bVTsoJ1iEwp8fC7/C8aDAfBgNVHSMEGDAWgBRblAu2MTT56fL+Ek/N huMH6/iyUzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTU2L1c1UUx0akUwLWVueV9oSlB6WWJqQi12NHNsTS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1c1UUx0akUwLWVueV9oSlB6WWJqQi12 NHNsTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81NTYvelQ0YmFxdm0xVTdLQ2RZaE1LZkh3dV93dkdnLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAZYJ/DANBgkqhkiG9w0BAQsFAAOCAQEAbXKfLAbo8F4lwbVMmKLAwD7n9Mwp wR8FtkMwemxt4l3RFxrEIAIIBhY6oTf1QJiDIxhPcv2p0xrBqY5+m0/BHTwT+dwK RLr0UPRvEYWW1ZpeDlydfyJ1ZbYsy/0Alz9G+b3NDzg+JK/KI62GlIYpJGt66gOp ACzkrW/esVKmXVX6hoXRo+3PRWemCtapIu1vplyVusQXD4ekvcwOjmRPOBGQHYJ7 l7lo5f9Y/NlT9+xiYPp/7yUXbXFDfyj8bS31fGNz3mwGISbvgsUHcNQequQr4Yyl bZG/K4xef3wPaqzfojYrlzKjztlvrT8FVo/z57ge8QZm7DPKADIJHZ+dGg== -----END CERTIFICATE-----Generated at Sat Apr 5 17:39:56 2025 by rpki-client