$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vfvWKl9-rhTeZXcSNW0NZkhCGMg.roa File: vfvWKl9-rhTeZXcSNW0NZkhCGMg.roa (raw, json) Hash identifier: e+C2iR9juhgir3Q1/I72LvL2k5bBzLKJoXCok5t3WhQ= Subject key identifier: BD:FB:D6:2A:5F:7E:AE:14:DE:65:77:12:35:6D:0D:66:48:42:18:C8 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0351 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vfvWKl9-rhTeZXcSNW0NZkhCGMg.roa Signing time: Fri 24 Jan 2025 01:07:25 +0000 ROA not before: Fri 24 Jan 2025 01:07:25 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 203.181.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 24 01:07:25 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=BDFBD62A5F7EAE14DE657712356D0D66484218C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:33:3d:af:c5:37:12:10:a7:c7:29:cb:82: 36:fa:7a:9a:d4:ed:5e:b1:83:10:0b:da:bb:a1:cf: 51:94:e2:7b:0d:d7:1a:a0:94:f4:cc:74:c8:04:a4: c0:91:df:27:bb:ce:e6:26:bb:84:14:24:79:b3:71: 9e:b5:6a:1d:92:f6:9d:7f:90:e2:54:2f:39:e2:52: f9:51:60:ee:8d:00:98:8e:43:fa:96:0c:e6:b2:22: 23:97:e2:8a:15:32:38:60:a0:86:bf:13:68:53:47: 58:50:f2:0a:6d:bf:a7:43:79:48:e8:a6:83:19:bb: 54:23:62:d1:89:1c:a6:9a:9c:27:62:a7:9b:d9:62: 17:1c:1f:57:4f:81:54:21:de:d5:74:5b:ff:7b:74: ec:28:5b:94:d4:88:38:ec:aa:3d:aa:60:5d:85:9c: 43:55:47:af:d3:fa:2a:04:a3:3f:cd:39:80:11:4b: 6f:e8:ba:5e:70:c8:2f:ff:0b:11:22:b8:fd:9b:9f: 4a:3e:e1:ae:82:47:2b:f1:07:a8:c6:cd:6d:0d:53: 13:4f:46:cb:e4:a6:04:fa:d2:c1:01:b6:32:bf:44: 50:2d:9f:f8:39:ab:05:1d:68:70:5f:3b:5d:8b:03: 0f:61:41:34:20:af:d1:80:ae:38:f1:12:cf:cb:d8: 21:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FB:D6:2A:5F:7E:AE:14:DE:65:77:12:35:6D:0D:66:48:42:18:C8 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vfvWKl9-rhTeZXcSNW0NZkhCGMg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.181.84.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:0e:49:da:ee:b5:78:cb:1d:c4:83:2e:d6:92:7a:e7:64:40: 35:50:fa:0e:10:c0:2a:10:af:33:be:d9:72:7b:91:e3:e5:58: 14:c2:83:bd:a2:b3:1d:77:1c:bf:31:cb:e0:90:ad:83:82:60: 46:ba:be:10:05:e0:08:0d:37:0c:08:2b:f4:88:2a:e8:29:b3: f6:c3:0d:6e:fa:a1:f8:75:7d:f0:fd:08:96:cd:f2:b8:ff:7f: f4:cd:c9:23:4a:e4:b3:9e:56:7a:04:df:de:f9:4e:3f:e5:72: fe:8d:29:b7:92:a8:6f:03:94:91:a3:94:08:5f:da:88:0d:f6: 1f:ba:3a:29:56:67:3a:ac:b0:04:c0:b8:83:a3:b2:0b:34:cb: ad:0a:fb:3a:04:8e:af:e0:37:cd:da:f7:06:8d:97:65:38:9e: 5b:64:d7:d1:b7:74:8e:c5:eb:16:9b:d3:dd:e6:d1:75:8c:4e: f5:ab:0d:02:6c:cb:d5:6a:66:12:fb:8e:f6:35:52:e5:0f:0f: 89:ad:85:fb:d6:b8:ed:1e:15:c8:34:15:a1:5a:83:82:1a:e1: ef:a6:7a:8c:1c:7d:84:87:69:83:b3:66:6f:76:50:49:81:ee: ec:a4:da:2b:a3:d5:6f:db:90:fa:0b:9b:4e:ee:6c:63:b1:db: fa:45:18:02 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjQw MTA3MjVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEJERkJENjJBNUY3RUFF MTRERTY1NzcxMjM1NkQwRDY2NDg0MjE4QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDKDM9r8U3EhCnxynLgjb6eprU7V6xgxAL2ruhz1GU4nsN1xqg lPTMdMgEpMCR3ye7zuYmu4QUJHmzcZ61ah2S9p1/kOJULzniUvlRYO6NAJiOQ/qW DOayIiOX4ooVMjhgoIa/E2hTR1hQ8gptv6dDeUjopoMZu1QjYtGJHKaanCdip5vZ YhccH1dPgVQh3tV0W/97dOwoW5TUiDjsqj2qYF2FnENVR6/T+ioEoz/NOYARS2/o ul5wyC//CxEiuP2bn0o+4a6CRyvxB6jGzW0NUxNPRsvkpgT60sEBtjK/RFAtn/g5 qwUdaHBfO12LAw9hQTQgr9GArjjxEs/L2CHHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUvfvWKl9+rhTeZXcSNW0NZkhCGMgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3ZmdldLbDktcmhUZVpYY1NOVzBOWmtoQ0dNZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALLtVQwDQYJKoZIhvcNAQELBQADggEBACoOSdrutXjLHcSDLtaSeudkQDVQ +g4QwCoQrzO+2XJ7kePlWBTCg72isx13HL8xy+CQrYOCYEa6vhAF4AgNNwwIK/SI Kugps/bDDW76ofh1ffD9CJbN8rj/f/TNySNK5LOeVnoE3975Tj/lcv6NKbeSqG8D lJGjlAhf2ogN9h+6OilWZzqssATAuIOjsgs0y60K+zoEjq/gN83a9waNl2U4nltk 19G3dI7F6xab093m0XWMTvWrDQJsy9VqZhL7jvY1UuUPD4mthfvWuO0eFcg0FaFa g4Ia4e+meowcfYSHaYOzZm92UEmB7uyk2iuj1W/bkPoLm07ubGOx2/pFGAI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:44:26 2025 by rpki-client