$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WnwAcq0itF1lqrd-yAfXmHq1KHg.roa File: WnwAcq0itF1lqrd-yAfXmHq1KHg.roa (raw, json) Hash identifier: EwXzim6nW79NcVTLMqTtwLlkJGA2SfCZGy5IashSyDs= Subject key identifier: 5A:7C:00:72:AD:22:B4:5D:65:AA:B7:7E:C8:07:D7:98:7A:B5:28:78 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 034E Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WnwAcq0itF1lqrd-yAfXmHq1KHg.roa Signing time: Fri 24 Jan 2025 01:07:24 +0000 ROA not before: Fri 24 Jan 2025 01:07:24 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 202.216.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 846 (0x34e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 24 01:07:24 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=5A7C0072AD22B45D65AAB77EC807D7987AB52878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:58:60:4a:40:d7:1d:60:f0:fe:56:b5:52: 96:38:1a:23:75:8d:62:ab:41:19:d7:20:52:23:98: 5b:8f:12:a8:c7:4a:5c:f9:49:f9:e7:cf:d6:f5:3c: cb:1e:48:7f:9b:e6:63:51:aa:8c:08:73:42:c0:f8: af:ae:7a:de:7d:a4:ae:23:5e:fd:25:49:1d:a2:c2: cd:48:c7:39:26:99:35:83:37:f6:e0:16:6f:de:65: 04:e0:3f:80:2e:eb:16:34:c7:15:dc:d6:32:34:f6: 90:5a:d5:46:c1:b8:62:17:f8:5d:d6:d9:86:24:d6: 3c:3c:d1:78:93:56:57:8f:27:2e:8c:0c:9e:14:e5: d0:a4:da:4d:56:1b:52:a0:8f:10:3d:40:e7:b8:18: 1f:7f:c2:da:d8:f4:24:15:ab:67:ed:30:8d:23:9c: a4:23:a5:4c:1e:f2:0a:85:8b:a9:98:ab:77:b5:6f: cc:af:31:36:ed:6d:9c:a3:cc:6b:d7:b0:36:68:92: e9:7d:da:94:48:c5:2c:92:04:06:4f:db:b2:32:fa: d9:1a:e8:c2:de:68:58:9a:28:67:bc:62:08:e1:5a: 7e:bc:03:55:12:3e:0d:c3:11:94:cc:a9:2c:9a:58: d2:8a:d1:27:25:27:75:fc:83:47:21:35:ee:7b:dd: b8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7C:00:72:AD:22:B4:5D:65:AA:B7:7E:C8:07:D7:98:7A:B5:28:78 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WnwAcq0itF1lqrd-yAfXmHq1KHg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.216.240.0/20 Signature Algorithm: sha256WithRSAEncryption 19:f3:e2:24:e5:37:11:a4:6d:d3:de:c6:fd:18:5d:d2:4c:ae: 43:84:c2:58:7b:f1:b9:00:0b:c4:32:93:b5:63:43:3a:de:61: f7:42:b7:ff:60:93:64:9f:19:81:02:fe:5e:36:13:b2:fe:04: 03:b8:cf:36:c1:75:d4:d3:af:41:60:1c:64:f7:3a:ff:f8:2c: 6f:e4:af:55:93:ce:9b:54:33:6e:14:64:3f:e8:15:34:56:2d: cf:49:3f:2d:35:42:45:f8:6d:9c:18:0f:b6:61:a4:fb:dc:24: 81:05:04:00:b1:cb:72:b0:82:71:19:2e:57:ea:fa:19:2f:ec: dc:53:5b:73:7c:bf:29:54:44:36:d2:94:4d:b3:54:07:e0:f9: e3:f9:70:82:f7:bc:aa:8a:ee:c8:5c:18:a2:74:8e:11:ac:99: 41:26:90:fc:95:03:9e:22:40:87:30:3a:01:4d:47:b7:af:d6: 7b:4e:fe:29:71:08:2d:9c:ba:85:85:04:df:63:8e:12:6d:cc: a6:2d:94:45:39:cf:b8:ae:8b:22:91:2b:4d:25:1e:09:9b:ff: 4b:35:6f:04:07:9e:08:88:20:ba:f8:db:df:a2:6d:d2:d4:cf: 59:4e:05:74:30:a1:4e:bd:d1:5e:60:04:b4:29:fe:64:07:46: 3b:e6:49:d6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjQw MTA3MjRaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVBN0MwMDcyQUQyMkI0 NUQ2NUFBQjc3RUM4MDdENzk4N0FCNTI4NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC871hgSkDXHWDw/la1UpY4GiN1jWKrQRnXIFIjmFuPEqjHSlz5 Sfnnz9b1PMseSH+b5mNRqowIc0LA+K+uet59pK4jXv0lSR2iws1IxzkmmTWDN/bg Fm/eZQTgP4Au6xY0xxXc1jI09pBa1UbBuGIX+F3W2YYk1jw80XiTVlePJy6MDJ4U 5dCk2k1WG1KgjxA9QOe4GB9/wtrY9CQVq2ftMI0jnKQjpUwe8gqFi6mYq3e1b8yv MTbtbZyjzGvXsDZokul92pRIxSySBAZP27Iy+tka6MLeaFiaKGe8YgjhWn68A1US Pg3DEZTMqSyaWNKK0SclJ3X8g0chNe573bhDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWnwAcq0itF1lqrd+yAfXmHq1KHgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1dud0FjcTBpdEYxbHFyZC15QWZYbUhxMUtIZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATK2PAwDQYJKoZIhvcNAQELBQADggEBABnz4iTlNxGkbdPexv0YXdJMrkOE wlh78bkAC8Qyk7VjQzreYfdCt/9gk2SfGYEC/l42E7L+BAO4zzbBddTTr0FgHGT3 Ov/4LG/kr1WTzptUM24UZD/oFTRWLc9JPy01QkX4bZwYD7ZhpPvcJIEFBACxy3Kw gnEZLlfq+hkv7NxTW3N8vylURDbSlE2zVAfg+eP5cIL3vKqK7shcGKJ0jhGsmUEm kPyVA54iQIcwOgFNR7ev1ntO/ilxCC2cuoWFBN9jjhJtzKYtlEU5z7iuiyKRK00l Hgmb/0s1bwQHngiIILr429+ibdLUz1lOBXQwoU690V5gBLQp/mQHRjvmSdY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:40:27 2025 by rpki-client