$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/N0sZVcb_GYika1sCSoj51OdkP3w.roa File: N0sZVcb_GYika1sCSoj51OdkP3w.roa (raw, json) Hash identifier: ywkLD0kxS9rtcBqq37peB5uSsrLMIN9U2G7xdbRhIyk= Subject key identifier: 37:4B:19:55:C6:FF:19:88:A4:6B:5B:02:4A:88:F9:D4:E7:64:3F:7C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 034A Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N0sZVcb_GYika1sCSoj51OdkP3w.roa Signing time: Thu 23 Jan 2025 01:14:37 +0000 ROA not before: Thu 23 Jan 2025 01:14:37 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 182.236.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 842 (0x34a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 23 01:14:37 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=374B1955C6FF1988A46B5B024A88F9D4E7643F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:9b:fb:7f:be:cb:cc:a7:c8:f8:5c:55:6e: 78:89:50:8b:bd:8e:aa:d2:c1:45:7a:9e:82:31:cf: 25:01:e0:19:80:0d:68:6a:21:ce:f2:59:24:6a:fe: a9:73:2e:71:df:94:b0:9b:39:df:c3:b4:ef:36:de: c4:a7:b7:dc:f0:02:9b:3f:29:c2:42:ca:bb:71:67: 0d:d5:dd:6b:ba:1c:5e:af:8c:98:a7:87:36:9a:b8: cc:e6:28:d2:e0:bf:a7:85:d5:5b:67:c7:fa:eb:6b: ac:fc:17:e0:39:de:24:8c:7d:90:06:7c:64:22:63: ad:f6:58:ce:c5:e4:1c:88:ad:20:b0:66:12:80:1b: eb:cd:d4:a1:cf:60:25:a7:07:22:b6:f7:4a:7e:c2: a0:97:d1:cd:3f:98:ba:62:81:61:82:d9:50:55:34: 8d:35:40:2f:5d:85:52:20:c5:96:86:61:2b:e0:9f: 88:3a:78:bf:9b:6a:b7:dd:e5:b5:e8:a2:8d:02:2d: db:a3:71:58:df:c3:ea:46:1f:54:c5:22:7d:9d:91: 00:64:19:57:00:22:2e:34:a7:fd:36:e5:b2:ca:76: ac:2c:ff:51:be:4d:5d:2b:9c:1d:01:ff:a5:09:48: 3e:df:07:5f:71:5b:d8:b8:82:61:33:7a:7e:1b:12: 5f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4B:19:55:C6:FF:19:88:A4:6B:5B:02:4A:88:F9:D4:E7:64:3F:7C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N0sZVcb_GYika1sCSoj51OdkP3w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.236.48.0/22 Signature Algorithm: sha256WithRSAEncryption 70:e3:e3:cc:49:39:d9:96:22:fb:18:ea:9b:ec:c8:49:de:c6: 7f:17:53:65:61:61:ec:f3:aa:c6:eb:e5:c0:08:76:be:c5:1e: c2:c6:01:43:85:96:bb:d4:c9:6b:ac:0f:f6:f0:83:3f:42:e9: db:9c:43:31:40:18:9b:1c:0e:ed:30:af:0e:70:de:2b:b0:7b: d7:09:fd:fe:96:5f:34:b1:1a:1f:02:65:e8:cc:5e:05:af:a4: 5a:39:ef:06:08:15:34:0a:b8:71:60:f5:bc:49:21:01:35:c8: 84:ea:07:5a:47:27:76:fa:cb:f2:d8:93:68:ee:42:40:ec:66: 35:11:f0:dc:38:c7:10:b3:d2:01:38:37:ac:8d:c3:93:10:22: 40:60:6e:89:1e:93:f8:ea:e0:16:c2:49:fe:d9:bb:ef:ea:1e: 81:ed:c3:7a:05:e1:d6:59:6c:01:a4:08:38:c2:a6:d2:5b:29: 4b:5f:a5:4b:ab:f1:ce:af:07:8b:71:8d:15:18:9b:39:31:da: 76:69:74:f1:56:99:9a:6c:7b:d0:13:aa:6e:70:03:65:ef:c9: 55:8d:df:1a:b7:58:42:a2:25:f3:a7:ba:cb:a0:14:24:66:26: 6e:0c:58:4d:bd:d1:da:65:d9:b4:78:4a:7a:75:79:a6:ca:5a: 6b:b6:4e:73 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA0owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjMw MTE0MzdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM3NEIxOTU1QzZGRjE5 ODhBNDZCNUIwMjRBODhGOUQ0RTc2NDNGN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfkJv7f77LzKfI+FxVbniJUIu9jqrSwUV6noIxzyUB4BmADWhq Ic7yWSRq/qlzLnHflLCbOd/DtO823sSnt9zwAps/KcJCyrtxZw3V3Wu6HF6vjJin hzaauMzmKNLgv6eF1Vtnx/rra6z8F+A53iSMfZAGfGQiY632WM7F5ByIrSCwZhKA G+vN1KHPYCWnByK290p+wqCX0c0/mLpigWGC2VBVNI01QC9dhVIgxZaGYSvgn4g6 eL+barfd5bXooo0CLdujcVjfw+pGH1TFIn2dkQBkGVcAIi40p/025bLKdqws/1G+ TV0rnB0B/6UJSD7fB19xW9i4gmEzen4bEl9LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUN0sZVcb/GYika1sCSoj51OdkP3wwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L04wc1pWY2JfR1lpa2Exc0NTb2o1MU9ka1Azdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK27DAwDQYJKoZIhvcNAQELBQADggEBAHDj48xJOdmWIvsY6pvsyEnexn8X U2VhYezzqsbr5cAIdr7FHsLGAUOFlrvUyWusD/bwgz9C6ducQzFAGJscDu0wrw5w 3iuwe9cJ/f6WXzSxGh8CZejMXgWvpFo57wYIFTQKuHFg9bxJIQE1yITqB1pHJ3b6 y/LYk2juQkDsZjUR8Nw4xxCz0gE4N6yNw5MQIkBgbokek/jq4BbCSf7Zu+/qHoHt w3oF4dZZbAGkCDjCptJbKUtfpUur8c6vB4txjRUYmzkx2nZpdPFWmZpse9ATqm5w A2XvyVWN3xq3WEKiJfOnusugFCRmJm4MWE290dpl2bR4Snp1eabKWmu2TnM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:33:29 2025 by rpki-client