$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/5B8Gq3qNsZ9UsZidZ4iH27XLCRE.roa File: 5B8Gq3qNsZ9UsZidZ4iH27XLCRE.roa (raw, json) Hash identifier: HEE1vS7BGQI+BgHXfZv91hJDuRxeOoEy2zxTmrZXBN4= Subject key identifier: E4:1F:06:AB:7A:8D:B1:9F:54:B1:98:9D:67:88:87:DB:B5:CB:09:11 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: C5 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/5B8Gq3qNsZ9UsZidZ4iH27XLCRE.roa Signing time: Fri 17 Jan 2025 19:34:04 +0000 ROA not before: Fri 17 Jan 2025 19:34:04 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 20940 IP address blocks: 117.104.140.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Jan 17 19:34:04 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=E41F06AB7A8DB19F54B1989D678887DBB5CB0911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:fb:db:36:fd:a0:63:f0:b2:0d:a9:b2:11: 3e:90:af:d1:06:dd:8f:3a:5c:c6:78:f7:e3:19:85: cd:b8:1f:b4:55:3f:7f:76:2b:76:b6:36:9b:84:40: 38:8d:71:2b:39:45:cb:a6:7e:6a:6f:45:df:43:6a: 6e:4e:e5:fc:63:eb:4d:bc:fe:2d:d0:d6:00:a6:bd: 7f:cd:06:66:be:50:90:d2:7d:ce:a9:e5:30:8e:62: 28:4c:e8:f2:d9:36:a4:a9:5e:58:74:2a:dd:c4:a0: cc:db:9e:94:dd:44:31:f4:ba:58:8d:7d:5f:8e:70: 1d:a9:c1:e4:d6:39:83:8d:3e:cc:5d:89:f1:06:a6: 34:2a:4d:62:4a:7a:f1:b6:8c:fd:e9:af:45:fc:11: 3b:2d:1b:50:54:48:b7:92:05:57:43:24:15:87:fa: d6:e8:cf:3e:55:79:d4:ac:01:c8:b6:6c:62:ce:92: ce:c8:c7:62:4d:b2:3a:7b:be:d8:46:c0:1a:32:7c: 3c:2f:5e:8a:eb:59:97:9e:d1:fc:77:aa:7d:39:87: 74:b0:f4:88:89:c7:5a:94:1b:95:ef:7a:d7:35:af: 27:23:62:3f:1a:95:56:da:c3:2a:33:c8:88:26:4c: 7a:71:10:c6:20:cf:b6:b0:44:ca:a6:91:d3:5d:62: f5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1F:06:AB:7A:8D:B1:9F:54:B1:98:9D:67:88:87:DB:B5:CB:09:11 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/5B8Gq3qNsZ9UsZidZ4iH27XLCRE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.104.140.0/22 Signature Algorithm: sha256WithRSAEncryption 46:bb:df:d7:a0:b0:94:44:c3:fa:5c:58:3b:20:43:eb:ec:4a: 48:53:5d:a7:a5:8a:70:bd:cb:4c:83:46:63:84:75:66:81:5f: 9a:66:83:ea:19:70:1b:74:88:d3:96:e4:e4:64:05:dc:93:02: cf:46:f5:5f:92:af:49:a9:ad:30:95:85:eb:69:41:29:90:5d: ab:74:32:df:88:f6:93:f1:f4:44:09:38:9b:80:0f:33:69:ae: 1f:85:5d:24:24:57:27:81:e7:d8:8a:f8:a4:38:d1:eb:56:38: 20:0d:06:5a:47:39:ba:71:bd:e1:db:b0:07:dc:d0:16:4f:31: 27:46:3c:84:a8:ce:21:1e:0e:b4:ec:54:a3:ed:1b:6d:3e:df: fa:ae:39:2a:63:55:46:1a:da:d1:33:81:46:ea:65:26:51:7e: 40:00:51:d8:0f:9d:30:59:b6:e2:cd:a5:e4:bb:f7:12:f6:84: 82:cc:9e:1f:27:9f:b2:78:b1:4f:93:f9:a8:7d:1e:15:c3:b6: 79:f0:75:f3:ca:fa:ae:c8:01:ed:a8:b8:1a:95:2b:59:d6:af: 4b:4c:d4:8b:e6:76:07:04:f8:4f:f1:55:82:af:b3:5d:af:fb: 4b:b1:8e:b3:4d:5d:09:ba:0b:df:d7:94:1b:2e:9d:70:07:53: 93:5a:ca:f0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTAxMTcx OTM0MDRaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU0MUYwNkFCN0E4REIx OUY1NEIxOTg5RDY3ODg4N0RCQjVDQjA5MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+tfvbNv2gY/CyDamyET6Qr9EG3Y86XMZ49+MZhc24H7RVP392 K3a2NpuEQDiNcSs5RcumfmpvRd9Dam5O5fxj6028/i3Q1gCmvX/NBma+UJDSfc6p 5TCOYihM6PLZNqSpXlh0Kt3EoMzbnpTdRDH0uliNfV+OcB2pweTWOYONPsxdifEG pjQqTWJKevG2jP3pr0X8ETstG1BUSLeSBVdDJBWH+tbozz5VedSsAci2bGLOks7I x2JNsjp7vthGwBoyfDwvXorrWZee0fx3qn05h3Sw9IiJx1qUG5Xvetc1rycjYj8a lVbawyozyIgmTHpxEMYgz7awRMqmkdNdYvWJAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU5B8Gq3qNsZ9UsZidZ4iH27XLCREwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC81QjhHcTNxTnNaOVVzWmlkWjRpSDI3WExDUkUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCdWiMMA0GCSqGSIb3DQEBCwUAA4IBAQBGu9/XoLCURMP6XFg7IEPr 7EpIU12npYpwvctMg0ZjhHVmgV+aZoPqGXAbdIjTluTkZAXckwLPRvVfkq9Jqa0w lYXraUEpkF2rdDLfiPaT8fRECTibgA8zaa4fhV0kJFcngefYivikONHrVjggDQZa Rzm6cb3h27AH3NAWTzEnRjyEqM4hHg607FSj7RttPt/6rjkqY1VGGtrRM4FG6mUm UX5AAFHYD50wWbbizaXku/cS9oSCzJ4fJ5+yeLFPk/mofR4Vw7Z58HXzyvquyAHt qLgalStZ1q9LTNSL5nYHBPhP8VWCr7Ndr/tLsY6zTV0Jugvf15QbLp1wB1OTWsrw -----END CERTIFICATE-----Generated at Sat Apr 5 17:24:54 2025 by rpki-client