$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/650/eOGKD03KLwPiVyUSTVZgqOqAER0.roa File: eOGKD03KLwPiVyUSTVZgqOqAER0.roa (raw, json) Hash identifier: KPxFEd3TcximAf7aOiKc5ZDKgOslMXorZQtKEvOF+jU= Subject key identifier: 78:E1:8A:0F:4D:CA:2F:03:E2:57:25:12:4D:56:60:A8:EA:80:11:1D Certificate issuer: /CN=0E4E32227E13122FE80340BF3AED3D793D26B457 Certificate serial: 04 Authority key identifier: 0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/eOGKD03KLwPiVyUSTVZgqOqAER0.roa Signing time: Mon 02 Dec 2024 01:26:48 +0000 ROA not before: Mon 02 Dec 2024 01:26:48 +0000 ROA not after: Thu 20 Nov 2025 01:37:29 +0000 asID: 17936 IP address blocks: 203.110.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4E32227E13122FE80340BF3AED3D793D26B457 Validity Not Before: Dec 2 01:26:48 2024 GMT Not After : Nov 20 01:37:29 2025 GMT Subject: CN=78E18A0F4DCA2F03E25725124D5660A8EA80111D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:d0:56:c3:0e:04:58:20:d9:e9:61:5a:f0: de:fd:ea:ca:30:35:78:49:74:5d:fd:ed:7f:72:dd: 46:95:92:0d:f5:59:2c:68:da:88:75:a0:f0:46:d8: 4a:79:b7:87:b8:f8:42:0f:73:88:57:4a:60:65:fb: 6b:f8:c9:82:34:b9:11:a3:39:88:c6:58:5c:d4:79: 9d:23:41:03:aa:13:bd:13:56:33:ca:38:35:c0:85: a8:07:ef:d5:3e:e4:45:5e:3f:8a:39:82:e5:01:75: 38:91:78:38:67:9f:42:72:ab:23:0c:37:94:54:d2: 5c:45:4b:8f:d1:65:d9:d4:78:f2:45:4d:14:9a:7d: 17:6b:08:63:38:99:2c:cc:c6:24:5d:20:db:47:39: cd:46:9a:84:a5:d8:99:4f:50:4c:de:58:a8:b9:41: 5d:c8:95:17:58:3f:32:fb:14:6a:d3:e8:ac:40:16: f9:e9:1f:e6:2d:46:f8:cc:64:67:29:bb:6c:ca:ac: 89:99:ec:7c:67:da:c1:0f:5e:00:ea:2f:9d:d7:16: a6:40:a1:dc:fb:34:c5:45:56:20:22:48:db:9b:55: ed:e4:4a:5d:07:ce:72:19:6f:6b:f3:31:a3:e8:38: 32:60:13:88:73:3f:32:2f:f8:36:5f:10:8f:c7:1c: 74:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E1:8A:0F:4D:CA:2F:03:E2:57:25:12:4D:56:60:A8:EA:80:11:1D X509v3 Authority Key Identifier: keyid:0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/eOGKD03KLwPiVyUSTVZgqOqAER0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.110.224.0/21 Signature Algorithm: sha256WithRSAEncryption 16:7e:33:f0:70:2e:0d:93:a1:e0:4d:6e:57:7a:94:99:7b:ed: 9e:1b:44:42:66:9c:ee:1a:30:74:3d:4e:d5:f7:4c:11:ac:32: a1:64:75:e7:a2:84:c6:2a:46:12:ae:ae:63:4f:a1:d6:95:62: 48:ca:a4:21:fe:b4:47:a1:b9:d8:94:c7:e7:84:57:5b:10:22: a0:06:2a:0f:29:72:a9:15:9f:13:56:22:8e:63:07:b1:c7:ec: d4:e2:41:ad:64:ce:b5:03:c8:0e:62:e5:a9:fd:81:3e:a5:15: 77:df:87:b5:a8:8e:6a:c1:2c:eb:56:4c:09:84:6f:64:28:78: 29:91:2c:6a:23:38:ca:d6:31:e7:6d:6b:23:c5:82:f6:59:55: 35:f3:0f:eb:2a:d2:e2:5c:10:1c:f3:59:2a:91:01:1a:8d:7f: 29:60:4f:33:f2:dd:f6:44:56:2b:86:c6:15:a6:f6:a1:ff:cf: 49:53:7b:ce:7a:f5:a9:52:73:7a:f3:c0:14:58:d2:7e:12:ce: e3:fe:41:74:ad:b6:95:c4:f7:72:d8:63:f7:c2:83:86:81:e9: 39:43:a5:63:fa:96:c7:63:dd:1a:18:32:41:23:d9:25:ef:6a: 9e:00:21:91:5e:e1:e3:c5:a3:1c:2c:76:88:01:e3:8d:e5:4a: 1b:2a:ab:93 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRTRF MzIyMjdFMTMxMjJGRTgwMzQwQkYzQUVEM0Q3OTNEMjZCNDU3MB4XDTI0MTIwMjAx MjY0OFoXDTI1MTEyMDAxMzcyOVowMzExMC8GA1UEAxMoNzhFMThBMEY0RENBMkYw M0UyNTcyNTEyNEQ1NjYwQThFQTgwMTExRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJv50FbDDgRYINnpYVrw3v3qyjA1eEl0Xf3tf3LdRpWSDfVZLGja iHWg8EbYSnm3h7j4Qg9ziFdKYGX7a/jJgjS5EaM5iMZYXNR5nSNBA6oTvRNWM8o4 NcCFqAfv1T7kRV4/ijmC5QF1OJF4OGefQnKrIww3lFTSXEVLj9Fl2dR48kVNFJp9 F2sIYziZLMzGJF0g20c5zUaahKXYmU9QTN5YqLlBXciVF1g/MvsUatPorEAW+ekf 5i1G+MxkZym7bMqsiZnsfGfawQ9eAOovndcWpkCh3Ps0xUVWICJI25tV7eRKXQfO chlva/Mxo+g4MmATiHM/Mi/4Nl8Qj8ccdFkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR44YoPTcovA+JXJRJNVmCo6oARHTAfBgNVHSMEGDAWgBQOTjIifhMSL+gDQL86 7T15PSa0VzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjUwL0RrNHlJbjRURWlfb0EwQ19PdTA5ZVQwbXRGYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RrNHlJbjRURWlfb0EwQ19PdTA5ZVQw bXRGYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NTAvZU9HS0QwM0tMd1BpVnlVU1RWWmdxT3FBRVIwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8tu4DANBgkqhkiG9w0BAQsFAAOCAQEAFn4z8HAuDZOh4E1uV3qUmXvtnhtE Qmac7howdD1O1fdMEawyoWR156KExipGEq6uY0+h1pViSMqkIf60R6G52JTH54RX WxAioAYqDylyqRWfE1YijmMHscfs1OJBrWTOtQPIDmLlqf2BPqUVd9+HtaiOasEs 61ZMCYRvZCh4KZEsaiM4ytYx521rI8WC9llVNfMP6yrS4lwQHPNZKpEBGo1/KWBP M/Ld9kRWK4bGFab2of/PSVN7znr1qVJzevPAFFjSfhLO4/5BdK22lcT3cthj98KD hoHpOUOlY/qWx2PdGhgyQSPZJe9qngAhkV7h48WjHCx2iAHjjeVKGyqrkw== -----END CERTIFICATE-----Generated at Sun Apr 6 21:12:27 2025 by rpki-client