$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/7tCGDj_HwkjxzoQxPdnK6diEFCU.roa File: 7tCGDj_HwkjxzoQxPdnK6diEFCU.roa (raw, json) Hash identifier: bT1jetR3igdWmDJjkidT06s86Ch24IhqmIgSvAAkBJ0= Subject key identifier: EE:D0:86:0E:3F:C7:C2:48:F1:CE:84:31:3D:D9:CA:E9:D8:84:14:25 Certificate issuer: /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F Certificate serial: 2E Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/7tCGDj_HwkjxzoQxPdnK6diEFCU.roa Signing time: Fri 31 Jan 2025 01:28:52 +0000 ROA not before: Fri 31 Jan 2025 01:28:52 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 17683 IP address blocks: 2001:f98::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F Validity Not Before: Jan 31 01:28:52 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=EED0860E3FC7C248F1CE84313DD9CAE9D8841425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:20:3c:19:b7:54:a6:06:c4:36:2a:c6:5e: a8:cc:1b:80:50:7c:03:88:ab:cc:9e:61:c9:1c:77: dc:7f:fa:66:ab:38:29:d9:44:65:d5:9b:3f:86:10: a1:54:5c:07:7e:0c:69:c9:76:b8:5b:7e:69:3f:d9: 59:87:bf:71:e9:8a:66:1b:ae:6c:87:6b:29:44:02: f3:f4:7a:aa:2d:1d:5d:01:b7:d8:86:cc:46:09:78: db:76:62:e6:70:b8:48:9c:ff:b2:46:fa:e1:e2:26: 20:1d:ac:d7:65:1a:3f:a9:08:1c:ed:46:a9:45:a0: bd:c1:b7:de:01:1b:6d:3a:d1:8c:4b:0a:43:56:6a: 55:99:58:36:6c:43:b5:93:81:4a:d6:5c:fc:d1:5e: 1a:7a:9d:65:c7:e8:3e:aa:62:7b:6d:61:65:dc:6d: 6a:03:ce:bd:97:b0:31:3a:05:da:3c:ee:66:56:c8: 9a:6f:38:df:93:04:4a:36:76:7e:ee:dc:a7:99:23: 8c:3a:38:8b:4f:d7:f2:d1:a6:4b:f8:f0:f5:b6:1d: 64:c2:ce:db:b7:8e:a2:ac:57:e9:7a:93:c9:91:44: 75:e6:3d:40:2d:4f:cd:f4:a0:97:6d:67:fb:b1:c2: 50:54:3a:c6:2f:9c:09:6f:43:b7:47:8c:be:17:e8: 3e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D0:86:0E:3F:C7:C2:48:F1:CE:84:31:3D:D9:CA:E9:D8:84:14:25 X509v3 Authority Key Identifier: keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/7tCGDj_HwkjxzoQxPdnK6diEFCU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:f98::/32 Signature Algorithm: sha256WithRSAEncryption 09:fb:42:a9:e0:96:4c:e7:e5:c8:c8:e7:7a:b4:4a:ea:a6:76: 2e:36:06:62:fe:67:42:2b:15:51:9f:a4:bb:05:09:bf:fe:27: b9:d1:17:63:3a:ab:34:4d:9a:c5:0f:de:db:2f:b2:6a:83:02: b0:23:3c:ce:f7:9c:90:2e:c4:33:c1:07:59:0f:07:00:5f:06: 82:b7:99:a2:73:9f:7e:fd:5b:54:e9:d4:63:24:d8:9b:6e:48: d5:3b:aa:6e:03:58:ce:f7:7d:4c:b1:16:80:99:92:af:b5:5b: 68:2b:df:9f:c9:06:84:d0:85:1c:bc:12:b1:8f:25:5d:77:80: c5:0d:2c:dc:2f:94:5b:da:68:ba:64:16:0f:d5:c0:c5:37:ac: bf:17:0a:28:73:a5:6c:bc:01:a4:16:17:9b:3f:29:7f:24:08: 83:68:93:2a:c3:4e:e2:7c:f8:e5:be:c2:1b:07:8b:8a:b7:bc: 8e:fa:3c:fc:60:4c:8f:7e:09:b5:0e:72:d0:3f:a1:26:cf:7a: 12:07:44:27:bd:46:f1:26:34:f9:3a:35:f0:94:2b:ab:72:10: 63:67:ae:8e:28:50:e3:47:14:38:65:1b:35:7d:16:db:06:06: da:44:88:0f:b2:25:13:61:ff:91:98:90:69:fe:81:85:9d:5d: a5:f2:b9:48 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNUND OTU5MjkxMDk3OTIzQTZGNDJEOEY2NTdCOTBCQTAzMkU1RjZGMB4XDTI1MDEzMTAx Mjg1MloXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoRUVEMDg2MEUzRkM3QzI0 OEYxQ0U4NDMxM0REOUNBRTlEODg0MTQyNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL7nIDwZt1SmBsQ2KsZeqMwbgFB8A4irzJ5hyRx33H/6Zqs4KdlE ZdWbP4YQoVRcB34Macl2uFt+aT/ZWYe/cemKZhuubIdrKUQC8/R6qi0dXQG32IbM Rgl423Zi5nC4SJz/skb64eImIB2s12UaP6kIHO1GqUWgvcG33gEbbTrRjEsKQ1Zq VZlYNmxDtZOBStZc/NFeGnqdZcfoPqpie21hZdxtagPOvZewMToF2jzuZlbImm84 35MESjZ2fu7cp5kjjDo4i0/X8tGmS/jw9bYdZMLO27eOoqxX6XqTyZFEdeY9QC1P zfSgl21n+7HCUFQ6xi+cCW9Dt0eMvhfoPu0CAwEAAaOCAikwggIlMB0GA1UdDgQW BBTu0IYOP8fCSPHOhDE92crp2IQUJTAfBgNVHSMEGDAWgBTFzJWSkQl5I6b0LY9l e5C6Ay5fbzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNjAveGN5VmtwRUplU09tOUMyUFpYdVF1Z011WDI4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveGN5VmtwRUplU09tOUMyUFpYdVF1 Z011WDI4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDYwLzd0Q0dEal9Id2tqeHpvUXhQZG5LNmRpRUZDVS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQ+YMA0GCSqGSIb3DQEBCwUAA4IBAQAJ+0Kp4JZM5+XIyOd6tErq pnYuNgZi/mdCKxVRn6S7BQm//ie50RdjOqs0TZrFD97bL7JqgwKwIzzO95yQLsQz wQdZDwcAXwaCt5mic59+/VtU6dRjJNibbkjVO6puA1jO931MsRaAmZKvtVtoK9+f yQaE0IUcvBKxjyVdd4DFDSzcL5Rb2mi6ZBYP1cDFN6y/Fwooc6VsvAGkFhebPyl/ JAiDaJMqw07ifPjlvsIbB4uKt7yO+jz8YEyPfgm1DnLQP6Emz3oSB0QnvUbxJjT5 OjXwlCurchBjZ66OKFDjRxQ4ZRs1fRbbBgbaRIgPsiUTYf+RmJBp/oGFnV2l8rlI -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:56 2025 by rpki-client