$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/M2GkyOlWXy-ngRt-bME07M0DeE0.roa File: M2GkyOlWXy-ngRt-bME07M0DeE0.roa (raw, json) Hash identifier: sZvn8bQowgerIu9M2Cqu4w1gw6dp4ceIn0+AeVDQ0D8= Subject key identifier: 33:61:A4:C8:E9:56:5F:2F:A7:81:1B:7E:6C:C1:34:EC:CD:03:78:4D Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02B0 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/M2GkyOlWXy-ngRt-bME07M0DeE0.roa Signing time: Fri 31 May 2024 01:41:40 +0000 ROA not before: Fri 31 May 2024 01:41:40 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 180.131.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:41:40 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=3361A4C8E9565F2FA7811B7E6CC134ECCD03784D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:13:f8:83:a7:11:5d:85:46:14:60:65:c5: 9a:91:e7:b6:16:97:46:24:e0:5d:4e:f7:da:03:5e: ac:30:bc:9f:3d:99:ef:28:78:cf:4a:7f:af:c6:93: 5c:81:40:a7:4b:56:58:06:cf:02:51:c5:b3:17:0a: 65:bb:b0:4f:23:11:bf:fc:56:f9:f8:91:7a:61:e5: 16:f9:76:b6:77:43:13:9d:a5:ca:b8:4a:65:6a:2e: 5e:22:f7:93:bd:f0:0c:16:12:16:c6:15:e4:0b:42: d2:f9:89:af:98:4a:2c:09:a2:f8:b6:6f:c4:71:e2: 94:c8:e9:3a:5e:88:f1:ec:df:b4:37:d0:bc:c2:01: 67:ca:c3:f5:fe:e5:7e:2b:f9:47:24:d0:26:20:61: cf:ae:f2:45:3d:ef:9f:a8:ac:66:96:dd:d0:25:6c: fc:8d:fb:27:a5:c6:fe:ae:bd:2e:7f:18:11:a1:96: 7c:69:d3:cf:28:14:f0:c6:fc:0b:77:db:22:bb:6c: 1b:dd:9e:e9:90:91:a1:bf:0f:50:7b:b0:5f:67:2b: 10:88:b4:9c:d3:a4:39:44:4b:73:ad:73:07:d5:7a: 48:04:08:47:e8:4c:d6:0a:f5:4d:d8:8e:14:49:7a: ba:3a:8e:19:a7:b8:59:b1:39:d1:cb:39:79:9a:24: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:61:A4:C8:E9:56:5F:2F:A7:81:1B:7E:6C:C1:34:EC:CD:03:78:4D X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/M2GkyOlWXy-ngRt-bME07M0DeE0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.124.0/24 Signature Algorithm: sha256WithRSAEncryption 44:4b:90:67:97:43:84:f1:63:e8:98:77:e6:47:ef:12:2a:59: 07:5e:97:0c:11:9e:21:26:ef:11:4d:b5:67:ea:b0:a7:90:de: ec:98:75:b5:c1:c6:db:d5:f7:2b:6f:c0:93:37:c0:7b:f9:92: d6:45:88:76:d1:56:f8:00:94:30:18:5f:01:c1:e7:d1:5f:27: 55:68:b8:32:52:57:55:1a:ae:e6:af:cc:79:68:b9:e2:3b:90: 4a:b8:e5:2b:60:dd:8a:3b:8f:d9:bc:ab:f2:ec:1d:33:0f:1f: b9:30:de:f1:28:aa:98:20:85:c4:99:bc:52:37:11:f3:31:20: 65:8a:ff:66:41:3e:eb:e7:a2:24:56:8c:09:6b:e3:e3:63:2b: 39:01:89:a0:50:8f:5a:4e:18:1c:87:1d:da:4c:2a:16:6a:23: f7:5d:ad:99:9a:4c:11:1b:bd:f5:81:7e:c6:00:09:22:88:33: e7:7c:d2:f4:3b:5e:ee:b5:47:34:ff:da:b0:e7:44:9d:39:75: 06:4b:22:35:5b:66:57:d9:cf:47:c3:fc:57:69:31:75:80:78: 60:4d:3e:ff:95:93:06:37:2d:80:cd:26:db:cf:4b:57:06:22: dd:87:b7:b2:bc:38:a3:53:a6:da:1f:12:3d:6b:06:73:03:83: ce:9b:27:7f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICArAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTQxNDBaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMzNjFBNEM4RTk1NjVG MkZBNzgxMUI3RTZDQzEzNEVDQ0QwMzc4NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAOhP4g6cRXYVGFGBlxZqR57YWl0Yk4F1O99oDXqwwvJ89me8o eM9Kf6/Gk1yBQKdLVlgGzwJRxbMXCmW7sE8jEb/8Vvn4kXph5Rb5drZ3QxOdpcq4 SmVqLl4i95O98AwWEhbGFeQLQtL5ia+YSiwJovi2b8Rx4pTI6TpeiPHs37Q30LzC AWfKw/X+5X4r+Uck0CYgYc+u8kU975+orGaW3dAlbPyN+yelxv6uvS5/GBGhlnxp 088oFPDG/At32yK7bBvdnumQkaG/D1B7sF9nKxCItJzTpDlES3OtcwfVekgECEfo TNYK9U3YjhRJero6jhmnuFmxOdHLOXmaJCypAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUM2GkyOlWXy+ngRt+bME07M0DeE0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L00yR2t5T2xXWHktbmdSdC1iTUUwN00wRGVFMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC0g3wwDQYJKoZIhvcNAQELBQADggEBAERLkGeXQ4TxY+iYd+ZH7xIqWQde lwwRniEm7xFNtWfqsKeQ3uyYdbXBxtvV9ytvwJM3wHv5ktZFiHbRVvgAlDAYXwHB 59FfJ1VouDJSV1UaruavzHloueI7kEq45Stg3Yo7j9m8q/LsHTMPH7kw3vEoqpgg hcSZvFI3EfMxIGWK/2ZBPuvnoiRWjAlr4+NjKzkBiaBQj1pOGByHHdpMKhZqI/dd rZmaTBEbvfWBfsYACSKIM+d80vQ7Xu61RzT/2rDnRJ05dQZLIjVbZlfZz0fD/Fdp MXWAeGBNPv+VkwY3LYDNJtvPS1cGIt2Ht7K8OKNTptofEj1rBnMDg86bJ38= -----END CERTIFICATE-----Generated at Sun Feb 16 22:26:12 2025 by rpki-client