$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Fpk2sTKJnP2Xkfw0-3XgMLZ0I9U.roa File: Fpk2sTKJnP2Xkfw0-3XgMLZ0I9U.roa (raw, json) Hash identifier: 1VjTi7y6RxG0Iwcgg2fEW/r8RNin5te1ORWctn/46VE= Subject key identifier: 16:99:36:B1:32:89:9C:FD:97:91:FC:34:FB:75:E0:30:B6:74:23:D5 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0330 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Fpk2sTKJnP2Xkfw0-3XgMLZ0I9U.roa Signing time: Wed 15 Jan 2025 01:11:32 +0000 ROA not before: Wed 15 Jan 2025 01:11:32 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 10013 IP address blocks: 61.192.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 15 01:11:32 2025 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=169936B132899CFD9791FC34FB75E030B67423D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:69:e1:a2:e0:62:ff:d9:b1:ab:18:f4:09: 7d:9f:7d:43:1f:63:96:c5:8e:bc:f1:2a:4d:0c:16: fa:c0:87:c2:d8:f2:89:f1:c9:2e:1c:cf:dc:92:86: 21:5b:b9:ba:02:55:0b:91:72:cc:0a:08:35:25:93: 31:89:bf:1d:65:2a:a9:8a:4b:e7:8b:ed:d5:e0:5e: d9:0c:a2:64:e8:ad:c6:91:22:0f:87:9a:72:99:53: 87:ea:30:c5:98:fb:7e:80:5e:d5:ca:61:c2:ca:3b: ff:64:db:ad:da:b0:29:a7:ca:98:49:ad:c4:56:01: f3:03:8a:ce:53:d8:f0:55:af:f6:66:5c:39:b0:ed: de:bd:76:fe:7e:69:ab:ba:64:bb:40:41:a9:57:39: 1d:f4:da:f0:9a:4c:cc:99:50:72:73:2a:71:5d:bb: fd:79:1e:9a:12:a2:56:d8:4a:d8:94:5a:f0:11:e0: eb:e7:dd:cf:0b:19:46:fc:3c:de:aa:c1:5b:2c:24: 40:2b:0d:d2:0d:1a:be:5e:5b:66:0a:f4:ac:69:05: c2:90:df:2f:e7:36:3f:4e:4a:ff:e0:45:90:b2:19: a0:46:96:19:09:e0:5a:1e:9f:93:cf:fe:ba:a5:b0: 19:95:2a:ca:3f:f5:22:e5:dd:ff:b4:7a:50:8f:62: 51:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:99:36:B1:32:89:9C:FD:97:91:FC:34:FB:75:E0:30:B6:74:23:D5 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Fpk2sTKJnP2Xkfw0-3XgMLZ0I9U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.192.162.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:d4:c9:6c:ed:bd:a6:3c:ee:60:ed:11:7f:6b:67:0c:3e:96: 99:ab:02:90:e0:49:8d:0a:87:50:61:1d:cb:cf:cf:01:a9:44: 3f:d0:6b:ea:7c:2d:bf:1a:cb:27:4a:12:a5:72:95:02:6b:24: 16:23:96:08:e6:62:d0:02:6a:0e:19:18:44:60:43:05:1a:c2: 20:e1:20:0a:bb:51:7f:82:de:d6:c1:68:03:65:62:a1:c9:dc: 74:7a:25:7d:90:91:1d:ac:19:37:71:d4:57:56:35:e3:c0:38: 8a:b7:1b:5c:13:08:3b:96:77:17:e3:40:76:5c:0a:5f:aa:43: 9e:bb:af:ec:d8:9a:a7:c9:12:43:a0:b5:b8:78:25:c0:ed:8c: 21:a9:23:2f:5d:3c:73:11:52:4a:2f:0f:dd:89:ae:c0:1f:e9: 52:c1:c1:ad:4d:0e:7f:e5:ca:e6:b9:fd:9d:47:df:3a:43:80: a5:7d:aa:f1:8c:06:3b:fe:dc:d3:d2:b4:87:60:ec:da:f2:56: d1:17:26:97:7f:9a:62:15:2b:6b:cc:70:ef:94:80:a3:56:0a: 72:3d:a8:89:f8:8f:9a:84:85:94:15:8b:23:1f:b2:dc:50:62: fd:cb:07:f8:e9:0b:de:c8:77:48:d0:f1:5b:fe:ce:ba:8c:84: 3c:f9:ed:bd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMTUw MTExMzJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE2OTkzNkIxMzI4OTlD RkQ5NzkxRkMzNEZCNzVFMDMwQjY3NDIzRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK7WnhouBi/9mxqxj0CX2ffUMfY5bFjrzxKk0MFvrAh8LY8onx yS4cz9yShiFbuboCVQuRcswKCDUlkzGJvx1lKqmKS+eL7dXgXtkMomTorcaRIg+H mnKZU4fqMMWY+36AXtXKYcLKO/9k263asCmnyphJrcRWAfMDis5T2PBVr/ZmXDmw 7d69dv5+aau6ZLtAQalXOR302vCaTMyZUHJzKnFdu/15HpoSolbYStiUWvAR4Ovn 3c8LGUb8PN6qwVssJEArDdINGr5eW2YK9KxpBcKQ3y/nNj9OSv/gRZCyGaBGlhkJ 4Foen5PP/rqlsBmVKso/9SLl3f+0elCPYlHNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFpk2sTKJnP2Xkfw0+3XgMLZ0I9UwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0ZwazJzVEtKblAyWGtmdzAtM1hnTUxaMEk5VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE9wKIwDQYJKoZIhvcNAQELBQADggEBAD/UyWztvaY87mDtEX9rZww+lpmr ApDgSY0Kh1BhHcvPzwGpRD/Qa+p8Lb8ayydKEqVylQJrJBYjlgjmYtACag4ZGERg QwUawiDhIAq7UX+C3tbBaANlYqHJ3HR6JX2QkR2sGTdx1FdWNePAOIq3G1wTCDuW dxfjQHZcCl+qQ567r+zYmqfJEkOgtbh4JcDtjCGpIy9dPHMRUkovD92JrsAf6VLB wa1NDn/lyua5/Z1H3zpDgKV9qvGMBjv+3NPStIdg7NryVtEXJpd/mmIVK2vMcO+U gKNWCnI9qIn4j5qEhZQViyMfstxQYv3LB/jpC97Id0jQ8Vv+zrqMhDz57b0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:43:33 2025 by rpki-client