$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bUql4RHLUfjo7TiTEPGa9dbenEo.roa File: bUql4RHLUfjo7TiTEPGa9dbenEo.roa (raw, json) Hash identifier: yYiTlzmgT72pU5oUsA0OjR2EDVioBAWsz0sT9FFIX6A= Subject key identifier: 6D:4A:A5:E1:11:CB:51:F8:E8:ED:38:93:10:F1:9A:F5:D6:DE:9C:4A Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0349 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bUql4RHLUfjo7TiTEPGa9dbenEo.roa Signing time: Thu 23 Jan 2025 01:14:37 +0000 ROA not before: Thu 23 Jan 2025 01:14:37 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 182.236.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 23 01:14:37 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=6D4AA5E111CB51F8E8ED389310F19AF5D6DE9C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:8e:59:a1:89:0d:c3:f7:14:df:bb:87:f6: 06:8b:0e:e5:47:2f:47:ae:fc:ff:61:09:0f:74:fb: c7:4c:d6:5a:d9:1b:00:ea:ef:94:30:57:2e:26:9a: 30:6a:72:a6:78:31:31:b4:c8:d0:a1:5b:9b:db:27: 0b:c1:1f:36:c6:ca:7a:5c:36:c1:e9:9b:c2:ca:24: e3:c5:75:b2:f0:4c:1c:b6:cf:fd:c5:db:5b:d5:19: 35:c8:3e:78:57:5c:d6:6d:04:cc:6a:06:ee:f8:62: d5:e7:24:39:fa:d4:c5:b9:26:a7:03:91:80:5d:ea: 3a:6c:be:54:6e:50:7e:46:76:77:c9:aa:33:3c:87: 33:c2:7a:18:25:be:23:78:57:05:87:aa:60:65:a2: bd:f0:db:0b:58:41:19:e5:67:a3:cd:a2:4b:6f:3f: e8:af:dc:f5:96:34:a9:40:24:d2:47:8b:c0:0e:bb: 7b:2b:0c:f8:18:cf:e2:59:9b:55:16:18:e0:b1:e4: 0a:cf:2f:28:8a:4b:53:b7:95:69:54:a4:3c:79:71: 79:81:db:55:f0:e4:21:05:d8:c3:f4:aa:99:0e:f6: 13:df:14:e3:79:e1:76:47:aa:fa:2f:86:88:9f:0f: 0a:2a:a6:52:8b:53:cc:5d:79:4c:dc:8a:7b:78:ef: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4A:A5:E1:11:CB:51:F8:E8:ED:38:93:10:F1:9A:F5:D6:DE:9C:4A X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bUql4RHLUfjo7TiTEPGa9dbenEo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.236.44.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:33:fc:51:89:5e:ea:4d:b4:5c:a5:04:d6:81:89:2b:89:f5: 92:a9:27:7e:61:9e:cb:93:cc:6a:fc:0f:a0:7e:28:62:25:9a: 90:87:d1:d2:27:b2:8c:26:38:31:b7:a4:1f:71:ce:0d:9a:9a: c2:ad:d1:bb:25:b9:dc:e6:c3:8e:a9:7d:be:1e:ce:f6:57:75: 30:1a:1f:0b:96:f6:5f:c5:79:2a:aa:2c:a6:e3:6e:4f:53:43: 0b:a9:56:22:ad:3e:e8:f0:f6:e9:5c:cb:bf:76:b0:16:2c:69: b8:d8:fe:c7:f5:43:65:54:e3:f7:ea:20:7f:85:a8:88:81:78: b6:2f:4f:33:df:05:0b:06:4e:82:51:b0:92:9b:f7:c6:f9:8f: 75:5e:96:24:0a:20:63:dc:b9:c3:0b:aa:b9:ea:c9:ff:0c:49: cb:d8:b3:a1:fc:75:80:05:c3:09:0d:e8:24:a0:cb:f1:2c:a4: 10:1c:ca:a4:1d:57:00:e2:ec:b7:de:eb:68:bd:b1:e0:18:1f: 48:dd:5a:26:70:61:34:34:8b:c4:60:68:49:c3:2f:61:b6:d6: 01:f0:45:25:bb:3e:ad:f7:b1:00:3b:53:f1:f5:f1:27:d1:65: e4:5a:f2:8a:eb:c6:32:a0:4b:80:ff:bc:cd:f3:fb:dd:70:29: 27:53:5c:82 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjMw MTE0MzdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZENEFBNUUxMTFDQjUx RjhFOEVEMzg5MzEwRjE5QUY1RDZERTlDNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCZY5ZoYkNw/cU37uH9gaLDuVHL0eu/P9hCQ90+8dM1lrZGwDq 75QwVy4mmjBqcqZ4MTG0yNChW5vbJwvBHzbGynpcNsHpm8LKJOPFdbLwTBy2z/3F 21vVGTXIPnhXXNZtBMxqBu74YtXnJDn61MW5JqcDkYBd6jpsvlRuUH5GdnfJqjM8 hzPCehglviN4VwWHqmBlor3w2wtYQRnlZ6PNoktvP+iv3PWWNKlAJNJHi8AOu3sr DPgYz+JZm1UWGOCx5ArPLyiKS1O3lWlUpDx5cXmB21Xw5CEF2MP0qpkO9hPfFON5 4XZHqvovhoifDwoqplKLU8xdeUzcint477+BAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbUql4RHLUfjo7TiTEPGa9dbenEowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2JVcWw0UkhMVWZqbzdUaVRFUEdhOWRiZW5Fby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK27CwwDQYJKoZIhvcNAQELBQADggEBAE8z/FGJXupNtFylBNaBiSuJ9ZKp J35hnsuTzGr8D6B+KGIlmpCH0dInsowmODG3pB9xzg2amsKt0bsludzmw46pfb4e zvZXdTAaHwuW9l/FeSqqLKbjbk9TQwupViKtPujw9ulcy792sBYsabjY/sf1Q2VU 4/fqIH+FqIiBeLYvTzPfBQsGToJRsJKb98b5j3VeliQKIGPcucMLqrnqyf8MScvY s6H8dYAFwwkN6CSgy/EspBAcyqQdVwDi7Lfe62i9seAYH0jdWiZwYTQ0i8RgaEnD L2G21gHwRSW7Pq33sQA7U/H18SfRZeRa8orrxjKgS4D/vM3z+91wKSdTXII= -----END CERTIFICATE-----Generated at Wed Feb 19 22:32:56 2025 by rpki-client