$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/kXC1vk8XN0pEehOLgdMBrUqSSOE.roa File: kXC1vk8XN0pEehOLgdMBrUqSSOE.roa (raw, json) Hash identifier: VSSxLhKCiYYgdFNKBWvmgg6pODGvl1cW2RIggtd4c14= Subject key identifier: 91:70:B5:BE:4F:17:37:4A:44:7A:13:8B:81:D3:01:AD:4A:92:48:E1 Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Certificate serial: 3241 Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/kXC1vk8XN0pEehOLgdMBrUqSSOE.roa Signing time: Fri 31 Jan 2025 01:31:17 +0000 ROA not before: Fri 31 Jan 2025 01:31:17 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7671 IP address blocks: 210.233.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12865 (0x3241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Validity Not Before: Jan 31 01:31:17 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=9170B5BE4F17374A447A138B81D301AD4A9248E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b7:a4:f3:15:a4:7f:61:c1:ce:6e:eb:5f:01: bd:e8:ee:e8:9a:08:61:6e:3b:25:c2:4a:5f:cd:95: dd:7a:bc:7a:60:79:87:d8:2a:19:c3:c2:c3:39:9c: c6:6e:8d:06:53:12:ca:94:91:bc:59:7e:53:2b:44: 07:ba:73:70:c7:2b:e2:80:28:5c:2d:4e:76:9c:e5: 97:2a:95:6a:c6:80:91:87:fd:85:0a:a5:bf:ce:d4: ef:5c:3f:88:65:a1:b8:5c:d5:e0:4c:b3:26:20:92: 05:1e:7e:f3:48:2e:43:8c:60:8d:98:69:22:12:ef: 7f:bd:40:e4:35:b0:e4:9a:3c:31:5c:2d:12:9c:fc: 8b:ff:50:b9:64:f5:e9:52:a1:02:93:a8:02:23:9e: e0:ac:96:ba:a7:fd:c4:e6:77:e1:32:10:2e:f1:2f: 13:85:66:08:d5:f6:f6:1f:b4:f1:bb:71:04:2e:f8: bf:3f:3b:da:65:6b:71:c6:43:45:f0:35:e5:ce:33: 9b:fb:f9:05:92:35:35:b6:2c:7c:cd:8b:af:d3:37: fc:5c:51:f9:65:f3:14:29:df:b7:49:7f:05:d4:e9: 55:1a:a4:15:e7:eb:36:5a:b5:13:a8:f8:05:21:7f: c1:3c:e7:e9:c6:61:6f:e3:28:f7:25:ee:13:c7:e8: d1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:70:B5:BE:4F:17:37:4A:44:7A:13:8B:81:D3:01:AD:4A:92:48:E1 X509v3 Authority Key Identifier: keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/kXC1vk8XN0pEehOLgdMBrUqSSOE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.233.240.0/20 Signature Algorithm: sha256WithRSAEncryption 13:13:f3:85:a3:d4:4e:ea:15:e5:cd:00:99:ef:01:b4:d3:e3: 4a:2e:9b:56:ab:32:6c:62:df:4f:15:e8:19:92:a2:79:ef:dd: a8:a9:36:8a:7a:24:da:2f:41:a3:f0:e2:fb:27:ad:5b:3f:77: 77:2e:99:ad:0a:d3:42:b1:d3:95:8f:c2:9c:a1:d1:28:f1:d2: 40:8c:49:f8:73:33:1d:11:50:64:68:a5:34:70:73:23:f2:13: 26:93:e2:7c:fb:be:9e:1f:c1:61:89:c5:1e:10:d6:b1:e8:db: 46:74:d1:98:60:97:0e:11:e5:30:f4:b2:7e:ab:37:a7:c9:b4: b4:53:8b:60:ce:c6:9f:c6:63:11:60:2d:4b:70:2a:61:ea:4d: 70:6d:0c:33:c9:ce:fc:9f:77:31:56:00:89:be:ae:44:91:a9: d2:66:47:5d:0e:f2:e6:11:2f:77:4e:cb:e8:36:50:0a:77:1e: 3d:6c:e1:c2:44:84:33:f0:5d:b4:da:9a:73:92:ea:74:74:02: b2:06:26:a0:c5:5d:5d:d8:0b:ec:1f:a9:84:85:eb:f5:b6:87: 78:52:36:cc:c9:db:4c:5c:5b:29:72:ba:e2:55:e9:10:61:7e: 87:c1:3f:a6:a4:72:0c:f7:71:30:fe:79:16:e4:ff:4c:fd:b6: 02:a9:89:73 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICMkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yNTAxMzEw MTMxMTdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkxNzBCNUJFNEYxNzM3 NEE0NDdBMTM4QjgxRDMwMUFENEE5MjQ4RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnt6TzFaR/YcHObutfAb3o7uiaCGFuOyXCSl/Nld16vHpgeYfY KhnDwsM5nMZujQZTEsqUkbxZflMrRAe6c3DHK+KAKFwtTnac5ZcqlWrGgJGH/YUK pb/O1O9cP4hlobhc1eBMsyYgkgUefvNILkOMYI2YaSIS73+9QOQ1sOSaPDFcLRKc /Iv/ULlk9elSoQKTqAIjnuCslrqn/cTmd+EyEC7xLxOFZgjV9vYftPG7cQQu+L8/ O9pla3HGQ0XwNeXOM5v7+QWSNTW2LHzNi6/TN/xcUfll8xQp37dJfwXU6VUapBXn 6zZatROo+AUhf8E85+nGYW/jKPcl7hPH6NG3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkXC1vk8XN0pEehOLgdMBrUqSSOEwHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjk5L2tYQzF2azhYTjBwRWVoT0xnZE1CclVxU1NPRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATS6fAwDQYJKoZIhvcNAQELBQADggEBABMT84Wj1E7qFeXNAJnvAbTT40ou m1arMmxi308V6BmSonnv3aipNop6JNovQaPw4vsnrVs/d3cuma0K00Kx05WPwpyh 0Sjx0kCMSfhzMx0RUGRopTRwcyPyEyaT4nz7vp4fwWGJxR4Q1rHo20Z00Zhglw4R 5TD0sn6rN6fJtLRTi2DOxp/GYxFgLUtwKmHqTXBtDDPJzvyfdzFWAIm+rkSRqdJm R10O8uYRL3dOy+g2UAp3Hj1s4cJEhDPwXbTamnOS6nR0ArIGJqDFXV3YC+wfqYSF 6/W2h3hSNszJ20xcWylyuuJV6RBhfofBP6akcgz3cTD+eRbk/0z9tgKpiXM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:37:45 2025 by rpki-client