$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2VGRZ1pvILqGLFnaOdQBsP3JOng.roa File: 2VGRZ1pvILqGLFnaOdQBsP3JOng.roa (raw, json) Hash identifier: dWDO2QCe5I7JYXF+keUVTwE5aAA4geMbZee/HdhcAgg= Subject key identifier: D9:51:91:67:5A:6F:20:BA:86:2C:59:DA:39:D4:01:B0:FD:C9:3A:78 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 034D Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2VGRZ1pvILqGLFnaOdQBsP3JOng.roa Signing time: Fri 24 Jan 2025 01:07:19 +0000 ROA not before: Fri 24 Jan 2025 01:07:19 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 182.236.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 24 01:07:19 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=D95191675A6F20BA862C59DA39D401B0FDC93A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:29:9c:9b:ca:3c:67:56:d1:0e:04:a6:27: e0:ab:59:64:6c:62:53:86:cb:2a:ee:5c:7c:75:0b: 00:0c:3f:0b:f9:b1:71:eb:d1:9d:70:1c:da:08:21: b9:a7:aa:41:33:87:70:a0:3f:f0:59:ae:74:43:6f: 25:6c:e3:00:91:c1:58:39:4c:78:3b:be:b6:3d:6e: d4:39:5e:ac:f2:cc:d6:bf:12:dd:da:a6:51:3f:fc: 1a:28:fb:62:25:50:a7:25:69:e5:dc:b1:c4:84:fa: ad:29:b4:30:9d:2e:e9:6f:8d:fd:c1:25:6e:0c:07: ec:4a:ec:a6:c5:c5:c6:66:f3:96:8e:2f:47:2a:5b: 5e:04:a7:5f:d3:93:e6:56:3f:46:98:32:b8:eb:bd: 2f:63:1b:a3:1c:2c:28:78:03:62:83:4c:65:47:8b: 6e:fb:10:5c:ba:e8:44:b4:3f:45:0f:61:ae:3b:77: e1:f2:19:ae:6d:fb:6b:04:3d:32:4c:6d:b2:75:6a: f4:50:2d:03:3c:17:42:12:cb:97:3f:e1:c6:0b:99: 12:b6:a9:3d:fc:5e:04:b0:de:ed:2f:59:b7:0f:a2: 50:f4:20:a0:a3:92:b2:8b:95:5b:4c:02:6f:01:2b: 03:22:c1:a9:a6:5d:1c:a6:4d:b0:16:d0:8a:5c:a5: 02:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:51:91:67:5A:6F:20:BA:86:2C:59:DA:39:D4:01:B0:FD:C9:3A:78 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2VGRZ1pvILqGLFnaOdQBsP3JOng.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.236.56.0/21 Signature Algorithm: sha256WithRSAEncryption 63:c2:2a:0f:8c:5f:4f:a0:3a:6d:28:29:54:07:85:71:c3:98: 82:a7:79:46:74:00:e1:2b:19:d1:49:b9:4f:fd:1d:38:8f:db: 0a:d9:33:0c:ca:89:64:1f:d8:d6:7b:ac:d7:5b:2c:7b:90:a5: 31:eb:db:52:a1:4c:3f:41:aa:7a:e1:f2:54:7d:42:fd:df:7b: 85:02:26:00:9e:d2:c7:d4:a6:61:16:00:42:d5:a9:86:a4:6a: 01:61:5a:c2:4d:c1:d0:0e:a6:7b:aa:b7:2b:f1:f3:7b:7c:b3: f5:2e:5c:e3:29:6c:71:9a:74:a9:0f:bc:a7:7f:dd:bf:9d:00: 45:75:ae:bf:2b:59:bb:c1:73:4a:a9:ab:33:b1:00:cd:e5:2d: 7e:98:16:de:b3:6a:1b:ce:3e:26:36:ee:1b:19:4d:49:8d:b3: 06:e0:c5:9a:74:3e:45:de:c4:35:15:cb:c5:86:ce:4f:91:68: 1d:41:89:e3:3e:c3:69:08:15:55:0f:4c:6a:21:e1:4d:5e:17: bd:ee:bb:85:a2:cb:9d:be:ce:8f:59:e9:22:6e:4f:0a:ec:c9: aa:33:aa:d7:94:cd:b4:83:75:c1:e5:20:0b:b5:19:f5:e1:93: e6:c1:85:f4:6c:df:28:6d:a4:ba:62:c4:87:0a:5f:1d:d7:fb: 99:56:65:19 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA00wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjQw MTA3MTlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ5NTE5MTY3NUE2RjIw QkE4NjJDNTlEQTM5RDQwMUIwRkRDOTNBNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAlSmcm8o8Z1bRDgSmJ+CrWWRsYlOGyyruXHx1CwAMPwv5sXHr 0Z1wHNoIIbmnqkEzh3CgP/BZrnRDbyVs4wCRwVg5THg7vrY9btQ5XqzyzNa/Et3a plE//Boo+2IlUKclaeXcscSE+q0ptDCdLulvjf3BJW4MB+xK7KbFxcZm85aOL0cq W14Ep1/Tk+ZWP0aYMrjrvS9jG6McLCh4A2KDTGVHi277EFy66ES0P0UPYa47d+Hy Ga5t+2sEPTJMbbJ1avRQLQM8F0ISy5c/4cYLmRK2qT38XgSw3u0vWbcPolD0IKCj krKLlVtMAm8BKwMiwammXRymTbAW0IpcpQLTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2VGRZ1pvILqGLFnaOdQBsP3JOngwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzJWR1JaMXB2SUxxR0xGbmFPZFFCc1AzSk9uZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO27DgwDQYJKoZIhvcNAQELBQADggEBAGPCKg+MX0+gOm0oKVQHhXHDmIKn eUZ0AOErGdFJuU/9HTiP2wrZMwzKiWQf2NZ7rNdbLHuQpTHr21KhTD9Bqnrh8lR9 Qv3fe4UCJgCe0sfUpmEWAELVqYakagFhWsJNwdAOpnuqtyvx83t8s/UuXOMpbHGa dKkPvKd/3b+dAEV1rr8rWbvBc0qpqzOxAM3lLX6YFt6zahvOPiY27hsZTUmNswbg xZp0PkXexDUVy8WGzk+RaB1BieM+w2kIFVUPTGoh4U1eF73uu4Wiy52+zo9Z6SJu TwrsyaozqteUzbSDdcHlIAu1GfXhk+bBhfRs3yhtpLpixIcKXx3X+5lWZRk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:44:07 2025 by rpki-client