$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2DSJ3iVpu9yeB05IxofsLXlYH78.roa File: 2DSJ3iVpu9yeB05IxofsLXlYH78.roa (raw, json) Hash identifier: faEf1MnkDN40pFL1H9z2kvXHgbzz0bPzKxahijHW5k0= Subject key identifier: D8:34:89:DE:25:69:BB:DC:9E:07:4E:48:C6:87:EC:2D:79:58:1F:BF Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0358 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2DSJ3iVpu9yeB05IxofsLXlYH78.roa Signing time: Fri 24 Jan 2025 01:11:27 +0000 ROA not before: Fri 24 Jan 2025 01:11:27 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 210.229.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 24 01:11:27 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=D83489DE2569BBDC9E074E48C687EC2D79581FBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:02:08:5b:5a:00:2f:77:02:c6:dd:57:86: 4c:26:b1:c2:2c:d6:48:06:e5:5f:d0:17:aa:17:dd: 2d:ba:d1:af:95:ba:66:61:9e:3e:ab:67:76:41:af: 01:a7:19:7b:dd:64:d9:ff:ba:d6:00:11:2f:80:05: 54:ee:a5:8e:ee:ed:13:a6:70:e3:e5:bc:9b:74:65: ef:5e:fe:e3:95:5a:1a:ad:37:bb:10:2b:1f:73:e6: 90:dd:50:6f:d6:03:2f:7d:dc:2a:3b:2c:90:80:69: 27:0a:40:35:7b:a4:74:b7:97:66:10:32:47:a8:cc: 34:87:eb:03:89:86:f1:d8:f6:fe:e1:ae:bb:3d:42: dd:25:95:49:a2:c6:df:44:36:56:53:10:37:06:48: 32:96:8a:56:3f:3e:8b:39:9e:e9:41:c3:5c:39:ad: 2d:28:65:6e:2b:69:26:af:d4:c9:8f:9e:af:cf:84: c1:4d:26:6d:f7:ee:b1:bb:38:51:7b:2e:95:59:93: 4a:cb:b6:ff:df:ff:97:c8:9c:51:5c:f3:e7:be:56: 67:d6:76:8e:b0:e1:82:16:85:af:01:ea:b3:03:cf: 6f:63:38:ec:b2:ce:7d:c3:de:9a:51:c3:60:f7:9e: ab:1b:6a:7c:61:48:a9:f4:e9:db:35:77:3e:19:0d: be:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:34:89:DE:25:69:BB:DC:9E:07:4E:48:C6:87:EC:2D:79:58:1F:BF X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2DSJ3iVpu9yeB05IxofsLXlYH78.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.229.88.0/24 Signature Algorithm: sha256WithRSAEncryption 28:bc:b1:8b:06:14:18:97:c3:72:a0:55:43:1a:6d:3e:4e:97: a5:c9:bb:79:21:9c:eb:15:2c:95:e2:fa:1c:ae:a8:12:15:05: 58:51:fa:9c:9d:28:5b:c8:73:28:5c:1b:95:00:e1:6d:aa:2e: d9:46:b6:55:c4:3f:a7:96:c9:ab:64:ce:85:ef:07:b8:5f:fc: c4:2f:10:30:a4:b0:e8:e7:e8:d4:a7:b1:90:05:31:e3:c7:85: d5:9b:c8:d9:eb:5d:88:0a:e1:6f:2b:ac:82:4a:c4:28:5e:e1: e5:82:76:07:b6:84:61:0e:30:21:ea:55:52:89:dd:6c:b0:3b: 12:3b:4b:a1:5a:94:70:3f:d7:f7:16:d0:52:37:92:8c:d6:02: 2d:2a:f6:ad:ae:5e:3a:3e:14:ad:03:15:c8:b3:55:7b:07:d2: 7c:e7:85:7c:6d:4d:f4:de:40:b4:9c:22:6c:2a:b6:dc:d7:51: 2a:b1:d9:31:b9:f1:36:a4:19:44:d1:ca:2d:a5:0a:ee:3f:31: 90:ac:05:49:95:92:aa:84:a2:83:76:c0:de:00:d3:16:d7:95: b5:a2:7e:84:3b:ad:f1:93:4a:94:3a:ef:56:9a:14:e4:ec:2e: f0:be:ff:38:12:37:96:e9:ad:de:a6:73:b2:c9:88:7e:22:82: 9b:83:b4:ad -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjQw MTExMjdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ4MzQ4OURFMjU2OUJC REM5RTA3NEU0OEM2ODdFQzJENzk1ODFGQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUHQIIW1oAL3cCxt1XhkwmscIs1kgG5V/QF6oX3S260a+VumZh nj6rZ3ZBrwGnGXvdZNn/utYAES+ABVTupY7u7ROmcOPlvJt0Ze9e/uOVWhqtN7sQ Kx9z5pDdUG/WAy993Co7LJCAaScKQDV7pHS3l2YQMkeozDSH6wOJhvHY9v7hrrs9 Qt0llUmixt9ENlZTEDcGSDKWilY/Pos5nulBw1w5rS0oZW4raSav1MmPnq/PhMFN Jm337rG7OFF7LpVZk0rLtv/f/5fInFFc8+e+VmfWdo6w4YIWha8B6rMDz29jOOyy zn3D3ppRw2D3nqsbanxhSKn06ds1dz4ZDb6ZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2DSJ3iVpu9yeB05IxofsLXlYH78wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzJEU0ozaVZwdTl5ZUIwNUl4b2ZzTFhsWUg3OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADS5VgwDQYJKoZIhvcNAQELBQADggEBACi8sYsGFBiXw3KgVUMabT5Ol6XJ u3khnOsVLJXi+hyuqBIVBVhR+pydKFvIcyhcG5UA4W2qLtlGtlXEP6eWyatkzoXv B7hf/MQvEDCksOjn6NSnsZAFMePHhdWbyNnrXYgK4W8rrIJKxChe4eWCdge2hGEO MCHqVVKJ3WywOxI7S6FalHA/1/cW0FI3kozWAi0q9q2uXjo+FK0DFcizVXsH0nzn hXxtTfTeQLScImwqttzXUSqx2TG58TakGUTRyi2lCu4/MZCsBUmVkqqEooN2wN4A 0xbXlbWifoQ7rfGTSpQ671aaFOTsLvC+/zgSN5bprd6mc7LJiH4igpuDtK0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:32:34 2025 by rpki-client