$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/xGYh7QX-leK_wmo_FZS_rZ0XqUs.roa File: xGYh7QX-leK_wmo_FZS_rZ0XqUs.roa (raw, json) Hash identifier: rAIB7LxqwBS28zjafL4RYA/BsGj866nfgSkMKZTKm1U= Subject key identifier: C4:66:21:ED:05:FE:95:E2:BF:C2:6A:3F:15:94:BF:AD:9D:17:A9:4B Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 033C Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xGYh7QX-leK_wmo_FZS_rZ0XqUs.roa Signing time: Wed 15 Jan 2025 01:15:36 +0000 ROA not before: Wed 15 Jan 2025 01:15:36 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 10013 IP address blocks: 61.205.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 15 01:15:36 2025 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=C46621ED05FE95E2BFC26A3F1594BFAD9D17A94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:93:81:7d:95:da:de:4d:f3:0a:0f:5d:e0:f7: 8e:70:0f:aa:31:64:12:d8:76:5d:c1:0f:2c:c5:a0: a6:de:78:8c:31:8a:f5:f8:73:9e:50:2b:ca:d9:01: b6:06:25:73:70:0a:57:89:7f:62:7c:c4:72:32:22: 72:2f:8e:af:59:bd:c6:96:09:fc:a8:82:d2:21:29: 49:3f:ce:18:12:3f:a3:1a:03:b2:45:a5:34:b5:47: 86:ec:27:ec:51:1e:58:47:fb:b9:44:ed:ad:90:af: 5b:e8:e9:46:11:6f:04:da:21:0c:31:01:86:f2:07: ba:b5:6e:89:6c:95:29:ea:1d:79:35:d4:2e:0e:09: 27:3e:ba:30:6d:89:b0:4e:e9:8d:32:10:94:6a:cf: 9c:40:e0:d9:35:a1:40:b2:f0:86:cb:a3:c9:de:67: 72:b9:4f:32:5d:80:c6:6f:77:75:98:cf:c8:83:a6: ae:be:0b:e2:5b:1b:b3:1f:21:eb:5b:c4:a9:3c:96: 9c:67:7d:03:46:07:02:5f:25:4a:66:63:4e:c7:15: 97:4b:7f:8c:82:9b:1e:1d:5d:33:a0:d7:60:83:af: 54:1a:82:10:1c:4a:c2:6f:c3:9d:b6:84:87:b5:b1: a0:f2:2e:0c:ee:78:3c:81:9c:1c:b3:2c:8b:3b:90: 19:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:66:21:ED:05:FE:95:E2:BF:C2:6A:3F:15:94:BF:AD:9D:17:A9:4B X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xGYh7QX-leK_wmo_FZS_rZ0XqUs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.205.58.0/24 Signature Algorithm: sha256WithRSAEncryption 52:b0:a4:3a:17:da:60:56:fe:a4:c1:dd:ec:76:8f:f2:97:c5: e8:e0:a3:e4:35:a8:f0:86:50:99:13:2c:fc:4a:d5:8c:d1:bf: 03:02:62:28:dd:97:e6:6c:8c:61:08:12:fe:ce:db:b4:58:0a: c1:87:e4:e1:46:99:b5:45:36:a8:f4:cb:0a:3d:98:48:18:e1: 2c:6b:1e:98:bb:9c:e5:5f:66:12:88:50:3d:5d:d9:0f:4c:f3: 4b:6d:7a:d2:43:2c:ad:64:a9:a1:92:11:92:a5:69:98:b8:5b: 8f:1a:86:d3:2b:e4:8e:7b:5b:0b:27:a7:a5:42:35:6a:0d:04: b9:66:3e:1d:8c:5a:60:3b:47:ed:94:28:0b:9f:2c:c2:9c:21: 17:e6:0d:49:3a:a0:5a:a6:12:5d:aa:b4:e1:3f:da:58:7a:3a: 21:9f:84:67:69:84:1a:de:0b:3b:ed:f9:c6:70:53:c6:b5:7c: be:6e:fd:a6:2d:84:1e:af:a2:4e:c0:8e:12:27:cd:10:4b:fe: 95:f0:61:8e:39:f9:3c:55:f8:03:b4:8d:cf:cb:4f:9d:7f:58: 67:00:5a:24:cc:58:cd:65:fd:93:1c:4b:3e:6f:4c:0b:bf:62: de:24:ec:84:ba:af:77:32:a9:2d:c5:5a:de:f5:2c:04:bc:66: af:bc:9f:99 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMTUw MTE1MzZaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM0NjYyMUVEMDVGRTk1 RTJCRkMyNkEzRjE1OTRCRkFEOUQxN0E5NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDck4F9ldreTfMKD13g945wD6oxZBLYdl3BDyzFoKbeeIwxivX4 c55QK8rZAbYGJXNwCleJf2J8xHIyInIvjq9ZvcaWCfyogtIhKUk/zhgSP6MaA7JF pTS1R4bsJ+xRHlhH+7lE7a2Qr1vo6UYRbwTaIQwxAYbyB7q1bolslSnqHXk11C4O CSc+ujBtibBO6Y0yEJRqz5xA4Nk1oUCy8IbLo8neZ3K5TzJdgMZvd3WYz8iDpq6+ C+JbG7MfIetbxKk8lpxnfQNGBwJfJUpmY07HFZdLf4yCmx4dXTOg12CDr1QaghAc SsJvw522hIe1saDyLgzueDyBnByzLIs7kBlVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxGYh7QX+leK/wmo/FZS/rZ0XqUswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3hHWWg3UVgtbGVLX3dtb19GWlNfclowWHFVcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA9zTowDQYJKoZIhvcNAQELBQADggEBAFKwpDoX2mBW/qTB3ex2j/KXxejg o+Q1qPCGUJkTLPxK1YzRvwMCYijdl+ZsjGEIEv7O27RYCsGH5OFGmbVFNqj0ywo9 mEgY4SxrHpi7nOVfZhKIUD1d2Q9M80ttetJDLK1kqaGSEZKlaZi4W48ahtMr5I57 Wwsnp6VCNWoNBLlmPh2MWmA7R+2UKAufLMKcIRfmDUk6oFqmEl2qtOE/2lh6OiGf hGdphBreCzvt+cZwU8a1fL5u/aYthB6vok7AjhInzRBL/pXwYY45+TxV+AO0jc/L T51/WGcAWiTMWM1l/ZMcSz5vTAu/Yt4k7IS6r3cyqS3FWt71LAS8Zq+8n5k= -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:34 2025 by rpki-client