$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/hQ34qwAr6BMt10IRfjMaTssi5S4.roa File: hQ34qwAr6BMt10IRfjMaTssi5S4.roa (raw, json) Hash identifier: fy9zgheA8VBRerocACUJx0X9HqPeeFN9Ozz681KuV4g= Subject key identifier: 85:0D:F8:AB:00:2B:E8:13:2D:D7:42:11:7E:33:1A:4E:CB:22:E5:2E Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0249 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hQ34qwAr6BMt10IRfjMaTssi5S4.roa Signing time: Fri 31 May 2024 01:35:33 +0000 ROA not before: Fri 31 May 2024 01:35:33 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 27.134.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:35:33 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=850DF8AB002BE8132DD742117E331A4ECB22E52E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:61:ea:2c:3d:66:fb:e5:76:3b:73:df:ac: d7:0d:74:77:76:f2:79:c4:de:0f:d3:66:dc:31:a6: b7:37:5f:a8:ea:b8:c1:01:a5:39:c0:37:d9:5f:f7: a8:19:f5:fd:ec:18:1c:09:9a:fd:c9:d1:a9:51:6b: e7:b0:a5:9c:74:a0:29:22:74:fc:26:5e:26:29:07: 42:22:3a:0d:81:b9:83:5c:3d:e2:9b:c3:dc:c2:6b: 87:24:54:4c:97:ad:2d:fc:20:6d:30:cf:90:f6:95: 31:c3:26:11:e4:8c:3c:75:90:5e:3c:c6:a6:9c:61: 7b:c1:d6:07:72:69:3c:1e:5e:5e:e2:0b:8f:eb:1d: 72:3d:a3:0f:cf:c4:77:0a:7c:e0:0d:34:46:3b:3b: 1c:ba:f2:75:5d:5c:5c:31:1a:c3:d2:ba:7d:a2:ed: 28:30:22:0c:cd:d6:40:93:3f:98:d1:57:58:1b:0a: b6:98:31:56:68:f7:95:aa:cf:8a:8b:66:0d:6f:64: 6e:74:63:00:94:3a:bf:cc:89:5b:8e:1b:ba:44:0f: 20:cf:2f:7c:88:d6:b8:fd:a4:60:ab:65:7e:dd:59: 48:c6:04:66:ee:a9:76:41:eb:2f:75:52:fa:44:ff: 8e:fc:a1:38:2c:62:fe:9b:53:df:8c:37:56:8d:90: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0D:F8:AB:00:2B:E8:13:2D:D7:42:11:7E:33:1A:4E:CB:22:E5:2E X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hQ34qwAr6BMt10IRfjMaTssi5S4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.134.184.0/22 Signature Algorithm: sha256WithRSAEncryption 95:67:bd:bd:7a:56:21:e4:c0:d0:6e:4d:17:38:1f:b9:6d:24: ee:00:85:1c:6c:48:b6:8a:7c:fa:f0:0b:1d:9b:d0:85:e3:4b: 7f:f7:1f:da:82:2c:b0:fa:d2:b8:a5:b4:3e:df:7f:ec:eb:47: db:ad:10:58:d6:36:60:e6:47:cf:b5:8c:c7:e6:48:3e:2a:78: ec:eb:70:fb:e1:9d:24:cb:88:1c:ab:54:91:8c:93:be:2a:68: 76:1f:ca:34:be:31:81:16:a1:6c:58:c1:79:eb:85:75:fc:d7: 56:e0:b6:0f:0c:f2:22:92:44:a8:3a:bc:83:6b:c8:a6:59:c6: 11:f2:6c:9b:5b:e3:9b:d9:70:0f:b2:06:d0:41:1d:ef:c0:40: 30:b0:66:b8:b4:b2:f3:96:38:3d:b3:6e:0b:d2:f2:3a:aa:ab: 2a:ea:66:6f:e9:85:5d:da:21:3a:d6:f2:bb:15:6d:3b:bb:5f: b4:42:d3:a3:fe:ac:56:d5:38:5a:d4:41:e4:1c:75:39:39:c6: ac:61:9e:46:bb:ec:8b:a9:b6:ff:62:d0:8f:05:5a:eb:de:73: 2d:bd:1e:53:f3:ea:00:f7:55:6c:e2:41:47:ac:d7:15:ce:33: 5d:71:8f:9d:a6:e0:6c:cd:77:6a:69:a3:d5:32:9f:84:a6:08: f7:a0:a2:d2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM1MzNaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg1MERGOEFCMDAyQkU4 MTMyREQ3NDIxMTdFMzMxQTRFQ0IyMkU1MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEBmHqLD1m++V2O3PfrNcNdHd28nnE3g/TZtwxprc3X6jquMEB pTnAN9lf96gZ9f3sGBwJmv3J0alRa+ewpZx0oCkidPwmXiYpB0IiOg2BuYNcPeKb w9zCa4ckVEyXrS38IG0wz5D2lTHDJhHkjDx1kF48xqacYXvB1gdyaTweXl7iC4/r HXI9ow/PxHcKfOANNEY7Oxy68nVdXFwxGsPSun2i7SgwIgzN1kCTP5jRV1gbCraY MVZo95Wqz4qLZg1vZG50YwCUOr/MiVuOG7pEDyDPL3yI1rj9pGCrZX7dWUjGBGbu qXZB6y91UvpE/478oTgsYv6bU9+MN1aNkLqlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhQ34qwAr6BMt10IRfjMaTssi5S4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2hRMzRxd0FyNkJNdDEwSVJmak1hVHNzaTVTNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIbhrgwDQYJKoZIhvcNAQELBQADggEBAJVnvb16ViHkwNBuTRc4H7ltJO4A hRxsSLaKfPrwCx2b0IXjS3/3H9qCLLD60riltD7ff+zrR9utEFjWNmDmR8+1jMfm SD4qeOzrcPvhnSTLiByrVJGMk74qaHYfyjS+MYEWoWxYwXnrhXX811bgtg8M8iKS RKg6vINryKZZxhHybJtb45vZcA+yBtBBHe/AQDCwZri0svOWOD2zbgvS8jqqqyrq Zm/phV3aITrW8rsVbTu7X7RC06P+rFbVOFrUQeQcdTk5xqxhnka77Iuptv9i0I8F Wuvecy29HlPz6gD3VWziQUes1xXOM11xj52m4GzNd2ppo9Uyn4SmCPegotI= -----END CERTIFICATE-----Generated at Sun Feb 16 22:31:04 2025 by rpki-client