$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/oEvqGdCs79vxipQ8wdUhufn5vs4.roa File: oEvqGdCs79vxipQ8wdUhufn5vs4.roa (raw, json) Hash identifier: JjHpEZ6DVpMBvK2L41vPa5kurHWTwuK2gx7LYg+I9xg= Subject key identifier: A0:4B:EA:19:D0:AC:EF:DB:F1:8A:94:3C:C1:D5:21:B9:F9:F9:BE:CE Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Certificate serial: 0119 Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/oEvqGdCs79vxipQ8wdUhufn5vs4.roa Signing time: Fri 31 Jan 2025 01:31:09 +0000 ROA not before: Fri 31 Jan 2025 01:31:09 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9607 IP address blocks: 211.14.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Validity Not Before: Jan 31 01:31:09 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=A04BEA19D0ACEFDBF18A943CC1D521B9F9F9BECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:08:61:24:21:4e:b4:98:6b:39:8d:d8:1e: a2:92:e2:0a:3c:20:cc:d2:11:82:03:f1:39:58:ab: 09:d2:b8:f5:ab:5b:c7:21:14:f8:6d:c5:69:e9:7e: f3:49:fc:78:b2:49:28:70:0b:25:6a:8c:38:d8:63: 94:99:bf:fb:60:aa:be:af:cc:eb:d8:06:ab:32:75: 29:b7:d9:2e:b8:eb:17:eb:90:a7:96:68:2f:84:d9: bf:1d:6a:68:e5:e8:68:b5:dd:7a:11:17:0e:25:ce: 98:ce:03:07:15:10:4b:27:23:c9:cc:e1:b0:b6:66: 1d:41:bf:76:7b:b7:4b:e6:80:55:18:63:69:52:6c: 63:91:5c:33:86:94:ca:2a:bf:d1:ad:ba:20:b6:91: f3:21:6a:39:a8:0a:45:42:c0:9a:ee:1c:e8:5c:4d: 5b:a0:37:f5:ca:26:b5:0c:a5:b8:85:55:93:84:58: 59:43:19:2b:93:22:6e:ed:c5:ef:a0:ed:fa:ba:d3: b8:be:32:89:57:f7:2d:c4:ac:47:aa:0f:69:cc:73: 8c:0e:3e:32:7d:6d:0a:3e:23:8e:bc:10:0b:60:72: d2:2d:19:8e:28:9a:b5:31:cf:ed:1a:d3:4c:16:8b: ed:2d:76:af:ec:2c:a7:bf:e2:cf:a1:ca:da:de:c4: 8b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4B:EA:19:D0:AC:EF:DB:F1:8A:94:3C:C1:D5:21:B9:F9:F9:BE:CE X509v3 Authority Key Identifier: keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/oEvqGdCs79vxipQ8wdUhufn5vs4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.16.0/22 Signature Algorithm: sha256WithRSAEncryption 49:bd:04:35:b4:29:63:72:80:b8:9e:1c:ae:9d:d8:04:de:86: 82:b5:5b:a9:5e:45:72:d0:66:3b:7e:3f:7c:66:00:0c:78:37: 27:d6:af:72:14:2d:46:b5:88:39:7b:a1:4b:51:b0:8a:af:40: 4c:59:14:b7:13:48:d9:0e:43:3e:4d:c8:8f:57:7b:91:66:08: 53:0d:a6:7b:79:04:ad:91:7f:51:9b:f5:16:0d:f7:42:e8:68: ae:a6:d5:19:1f:7f:ee:0b:45:b1:90:81:81:ca:92:ce:60:8f: 7e:ef:1b:35:a1:fa:1a:b1:7f:a2:40:27:1b:c1:52:bd:a7:04: a9:95:58:b8:e1:72:69:f1:d6:4b:a9:f8:15:39:3b:53:fa:9b: 86:b5:9c:1b:5b:6a:af:3e:11:a8:4b:25:73:0a:91:a0:b7:14: 89:2d:3e:6b:45:6e:bb:c6:d4:1e:4c:fa:8b:2b:e3:ca:19:cb: bb:d7:52:5a:89:ef:e5:0d:60:34:d0:79:bd:66:02:6d:58:fa: 0e:35:2c:41:38:db:7f:ac:03:b4:98:a4:cc:86:9e:f8:dc:d2: 9c:61:bb:b4:ae:64:f9:b1:f4:97:0a:52:73:7a:94:b1:fe:5b: 62:48:61:51:da:9b:f6:a7:a6:69:b0:38:c9:49:9c:6c:04:fb: db:8c:8d:86 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICARkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1 QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNTAxMzEw MTMxMDlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEwNEJFQTE5RDBBQ0VG REJGMThBOTQzQ0MxRDUyMUI5RjlGOUJFQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxKAhhJCFOtJhrOY3YHqKS4go8IMzSEYID8TlYqwnSuPWrW8ch FPhtxWnpfvNJ/HiySShwCyVqjDjYY5SZv/tgqr6vzOvYBqsydSm32S646xfrkKeW aC+E2b8damjl6Gi13XoRFw4lzpjOAwcVEEsnI8nM4bC2Zh1Bv3Z7t0vmgFUYY2lS bGORXDOGlMoqv9GtuiC2kfMhajmoCkVCwJruHOhcTVugN/XKJrUMpbiFVZOEWFlD GSuTIm7txe+g7fq607i+MolX9y3ErEeqD2nMc4wOPjJ9bQo+I468EAtgctItGY4o mrUxz+0a00wWi+0tdq/sLKe/4s+hytrexIujAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoEvqGdCs79vxipQ8wdUhufn5vs4wHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3 cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzU0L29FdnFHZENzNzl2eGlwUTh3ZFVodWZuNXZzNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALTDhAwDQYJKoZIhvcNAQELBQADggEBAEm9BDW0KWNygLieHK6d2ATehoK1 W6leRXLQZjt+P3xmAAx4NyfWr3IULUa1iDl7oUtRsIqvQExZFLcTSNkOQz5NyI9X e5FmCFMNpnt5BK2Rf1Gb9RYN90LoaK6m1Rkff+4LRbGQgYHKks5gj37vGzWh+hqx f6JAJxvBUr2nBKmVWLjhcmnx1kup+BU5O1P6m4a1nBtbaq8+EahLJXMKkaC3FIkt PmtFbrvG1B5M+osr48oZy7vXUlqJ7+UNYDTQeb1mAm1Y+g41LEE423+sA7SYpMyG nvjc0pxhu7SuZPmx9JcKUnN6lLH+W2JIYVHam/anpmmwOMlJnGwE+9uMjYY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:44:31 2025 by rpki-client