$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/o1JiMMk3pfFQkP8YSOnp0ozpaxU.roa File: o1JiMMk3pfFQkP8YSOnp0ozpaxU.roa (raw, json) Hash identifier: jsnmHOcOC9cYL5ph/rLPWzydRIKIjtjWJemCiqiVXzw= Subject key identifier: A3:52:62:30:C9:37:A5:F1:50:90:FF:18:48:E9:E9:D2:8C:E9:6B:15 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0265 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/o1JiMMk3pfFQkP8YSOnp0ozpaxU.roa Signing time: Fri 31 May 2024 01:37:38 +0000 ROA not before: Fri 31 May 2024 01:37:38 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 61.203.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 613 (0x265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:37:38 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=A3526230C937A5F15090FF1848E9E9D28CE96B15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d0:79:bb:de:94:ca:b3:43:e0:f2:5b:29:7a: 8f:6a:02:60:8b:bd:61:0d:38:e0:81:1e:fc:a7:07: 6b:2c:0d:00:4b:95:ab:39:9d:a8:1d:0c:34:91:d1: bf:b9:b9:70:67:f4:72:38:2a:8f:1b:4e:2e:a0:7a: 2f:2a:51:0e:cd:df:f5:61:d0:8f:ab:47:c5:bc:3b: 29:a6:2f:e7:26:e8:49:5c:ab:a8:52:c9:56:ce:2c: b4:dd:92:02:da:0d:00:fa:87:1c:75:0a:ad:e3:d0: 3f:9f:ab:9d:8c:01:3e:59:ff:a1:1e:ea:13:98:1e: 48:67:8b:ef:1f:a2:58:a7:c4:c2:b2:3f:15:0f:99: 93:b5:a8:c0:a2:5e:3c:0d:b0:84:b5:48:d1:fa:a1: 2c:38:db:32:71:fa:78:6a:ce:67:b4:b7:5c:72:0d: 94:d7:85:7a:41:85:5b:d9:fc:c8:80:64:3d:4b:79: ff:b3:34:95:66:63:b9:85:b5:3a:c7:16:cc:cc:2c: 74:1a:60:62:2f:c7:8d:ba:a9:ea:87:85:52:57:9c: 63:1f:36:0c:a3:08:8a:21:d7:a3:bc:2f:ef:32:8e: 1e:3f:21:40:39:ff:66:3e:e6:6c:82:d1:ad:64:57: 33:79:68:e4:f3:73:dd:a8:77:de:f9:c6:af:0e:7e: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:52:62:30:C9:37:A5:F1:50:90:FF:18:48:E9:E9:D2:8C:E9:6B:15 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/o1JiMMk3pfFQkP8YSOnp0ozpaxU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.203.168.0/21 Signature Algorithm: sha256WithRSAEncryption 90:dd:74:95:1d:e1:1c:c2:db:00:b7:69:9a:2a:a6:e0:e7:8c: ec:c0:1e:9a:84:95:97:8f:ce:59:66:b0:84:83:be:4b:76:76: aa:c1:76:ed:4d:6e:db:95:bb:fc:7f:9f:03:b3:54:9e:62:f3: 5f:ca:7e:ac:3e:d5:4e:d0:dd:37:45:fb:61:d5:01:81:1c:6d: d6:d0:6d:07:e8:53:4e:92:0f:b1:da:26:66:b7:99:a9:a2:2c: d0:10:f4:1f:09:1b:79:bf:ff:5a:f8:5d:b5:f5:d9:0c:19:39: d8:14:90:2f:00:6d:72:bd:11:2b:b6:72:9e:95:ba:64:3a:8c: 48:50:a0:c8:c6:e0:d9:8b:8a:58:28:a6:2f:49:99:09:b6:cc: 8d:15:9a:86:de:25:fd:55:d1:ff:d4:6f:59:7d:b8:eb:fe:22: 4d:13:10:77:79:31:05:a3:3f:9b:cf:07:56:ec:cd:e2:b7:ac: 81:32:3d:a2:ff:a5:b4:d3:64:f4:41:89:dd:97:f6:af:27:b2: 94:81:fa:8a:26:3a:bc:db:36:6b:40:2e:43:92:20:20:02:c0: 2a:8c:19:d0:1c:75:1b:67:a5:cf:2e:86:ce:06:a9:8d:a7:c6: 2e:41:de:72:5a:02:f1:a0:52:99:03:45:a4:93:5f:75:d1:5f: 14:af:8e:97 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM3MzhaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEzNTI2MjMwQzkzN0E1 RjE1MDkwRkYxODQ4RTlFOUQyOENFOTZCMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDi0Hm73pTKs0Pg8lspeo9qAmCLvWENOOCBHvynB2ssDQBLlas5 nagdDDSR0b+5uXBn9HI4Ko8bTi6gei8qUQ7N3/Vh0I+rR8W8OymmL+cm6Elcq6hS yVbOLLTdkgLaDQD6hxx1Cq3j0D+fq52MAT5Z/6Ee6hOYHkhni+8folinxMKyPxUP mZO1qMCiXjwNsIS1SNH6oSw42zJx+nhqzme0t1xyDZTXhXpBhVvZ/MiAZD1Lef+z NJVmY7mFtTrHFszMLHQaYGIvx426qeqHhVJXnGMfNgyjCIoh16O8L+8yjh4/IUA5 /2Y+5myC0a1kVzN5aOTzc92od975xq8OftjzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUo1JiMMk3pfFQkP8YSOnp0ozpaxUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L28xSmlNTWszcGZGUWtQOFlTT25wMG96cGF4VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9y6gwDQYJKoZIhvcNAQELBQADggEBAJDddJUd4RzC2wC3aZoqpuDnjOzA HpqElZePzllmsISDvkt2dqrBdu1NbtuVu/x/nwOzVJ5i81/Kfqw+1U7Q3TdF+2HV AYEcbdbQbQfoU06SD7HaJma3mamiLNAQ9B8JG3m//1r4XbX12QwZOdgUkC8AbXK9 ESu2cp6VumQ6jEhQoMjG4NmLilgopi9JmQm2zI0VmobeJf1V0f/Ub1l9uOv+Ik0T EHd5MQWjP5vPB1bszeK3rIEyPaL/pbTTZPRBid2X9q8nspSB+oomOrzbNmtALkOS ICACwCqMGdAcdRtnpc8uhs4GqY2nxi5B3nJaAvGgUpkDRaSTX3XRXxSvjpc= -----END CERTIFICATE-----Generated at Sun Feb 16 22:34:34 2025 by rpki-client