$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/iRR4E4qlXg2kfhoBFso7B21m76Y.roa File: iRR4E4qlXg2kfhoBFso7B21m76Y.roa (raw, json) Hash identifier: QQ2Ve786od0tG3bq36uXGoEBrUPg1Ox4GH2625RT8F4= Subject key identifier: 89:14:78:13:8A:A5:5E:0D:A4:7E:1A:01:16:CA:3B:07:6D:66:EF:A6 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0291 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iRR4E4qlXg2kfhoBFso7B21m76Y.roa Signing time: Fri 31 May 2024 01:39:43 +0000 ROA not before: Fri 31 May 2024 01:39:43 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 111.234.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:39:43 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=891478138AA55E0DA47E1A0116CA3B076D66EFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:ed:a2:6d:2f:3c:d0:2d:c1:77:a3:36:9e: 8f:48:ba:eb:89:57:54:db:00:d6:74:ce:33:5a:21: b4:46:1c:97:a3:1f:b0:13:b3:ad:12:dd:9e:fc:0a: 5e:5f:7d:3f:6c:8a:3c:1c:9c:61:bb:24:64:2a:d7: 14:c7:6e:2b:46:2d:e6:55:ea:2d:ad:77:bf:00:0b: a4:24:7f:66:d2:86:82:6a:71:0c:ef:eb:a5:38:83: 5e:4a:9d:50:ba:ff:25:41:0a:88:0b:48:9a:66:1a: f9:52:a5:3a:f2:c1:f0:95:01:b9:70:0d:2a:be:93: b3:d4:0a:dc:54:1e:3b:65:18:9d:65:6f:b6:11:a8: 45:b0:19:60:15:a9:31:39:ff:a1:c8:08:dd:a4:86: 40:30:5a:c0:1e:60:8a:c7:f6:56:7f:ff:40:87:ae: bf:fa:e9:3f:7f:63:30:1a:68:db:23:01:4e:74:aa: a0:2a:cf:c3:f5:d6:65:7f:ee:cc:c8:ff:f5:7f:a7: 2c:a6:72:9c:ac:78:eb:ef:0d:91:3b:bb:d3:96:d2: d8:7a:77:4c:6b:46:6a:a6:d0:5f:3c:3f:e6:f0:55: 68:57:cf:f2:7e:bb:dd:6e:c5:ce:5b:87:c0:e2:4d: 3d:2d:10:3d:6a:c5:08:cc:fb:7e:55:80:a0:14:b6: 21:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:14:78:13:8A:A5:5E:0D:A4:7E:1A:01:16:CA:3B:07:6D:66:EF:A6 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iRR4E4qlXg2kfhoBFso7B21m76Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.234.224.0/20 Signature Algorithm: sha256WithRSAEncryption 05:d3:88:3c:c6:6d:88:d1:2e:ed:15:c5:1a:d5:ab:86:59:7b: d9:2d:a3:c4:85:ab:40:58:91:0b:8f:82:19:d3:af:5e:6b:e9: 4a:0f:b2:ce:df:68:b7:bf:02:13:fe:e9:f2:f9:b9:68:23:db: 36:55:b9:b6:b4:92:77:25:69:98:a8:e6:17:af:1f:1f:09:8c: 1a:00:1b:c4:ea:f2:24:9b:5b:eb:85:27:38:68:81:1e:c2:1e: 0f:e0:a6:8c:fa:b1:a9:39:b5:2c:6d:50:3c:3e:44:3e:f9:19: 4a:3e:b6:8f:b5:2d:88:47:a4:7a:05:07:ec:55:c8:27:5a:31: 2a:1f:3f:56:76:c9:77:e8:73:7a:24:82:d8:4e:0b:4f:34:67: 1f:d1:ab:ac:9c:79:6b:4d:a7:12:4f:e4:95:ee:5e:08:62:c0: 6b:f0:2e:23:cc:d2:b6:85:6e:ff:55:9a:9b:6a:dc:cf:f5:fe: 1c:ae:de:37:3f:c2:de:7d:6c:27:3b:15:85:49:97:c6:3e:04: a9:af:8e:66:85:6b:52:fe:08:8f:df:5e:20:23:77:37:cb:c1: 83:1c:bb:e3:63:e2:2c:60:76:ca:8b:ff:20:a0:a5:51:07:35: 81:13:08:5b:31:6a:4e:d2:fc:3d:f2:6a:0e:30:33:ed:6e:53: 46:bf:b8:c0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICApEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM5NDNaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg5MTQ3ODEzOEFBNTVF MERBNDdFMUEwMTE2Q0EzQjA3NkQ2NkVGQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDESO2ibS880C3Bd6M2no9IuuuJV1TbANZ0zjNaIbRGHJejH7AT s60S3Z78Cl5ffT9sijwcnGG7JGQq1xTHbitGLeZV6i2td78AC6Qkf2bShoJqcQzv 66U4g15KnVC6/yVBCogLSJpmGvlSpTrywfCVAblwDSq+k7PUCtxUHjtlGJ1lb7YR qEWwGWAVqTE5/6HICN2khkAwWsAeYIrH9lZ//0CHrr/66T9/YzAaaNsjAU50qqAq z8P11mV/7szI//V/pyymcpyseOvvDZE7u9OW0th6d0xrRmqm0F88P+bwVWhXz/J+ u91uxc5bh8DiTT0tED1qxQjM+35VgKAUtiFfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUiRR4E4qlXg2kfhoBFso7B21m76YwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2lSUjRFNHFsWGcya2Zob0JGc283QjIxbTc2WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARv6uAwDQYJKoZIhvcNAQELBQADggEBAAXTiDzGbYjRLu0VxRrVq4ZZe9kt o8SFq0BYkQuPghnTr15r6UoPss7faLe/AhP+6fL5uWgj2zZVuba0knclaZio5hev Hx8JjBoAG8Tq8iSbW+uFJzhogR7CHg/gpoz6sak5tSxtUDw+RD75GUo+to+1LYhH pHoFB+xVyCdaMSofP1Z2yXfoc3okgthOC080Zx/Rq6yceWtNpxJP5JXuXghiwGvw LiPM0raFbv9Vmptq3M/1/hyu3jc/wt59bCc7FYVJl8Y+BKmvjmaFa1L+CI/fXiAj dzfLwYMcu+Nj4ixgdsqL/yCgpVEHNYETCFsxak7S/D3yag4wM+1uU0a/uMA= -----END CERTIFICATE-----Generated at Sun Feb 16 22:06:10 2025 by rpki-client