$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/T_31eBaEFihdMCMV6faFBqsLDa0.roa File: T_31eBaEFihdMCMV6faFBqsLDa0.roa (raw, json) Hash identifier: IFsJZ7Je3JKurRpwIsfwQfmVzUkHijSgyjwh2OuJ1vU= Subject key identifier: 4F:FD:F5:78:16:84:16:28:5D:30:23:15:E9:F6:85:06:AB:0B:0D:AD Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Certificate serial: 011B Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/T_31eBaEFihdMCMV6faFBqsLDa0.roa Signing time: Fri 31 Jan 2025 01:31:10 +0000 ROA not before: Fri 31 Jan 2025 01:31:10 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9607 IP address blocks: 203.141.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Validity Not Before: Jan 31 01:31:10 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=4FFDF578168416285D302315E9F68506AB0B0DAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:17:d3:28:35:9b:73:d2:63:fe:bc:33:01: e1:b9:ba:69:af:a5:d6:13:36:f9:b5:04:4a:1a:cd: a2:50:ee:45:17:00:f1:de:1d:79:3f:a2:d6:35:95: bc:04:dc:94:b6:92:c1:48:96:2c:db:b8:68:d7:d6: 79:9a:7f:a5:41:9b:b4:ae:fc:a3:17:1c:c0:ae:84: 20:52:f7:01:08:ba:48:4b:e4:20:fd:64:47:f5:6a: a2:87:fd:87:3a:b0:2d:ba:00:18:53:84:4c:83:e5: 47:40:40:36:69:69:94:eb:af:e7:41:0f:2d:f4:68: fc:c3:25:cd:68:a6:e3:7a:70:d8:0b:50:93:7a:c0: aa:20:b4:9d:0b:f5:eb:5e:26:27:1e:d3:85:df:3f: 61:36:0e:7d:96:07:29:85:a2:ba:f3:bb:1b:b9:d8: f0:b3:54:6c:56:06:98:bb:a3:4f:a5:24:61:31:34: 03:5c:2b:78:89:6c:2d:2a:49:75:00:96:23:9d:75: 5f:af:15:20:40:a4:26:cd:2e:3e:8f:06:39:71:14: ae:a9:27:88:b8:95:e3:7b:41:9c:82:5c:af:2b:f9: d0:e4:62:e4:3b:74:ea:7d:6a:30:85:26:f6:d1:8c: fd:2a:d2:83:a0:44:aa:06:c0:03:92:42:ef:c9:f5: d4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FD:F5:78:16:84:16:28:5D:30:23:15:E9:F6:85:06:AB:0B:0D:AD X509v3 Authority Key Identifier: keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/T_31eBaEFihdMCMV6faFBqsLDa0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.141.52.0/23 Signature Algorithm: sha256WithRSAEncryption 55:fb:7b:4c:3b:3d:25:b1:37:a7:e6:54:05:68:cf:5a:e8:14: 52:52:e5:47:ab:cd:ea:39:ea:ea:27:29:c7:94:7e:6f:4e:b3: 28:ad:81:b7:a2:70:9f:37:be:e4:c2:8d:09:f6:17:8d:50:e4: c4:99:f9:19:83:2b:6c:7e:57:03:d4:09:e4:cd:a5:1c:cc:aa: 8a:e9:c0:8d:d5:f8:d6:9d:3f:04:91:01:96:3f:b3:29:4e:1f: 4a:74:87:44:6c:17:f9:cd:64:4e:64:b0:a2:27:48:6c:69:87: f7:c2:d2:2c:d7:13:9a:d0:6f:6f:c6:ad:ef:ee:b5:7c:a7:a6: cb:1f:33:5c:7c:af:d4:7e:fe:a2:87:4c:b7:a4:41:94:f1:15: 97:b4:bc:88:58:ac:2a:4d:22:9d:40:38:84:ec:ca:0c:dd:46: ff:39:ee:4e:3d:68:79:d7:1b:53:82:60:2d:f9:5c:ac:58:bf: cf:38:11:40:aa:ac:06:a3:54:a2:62:43:92:14:f9:a2:94:f9: a8:65:87:9d:cb:23:24:1a:a1:fc:81:57:e4:1a:6d:3d:49:4d: cc:ed:21:64:11:a4:f7:8e:d4:9d:41:20:1a:b6:ae:a3:a7:be: b5:6b:d0:2c:72:e2:90:7d:8e:2b:76:d5:f2:cc:0a:f9:a5:78: e3:d6:cb:64 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICARswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1 QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNTAxMzEw MTMxMTBaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRGRkRGNTc4MTY4NDE2 Mjg1RDMwMjMxNUU5RjY4NTA2QUIwQjBEQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEXxfTKDWbc9Jj/rwzAeG5ummvpdYTNvm1BEoazaJQ7kUXAPHe HXk/otY1lbwE3JS2ksFIlizbuGjX1nmaf6VBm7Su/KMXHMCuhCBS9wEIukhL5CD9 ZEf1aqKH/Yc6sC26ABhThEyD5UdAQDZpaZTrr+dBDy30aPzDJc1opuN6cNgLUJN6 wKogtJ0L9eteJice04XfP2E2Dn2WBymForrzuxu52PCzVGxWBpi7o0+lJGExNANc K3iJbC0qSXUAliOddV+vFSBApCbNLj6PBjlxFK6pJ4i4leN7QZyCXK8r+dDkYuQ7 dOp9ajCFJvbRjP0q0oOgRKoGwAOSQu/J9dQ1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUT/31eBaEFihdMCMV6faFBqsLDa0wHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3 cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzU0L1RfMzFlQmFFRmloZE1DTVY2ZmFGQnFzTERhMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHLjTQwDQYJKoZIhvcNAQELBQADggEBAFX7e0w7PSWxN6fmVAVoz1roFFJS 5Uerzeo56uonKceUfm9OsyitgbeicJ83vuTCjQn2F41Q5MSZ+RmDK2x+VwPUCeTN pRzMqorpwI3V+NadPwSRAZY/sylOH0p0h0RsF/nNZE5ksKInSGxph/fC0izXE5rQ b2/Gre/utXynpssfM1x8r9R+/qKHTLekQZTxFZe0vIhYrCpNIp1AOITsygzdRv85 7k49aHnXG1OCYC35XKxYv884EUCqrAajVKJiQ5IU+aKU+ahlh53LIyQaofyBV+Qa bT1JTcztIWQRpPeO1J1BIBq2rqOnvrVr0Cxy4pB9jit21fLMCvmleOPWy2Q= -----END CERTIFICATE-----Generated at Wed Feb 19 22:37:42 2025 by rpki-client