$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/KBhozWeccxQ-5WSg-OAfJmxlMr8.roa File: KBhozWeccxQ-5WSg-OAfJmxlMr8.roa (raw, json) Hash identifier: 3nRHUqpzvixkO+mYg+7/vjez6GTBIfn4wCWQVh7p7MQ= Subject key identifier: 28:18:68:CD:67:9C:73:14:3E:E5:64:A0:F8:E0:1F:26:6C:65:32:BF Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0357 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KBhozWeccxQ-5WSg-OAfJmxlMr8.roa Signing time: Fri 24 Jan 2025 01:11:27 +0000 ROA not before: Fri 24 Jan 2025 01:11:27 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 210.229.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 24 01:11:27 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=281868CD679C73143EE564A0F8E01F266C6532BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:32:b3:25:bc:6b:bc:5a:f6:c7:b6:63:01: fd:69:cd:db:4f:df:01:24:06:49:05:cf:17:2c:f5: 54:68:28:b4:f5:27:00:59:be:81:68:57:05:08:2c: 6b:10:88:b3:56:79:0b:82:04:0f:21:5c:d7:e2:71: b8:1d:f8:3b:92:bf:ec:a2:6f:0a:4e:9f:c8:a9:1a: e0:16:a3:30:25:7d:49:f0:23:54:cc:d6:eb:b9:38: 15:ba:88:6f:0d:57:52:98:20:5c:7f:cc:19:f6:26: fa:68:98:2d:57:b2:1b:28:15:aa:61:10:09:09:ac: e1:c2:78:8e:a4:7b:d1:be:ee:4e:b9:91:72:59:77: 25:2b:42:52:5e:94:83:32:80:c0:0c:ce:1c:b2:9b: d4:a0:a7:1e:89:08:63:d1:de:8b:fb:88:3b:71:48: c9:55:d1:7f:17:d7:d0:30:bc:66:af:7a:ca:19:98: 05:9e:74:46:3c:74:cd:7c:d2:73:2b:49:f5:6c:52: 8c:92:ea:c9:b8:30:76:62:3f:81:23:c2:06:39:3b: 6f:39:73:05:36:9d:4c:f3:0f:30:fb:56:b1:c2:7e: 51:05:a5:24:ac:3f:ac:e0:f4:13:99:d9:ad:04:74: c0:a0:c6:21:32:0f:cb:1d:a7:af:d6:68:1a:91:f4: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:18:68:CD:67:9C:73:14:3E:E5:64:A0:F8:E0:1F:26:6C:65:32:BF X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KBhozWeccxQ-5WSg-OAfJmxlMr8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.229.86.0/23 Signature Algorithm: sha256WithRSAEncryption 54:95:60:1f:35:68:c9:7e:fa:0d:e3:ae:0a:df:c0:21:3d:f1: b8:2b:a8:74:f9:73:cc:ff:e6:46:79:9b:cb:9e:31:98:fb:55: 09:b3:88:e5:6d:23:00:b6:30:2c:3f:43:9a:c6:44:ae:bc:86: 64:0c:f3:aa:c7:ad:fd:13:7e:ec:41:ce:91:94:cf:f8:16:c7: 24:8f:fe:7a:68:a4:a7:4d:8b:29:4b:0c:91:0c:64:44:7b:f4: 70:e2:04:3d:f4:4d:67:76:96:a4:f9:11:df:b3:fb:53:d7:56: 3f:fb:31:11:7d:c0:27:c1:b4:b1:38:d3:fe:17:d4:e4:00:4f: 87:1c:9b:9c:5e:55:0e:3c:8a:e5:e7:2c:b1:2a:50:e1:80:84: 3c:8b:bd:d9:0a:84:6c:bc:80:a2:a6:b1:b1:96:ad:21:44:8d: f1:99:3c:0d:23:5c:87:ec:4c:46:63:2e:ca:75:62:68:cd:8b: f3:ee:e2:7e:68:31:78:79:fb:2d:bf:d9:81:6a:7d:61:e7:fb: 67:38:2b:06:0b:71:99:1b:b1:f2:06:c5:b9:d3:eb:1f:8e:24: 53:3a:8c:72:60:ad:6c:55:4a:c4:46:ea:77:f5:eb:2e:6e:3c: c1:08:47:1c:1c:6e:e0:cd:6b:00:06:f8:71:92:bc:a6:81:51: 12:57:cf:ab -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjQw MTExMjdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI4MTg2OENENjc5Qzcz MTQzRUU1NjRBMEY4RTAxRjI2NkM2NTMyQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClmzKzJbxrvFr2x7ZjAf1pzdtP3wEkBkkFzxcs9VRoKLT1JwBZ voFoVwUILGsQiLNWeQuCBA8hXNficbgd+DuSv+yibwpOn8ipGuAWozAlfUnwI1TM 1uu5OBW6iG8NV1KYIFx/zBn2JvpomC1XshsoFaphEAkJrOHCeI6ke9G+7k65kXJZ dyUrQlJelIMygMAMzhyym9Sgpx6JCGPR3ov7iDtxSMlV0X8X19AwvGavesoZmAWe dEY8dM180nMrSfVsUoyS6sm4MHZiP4EjwgY5O285cwU2nUzzDzD7VrHCflEFpSSs P6zg9BOZ2a0EdMCgxiEyD8sdp6/WaBqR9JHDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKBhozWeccxQ+5WSg+OAfJmxlMr8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0tCaG96V2VjY3hRLTVXU2ctT0FmSm14bE1yOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHS5VYwDQYJKoZIhvcNAQELBQADggEBAFSVYB81aMl++g3jrgrfwCE98bgr qHT5c8z/5kZ5m8ueMZj7VQmziOVtIwC2MCw/Q5rGRK68hmQM86rHrf0TfuxBzpGU z/gWxySP/npopKdNiylLDJEMZER79HDiBD30TWd2lqT5Ed+z+1PXVj/7MRF9wCfB tLE40/4X1OQAT4ccm5xeVQ48iuXnLLEqUOGAhDyLvdkKhGy8gKKmsbGWrSFEjfGZ PA0jXIfsTEZjLsp1YmjNi/Pu4n5oMXh5+y2/2YFqfWHn+2c4KwYLcZkbsfIGxbnT 6x+OJFM6jHJgrWxVSsRG6nf16y5uPMEIRxwcbuDNawAG+HGSvKaBURJXz6s= -----END CERTIFICATE-----Generated at Wed Feb 19 22:34:10 2025 by rpki-client