$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CxUHGXt9McNAdtcdAuVur9xzZvY.roa File: CxUHGXt9McNAdtcdAuVur9xzZvY.roa (raw, json) Hash identifier: ptYfW/tbQjdRq7A598IMFOWyFRn7n+jxf06weurvS5c= Subject key identifier: 0B:15:07:19:7B:7D:31:C3:40:76:D7:1D:02:E5:6E:AF:DC:73:66:F6 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0355 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CxUHGXt9McNAdtcdAuVur9xzZvY.roa Signing time: Fri 24 Jan 2025 01:11:26 +0000 ROA not before: Fri 24 Jan 2025 01:11:26 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 210.159.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 853 (0x355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 24 01:11:26 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=0B1507197B7D31C34076D71D02E56EAFDC7366F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:9a:8b:7c:f5:cf:df:7c:d1:c7:71:45:30: 7f:1b:aa:32:24:a5:29:4c:c0:36:2a:10:0d:ae:3c: 6b:df:1b:bf:5f:46:45:50:ed:48:52:74:8b:e9:06: 0d:52:c1:33:0d:c0:0b:11:de:62:d9:d9:b0:63:a4: 63:bd:49:fc:52:4a:42:3f:f7:d7:78:ee:0a:26:36: 1c:65:1e:1c:e6:d7:04:3a:32:dd:88:e3:5f:52:67: 5c:2c:29:a8:df:b1:b9:c2:d0:88:84:04:24:04:34: dd:0a:61:f1:5a:e6:e6:f8:47:9f:1c:cb:0e:dd:25: af:d8:2d:27:ac:54:c9:84:0e:fd:fd:5d:b7:f8:26: 06:2d:8b:ff:21:ca:7e:86:44:d9:a3:08:2e:fe:9a: 97:44:bb:c1:78:cd:6d:0b:75:77:e4:8b:8c:cc:5d: 27:c7:e3:58:a3:8d:b6:7e:67:12:66:72:bf:99:6a: 2c:c2:ef:aa:c1:78:ac:b7:ed:18:85:09:fe:21:20: 1a:85:bd:0e:ea:90:92:17:33:04:33:49:d6:ef:7d: 96:98:9f:59:e3:1c:77:e1:2c:09:e2:c3:14:34:e6: 3a:bf:ec:09:4d:95:fd:6c:c7:23:16:92:81:d8:ea: cc:e7:17:00:70:d3:6f:70:2f:38:c8:a5:53:53:0c: b7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:15:07:19:7B:7D:31:C3:40:76:D7:1D:02:E5:6E:AF:DC:73:66:F6 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CxUHGXt9McNAdtcdAuVur9xzZvY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.159.132.0/22 Signature Algorithm: sha256WithRSAEncryption 76:7e:3c:11:cb:80:08:6a:71:23:91:61:d1:8d:f7:d2:f4:c4: 34:73:e3:73:7b:9c:bb:d3:71:39:24:d1:ca:0e:fc:cb:e7:58: 89:df:dc:47:9d:f0:05:82:a2:e6:90:89:37:8a:d0:bd:81:c1: 0d:c2:4d:69:5d:41:19:43:d0:00:47:c7:dd:d9:2e:c5:34:20: 8e:15:59:c0:84:53:9d:57:d0:3b:f2:85:66:b4:2f:c7:07:02: 5e:46:f6:41:fe:de:b4:09:d8:73:05:57:df:7a:1a:62:1e:de: cc:e8:6b:79:ee:81:a7:73:0e:6d:90:8d:d8:60:89:3f:e1:46: 1f:b5:42:c1:51:4d:04:c2:a4:50:84:17:4c:dc:5c:9f:a7:74: 66:67:9b:36:29:ae:ac:b7:98:be:06:ed:29:ac:a7:43:5e:eb: 4f:ac:93:35:7f:02:21:18:a5:25:a5:a0:3f:0b:eb:f6:f8:c9: 0f:0e:66:90:53:c6:d5:93:e2:43:61:dd:c3:2f:bb:d3:f3:d3: 34:48:35:d5:9b:b0:2b:3b:51:46:b1:7c:07:cb:c1:cd:7a:f2: b2:f3:e5:ee:03:27:47:fb:5c:e7:fd:f1:0a:f2:fb:04:69:a3: 68:d8:fe:67:4d:c3:6d:d1:79:92:35:4e:5a:bd:ee:77:e2:a7: 7d:46:62:bf -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjQw MTExMjZaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBCMTUwNzE5N0I3RDMx QzM0MDc2RDcxRDAyRTU2RUFGREM3MzY2RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTZ5qLfPXP33zRx3FFMH8bqjIkpSlMwDYqEA2uPGvfG79fRkVQ 7UhSdIvpBg1SwTMNwAsR3mLZ2bBjpGO9SfxSSkI/99d47gomNhxlHhzm1wQ6Mt2I 419SZ1wsKajfsbnC0IiEBCQENN0KYfFa5ub4R58cyw7dJa/YLSesVMmEDv39Xbf4 JgYti/8hyn6GRNmjCC7+mpdEu8F4zW0LdXfki4zMXSfH41ijjbZ+ZxJmcr+ZaizC 76rBeKy37RiFCf4hIBqFvQ7qkJIXMwQzSdbvfZaYn1njHHfhLAniwxQ05jq/7AlN lf1sxyMWkoHY6sznFwBw029wLzjIpVNTDLe9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCxUHGXt9McNAdtcdAuVur9xzZvYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0N4VUhHWHQ5TWNOQWR0Y2RBdVZ1cjl4elp2WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALSn4QwDQYJKoZIhvcNAQELBQADggEBAHZ+PBHLgAhqcSORYdGN99L0xDRz 43N7nLvTcTkk0coO/MvnWInf3Eed8AWCouaQiTeK0L2BwQ3CTWldQRlD0ABHx93Z LsU0II4VWcCEU51X0DvyhWa0L8cHAl5G9kH+3rQJ2HMFV996GmIe3szoa3nugadz Dm2QjdhgiT/hRh+1QsFRTQTCpFCEF0zcXJ+ndGZnmzYprqy3mL4G7Smsp0Ne60+s kzV/AiEYpSWloD8L6/b4yQ8OZpBTxtWT4kNh3cMvu9Pz0zRINdWbsCs7UUaxfAfL wc168rLz5e4DJ0f7XOf98Qry+wRpo2jY/mdNw23ReZI1Tlq97nfip31GYr8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:33:00 2025 by rpki-client