$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZLpJot_ia6xQijw5GCEKbwPVpGg.roa File: ZLpJot_ia6xQijw5GCEKbwPVpGg.roa (raw, json) Hash identifier: vG2d59Z4gplYoScxiQxNGn9ZRtrqEFwUBNEzNDQWXDQ= Subject key identifier: 64:BA:49:A2:DF:E2:6B:AC:50:8A:3C:39:18:21:0A:6F:03:D5:A4:68 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: C6 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZLpJot_ia6xQijw5GCEKbwPVpGg.roa Signing time: Fri 17 Jan 2025 19:38:11 +0000 ROA not before: Fri 17 Jan 2025 19:38:11 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 20940 IP address blocks: 61.213.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Jan 17 19:38:11 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=64BA49A2DFE26BAC508A3C3918210A6F03D5A468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c1:85:52:16:c2:d8:23:c4:4f:f1:a0:dc:2d: 35:6b:20:e7:47:82:3b:2f:73:49:42:51:e3:f4:15: ce:fb:54:3b:5d:c9:7b:e3:51:5f:29:05:34:56:93: 01:b1:70:84:1a:1f:35:eb:fb:5c:c6:71:eb:f1:28: 08:b5:f6:61:36:19:dc:a6:98:c5:6f:84:dc:ad:e9: cf:c9:3e:9f:14:f8:bf:95:e7:29:c5:13:8d:1b:ac: ba:66:4c:0b:1a:9f:86:2d:7f:6b:ca:57:7e:d8:df: 21:c4:61:d4:d8:42:b4:d4:a4:fe:e4:3a:05:f3:a5: 10:3d:57:82:53:24:88:ed:e5:26:8f:89:24:49:4d: 9b:89:b4:4c:de:ce:7d:66:8e:d6:9b:ae:ce:e9:41: c3:cd:50:eb:56:b9:f3:0e:a4:89:b4:01:87:54:e5: e4:d8:ab:15:9f:b3:0a:c6:21:ce:35:82:49:ba:c2: 1f:dd:0e:d7:bd:27:b8:c2:97:56:9e:68:cf:3c:96: 2c:bd:8c:00:4c:d0:61:5e:ec:2e:f3:3f:77:b4:10: d1:b2:b4:69:cb:0b:22:cf:a3:c1:e0:dd:c9:73:93: 95:fc:ab:e3:c2:8a:be:72:da:70:a8:3c:0e:b5:ea: ef:27:8c:f3:64:17:30:bd:d1:60:78:d4:f9:43:f5: b3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BA:49:A2:DF:E2:6B:AC:50:8A:3C:39:18:21:0A:6F:03:D5:A4:68 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZLpJot_ia6xQijw5GCEKbwPVpGg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.213.189.0/24 Signature Algorithm: sha256WithRSAEncryption 25:ca:a4:42:fa:2b:a4:2e:1f:8b:85:8b:e2:29:0c:1d:6d:e8: dd:0a:db:3a:4a:31:9e:f9:e9:23:09:17:be:83:2d:c8:3e:89: f3:f4:0f:da:61:db:7c:64:3d:de:b9:c9:e0:e7:97:cc:9b:66: 8d:16:81:e1:7f:71:69:a3:a8:d3:1c:10:f2:b2:4d:c1:31:96: d1:a5:8e:40:36:59:d8:75:44:af:88:11:05:d3:25:f5:8c:1a: 20:c9:8f:ec:9c:3a:c0:32:1a:e9:98:84:ad:2f:4a:af:0e:60: 90:81:85:8e:f4:97:f9:51:3a:7f:2a:9d:c4:02:91:6d:5c:ab: 7b:0d:22:3e:d8:c7:3d:68:2c:78:1f:b8:62:f1:2f:ea:db:9c: 08:fd:08:9f:0a:ec:32:30:e0:38:42:f0:cb:61:0a:7a:a5:7f: 27:8c:0e:8a:88:44:23:d8:ff:2d:cd:ab:5c:04:17:6b:92:95: 67:f2:b0:45:d5:1c:1e:1b:7d:1f:ec:40:51:3e:63:57:d3:16: 09:95:20:0f:c1:ab:05:1f:43:a7:37:d1:8d:b3:d7:12:82:51: 94:bb:db:a2:0f:05:52:c4:13:8e:98:31:a7:f5:9b:00:c4:f0: 67:c6:19:e6:95:e8:0c:02:e6:a0:23:af:d8:06:4b:e3:95:5f: 43:a7:82:2b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTAxMTcx OTM4MTFaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY0QkE0OUEyREZFMjZC QUM1MDhBM0MzOTE4MjEwQTZGMDNENUE0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlwYVSFsLYI8RP8aDcLTVrIOdHgjsvc0lCUeP0Fc77VDtdyXvj UV8pBTRWkwGxcIQaHzXr+1zGcevxKAi19mE2GdymmMVvhNyt6c/JPp8U+L+V5ynF E40brLpmTAsan4Ytf2vKV37Y3yHEYdTYQrTUpP7kOgXzpRA9V4JTJIjt5SaPiSRJ TZuJtEzezn1mjtabrs7pQcPNUOtWufMOpIm0AYdU5eTYqxWfswrGIc41gkm6wh/d Dte9J7jCl1aeaM88liy9jABM0GFe7C7zP3e0ENGytGnLCyLPo8Hg3clzk5X8q+PC ir5y2nCoPA616u8njPNkFzC90WB41PlD9bN3AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUZLpJot/ia6xQijw5GCEKbwPVpGgwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9aTHBKb3RfaWE2eFFpanc1R0NFS2J3UFZwR2cu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAPdW9MA0GCSqGSIb3DQEBCwUAA4IBAQAlyqRC+iukLh+LhYviKQwd bejdCts6SjGe+ekjCRe+gy3IPonz9A/aYdt8ZD3eucng55fMm2aNFoHhf3Fpo6jT HBDysk3BMZbRpY5ANlnYdUSviBEF0yX1jBogyY/snDrAMhrpmIStL0qvDmCQgYWO 9Jf5UTp/Kp3EApFtXKt7DSI+2Mc9aCx4H7hi8S/q25wI/QifCuwyMOA4QvDLYQp6 pX8njA6KiEQj2P8tzatcBBdrkpVn8rBF1RweG30f7EBRPmNX0xYJlSAPwasFH0On N9GNs9cSglGUu9uiDwVSxBOOmDGn9ZsAxPBnxhnmlegMAuagI6/YBkvjlV9Dp4Ir -----END CERTIFICATE-----Generated at Sat Apr 5 17:24:48 2025 by rpki-client