$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/M4DBnBor1vUeA6KtkJu8Iyz0KaI.roa File: M4DBnBor1vUeA6KtkJu8Iyz0KaI.roa (raw, json) Hash identifier: 9gHYY5cbLSgnKS4GDS3jwKKnKSY6ondhsNwo4v0KqAA= Subject key identifier: 33:80:C1:9C:1A:2B:D6:F5:1E:03:A2:AD:90:9B:BC:23:2C:F4:29:A2 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0333 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/M4DBnBor1vUeA6KtkJu8Iyz0KaI.roa Signing time: Wed 15 Jan 2025 01:11:35 +0000 ROA not before: Wed 15 Jan 2025 01:11:35 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 10013 IP address blocks: 61.192.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 819 (0x333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 15 01:11:35 2025 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=3380C19C1A2BD6F51E03A2AD909BBC232CF429A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:b9:6c:58:b6:53:a1:95:89:55:f2:c9:e6: 38:1e:e4:fb:e0:e3:7f:4e:6d:ae:e7:90:cf:f6:a3: 6b:33:77:4f:21:7f:23:b7:c7:e4:ee:05:44:17:1b: fc:c3:28:29:3d:40:1d:42:84:c9:8a:93:b0:8e:e6: 46:a6:a6:bb:47:56:74:cb:51:31:ee:bb:35:29:99: ac:90:d1:56:5a:9a:4d:2a:31:46:1f:65:92:9e:59: 13:83:fd:dc:20:26:c5:fb:f4:f8:94:28:e7:f8:0e: c3:75:f6:4e:38:02:7e:c9:8c:b8:93:56:35:7a:43: 5c:99:3e:61:62:25:e6:ca:84:23:98:b1:09:41:fb: a0:f4:1c:77:ca:ef:14:50:75:5b:12:68:a9:d0:c8: 47:59:26:89:b9:47:e8:71:5b:0e:f8:9c:f4:9c:45: e4:59:46:41:c3:e4:f1:b3:10:c2:2b:4e:aa:33:3d: 39:af:69:cf:b7:3e:2f:e5:17:b0:0b:b0:f7:92:4d: f8:fd:a1:c7:ce:9f:00:90:a5:18:ec:80:5b:81:11: c1:b5:55:dd:60:61:37:f0:38:02:f8:60:c6:ad:f4: 72:4b:90:2b:eb:ea:76:6f:c2:60:07:5b:e0:a5:57: 46:91:90:28:2b:5a:10:be:ac:f1:45:fa:d0:18:52: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:80:C1:9C:1A:2B:D6:F5:1E:03:A2:AD:90:9B:BC:23:2C:F4:29:A2 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/M4DBnBor1vUeA6KtkJu8Iyz0KaI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.192.176.0/20 Signature Algorithm: sha256WithRSAEncryption 58:29:59:dd:6e:ce:c0:81:d4:ad:ff:70:36:3e:4c:d9:01:fb: ac:56:2b:34:a2:bb:98:f9:2f:05:be:54:86:9c:68:44:7e:0a: c0:c3:0b:7e:e3:4d:09:51:f2:c2:c4:40:06:9c:22:74:3b:72: db:9f:22:b5:70:f6:e5:3d:a8:b6:6f:54:c3:a6:82:1d:08:4b: f3:38:d5:1c:83:c5:90:98:0e:b9:9a:4c:92:ec:1c:09:02:86: f0:44:f4:7c:20:72:fb:d8:8f:c2:ba:68:b9:66:23:a6:ca:42: fa:2c:99:4a:f7:38:18:ff:16:b2:52:6f:9f:8e:49:fb:01:fe: 4e:df:d9:49:6b:d4:fd:f8:44:83:d7:a7:78:da:a9:06:1c:c2: b8:c4:25:6f:cb:56:6c:5b:37:59:c2:fa:22:59:74:db:4c:76: 68:9b:b8:e2:c0:42:74:7d:0a:a8:4b:87:c0:8b:a1:7e:41:87: 80:67:e8:dc:22:6f:f0:fb:20:c4:a0:91:9c:5d:ac:fd:a5:e1: 20:ea:76:27:d0:0c:53:19:e5:e8:53:b0:46:f5:b6:40:cf:9f: fb:d9:72:59:65:7b:20:7e:06:73:b0:fa:fc:4e:7e:e9:1f:dc: 94:a1:a1:f7:c1:50:d8:69:8e:6e:32:bb:e8:ab:a3:63:f3:00: 1c:6f:32:cf -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMTUw MTExMzVaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMzODBDMTlDMUEyQkQ2 RjUxRTAzQTJBRDkwOUJCQzIzMkNGNDI5QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiSblsWLZToZWJVfLJ5jge5Pvg439Oba7nkM/2o2szd08hfyO3 x+TuBUQXG/zDKCk9QB1ChMmKk7CO5kamprtHVnTLUTHuuzUpmayQ0VZamk0qMUYf ZZKeWROD/dwgJsX79PiUKOf4DsN19k44An7JjLiTVjV6Q1yZPmFiJebKhCOYsQlB +6D0HHfK7xRQdVsSaKnQyEdZJom5R+hxWw74nPScReRZRkHD5PGzEMIrTqozPTmv ac+3Pi/lF7ALsPeSTfj9ocfOnwCQpRjsgFuBEcG1Vd1gYTfwOAL4YMat9HJLkCvr 6nZvwmAHW+ClV0aRkCgrWhC+rPFF+tAYUvuVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUM4DBnBor1vUeA6KtkJu8Iyz0KaIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L000REJuQm9yMXZVZUE2S3RrSnU4SXl6MEthSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ9wLAwDQYJKoZIhvcNAQELBQADggEBAFgpWd1uzsCB1K3/cDY+TNkB+6xW KzSiu5j5LwW+VIacaER+CsDDC37jTQlR8sLEQAacInQ7ctufIrVw9uU9qLZvVMOm gh0IS/M41RyDxZCYDrmaTJLsHAkChvBE9HwgcvvYj8K6aLlmI6bKQvosmUr3OBj/ FrJSb5+OSfsB/k7f2Ulr1P34RIPXp3jaqQYcwrjEJW/LVmxbN1nC+iJZdNtMdmib uOLAQnR9CqhLh8CLoX5Bh4Bn6Nwib/D7IMSgkZxdrP2l4SDqdifQDFMZ5ehTsEb1 tkDPn/vZcllleyB+BnOw+vxOfukf3JShoffBUNhpjm4yu+iro2PzABxvMs8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:40:27 2025 by rpki-client