$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/SRw5jwxGIUc9kGcTyexNZmNm4k4.roa File: SRw5jwxGIUc9kGcTyexNZmNm4k4.roa (raw, json) Hash identifier: KSyfW/NgHqg93Ix5kgXP6y5qlHrwSnkUlhIVDtNANe0= Subject key identifier: 49:1C:39:8F:0C:46:21:47:3D:90:67:13:C9:EC:4D:66:63:66:E2:4E Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Certificate serial: 71 Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/SRw5jwxGIUc9kGcTyexNZmNm4k4.roa Signing time: Fri 31 Jan 2025 01:31:42 +0000 ROA not before: Fri 31 Jan 2025 01:31:42 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 45680 IP address blocks: 218.100.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Validity Not Before: Jan 31 01:31:42 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=491C398F0C4621473D906713C9EC4D666366E24E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:4a:6c:79:c8:0d:74:91:ab:a3:05:ae:f3: 23:2c:0c:6f:a8:f9:b2:31:99:e9:2a:31:5a:3a:20: 81:01:37:eb:09:e0:0b:b5:71:13:fd:b1:97:80:00: 26:a8:63:7f:25:2a:53:5b:9a:be:a6:47:e5:59:75: d6:9f:c3:d3:fc:2a:79:32:fb:81:3f:aa:7b:cd:01: 1d:b6:3e:39:39:7e:53:31:6d:09:86:1b:25:00:35: cb:ee:35:be:74:40:3e:5b:b7:ad:93:83:72:20:90: 61:90:bd:94:12:b4:28:98:75:1c:46:db:a5:42:24: ce:78:0d:7a:ad:50:d5:20:e1:2a:a2:a8:2c:58:f4: 86:b1:60:db:d7:14:1d:2e:f0:2a:3c:79:12:64:73: 3c:e7:7e:52:73:00:b5:f7:51:34:20:d2:43:5f:56: cb:20:ff:19:a1:f7:8b:3a:c2:75:58:40:a9:ef:3b: 7f:f8:84:95:5e:89:63:da:61:bc:24:36:c9:1b:1c: e8:09:a8:77:f1:5f:b9:cb:38:de:73:05:44:5f:05: 6d:a8:0c:74:9b:2f:c7:af:e2:7b:5e:d8:16:bf:7e: 69:a4:b1:d1:19:90:92:e6:1b:00:a2:6e:f7:81:2c: 01:1d:64:be:cc:95:7f:07:67:9e:d0:54:ec:2d:fc: f9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1C:39:8F:0C:46:21:47:3D:90:67:13:C9:EC:4D:66:63:66:E2:4E X509v3 Authority Key Identifier: keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/SRw5jwxGIUc9kGcTyexNZmNm4k4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.100.67.0/24 Signature Algorithm: sha256WithRSAEncryption 46:7f:8f:b3:58:15:a4:21:b7:cd:12:19:2a:0c:8f:bf:01:34: da:fd:48:42:17:b9:63:9c:67:92:66:07:93:0a:81:fd:d5:aa: 17:81:a5:04:45:cb:f6:9d:ff:0d:6b:e7:0d:22:3e:b2:d4:e8: c4:22:f7:55:fd:c4:1d:c4:b2:8e:a9:e2:35:8a:4e:a4:01:09: cb:38:a1:1b:d8:7e:46:49:af:12:0d:f8:c1:82:49:4c:54:8c: f1:ad:85:20:7f:52:05:9d:75:95:3c:33:5e:15:18:2e:57:f4: 42:42:19:34:b9:00:44:de:53:da:39:77:46:3b:c7:36:f1:a0: 77:cc:06:55:fe:67:03:44:17:cb:b5:7c:33:12:e1:6d:33:5b: 0f:a3:64:d1:02:ff:89:95:8c:89:09:5b:0f:f3:f1:d3:2f:25: be:19:20:f5:61:c8:89:0a:07:40:48:84:ea:33:0c:57:76:42: 45:78:aa:54:b0:03:15:1e:19:68:ba:71:8c:3d:0d:3f:b5:84: da:73:44:41:3f:9b:bc:dc:90:cd:8a:2f:87:18:31:1e:f9:1e: 3c:0a:1e:39:ac:ff:74:f7:b6:fa:73:35:8b:ed:34:49:2b:0c: ae:74:e2:1d:b9:4c:53:5c:ee:2a:f7:f7:ed:1b:ac:95:4e:37: fe:05:b1:a3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDI2 RTBEMTdFMzBEOEJGNTcxNEY0QkE5MkVFRUIwRDIyREREQjFEMB4XDTI1MDEzMTAx MzE0MloXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNDkxQzM5OEYwQzQ2MjE0 NzNEOTA2NzEzQzlFQzRENjY2MzY2RTI0RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALcsSmx5yA10kaujBa7zIywMb6j5sjGZ6SoxWjoggQE36wngC7Vx E/2xl4AAJqhjfyUqU1uavqZH5Vl11p/D0/wqeTL7gT+qe80BHbY+OTl+UzFtCYYb JQA1y+41vnRAPlu3rZODciCQYZC9lBK0KJh1HEbbpUIkzngNeq1Q1SDhKqKoLFj0 hrFg29cUHS7wKjx5EmRzPOd+UnMAtfdRNCDSQ19WyyD/GaH3izrCdVhAqe87f/iE lV6JY9phvCQ2yRsc6Amod/Ffucs43nMFRF8FbagMdJsvx6/ie17YFr9+aaSx0RmQ kuYbAKJu94EsAR1kvsyVfwdnntBU7C38+fcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRJHDmPDEYhRz2QZxPJ7E1mY2biTjAfBgNVHSMEGDAWgBSNJuDRfjDYv1cU9LqS 7usNIt3bHTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTg5L2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNMZDJ4MC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNM ZDJ4MC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85ODkvU1J3NWp3eEdJVWM5a0djVHlleE5abU5tNGs0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANpkQzANBgkqhkiG9w0BAQsFAAOCAQEARn+Ps1gVpCG3zRIZKgyPvwE02v1I Qhe5Y5xnkmYHkwqB/dWqF4GlBEXL9p3/DWvnDSI+stToxCL3Vf3EHcSyjqniNYpO pAEJyzihG9h+RkmvEg34wYJJTFSM8a2FIH9SBZ11lTwzXhUYLlf0QkIZNLkARN5T 2jl3RjvHNvGgd8wGVf5nA0QXy7V8MxLhbTNbD6Nk0QL/iZWMiQlbD/Px0y8lvhkg 9WHIiQoHQEiE6jMMV3ZCRXiqVLADFR4ZaLpxjD0NP7WE2nNEQT+bvNyQzYovhxgx HvkePAoeOaz/dPe2+nM1i+00SSsMrnTiHblMU1zuKvf37RuslU43/gWxow== -----END CERTIFICATE-----Generated at Sat Apr 5 17:47:35 2025 by rpki-client