$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kxjKMNsfU8SIeQXzNNcPkT70G3o.roa File: kxjKMNsfU8SIeQXzNNcPkT70G3o.roa (raw, json) Hash identifier: 6QrV6LQKxp/9TuTpDxz+JGrfM1hCLy0NWrCV5V+iapc= Subject key identifier: 93:18:CA:30:DB:1F:53:C4:88:79:05:F3:34:D7:0F:91:3E:F4:1B:7A Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02A3 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kxjKMNsfU8SIeQXzNNcPkT70G3o.roa Signing time: Fri 31 May 2024 01:41:33 +0000 ROA not before: Fri 31 May 2024 01:41:33 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 122.145.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:41:33 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=9318CA30DB1F53C4887905F334D70F913EF41B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:eb:12:a6:de:12:46:8a:33:5b:4e:a7:da:cb: b5:f3:77:29:58:e6:60:47:91:60:3e:ec:d4:22:c9: 29:77:5e:d4:96:25:4b:25:d1:81:fe:ac:12:ce:d5: fe:87:f0:af:a5:95:d7:b1:ed:32:68:72:46:4c:d4: aa:76:34:ff:13:32:44:88:cc:5d:01:c3:a2:d5:13: 8f:06:51:1c:ca:7c:01:df:86:3a:d6:d5:51:7b:aa: 10:b4:11:e3:16:c8:1c:03:fe:e7:d2:27:df:7e:1c: 03:69:1c:68:e3:92:ec:c7:08:3b:38:c7:82:b1:9d: 7d:82:f0:7f:0c:56:c5:c7:2c:84:a9:4e:5e:8e:e5: b3:b3:a4:15:73:ad:d7:bd:ba:39:e3:68:c4:ff:64: d6:a0:36:91:25:ed:67:56:18:a3:30:ee:48:66:35: eb:5f:5f:7a:36:7a:4a:f2:58:b2:ae:e1:35:77:e0: cd:9c:94:19:4e:15:94:36:3e:c0:a9:75:44:f2:ca: 21:9f:15:89:4c:e1:2b:1e:75:a8:ad:0e:fc:51:d1: 51:9b:7e:3a:0b:9e:bf:c4:a3:95:8e:40:94:db:e0: f7:6d:98:3e:2f:2f:ed:05:3e:67:39:1a:56:30:c1: ba:24:be:ca:c6:5a:36:66:ae:8a:67:e2:4d:57:97: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:18:CA:30:DB:1F:53:C4:88:79:05:F3:34:D7:0F:91:3E:F4:1B:7A X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kxjKMNsfU8SIeQXzNNcPkT70G3o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.145.116.0/22 Signature Algorithm: sha256WithRSAEncryption 91:be:66:fc:b6:57:03:ad:0d:c3:df:6c:fc:29:31:59:77:d3: 9c:e7:94:78:12:fd:fc:3f:0d:2a:a1:d5:42:32:5f:89:d6:ef: e4:1f:12:66:02:af:c0:b0:66:56:84:18:2b:77:10:a1:b7:8d: d1:a2:67:8b:cf:27:8f:03:80:c7:c5:8c:97:8a:fd:7a:0d:24: f3:e5:da:05:2a:e2:c3:95:47:95:33:bb:5f:f6:a5:f2:41:41: 3b:ee:96:59:d6:69:02:fb:64:ea:45:d2:12:16:c4:ee:61:5a: ce:cc:5f:4a:8a:f6:45:42:fc:01:d6:25:0e:f9:39:59:e1:f5: 14:d2:c7:91:68:2b:63:ed:3f:cf:5d:fa:9d:5c:67:3f:49:81: 83:5a:06:ca:37:43:e5:09:b7:88:17:16:67:a4:57:08:c7:65: 9d:e3:99:65:b7:bc:df:3a:9c:d3:36:bc:1c:76:97:ac:07:f3: 65:6b:19:1b:13:c2:b9:4d:d6:db:7b:17:fb:9a:0c:93:c8:43: 79:cd:e8:9c:17:5c:20:be:67:a5:09:03:1d:b5:d5:b7:df:2e: af:ab:ae:fe:c5:dd:f1:c1:b1:2a:2c:88:73:4b:6f:61:00:cd: 21:82:27:9a:ea:88:5a:8f:0f:47:0c:fd:df:b8:f7:fa:8c:1c: 49:3d:fc:60 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTQxMzNaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkzMThDQTMwREIxRjUz QzQ4ODc5MDVGMzM0RDcwRjkxM0VGNDFCN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDy6xKm3hJGijNbTqfay7XzdylY5mBHkWA+7NQiySl3XtSWJUsl 0YH+rBLO1f6H8K+lldex7TJockZM1Kp2NP8TMkSIzF0Bw6LVE48GURzKfAHfhjrW 1VF7qhC0EeMWyBwD/ufSJ99+HANpHGjjkuzHCDs4x4KxnX2C8H8MVsXHLISpTl6O 5bOzpBVzrde9ujnjaMT/ZNagNpEl7WdWGKMw7khmNetfX3o2ekryWLKu4TV34M2c lBlOFZQ2PsCpdUTyyiGfFYlM4SsedaitDvxR0VGbfjoLnr/Eo5WOQJTb4PdtmD4v L+0FPmc5GlYwwbokvsrGWjZmropn4k1Xl9gNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkxjKMNsfU8SIeQXzNNcPkT70G3owHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2t4aktNTnNmVThTSWVRWHpOTmNQa1Q3MEczby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ6kXQwDQYJKoZIhvcNAQELBQADggEBAJG+Zvy2VwOtDcPfbPwpMVl305zn lHgS/fw/DSqh1UIyX4nW7+QfEmYCr8CwZlaEGCt3EKG3jdGiZ4vPJ48DgMfFjJeK /XoNJPPl2gUq4sOVR5Uzu1/2pfJBQTvullnWaQL7ZOpF0hIWxO5hWs7MX0qK9kVC /AHWJQ75OVnh9RTSx5FoK2PtP89d+p1cZz9JgYNaBso3Q+UJt4gXFmekVwjHZZ3j mWW3vN86nNM2vBx2l6wH82VrGRsTwrlN1tt7F/uaDJPIQ3nN6JwXXCC+Z6UJAx21 1bffLq+rrv7F3fHBsSosiHNLb2EAzSGCJ5rqiFqPD0cM/d+49/qMHEk9/GA= -----END CERTIFICATE-----Generated at Sun Feb 16 22:13:00 2025 by rpki-client