$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ficV-gROrHvCY7ahljcfxcW7nxs.roa File: ficV-gROrHvCY7ahljcfxcW7nxs.roa (raw, json) Hash identifier: yUXDnCuGZdauijQv17i0k8kgUNTOv+9Z+QM3UHDxAOs= Subject key identifier: 7E:27:15:FA:04:4E:AC:7B:C2:63:B6:A1:96:37:1F:C5:C5:BB:9F:1B Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0332 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ficV-gROrHvCY7ahljcfxcW7nxs.roa Signing time: Wed 15 Jan 2025 01:11:34 +0000 ROA not before: Wed 15 Jan 2025 01:11:34 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 10013 IP address blocks: 61.192.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 15 01:11:34 2025 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=7E2715FA044EAC7BC263B6A196371FC5C5BB9F1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:51:dc:29:26:ba:f6:35:cb:b8:fa:63:90: 29:58:41:8d:36:04:8f:d8:f0:ef:c9:3a:97:9b:4e: 28:6b:2b:5d:7d:72:03:07:f9:6e:90:24:14:7f:1f: 38:86:fe:e2:5a:58:3e:55:b4:b9:b7:38:81:a5:48: c1:52:0c:6e:db:6a:d6:24:95:6a:a4:6f:17:b7:64: 0e:f0:25:01:86:a3:26:2e:0d:83:46:6e:e8:c6:17: 24:82:90:b9:93:e8:23:26:97:53:55:86:9c:83:cb: 83:c3:7b:98:84:1a:36:2b:71:b7:93:94:f1:2a:57: ec:18:fb:62:e7:62:bd:d6:21:b7:0e:ae:e2:83:0d: 5e:a2:cd:41:af:a6:0d:48:df:eb:e1:38:01:97:41: ee:42:6e:f4:9b:66:19:77:70:d6:4f:3d:f8:09:82: 9b:f3:02:a8:2e:7a:44:70:58:95:5e:5a:69:28:0a: 54:04:eb:73:c5:d9:15:c7:e0:be:7d:25:06:18:d3: f9:ec:93:15:aa:4c:d5:3b:32:d6:ce:56:c6:23:85: c5:0d:1d:b5:3e:ff:09:6b:91:c5:22:6c:48:45:ac: 05:a2:1e:c9:f1:74:70:a6:32:54:8e:80:0e:68:cb: 72:95:47:9e:97:7c:9c:1e:aa:13:7f:a4:b1:8a:df: d6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:27:15:FA:04:4E:AC:7B:C2:63:B6:A1:96:37:1F:C5:C5:BB:9F:1B X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ficV-gROrHvCY7ahljcfxcW7nxs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.192.168.0/21 Signature Algorithm: sha256WithRSAEncryption 90:0c:58:11:56:20:52:4e:78:2e:d6:26:39:e9:03:45:6b:92: 82:07:40:1d:92:e1:9b:b9:ad:ce:a3:b4:db:9c:0b:38:22:aa: ca:1f:2b:37:db:bc:5b:cb:33:3c:8d:5a:34:9b:34:78:ec:cb: 85:1d:68:e9:5e:33:92:9d:0a:62:8b:a4:16:28:57:e9:75:7f: 3a:87:47:d6:b2:e3:9c:f7:b3:c2:60:2a:c2:6f:fa:df:45:5f: 26:48:e9:6f:cc:af:4d:20:bd:01:c0:9f:25:62:f7:e9:6a:7c: d9:db:f1:46:8b:d1:12:ff:33:5e:6d:b3:0d:29:48:36:33:69: db:dc:45:10:5b:27:e6:0f:a0:d8:3d:8f:bf:6a:f0:62:7b:99: 6a:87:18:ca:d5:fc:70:2f:b3:31:70:24:31:b0:07:d6:54:2d: f3:29:c3:82:47:f9:4d:f8:f3:a8:17:66:38:d5:a6:8d:1d:64: f6:90:d3:67:ac:53:86:56:91:8e:7b:d7:bf:27:ee:1b:72:bd: 7c:0f:ea:2d:db:d4:3c:af:6a:76:a3:c6:24:de:f6:43:66:b1: df:b0:4f:0e:53:2b:95:42:3e:3a:d4:6f:14:4e:41:ab:9e:1e: ad:0a:36:06:08:56:05:70:cc:5e:49:c1:0c:cf:64:1e:f4:43: d0:5f:f6:4b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMTUw MTExMzRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdFMjcxNUZBMDQ0RUFD N0JDMjYzQjZBMTk2MzcxRkM1QzVCQjlGMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjAlHcKSa69jXLuPpjkClYQY02BI/Y8O/JOpebTihrK119cgMH +W6QJBR/HziG/uJaWD5VtLm3OIGlSMFSDG7batYklWqkbxe3ZA7wJQGGoyYuDYNG bujGFySCkLmT6CMml1NVhpyDy4PDe5iEGjYrcbeTlPEqV+wY+2LnYr3WIbcOruKD DV6izUGvpg1I3+vhOAGXQe5CbvSbZhl3cNZPPfgJgpvzAqguekRwWJVeWmkoClQE 63PF2RXH4L59JQYY0/nskxWqTNU7MtbOVsYjhcUNHbU+/wlrkcUibEhFrAWiHsnx dHCmMlSOgA5oy3KVR56XfJweqhN/pLGK39ZrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUficV+gROrHvCY7ahljcfxcW7nxswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2ZpY1YtZ1JPckh2Q1k3YWhsamNmeGNXN254cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9wKgwDQYJKoZIhvcNAQELBQADggEBAJAMWBFWIFJOeC7WJjnpA0VrkoIH QB2S4Zu5rc6jtNucCzgiqsofKzfbvFvLMzyNWjSbNHjsy4UdaOleM5KdCmKLpBYo V+l1fzqHR9ay45z3s8JgKsJv+t9FXyZI6W/Mr00gvQHAnyVi9+lqfNnb8UaL0RL/ M15tsw0pSDYzadvcRRBbJ+YPoNg9j79q8GJ7mWqHGMrV/HAvszFwJDGwB9ZULfMp w4JH+U3486gXZjjVpo0dZPaQ02esU4ZWkY57178n7htyvXwP6i3b1DyvanajxiTe 9kNmsd+wTw5TK5VCPjrUbxROQaueHq0KNgYIVgVwzF5JwQzPZB70Q9Bf9ks= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:45 2025 by rpki-client