$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/gpHmA5Iiw4dXyvHJGWEZEs1bYmE.roa File: gpHmA5Iiw4dXyvHJGWEZEs1bYmE.roa (raw, json) Hash identifier: JsG0a+Ew5qCZFEGocbQYbbygp+d/bcSg4Ws4107nI/8= Subject key identifier: 82:91:E6:03:92:22:C3:87:57:CA:F1:C9:19:61:19:12:CD:5B:62:61 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0352 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gpHmA5Iiw4dXyvHJGWEZEs1bYmE.roa Signing time: Fri 24 Jan 2025 01:11:25 +0000 ROA not before: Fri 24 Jan 2025 01:11:25 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 203.181.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 24 01:11:25 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=8291E6039222C38757CAF1C919611912CD5B6261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1a:64:9c:a4:81:ec:12:b7:9f:58:87:fd:7b: 1c:a4:a9:09:64:1e:66:d7:a0:76:9d:00:d6:90:4c: 3b:97:77:15:d8:32:f9:83:ac:b4:90:28:35:39:12: c0:83:be:bc:80:7c:ff:77:11:2e:cc:2e:06:ed:7e: 61:52:ff:2d:e5:53:15:44:0f:6b:b6:7d:1e:db:7c: c7:65:4a:12:50:97:09:35:60:02:46:00:5e:5f:01: 2a:6c:58:df:bb:f6:67:c1:a0:a1:6b:18:ad:1c:d9: 43:4a:09:5b:90:c5:c4:72:23:15:76:03:99:d5:d5: 19:63:36:7d:3f:c1:e3:83:83:a2:71:5a:a7:37:46: 54:3a:e4:8c:97:90:99:24:0c:b8:15:17:13:21:96: 58:64:f9:f7:54:7c:92:d6:20:b3:83:d8:ea:81:e6: 14:7f:e2:61:a8:90:be:fc:67:6d:a9:d7:82:cf:aa: 55:37:45:8b:9c:44:43:66:b3:73:e1:5c:70:93:f7: 85:25:91:85:a0:d1:14:11:c6:ec:91:6b:18:34:82: 8e:a6:12:03:ca:f7:24:43:7b:66:84:07:7f:51:64: 39:49:83:e6:c6:f7:1d:cd:50:ce:18:87:10:e0:31: e4:d7:05:46:71:51:a8:27:4b:5d:c7:b1:0e:bf:4e: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:91:E6:03:92:22:C3:87:57:CA:F1:C9:19:61:19:12:CD:5B:62:61 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gpHmA5Iiw4dXyvHJGWEZEs1bYmE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.181.88.0/21 Signature Algorithm: sha256WithRSAEncryption 3e:4a:31:1b:60:e2:6c:5a:cb:62:92:9c:2a:5f:54:f4:82:14: ac:df:0d:ac:93:26:dc:6a:20:8b:6d:3a:be:e6:54:fc:a0:79: 8f:69:ff:5d:81:cc:b3:55:91:a1:a8:8d:0d:26:d2:ba:59:fa: a4:c0:7f:77:90:d0:ac:0e:c5:ed:e6:e4:8b:a7:ed:42:53:eb: 7f:65:be:10:6a:0d:43:ec:67:49:1b:8a:c1:4d:f9:d7:3e:76: 87:17:db:16:ea:ed:bd:61:c2:91:16:29:08:73:e7:8f:de:c1: 6e:59:3f:c0:a8:f9:8c:bd:54:a7:a7:fa:ea:80:87:04:bd:f8: 6d:1a:6a:dd:8b:17:40:a0:9b:da:21:77:f5:c9:1c:5f:0e:ba: 64:0e:49:c3:fc:4c:4c:a0:cd:96:bf:c7:2d:19:77:3f:4f:f6: 88:06:c8:4b:92:66:2b:55:ac:06:9a:0f:88:82:c9:23:2e:bf: 17:c7:bf:48:d6:9d:0a:12:04:96:7b:84:d4:f0:e9:14:05:cf: c7:ca:c2:3f:8d:2b:e7:c5:14:86:6e:b5:67:6d:70:59:df:02: 10:4d:d9:ec:2b:79:ba:a5:34:81:06:87:12:5a:b8:94:cd:da: 9f:de:78:1f:40:73:92:ad:54:86:bb:62:5d:b3:f6:98:eb:5f: b1:82:bd:22 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjQw MTExMjVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgyOTFFNjAzOTIyMkMz ODc1N0NBRjFDOTE5NjExOTEyQ0Q1QjYyNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXGmScpIHsErefWIf9exykqQlkHmbXoHadANaQTDuXdxXYMvmD rLSQKDU5EsCDvryAfP93ES7MLgbtfmFS/y3lUxVED2u2fR7bfMdlShJQlwk1YAJG AF5fASpsWN+79mfBoKFrGK0c2UNKCVuQxcRyIxV2A5nV1RljNn0/weODg6JxWqc3 RlQ65IyXkJkkDLgVFxMhllhk+fdUfJLWILOD2OqB5hR/4mGokL78Z22p14LPqlU3 RYucRENms3PhXHCT94UlkYWg0RQRxuyRaxg0go6mEgPK9yRDe2aEB39RZDlJg+bG 9x3NUM4YhxDgMeTXBUZxUagnS13HsQ6/ToNzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgpHmA5Iiw4dXyvHJGWEZEs1bYmEwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2dwSG1BNUlpdzRkWHl2SEpHV0VaRXMxYlltRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPLtVgwDQYJKoZIhvcNAQELBQADggEBAD5KMRtg4mxay2KSnCpfVPSCFKzf DayTJtxqIIttOr7mVPygeY9p/12BzLNVkaGojQ0m0rpZ+qTAf3eQ0KwOxe3m5Iun 7UJT639lvhBqDUPsZ0kbisFN+dc+docX2xbq7b1hwpEWKQhz54/ewW5ZP8Co+Yy9 VKen+uqAhwS9+G0aat2LF0Cgm9ohd/XJHF8OumQOScP8TEygzZa/xy0Zdz9P9ogG yEuSZitVrAaaD4iCySMuvxfHv0jWnQoSBJZ7hNTw6RQFz8fKwj+NK+fFFIZutWdt cFnfAhBN2ewrebqlNIEGhxJauJTN2p/eeB9Ac5KtVIa7Yl2z9pjrX7GCvSI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:43:50 2025 by rpki-client