$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/n0KZIs4BuCr4bxFSBli3nAIeZXQ.roa File: n0KZIs4BuCr4bxFSBli3nAIeZXQ.roa (raw, json) Hash identifier: LEvASpeL5fnJ+QdZxJb8jH6Moo1zRhkn4vvY5NoJ5gc= Subject key identifier: 9F:42:99:22:CE:01:B8:2A:F8:6F:11:52:06:58:B7:9C:02:1E:65:74 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 035A Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/n0KZIs4BuCr4bxFSBli3nAIeZXQ.roa Signing time: Fri 24 Jan 2025 01:11:28 +0000 ROA not before: Fri 24 Jan 2025 01:11:28 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 210.229.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 24 01:11:28 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=9F429922CE01B82AF86F11520658B79C021E6574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:ad:ea:74:92:53:dc:22:46:4d:d4:c0:e6: 77:55:54:68:aa:b3:07:d0:e3:ba:61:0a:e6:1c:34: c2:19:00:41:e9:f1:91:d7:c5:6f:dd:0d:75:5f:cd: d1:1d:41:4e:08:c6:32:57:a2:9d:34:ab:59:0f:91: fc:37:c9:39:98:34:a5:e1:09:95:b0:29:ca:34:88: af:36:a3:7e:0e:0c:a4:52:c2:b6:78:28:f9:e3:0c: 05:47:0e:14:ad:8f:04:8c:c5:8c:db:f4:e3:90:82: f3:b0:87:3e:f0:a9:12:63:10:1a:08:9b:77:a1:9a: 15:8f:d9:65:9a:71:97:97:1f:1e:5a:20:8d:b4:c7: e7:b5:03:3d:dd:69:0a:29:0c:d5:5b:b5:b1:3f:68: 07:c3:20:3f:4e:29:50:da:49:cc:4d:1b:a9:8f:c0: c5:e0:dc:a1:7c:55:35:f2:e3:ab:03:68:71:10:45: e2:e0:99:60:a9:96:54:fc:c4:f9:a0:fe:ad:4a:7c: a7:ce:82:43:a7:7b:78:ef:86:c9:75:d0:3c:ea:db: ba:10:e4:e2:10:d2:b2:8b:8f:44:8d:e5:f1:11:1f: 8c:10:73:c8:4b:0b:1e:48:19:55:8b:f2:26:fb:d5: 68:f4:65:bc:9e:d1:47:de:53:e9:2c:68:dc:6e:6b: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:42:99:22:CE:01:B8:2A:F8:6F:11:52:06:58:B7:9C:02:1E:65:74 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/n0KZIs4BuCr4bxFSBli3nAIeZXQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.229.92.0/22 Signature Algorithm: sha256WithRSAEncryption 89:5b:ef:fe:20:b6:69:12:80:75:b6:de:6d:bf:97:60:97:91: ec:61:22:c6:a5:76:96:ca:fe:c8:99:89:82:5b:d2:cb:93:df: 7f:49:69:d2:4e:c5:96:7d:e3:1c:30:4e:d2:a4:be:78:5d:ed: 98:b4:83:e7:d6:bd:36:95:d7:a3:8f:b6:36:6a:37:7f:c1:50: 09:84:c7:ca:06:e4:13:8a:de:17:f2:52:bd:a6:79:60:76:1f: 2e:e9:ca:fd:92:ef:1b:fc:f8:33:05:ee:4b:66:9b:34:d9:ec: 8d:a8:11:20:c0:6e:63:80:9f:89:dd:1d:be:cf:79:1d:da:d6: 1d:7c:87:cc:f5:31:f9:13:92:ea:e6:40:31:53:e2:48:fa:9a: bf:39:5f:30:f7:98:ce:c9:be:3b:4f:1c:28:90:cc:61:66:82: b3:06:64:88:ff:87:e3:16:ad:71:1c:a2:5b:5a:3c:73:e2:e2: 4a:29:0d:5c:91:14:07:bf:c8:f2:01:0d:89:91:8e:d0:8c:1a: 69:50:fd:dc:46:df:ba:ff:9c:d0:27:e6:77:35:44:42:c5:de: e4:8f:13:49:fc:ed:66:ef:53:a5:28:87:b3:dc:5c:11:cf:f7: 94:a1:d3:52:47:44:8a:92:1d:93:0a:84:b1:72:e1:9d:e8:31: 69:3e:9b:ab -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA1owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjQw MTExMjhaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlGNDI5OTIyQ0UwMUI4 MkFGODZGMTE1MjA2NThCNzlDMDIxRTY1NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbma3qdJJT3CJGTdTA5ndVVGiqswfQ47phCuYcNMIZAEHp8ZHX xW/dDXVfzdEdQU4IxjJXop00q1kPkfw3yTmYNKXhCZWwKco0iK82o34ODKRSwrZ4 KPnjDAVHDhStjwSMxYzb9OOQgvOwhz7wqRJjEBoIm3ehmhWP2WWacZeXHx5aII20 x+e1Az3daQopDNVbtbE/aAfDID9OKVDaScxNG6mPwMXg3KF8VTXy46sDaHEQReLg mWCpllT8xPmg/q1KfKfOgkOne3jvhsl10Dzq27oQ5OIQ0rKLj0SN5fERH4wQc8hL Cx5IGVWL8ib71Wj0Zbye0UfeU+ksaNxua+IXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUn0KZIs4BuCr4bxFSBli3nAIeZXQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L24wS1pJczRCdUNyNGJ4RlNCbGkzbkFJZVpYUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALS5VwwDQYJKoZIhvcNAQELBQADggEBAIlb7/4gtmkSgHW23m2/l2CXkexh IsaldpbK/siZiYJb0suT339JadJOxZZ94xwwTtKkvnhd7Zi0g+fWvTaV16OPtjZq N3/BUAmEx8oG5BOK3hfyUr2meWB2Hy7pyv2S7xv8+DMF7ktmmzTZ7I2oESDAbmOA n4ndHb7PeR3a1h18h8z1MfkTkurmQDFT4kj6mr85XzD3mM7JvjtPHCiQzGFmgrMG ZIj/h+MWrXEcoltaPHPi4kopDVyRFAe/yPIBDYmRjtCMGmlQ/dxG37r/nNAn5nc1 RELF3uSPE0n87WbvU6Uoh7PcXBHP95Sh01JHRIqSHZMKhLFy4Z3oMWk+m6s= -----END CERTIFICATE-----Generated at Wed Feb 19 22:34:11 2025 by rpki-client