$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Wqe3KUCnAXVnSGCpTInzve5lm5g.roa File: Wqe3KUCnAXVnSGCpTInzve5lm5g.roa (raw, json) Hash identifier: U/ZVbF+w1vFhv9tjNIWMkmaQ+FVG7KmWQXEQHQlNWPg= Subject key identifier: 5A:A7:B7:29:40:A7:01:75:67:48:60:A9:4C:89:F3:BD:EE:65:9B:98 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 01A6 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Wqe3KUCnAXVnSGCpTInzve5lm5g.roa Signing time: Sun 31 Mar 2024 01:29:02 +0000 ROA not before: Sun 31 Mar 2024 01:29:02 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 4713 IP address blocks: 60.32.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 01:29:02 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=5AA7B72940A70175674860A94C89F3BDEE659B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:49:70:5c:91:2e:76:56:df:8f:03:35:dd: d3:49:80:72:6e:78:61:fe:f3:8b:86:26:3e:ba:6a: 26:c3:a8:7d:de:36:85:67:36:80:0c:78:39:4b:7a: 23:99:2e:62:3a:4d:9c:82:de:49:35:4c:f8:8c:f2: 71:cf:74:e5:c6:96:58:1a:1d:e7:ba:45:17:fd:89: 95:5d:9d:25:28:e2:e2:21:8a:ab:9a:62:e5:b8:67: cf:38:17:88:02:e3:e3:8a:51:90:22:4d:14:f8:91: 92:79:5f:9d:b2:57:ab:45:d2:e1:5f:01:cb:36:b5: 1a:3c:3d:88:2e:6b:44:ee:12:a6:3a:76:6c:28:7e: b5:43:90:ca:07:03:0b:a8:12:ea:60:ac:5b:86:e7: fb:c9:1f:37:f6:62:fc:ec:c3:90:0c:87:7c:57:bf: 75:82:38:f2:08:2e:79:7d:ad:88:1e:63:fb:ac:4b: 3c:d6:56:64:81:34:ba:65:fd:fa:81:1b:a9:79:eb: 6e:97:69:a4:05:96:3f:a6:2c:e8:f6:8a:c9:bf:fc: f7:5a:8d:d3:2f:8a:69:22:f7:ae:95:48:80:a1:b6: f2:df:e5:a6:8c:31:86:4e:12:3d:a0:61:b2:fc:ef: 3a:b1:b3:76:95:e2:4a:40:a3:22:18:f3:ea:58:03: 49:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A7:B7:29:40:A7:01:75:67:48:60:A9:4C:89:F3:BD:EE:65:9B:98 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Wqe3KUCnAXVnSGCpTInzve5lm5g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 60.32.0.0/12 Signature Algorithm: sha256WithRSAEncryption 82:4c:70:84:00:73:a5:bb:1c:19:1b:7b:71:08:fd:37:63:72: e2:70:a7:9f:8b:8a:07:68:46:81:ec:5c:38:c3:5d:f8:94:bd: f0:69:f5:4e:36:26:8a:16:eb:f6:ab:75:94:6d:68:96:3d:46: 02:f3:51:62:17:8e:4f:da:b5:34:6f:b2:c9:dc:62:fb:b5:43: 7a:cc:24:49:6f:38:1b:72:cd:82:c3:8b:1b:b7:3a:de:b8:7b: 80:75:b1:f2:6d:41:1f:2a:12:ae:b6:a6:de:03:a5:e7:b5:e3: 4b:a4:62:ea:e4:59:24:61:0a:3d:55:ad:fe:e1:a0:21:13:46: f3:69:0b:02:a8:44:3b:48:25:cf:f1:65:aa:7f:75:54:5b:2c: 6b:b3:2a:64:c6:d3:00:8f:13:2b:aa:57:76:48:cc:14:bb:6d: 0c:5a:80:ab:aa:af:27:51:62:cf:f3:a6:2d:51:b2:df:69:6e: 80:d0:d4:a1:64:d8:e4:70:15:93:fb:93:0c:3d:61:a3:c9:cf: f9:3d:81:c0:e1:63:e4:b3:ef:b8:f6:18:7c:b5:41:80:b7:08: 44:f2:80:d1:f5:34:cd:ad:9e:a2:dd:85:0e:eb:53:e6:22:1e: 78:c4:3d:ec:a7:ed:27:b6:34:18:f6:d2:33:51:d8:16:22:f8: 45:e6:8b:a4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDAzMzEw MTI5MDJaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVBQTdCNzI5NDBBNzAx NzU2NzQ4NjBBOTRDODlGM0JERUU2NTlCOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVbklwXJEudlbfjwM13dNJgHJueGH+84uGJj66aibDqH3eNoVn NoAMeDlLeiOZLmI6TZyC3kk1TPiM8nHPdOXGllgaHee6RRf9iZVdnSUo4uIhiqua YuW4Z884F4gC4+OKUZAiTRT4kZJ5X52yV6tF0uFfAcs2tRo8PYgua0TuEqY6dmwo frVDkMoHAwuoEupgrFuG5/vJHzf2Yvzsw5AMh3xXv3WCOPIILnl9rYgeY/usSzzW VmSBNLpl/fqBG6l5626XaaQFlj+mLOj2ism//PdajdMvimki966VSIChtvLf5aaM MYZOEj2gYbL87zqxs3aV4kpAoyIY8+pYA0ndAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUWqe3KUCnAXVnSGCpTInzve5lm5gwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL1dxZTNLVUNuQVhWblNHQ3BUSW56dmU1bG01Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQ8IDANBgkqhkiG9w0BAQsFAAOCAQEAgkxwhABzpbscGRt7cQj9N2Ny4nCn n4uKB2hGgexcOMNd+JS98Gn1TjYmihbr9qt1lG1olj1GAvNRYheOT9q1NG+yydxi +7VDeswkSW84G3LNgsOLG7c63rh7gHWx8m1BHyoSrram3gOl57XjS6Ri6uRZJGEK PVWt/uGgIRNG82kLAqhEO0glz/Flqn91VFssa7MqZMbTAI8TK6pXdkjMFLttDFqA q6qvJ1Fiz/OmLVGy32lugNDUoWTY5HAVk/uTDD1ho8nP+T2BwOFj5LPvuPYYfLVB gLcIRPKA0fU0za2eot2FDutT5iIeeMQ97KftJ7Y0GPbSM1HYFiL4ReaLpA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:18:09 2025 by rpki-client