$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/x4apSZ7TGJaw6MPYuqY07mklkt0.roa File: x4apSZ7TGJaw6MPYuqY07mklkt0.roa (raw, json) Hash identifier: 4TDP7PW2OqSMHenkcxixcOIODjjozfCq0VfZI2McdRg= Subject key identifier: C7:86:A9:49:9E:D3:18:96:B0:E8:C3:D8:BA:A6:34:EE:69:25:92:DD Certificate issuer: /CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481 Certificate serial: 08 Authority key identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/x4apSZ7TGJaw6MPYuqY07mklkt0.roa Signing time: Thu 30 Jan 2025 01:26:44 +0000 ROA not before: Thu 30 Jan 2025 01:26:44 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 17529 IP address blocks: 193.115.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481 Validity Not Before: Jan 30 01:26:44 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=C786A9499ED31896B0E8C3D8BAA634EE692592DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:4b:05:54:89:de:9f:c0:6b:ef:3d:ae:65: bd:1c:0a:6b:2a:aa:e3:12:02:26:3e:1f:5d:63:3f: ba:98:9e:08:98:49:e8:8d:14:c9:f4:52:a5:37:da: 4c:1c:3e:b4:fa:49:c8:6d:2f:76:8b:c8:60:9b:18: 88:92:ef:86:d5:b2:b5:52:02:d5:93:9b:0b:da:78: 77:6d:99:b1:7e:e5:1d:c9:7a:20:64:2a:d9:49:c5: ba:94:12:13:e3:96:8c:05:4e:6a:8f:55:96:b4:ca: e5:62:94:29:3e:75:e5:bc:3c:8d:26:8d:00:30:bd: 9d:e9:f9:81:6a:cb:8b:03:2b:29:4f:c2:c1:19:c3: 02:77:da:42:d9:00:04:35:49:d1:03:7f:d8:00:8d: f5:eb:e7:df:f5:72:c7:14:2e:a1:5c:92:96:84:b6: 1e:f4:45:b2:d9:05:e0:9c:83:03:f4:25:b7:ac:fa: e8:d4:f5:03:12:f3:f7:2f:96:04:85:9b:71:70:ed: f9:6a:98:a3:0e:1e:2a:97:f3:f6:95:68:d1:c6:25: 0f:11:0c:17:3d:f6:a8:1c:33:65:5e:e5:0f:bc:70: 20:c4:a5:65:76:df:72:a1:aa:61:67:e3:ee:99:16: 33:0b:65:54:9f:28:57:6b:d7:e2:3d:15:08:2f:f9: 47:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:86:A9:49:9E:D3:18:96:B0:E8:C3:D8:BA:A6:34:EE:69:25:92:DD X509v3 Authority Key Identifier: keyid:81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/x4apSZ7TGJaw6MPYuqY07mklkt0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.115.32.0/19 Signature Algorithm: sha256WithRSAEncryption 36:f6:2d:92:7f:bd:44:08:35:47:a7:68:2c:b8:50:65:fa:15: 0e:04:25:d2:9f:fb:e3:3e:8e:ac:45:9d:13:b4:98:15:ee:b8: 5c:15:11:7f:20:2b:cd:2d:7a:f7:be:ec:2d:a1:1d:a6:0e:31: bc:1b:b5:2b:fa:c4:7f:d5:b3:4a:ea:b6:89:40:6c:7c:2c:a5: 04:a3:1a:72:e4:c3:a6:21:a8:b9:5b:99:e7:1b:33:57:bd:cf: 32:6b:0b:28:7b:f9:a1:f7:df:4e:f7:fc:ac:d9:8c:8a:f7:58: 06:f9:ef:ba:41:7a:d3:c1:f2:9b:8e:66:20:7e:6d:d7:ed:cc: 29:e3:b0:1f:56:cc:ca:00:af:fa:9c:77:72:46:b6:c2:c9:8e: a9:03:aa:0f:dd:c8:25:c6:45:ed:c8:8f:88:38:d2:a7:ba:16: f2:9f:8d:d2:34:26:78:89:17:60:48:46:0d:e2:a3:3e:40:21: df:64:ec:3d:2d:47:c7:e6:9d:01:db:34:4f:72:ee:92:20:95: 3f:f8:bb:e1:f4:d9:15:e6:32:b2:aa:6d:f6:08:51:c4:ef:5c: f9:ac:36:85:52:b9:f5:15:03:05:74:13:40:f9:8c:b9:f4:42: 96:9f:b7:ba:1c:a1:5f:f6:d4:c3:6a:74:cd:ce:a5:ca:35:43: 38:20:cc:f9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MUZF QzQzNUNDM0IwRDU1REVBNDA1QjYxOEJENDE4RTFBRTU2NDgxMB4XDTI1MDEzMDAx MjY0NFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQzc4NkE5NDk5RUQzMTg5 NkIwRThDM0Q4QkFBNjM0RUU2OTI1OTJERDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL/dSwVUid6fwGvvPa5lvRwKayqq4xICJj4fXWM/upieCJhJ6I0U yfRSpTfaTBw+tPpJyG0vdovIYJsYiJLvhtWytVIC1ZObC9p4d22ZsX7lHcl6IGQq 2UnFupQSE+OWjAVOao9VlrTK5WKUKT515bw8jSaNADC9nen5gWrLiwMrKU/CwRnD AnfaQtkABDVJ0QN/2ACN9evn3/VyxxQuoVySloS2HvRFstkF4JyDA/Qlt6z66NT1 AxLz9y+WBIWbcXDt+WqYow4eKpfz9pVo0cYlDxEMFz32qBwzZV7lD7xwIMSlZXbf cqGqYWfj7pkWMwtlVJ8oV2vX4j0VCC/5R3UCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTHhqlJntMYlrDow9i6pjTuaSWS3TAfBgNVHSMEGDAWgBSB/sQ1zDsNVd6kBbYY vUGOGuVkgTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwODEvZ2Y3RU5jdzdEVlhlcEFXMkdMMUJqaHJsWklFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ2Y3RU5jdzdEVlhlcEFXMkdMMUJq aHJsWklFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDgxL3g0YXBTWjdUR0phdzZNUFl1cVkwN21rbGt0MC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAXBcyAwDQYJKoZIhvcNAQELBQADggEBADb2LZJ/vUQINUenaCy4UGX6 FQ4EJdKf++M+jqxFnRO0mBXuuFwVEX8gK80teve+7C2hHaYOMbwbtSv6xH/Vs0rq tolAbHwspQSjGnLkw6YhqLlbmecbM1e9zzJrCyh7+aH33073/KzZjIr3WAb577pB etPB8puOZiB+bdftzCnjsB9WzMoAr/qcd3JGtsLJjqkDqg/dyCXGRe3Ij4g40qe6 FvKfjdI0JniJF2BIRg3ioz5AId9k7D0tR8fmnQHbNE9y7pIglT/4u+H02RXmMrKq bfYIUcTvXPmsNoVSufUVAwV0E0D5jLn0Qpaft7ocoV/21MNqdM3Opco1QzggzPk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:46:13 2025 by rpki-client