$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/32UhHM1VRvzI7-zy8SyLqgSyrIQ.roa File: 32UhHM1VRvzI7-zy8SyLqgSyrIQ.roa (raw, json) Hash identifier: HoRNVbZ3XrrAy9z1Wzrd8xTKEIGshon24119qW3d+nM= Subject key identifier: DF:65:21:1C:CD:55:46:FC:C8:EF:EC:F2:F1:2C:8B:AA:04:B2:AC:84 Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Certificate serial: 82 Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/32UhHM1VRvzI7-zy8SyLqgSyrIQ.roa Signing time: Fri 31 Jan 2025 01:32:02 +0000 ROA not before: Fri 31 Jan 2025 01:32:02 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18260 IP address blocks: 219.109.48.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Validity Not Before: Jan 31 01:32:02 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=DF65211CCD5546FCC8EFECF2F12C8BAA04B2AC84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:02:81:96:f8:06:89:aa:58:e2:0d:bf:5c:8f: 36:7c:82:16:25:5e:a9:b5:6a:b6:13:bf:a1:94:fb: d6:17:89:ac:b3:bc:5e:38:3a:0d:7c:68:87:db:48: 0f:3d:0e:e2:a5:1c:15:cf:d4:ae:67:28:8f:da:72: 17:b1:a9:01:c1:0e:36:6d:33:79:20:3b:73:cb:8e: 7f:04:8b:66:d1:be:c3:80:76:bb:7e:11:98:1a:a5: 1b:e9:5f:ce:04:5e:ec:07:80:28:78:bc:68:5e:10: 64:5f:2b:a8:61:d5:a7:f3:46:de:1a:d0:6c:6f:30: 64:05:71:77:0c:38:a6:92:58:f9:cb:35:b1:0b:cd: c9:91:4a:20:72:d1:03:0b:29:f4:de:70:39:64:be: f4:07:62:d9:7d:c4:f9:62:fd:d7:01:09:66:42:e3: db:46:d2:da:90:d0:33:47:54:5b:f4:df:3a:93:6c: a6:26:eb:a8:eb:9b:9a:b2:2b:ef:ec:fc:66:85:79: 25:53:ac:0e:86:e9:b6:76:d5:f9:ca:3d:fd:9c:e6: b0:77:c1:b6:89:50:fe:54:6a:91:58:02:1a:24:10: 6a:f9:b5:91:f1:d1:c0:b3:e7:0c:b6:24:e6:bb:06: 82:ad:d4:c8:2d:51:86:dd:3b:76:b9:fa:27:13:4e: 65:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:65:21:1C:CD:55:46:FC:C8:EF:EC:F2:F1:2C:8B:AA:04:B2:AC:84 X509v3 Authority Key Identifier: keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/32UhHM1VRvzI7-zy8SyLqgSyrIQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.109.48.0/20 Signature Algorithm: sha256WithRSAEncryption 72:96:e5:c7:c0:a5:1d:7a:6a:2c:b6:e1:5b:a1:28:29:03:e5: 34:d8:11:f6:42:9f:a9:8f:c2:17:42:dd:24:f8:2a:0a:c5:98: ee:84:c7:13:10:08:b1:62:42:e8:70:48:ea:c5:16:3f:d5:49: ee:36:7d:0b:bf:a7:a6:37:13:bd:95:c8:11:b4:13:cf:39:d9: 19:4f:1c:92:2e:a8:f5:ec:d2:8e:d4:f5:0c:a0:ea:7e:26:9f: 16:55:3b:b5:97:00:4e:6d:aa:46:16:72:63:30:3a:62:0e:a4: 64:43:cf:e8:f8:f2:02:fb:80:bc:23:ca:e9:d1:14:c3:5a:81: 99:36:2b:91:76:56:28:9b:c9:93:90:50:8c:99:94:cf:ed:47: 4f:dc:33:16:b2:f0:ae:1b:8c:a3:36:6f:8c:ed:23:69:c6:56: 31:6f:a4:07:cd:05:2d:13:a6:5f:db:1c:6e:23:36:03:ab:67: 9d:dc:82:84:e6:17:04:3d:f1:16:15:78:58:94:cc:29:90:10: f6:a2:90:46:4d:ef:45:7f:2f:73:1d:6f:d0:39:5d:17:ef:36: 51:52:a7:5c:8b:e9:97:9d:c7:83:07:35:53:92:60:98:f3:ab: 13:2e:0f:c0:56:62:af:1a:b9:b4:d6:d4:7b:9c:20:77:40:e4: 7f:5d:09:24 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTFB Q0E0NDI3NUVDMDU3MkJDNjkyMTUwMkIyNDFDMTRENDRBOUFBMTAeFw0yNTAxMzEw MTMyMDJaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERGNjUyMTFDQ0Q1NTQ2 RkNDOEVGRUNGMkYxMkM4QkFBMDRCMkFDODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD8AoGW+AaJqljiDb9cjzZ8ghYlXqm1arYTv6GU+9YXiayzvF44 Og18aIfbSA89DuKlHBXP1K5nKI/achexqQHBDjZtM3kgO3PLjn8Ei2bRvsOAdrt+ EZgapRvpX84EXuwHgCh4vGheEGRfK6hh1afzRt4a0GxvMGQFcXcMOKaSWPnLNbEL zcmRSiBy0QMLKfTecDlkvvQHYtl9xPli/dcBCWZC49tG0tqQ0DNHVFv03zqTbKYm 66jrm5qyK+/s/GaFeSVTrA6G6bZ21fnKPf2c5rB3wbaJUP5UapFYAhokEGr5tZHx 0cCz5wy2JOa7BoKt1MgtUYbdO3a5+icTTmUxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU32UhHM1VRvzI7+zy8SyLqgSyrIQwHwYDVR0jBBgwFoAUkaykQnXsBXK8aSFQ KyQcFNRKmqEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzczMS9rYXlrUW5Yc0JYSzhhU0ZRS3lRY0ZOUkttcUUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9rYXlrUW5Yc0JYSzhhU0ZRS3lRY0ZO UkttcUUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNzMxLzMyVWhITTFWUnZ6STctenk4U3lMcWdTeXJJUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATbbTAwDQYJKoZIhvcNAQELBQADggEBAHKW5cfApR16aiy24VuhKCkD5TTY EfZCn6mPwhdC3ST4KgrFmO6ExxMQCLFiQuhwSOrFFj/VSe42fQu/p6Y3E72VyBG0 E8852RlPHJIuqPXs0o7U9Qyg6n4mnxZVO7WXAE5tqkYWcmMwOmIOpGRDz+j48gL7 gLwjyunRFMNagZk2K5F2ViibyZOQUIyZlM/tR0/cMxay8K4bjKM2b4ztI2nGVjFv pAfNBS0Tpl/bHG4jNgOrZ53cgoTmFwQ98RYVeFiUzCmQEPaikEZN70V/L3Mdb9A5 XRfvNlFSp1yL6Zedx4MHNVOSYJjzqxMuD8BWYq8aubTW1HucIHdA5H9dCSQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:31:06 2025 by rpki-client