$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/SSOjHe1sP_C55VoCTpI_we6n0Ls.roa File: SSOjHe1sP_C55VoCTpI_we6n0Ls.roa (raw, json) Hash identifier: cLq9r8edT+epBuJ+y3op23X3118XC3ePg0sRI8eol/k= Subject key identifier: 49:23:A3:1D:ED:6C:3F:F0:B9:E5:5A:02:4E:92:3F:C1:EE:A7:D0:BB Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 033B Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SSOjHe1sP_C55VoCTpI_we6n0Ls.roa Signing time: Wed 15 Jan 2025 01:15:35 +0000 ROA not before: Wed 15 Jan 2025 01:15:35 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 10013 IP address blocks: 61.195.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 15 01:15:35 2025 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=4923A31DED6C3FF0B9E55A024E923FC1EEA7D0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:19:4c:e6:bc:a0:21:8b:73:d7:aa:4f:39: df:ff:ae:85:91:7e:6d:31:9b:b4:c8:4a:38:32:cd: ab:0d:a1:3a:bf:aa:d2:4a:86:eb:9c:78:1b:3b:05: a5:c1:f2:da:fb:84:2b:1e:ba:04:55:b7:fa:fc:f7: 32:07:66:63:84:82:3f:0c:3a:70:cf:bc:fe:6e:bb: 24:7d:44:da:4b:5d:f5:bf:b4:d9:79:b7:a4:1c:d7: 7a:40:b7:8a:df:51:6b:b1:0f:a3:91:98:75:df:23: 59:b1:b3:51:4e:f5:55:66:f6:13:aa:98:3e:18:76: d3:a0:f8:01:d0:13:ab:83:42:29:07:b4:9c:3e:25: 81:41:26:cd:57:40:58:77:25:83:20:b8:21:d9:b1: 7a:b7:cd:d6:a9:3e:26:20:39:2f:a5:d5:8e:31:be: 90:1e:61:f3:cb:4c:6d:48:ec:5f:e1:ff:79:1a:d3: 4a:d5:ac:58:ed:c0:5e:82:e1:ba:bb:0a:84:a0:00: f8:c3:3d:47:d7:eb:25:5a:8f:99:93:51:95:a3:bc: 65:2c:d6:90:74:ca:0b:3b:c1:28:ef:b9:97:0c:03: e3:bd:54:a8:dd:08:44:29:86:79:3c:30:00:a8:01: 0d:c7:8e:d9:8f:78:d5:57:5d:e1:4a:54:a6:9f:1e: 36:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:23:A3:1D:ED:6C:3F:F0:B9:E5:5A:02:4E:92:3F:C1:EE:A7:D0:BB X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SSOjHe1sP_C55VoCTpI_we6n0Ls.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.24.0/22 Signature Algorithm: sha256WithRSAEncryption 55:bd:06:fc:4a:f2:fa:c4:47:83:ad:29:8c:f3:8c:82:5a:c7: 23:ef:14:2c:72:19:a6:43:ad:d5:a3:0c:33:8c:0f:ff:2b:08: f0:83:e7:8c:09:51:e3:df:a1:93:e3:30:3d:27:ea:f2:d2:62: be:2b:53:3c:4a:a8:48:09:c7:6d:f7:72:c3:52:3c:9e:d0:e9: b8:d8:8d:dd:d3:12:5f:60:a4:43:30:4c:7a:c9:72:af:29:bc: 0f:56:67:3d:71:63:22:98:b8:ab:d4:9b:f3:ef:a9:61:06:35: 0c:0a:8d:05:19:68:5e:d2:9b:4c:2b:89:5e:a9:ad:1a:68:55: a8:ee:a1:2c:6b:c3:eb:3f:72:94:3b:51:dc:eb:5f:51:c7:ff: 5f:82:d7:92:22:f6:99:d3:b1:72:d4:36:d9:6e:53:00:ca:d4: 1c:ad:c4:42:01:f7:4b:b5:12:a9:d9:b9:4f:c9:09:28:72:c6: b3:60:e4:91:f7:5d:ea:80:5c:70:b5:c3:d6:2c:02:f1:28:8f: 45:9c:90:dd:af:c3:64:ae:7a:61:e7:57:c5:02:d4:47:74:aa: 5b:fa:f5:d1:40:fd:6b:bc:26:23:75:17:b7:d3:f8:5e:1a:d9: 03:43:29:ba:2a:05:c9:3a:7d:78:98:a0:33:da:9f:80:78:24: cc:db:a8:db -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAzswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMTUw MTE1MzVaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ5MjNBMzFERUQ2QzNG RjBCOUU1NUEwMjRFOTIzRkMxRUVBN0QwQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF1BlM5rygIYtz16pPOd//roWRfm0xm7TISjgyzasNoTq/qtJK huuceBs7BaXB8tr7hCseugRVt/r89zIHZmOEgj8MOnDPvP5uuyR9RNpLXfW/tNl5 t6Qc13pAt4rfUWuxD6ORmHXfI1mxs1FO9VVm9hOqmD4YdtOg+AHQE6uDQikHtJw+ JYFBJs1XQFh3JYMguCHZsXq3zdapPiYgOS+l1Y4xvpAeYfPLTG1I7F/h/3ka00rV rFjtwF6C4bq7CoSgAPjDPUfX6yVaj5mTUZWjvGUs1pB0ygs7wSjvuZcMA+O9VKjd CEQphnk8MACoAQ3HjtmPeNVXXeFKVKafHjbpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSSOjHe1sP/C55VoCTpI/we6n0LswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1NTT2pIZTFzUF9DNTVWb0NUcElfd2U2bjBMcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI9wxgwDQYJKoZIhvcNAQELBQADggEBAFW9BvxK8vrER4OtKYzzjIJaxyPv FCxyGaZDrdWjDDOMD/8rCPCD54wJUePfoZPjMD0n6vLSYr4rUzxKqEgJx233csNS PJ7Q6bjYjd3TEl9gpEMwTHrJcq8pvA9WZz1xYyKYuKvUm/PvqWEGNQwKjQUZaF7S m0wriV6prRpoVajuoSxrw+s/cpQ7UdzrX1HH/1+C15Ii9pnTsXLUNtluUwDK1Byt xEIB90u1EqnZuU/JCShyxrNg5JH3XeqAXHC1w9YsAvEoj0WckN2vw2SuemHnV8UC 1Ed0qlv69dFA/Wu8JiN1F7fT+F4a2QNDKboqBck6fXiYoDPan4B4JMzbqNs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:41:57 2025 by rpki-client