$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ssfJci6c1eYMJgoHACrD4nohkcU.roa File: ssfJci6c1eYMJgoHACrD4nohkcU.roa (raw, json) Hash identifier: RByctTqQK9r0dSf+iMZX/9cdkdV8MMc9AaCuVzeCvW4= Subject key identifier: B2:C7:C9:72:2E:9C:D5:E6:0C:26:0A:07:00:2A:C3:E2:7A:21:91:C5 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 032F Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ssfJci6c1eYMJgoHACrD4nohkcU.roa Signing time: Wed 15 Jan 2025 01:07:41 +0000 ROA not before: Wed 15 Jan 2025 01:07:41 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 10013 IP address blocks: 61.192.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 15 01:07:41 2025 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=B2C7C9722E9CD5E60C260A07002AC3E27A2191C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:20:71:ee:84:3d:6a:6a:32:4b:e4:27:c9: 3e:b3:0e:a1:f1:2c:6d:4a:0f:2a:d7:64:82:c8:8f: c6:12:c3:65:3d:73:af:85:bd:9c:37:60:ec:83:ea: ee:12:66:00:15:d3:6c:80:c3:d8:72:6b:15:fe:ca: 8e:5d:1d:01:e4:24:72:99:f4:2f:61:91:ba:8b:0e: 91:1e:af:bd:0c:09:35:b9:91:8e:5b:59:d7:95:86: 17:d2:5f:d6:28:e8:0a:6f:19:f7:7d:27:99:73:62: b1:cd:cb:fe:a5:c3:d8:7d:03:be:4f:f2:83:0c:6d: 4e:0c:56:8d:ce:75:f4:93:1d:9a:df:f2:ce:ef:f1: 89:9f:d7:83:b5:44:af:a2:c9:02:33:ec:c9:d1:d5: 90:b0:b7:83:56:e9:d7:b8:a5:24:72:38:6f:31:7d: 3b:6e:11:4a:14:0a:fa:af:8d:1b:29:84:0c:e7:af: 24:2b:9b:9a:31:f7:e6:a8:f2:c9:62:83:78:2d:29: 01:4e:99:73:78:38:99:6d:69:38:2f:37:9f:63:02: 14:7f:7c:a0:89:93:6c:26:75:16:63:19:fe:7e:ad: a0:0e:14:6a:c5:8d:c6:2c:e7:62:9f:0e:e3:4f:07: fc:72:30:26:ca:bc:21:72:31:49:e1:6f:ee:e1:e0: 07:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C7:C9:72:2E:9C:D5:E6:0C:26:0A:07:00:2A:C3:E2:7A:21:91:C5 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ssfJci6c1eYMJgoHACrD4nohkcU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.192.160.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:01:41:0a:59:bb:fd:fc:ac:9f:66:58:27:16:8c:cd:34:ff: c3:73:4e:47:09:82:e2:aa:c3:0c:b9:04:dc:3f:00:62:58:84: 6f:1f:56:c1:1c:fd:4a:f2:e0:e1:8c:40:9a:10:15:92:1b:18: 95:51:51:39:4d:e5:1d:54:78:68:08:74:2c:6a:15:1c:a0:1f: ce:be:ac:e1:24:0a:db:5f:8b:60:18:d1:dc:a3:36:44:07:fd: d4:94:84:16:7d:45:e4:51:f4:a7:95:74:23:ab:3f:df:a9:80: 18:1a:90:84:6c:c5:2b:f9:32:81:57:5d:ff:db:1f:df:0f:a3: 47:86:af:50:f4:ac:a6:0f:cf:43:fe:34:f4:0f:c9:4e:98:fe: 0b:3f:55:46:cb:7b:12:09:ac:69:8d:eb:b4:87:93:8c:15:6a: 22:d4:d5:47:56:cb:38:26:d4:46:53:44:72:de:99:8c:26:54: af:49:ba:e3:3b:da:66:0e:77:07:c3:0d:21:30:81:33:d8:24: 3d:11:e7:6c:d6:60:e8:cb:de:31:a2:1c:5e:1a:92:9a:6b:4c: 36:49:c3:d0:0a:9a:ca:a8:bb:1b:b9:82:d5:8c:ab:0a:57:db: 82:06:f7:7d:61:c2:28:f9:92:81:85:e0:85:ae:93:55:ff:80: 11:6b:4c:35 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMTUw MTA3NDFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIyQzdDOTcyMkU5Q0Q1 RTYwQzI2MEEwNzAwMkFDM0UyN0EyMTkxQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBmiBx7oQ9amoyS+QnyT6zDqHxLG1KDyrXZILIj8YSw2U9c6+F vZw3YOyD6u4SZgAV02yAw9hyaxX+yo5dHQHkJHKZ9C9hkbqLDpEer70MCTW5kY5b WdeVhhfSX9Yo6ApvGfd9J5lzYrHNy/6lw9h9A75P8oMMbU4MVo3OdfSTHZrf8s7v 8Ymf14O1RK+iyQIz7MnR1ZCwt4NW6de4pSRyOG8xfTtuEUoUCvqvjRsphAznryQr m5ox9+ao8slig3gtKQFOmXN4OJltaTgvN59jAhR/fKCJk2wmdRZjGf5+raAOFGrF jcYs52KfDuNPB/xyMCbKvCFyMUnhb+7h4AfvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUssfJci6c1eYMJgoHACrD4nohkcUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3NzZkpjaTZjMWVZTUpnb0hBQ3JENG5vaGtjVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA9wKAwDQYJKoZIhvcNAQELBQADggEBABsBQQpZu/38rJ9mWCcWjM00/8Nz TkcJguKqwwy5BNw/AGJYhG8fVsEc/Ury4OGMQJoQFZIbGJVRUTlN5R1UeGgIdCxq FRygH86+rOEkCttfi2AY0dyjNkQH/dSUhBZ9ReRR9KeVdCOrP9+pgBgakIRsxSv5 MoFXXf/bH98Po0eGr1D0rKYPz0P+NPQPyU6Y/gs/VUbLexIJrGmN67SHk4wVaiLU 1UdWyzgm1EZTRHLemYwmVK9JuuM72mYOdwfDDSEwgTPYJD0R52zWYOjL3jGiHF4a kpprTDZJw9AKmsqouxu5gtWMqwpX24IG931hwij5koGF4IWuk1X/gBFrTDU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:44:47 2025 by rpki-client