$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WDHKj0XlgQu5Pn-kroNEj0iT56U.roa File: WDHKj0XlgQu5Pn-kroNEj0iT56U.roa (raw, json) Hash identifier: B5SZUglkmZIwEOwNWkpjh6RKbRr+MWSZouEGamUHaPA= Subject key identifier: 58:31:CA:8F:45:E5:81:0B:B9:3E:7F:A4:AE:83:44:8F:48:93:E7:A5 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0346 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WDHKj0XlgQu5Pn-kroNEj0iT56U.roa Signing time: Thu 23 Jan 2025 01:14:35 +0000 ROA not before: Thu 23 Jan 2025 01:14:35 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 182.236.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 838 (0x346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 23 01:14:35 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=5831CA8F45E5810BB93E7FA4AE83448F4893E7A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:ae:3c:b2:88:a7:3a:ca:de:de:22:55:fe: fa:2b:f9:c7:de:35:95:a7:8c:19:7e:95:f2:17:c7: 59:ea:48:1d:52:3d:63:70:fc:3b:12:02:50:64:12: 03:6f:6a:1a:6a:d2:3c:17:3c:a6:18:27:29:17:4a: fe:e4:5e:ce:f4:b3:f8:da:28:59:64:d9:49:9d:d8: bf:87:02:35:60:33:9c:64:98:bb:7f:b2:af:a9:6c: c9:d6:1e:27:35:0b:dc:cc:64:1b:76:8f:d7:4e:31: 22:a1:4d:0b:94:20:13:5e:a2:64:6a:a0:37:39:4c: 3c:d8:20:4c:c2:54:2e:c1:af:39:7f:8a:07:03:74: 2f:ee:60:cf:cf:b4:4b:52:fa:51:50:01:51:88:65: d6:eb:e3:d6:e4:0e:21:23:42:16:32:5a:bf:2f:46: 44:4f:5a:a0:83:14:e2:61:eb:e4:ec:02:85:ca:ac: 4c:19:e7:c8:fb:e2:8a:4d:16:13:ce:3d:55:71:95: 29:62:1d:d4:55:d2:fe:5a:dc:b5:ae:70:1b:7b:28: 6a:fd:64:90:10:21:b1:1a:50:d8:36:5d:2f:69:d6: f3:44:d8:8f:4e:33:68:a1:2d:5d:5b:e5:71:2c:89: b7:66:87:e9:3c:32:bc:3f:55:44:7a:1c:15:7d:0c: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:31:CA:8F:45:E5:81:0B:B9:3E:7F:A4:AE:83:44:8F:48:93:E7:A5 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WDHKj0XlgQu5Pn-kroNEj0iT56U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.236.32.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:a0:a3:ce:5c:8e:8f:35:c1:3e:7c:f3:4f:07:2e:80:eb:e9: bb:5b:4d:41:38:07:93:1c:c6:f8:28:4d:cc:69:62:ce:97:52: ba:44:f7:a7:0f:e8:88:d1:2b:bf:2b:97:07:a8:a4:6b:27:b2: 27:d7:d9:72:27:91:1b:9b:c7:f1:17:27:f3:ed:b3:f0:6e:e6: 99:9c:9d:a1:a3:d3:4f:2c:42:24:27:d8:1c:f7:b0:61:0d:de: 99:37:2d:42:3f:75:6a:3b:de:d8:15:3e:58:55:ec:90:da:d9: 8b:b1:8b:c9:70:75:0b:b2:0f:90:57:e2:42:9f:04:ae:91:d7: 9e:46:56:2a:40:a2:d6:9d:fb:d2:a3:56:0c:8e:9a:bb:bd:78: 32:1b:df:f1:0c:53:fe:21:c4:3d:d2:5c:83:ca:29:ab:d0:72: 5c:e0:fa:fe:01:a3:f7:42:03:ba:ff:3c:0a:7e:a3:fe:40:db: ca:bd:6b:d5:af:c0:7a:1b:be:eb:30:04:a0:89:c4:13:9c:d9: fd:f8:50:7c:2f:11:32:19:fd:fb:1d:f6:8f:3a:9d:b0:e5:11: 7f:b2:de:10:54:10:d2:a6:d1:8d:01:0e:6a:ab:7a:6d:03:a2: 4c:58:8e:d9:95:ed:1f:a5:31:d2:4e:23:91:4b:ed:3d:56:d6: 11:2a:a8:dd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjMw MTE0MzVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU4MzFDQThGNDVFNTgx MEJCOTNFN0ZBNEFFODM0NDhGNDg5M0U3QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8O648soinOsre3iJV/vor+cfeNZWnjBl+lfIXx1nqSB1SPWNw /DsSAlBkEgNvahpq0jwXPKYYJykXSv7kXs70s/jaKFlk2Umd2L+HAjVgM5xkmLt/ sq+pbMnWHic1C9zMZBt2j9dOMSKhTQuUIBNeomRqoDc5TDzYIEzCVC7Brzl/igcD dC/uYM/PtEtS+lFQAVGIZdbr49bkDiEjQhYyWr8vRkRPWqCDFOJh6+TsAoXKrEwZ 58j74opNFhPOPVVxlSliHdRV0v5a3LWucBt7KGr9ZJAQIbEaUNg2XS9p1vNE2I9O M2ihLV1b5XEsibdmh+k8Mrw/VUR6HBV9DOzlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWDHKj0XlgQu5Pn+kroNEj0iT56UwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1dESEtqMFhsZ1F1NVBuLWtyb05FajBpVDU2VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO27CAwDQYJKoZIhvcNAQELBQADggEBAC2go85cjo81wT58808HLoDr6btb TUE4B5McxvgoTcxpYs6XUrpE96cP6IjRK78rlweopGsnsifX2XInkRubx/EXJ/Pt s/Bu5pmcnaGj008sQiQn2Bz3sGEN3pk3LUI/dWo73tgVPlhV7JDa2Yuxi8lwdQuy D5BX4kKfBK6R155GVipAotad+9KjVgyOmru9eDIb3/EMU/4hxD3SXIPKKavQclzg +v4Bo/dCA7r/PAp+o/5A28q9a9WvwHobvuswBKCJxBOc2f34UHwvETIZ/fsd9o86 nbDlEX+y3hBUENKm0Y0BDmqrem0DokxYjtmV7R+lMdJOI5FL7T1W1hEqqN0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:42:14 2025 by rpki-client