$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/u4D5zfB464ADza-7GpU_hqBXSs8.roa File: u4D5zfB464ADza-7GpU_hqBXSs8.roa (raw, json) Hash identifier: VLl+uBXrbih1WaDMt7Or30lGUdIqjfEp6lSg4PnJX4k= Subject key identifier: BB:80:F9:CD:F0:78:EB:80:03:CD:AF:BB:1A:95:3F:86:A0:57:4A:CF Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 033F Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/u4D5zfB464ADza-7GpU_hqBXSs8.roa Signing time: Thu 23 Jan 2025 01:10:43 +0000 ROA not before: Thu 23 Jan 2025 01:10:43 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 180.131.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 23 01:10:43 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=BB80F9CDF078EB8003CDAFBB1A953F86A0574ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:3e:c4:d3:57:57:33:92:76:6c:eb:30:91: 87:5a:92:3e:93:6c:36:6a:a2:4e:4c:7e:fa:bd:7f: 22:b1:60:fd:7e:63:84:73:e6:22:24:d1:5b:ed:fc: a2:c8:b1:95:79:f2:3d:b4:94:16:7d:c4:55:47:93: 2e:8c:22:33:09:9a:13:69:e6:de:96:26:23:e2:52: 86:21:d8:6a:d4:c3:1b:98:fb:a9:72:d0:9d:4f:41: 2c:b8:5a:70:16:43:0c:5a:7c:88:db:e9:7d:9d:51: 3b:65:fb:48:77:9f:48:f2:51:d9:d6:32:50:90:a2: 6b:db:eb:ea:2d:b6:f3:eb:5f:11:d5:9d:5b:7a:d2: 49:67:c7:73:60:ae:0c:02:22:35:96:4e:99:cd:7a: f3:d7:5c:4e:06:11:ad:8d:26:57:04:a3:e2:dd:73: 4f:e7:b0:aa:1f:4c:b0:8d:e9:e6:46:cc:48:f1:da: d5:07:8c:7f:88:70:3d:cf:6c:28:c3:6b:c5:0f:c5: 93:01:6d:b2:d1:46:c9:8e:da:cc:d6:9b:5f:39:09: fc:bb:90:fe:bc:49:0a:2f:ce:1e:e3:56:99:3c:b6: 0d:5f:3d:5f:8e:ca:f8:dd:29:42:a0:3e:8b:3b:95: cc:7b:52:08:3a:83:85:55:5c:99:41:fc:a6:c7:87: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:80:F9:CD:F0:78:EB:80:03:CD:AF:BB:1A:95:3F:86:A0:57:4A:CF X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/u4D5zfB464ADza-7GpU_hqBXSs8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.104.0/22 Signature Algorithm: sha256WithRSAEncryption 08:d3:e6:37:da:ec:a6:bc:46:63:72:d0:30:19:62:ca:8a:8e: a0:4a:1f:59:0d:84:da:2e:33:34:46:4b:9f:58:aa:b4:39:6c: 62:ce:3d:5b:8c:05:03:2f:6d:0a:b7:2d:3b:1d:f3:c7:2f:d9: 03:a9:64:97:45:d9:a6:f7:f8:b0:30:41:66:3c:28:2b:a8:5c: 55:81:90:b6:6e:9a:26:66:6f:50:4f:bd:c2:37:c9:be:9e:30: 11:a6:a3:46:96:d3:a8:8f:9f:fa:70:90:74:62:2c:60:fc:1c: f9:10:fa:e7:ba:23:75:3e:cc:49:b5:1e:75:99:e0:6c:72:9a: fe:bd:c2:50:bb:f7:31:0c:f6:c1:8c:47:08:fe:87:7c:2d:a3: 84:b4:46:86:05:40:67:8a:ea:8d:4b:cf:8a:37:3e:12:f5:90: 80:e4:89:87:ae:3c:84:c8:b1:f9:f1:5e:5f:39:4e:51:d7:aa: f4:89:4c:dc:f7:e6:d9:3b:5b:ee:0a:c3:6d:a3:af:a1:48:6d: f6:c7:52:b2:d9:cf:93:55:52:b9:d4:6b:bd:a1:4f:f4:29:fc: 3f:be:c3:15:4a:32:7f:fc:e4:6c:f9:1a:15:2d:5d:61:06:00: 9c:b0:f5:c0:77:c8:b3:b5:ee:a1:6c:47:e0:67:5b:28:53:4c: 62:59:b4:57 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjMw MTEwNDNaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEJCODBGOUNERjA3OEVC ODAwM0NEQUZCQjFBOTUzRjg2QTA1NzRBQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC74j7E01dXM5J2bOswkYdakj6TbDZqok5Mfvq9fyKxYP1+Y4Rz 5iIk0Vvt/KLIsZV58j20lBZ9xFVHky6MIjMJmhNp5t6WJiPiUoYh2GrUwxuY+6ly 0J1PQSy4WnAWQwxafIjb6X2dUTtl+0h3n0jyUdnWMlCQomvb6+ottvPrXxHVnVt6 0klnx3NgrgwCIjWWTpnNevPXXE4GEa2NJlcEo+Ldc0/nsKofTLCN6eZGzEjx2tUH jH+IcD3PbCjDa8UPxZMBbbLRRsmO2szWm185Cfy7kP68SQovzh7jVpk8tg1fPV+O yvjdKUKgPos7lcx7Ugg6g4VVXJlB/KbHh7ZjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUu4D5zfB464ADza+7GpU/hqBXSs8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3U0RDV6ZkI0NjRBRHphLTdHcFVfaHFCWFNzOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK0g2gwDQYJKoZIhvcNAQELBQADggEBAAjT5jfa7Ka8RmNy0DAZYsqKjqBK H1kNhNouMzRGS59YqrQ5bGLOPVuMBQMvbQq3LTsd88cv2QOpZJdF2ab3+LAwQWY8 KCuoXFWBkLZumiZmb1BPvcI3yb6eMBGmo0aW06iPn/pwkHRiLGD8HPkQ+ue6I3U+ zEm1HnWZ4Gxymv69wlC79zEM9sGMRwj+h3wto4S0RoYFQGeK6o1Lz4o3PhL1kIDk iYeuPITIsfnxXl85TlHXqvSJTNz35tk7W+4Kw22jr6FIbfbHUrLZz5NVUrnUa72h T/Qp/D++wxVKMn/85Gz5GhUtXWEGAJyw9cB3yLO17qFsR+BnWyhTTGJZtFc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:44:13 2025 by rpki-client