$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/gglfj8CZDUluSCSSvZ9WChKUbrQ.roa File: gglfj8CZDUluSCSSvZ9WChKUbrQ.roa (raw, json) Hash identifier: o5ru58UFdSxQuEX74gB53Nl2KowgSk3lUfTY8wrLZnk= Subject key identifier: 82:09:5F:8F:C0:99:0D:49:6E:48:24:92:BD:9F:56:0A:12:94:6E:B4 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 033E Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gglfj8CZDUluSCSSvZ9WChKUbrQ.roa Signing time: Thu 23 Jan 2025 01:10:37 +0000 ROA not before: Thu 23 Jan 2025 01:10:37 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 180.131.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 23 01:10:37 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=82095F8FC0990D496E482492BD9F560A12946EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:29:ac:6a:b8:f5:70:7e:75:58:9a:ff:f5:31: 05:b3:19:d1:7c:ac:eb:9a:bf:57:9b:2c:b2:10:f1: 31:22:15:7e:25:3d:b0:dc:58:d7:3c:bc:90:89:89: 57:be:0b:9c:4a:34:54:44:d0:80:06:21:6d:c8:8c: fb:5a:7d:c7:07:ca:ff:ff:80:c7:5c:6f:3f:be:78: 60:ad:64:28:36:dd:16:9d:7a:26:83:dc:0e:0c:c6: 64:34:31:07:54:fd:d8:22:07:a7:0e:e0:b3:f5:36: b3:fb:96:b7:7d:03:af:df:e0:e5:56:16:a5:da:49: 7b:d4:0d:1d:f6:60:cc:d9:55:9e:80:ab:1b:74:63: ac:98:72:87:c8:a9:1f:5c:92:47:10:31:20:cc:62: 5c:f3:4e:b3:e8:01:3b:ba:b0:d9:15:82:c1:80:77: 5f:9f:80:17:2e:fd:7a:69:78:c3:d6:34:80:51:70: ec:88:3a:c2:7f:84:e5:5f:68:84:35:13:28:43:4b: d5:07:3b:24:6e:27:8f:4d:7e:e4:42:f2:b9:1f:93: 40:14:24:71:64:15:4f:b7:e8:e0:ce:c8:6f:34:3c: b0:94:5b:7c:37:ce:ce:b9:80:57:bb:e8:77:07:29: 91:cf:64:f8:a2:22:c5:60:35:b4:ac:a8:18:c1:8a: 55:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:09:5F:8F:C0:99:0D:49:6E:48:24:92:BD:9F:56:0A:12:94:6E:B4 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gglfj8CZDUluSCSSvZ9WChKUbrQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.96.0/21 Signature Algorithm: sha256WithRSAEncryption 92:4f:e3:f1:89:dc:04:29:97:7e:27:74:00:77:7e:ff:de:27: 0e:f9:26:e9:e4:be:38:ec:aa:80:58:97:c8:ff:a5:38:38:db: c7:63:56:f9:65:da:84:d4:0b:86:c1:f6:3e:4f:2b:b8:6e:cb: 8e:d4:d0:b0:7b:08:01:f0:39:7e:02:6b:84:f5:44:cc:0f:fb: 31:1a:f8:15:41:d3:ff:b7:1e:4b:9f:e8:6a:52:34:36:0a:1a: e3:8c:96:26:77:51:5c:41:7a:d7:3e:1f:7a:f5:37:c2:4c:6b: a6:5b:fd:06:73:5f:ab:b7:aa:c0:80:eb:05:b4:36:c9:45:da: 3a:cc:42:46:9b:48:f1:80:34:81:11:ef:4d:81:8a:95:04:d9: 88:fc:10:2c:60:3d:5d:cf:34:2c:16:6e:5b:f2:61:62:8c:c9: 5f:fd:50:42:9d:49:7f:79:76:45:3d:c8:ed:67:fd:1d:84:fc: 3c:a8:14:0b:32:b4:a5:22:cd:cb:9d:7f:62:31:3b:cb:62:26: 1d:6f:da:f6:19:6c:ec:d3:0a:4c:bd:90:18:0c:e4:c2:a8:7b: d6:93:c1:38:a7:a7:cc:92:50:d6:aa:fb:51:33:2d:e1:4c:c5: fe:e0:bc:c6:b9:c4:d7:29:d8:6c:f5:c8:29:45:f5:49:38:bd: 4c:06:74:b4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjMw MTEwMzdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgyMDk1RjhGQzA5OTBE NDk2RTQ4MjQ5MkJEOUY1NjBBMTI5NDZFQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkKaxquPVwfnVYmv/1MQWzGdF8rOuav1ebLLIQ8TEiFX4lPbDc WNc8vJCJiVe+C5xKNFRE0IAGIW3IjPtafccHyv//gMdcbz++eGCtZCg23RadeiaD 3A4MxmQ0MQdU/dgiB6cO4LP1NrP7lrd9A6/f4OVWFqXaSXvUDR32YMzZVZ6Aqxt0 Y6yYcofIqR9ckkcQMSDMYlzzTrPoATu6sNkVgsGAd1+fgBcu/XppeMPWNIBRcOyI OsJ/hOVfaIQ1EyhDS9UHOyRuJ49NfuRC8rkfk0AUJHFkFU+36ODOyG80PLCUW3w3 zs65gFe76HcHKZHPZPiiIsVgNbSsqBjBilVZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgglfj8CZDUluSCSSvZ9WChKUbrQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2dnbGZqOENaRFVsdVNDU1N2WjlXQ2hLVWJyUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO0g2AwDQYJKoZIhvcNAQELBQADggEBAJJP4/GJ3AQpl34ndAB3fv/eJw75 JunkvjjsqoBYl8j/pTg428djVvll2oTUC4bB9j5PK7huy47U0LB7CAHwOX4Ca4T1 RMwP+zEa+BVB0/+3Hkuf6GpSNDYKGuOMliZ3UVxBetc+H3r1N8JMa6Zb/QZzX6u3 qsCA6wW0NslF2jrMQkabSPGANIER702BipUE2Yj8ECxgPV3PNCwWblvyYWKMyV/9 UEKdSX95dkU9yO1n/R2E/DyoFAsytKUizcudf2IxO8tiJh1v2vYZbOzTCky9kBgM 5MKoe9aTwTinp8ySUNaq+1EzLeFMxf7gvMa5xNcp2Gz1yClF9Uk4vUwGdLQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:55 2025 by rpki-client