$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/xRJwMEnhnWTwmBKCLQxdhvT76n4.roa File: xRJwMEnhnWTwmBKCLQxdhvT76n4.roa (raw, json) Hash identifier: CMrEstIKmOruChQEYpFeGKDgeGN0Osigb9/0gxscqsw= Subject key identifier: C5:12:70:30:49:E1:9D:64:F0:98:12:82:2D:0C:5D:86:F4:FB:EA:7E Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02FF Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xRJwMEnhnWTwmBKCLQxdhvT76n4.roa Signing time: Thu 17 Oct 2024 01:37:09 +0000 ROA not before: Thu 17 Oct 2024 01:37:09 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 111.234.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 767 (0x2ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 17 01:37:09 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=C512703049E19D64F09812822D0C5D86F4FBEA7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e5:4d:62:e7:6e:b5:68:7d:b9:69:e5:a9:38: 41:4a:2c:51:21:a0:ba:90:74:7f:df:cf:ae:5f:48: cd:f8:cb:fe:2c:e5:9d:d4:a4:77:8b:38:33:2e:79: 8d:08:8b:f0:83:ee:f7:d8:c9:53:1c:1d:60:07:d8: dc:95:f2:af:f9:63:87:9f:74:6a:fe:2a:8c:d3:0a: 22:57:7e:b8:28:3f:3d:f0:a5:29:7f:c9:be:bd:9b: 51:02:b7:56:e0:e3:31:8d:c1:df:fa:a9:4b:3f:2b: c4:f3:04:a1:99:5e:e5:c0:da:14:49:fb:f6:0e:a4: c8:dd:46:4a:01:41:65:ac:eb:3d:b1:dc:0b:93:22: e8:d0:2f:4d:75:de:d9:75:bb:91:5d:b6:79:c5:74: bc:d5:ef:47:f4:a8:db:b4:50:fe:2b:04:8f:5e:f6: 7f:08:81:f3:cb:17:47:fc:e7:3f:dd:f5:81:5e:f2: bc:2a:07:81:bb:85:52:40:67:df:72:7f:3a:27:16: 4d:06:e8:42:b4:49:d0:33:92:be:a9:40:6b:25:f3: fd:ce:93:4d:f7:8b:56:d3:82:2b:eb:a0:ea:8d:ad: 32:1d:41:0d:9e:ff:d0:0e:b4:ac:f0:13:d4:bd:57: 9c:48:d7:33:d6:b4:de:55:39:a3:f6:69:20:f9:0a: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:12:70:30:49:E1:9D:64:F0:98:12:82:2D:0C:5D:86:F4:FB:EA:7E X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xRJwMEnhnWTwmBKCLQxdhvT76n4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.234.218.0/23 Signature Algorithm: sha256WithRSAEncryption 97:0f:8a:65:8a:cf:06:04:a0:a5:e8:84:b7:22:42:45:f7:3b: 1b:4e:d3:8b:34:35:67:f5:f0:c4:45:c3:74:3a:fa:54:66:38: bd:a9:de:15:af:e3:8c:cf:d2:09:b9:bb:9f:c8:31:e3:9a:fd: 48:1f:74:1a:62:92:24:6c:6b:f8:e6:05:1d:c9:5d:69:a7:4f: 3b:1a:f2:a2:0d:b0:58:ab:7d:3c:c4:88:c5:d2:b3:b5:3c:af: 2c:1f:f4:2d:b5:70:8f:04:25:5e:2b:43:00:30:a0:57:6c:30: 2f:25:6c:73:4c:99:d7:e0:b3:8f:f6:2f:42:37:ec:3b:d8:9e: 13:97:2e:fa:5d:b0:a3:00:6d:9d:7c:3d:4c:c7:d5:bc:1e:21: ed:fe:9f:18:f4:8c:2d:57:c2:f6:cd:ac:20:da:6e:b3:1c:db: fb:78:c7:cc:5b:fe:38:74:41:75:56:7e:ea:50:08:86:19:74: e7:a6:38:62:61:0a:b1:f6:24:63:eb:dc:a7:c6:15:55:a8:64: 1b:76:1b:7b:fe:05:f9:d1:71:e0:f3:9a:19:e3:77:0c:3e:dc: 68:8b:4c:40:35:57:da:7f:8e:aa:85:2c:6f:7a:af:5c:f9:f8: ff:0e:4a:2e:13:56:6e:80:0f:b4:55:a9:2f:88:e4:e9:d5:9f: 85:33:eb:34 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMTcw MTM3MDlaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM1MTI3MDMwNDlFMTlE NjRGMDk4MTI4MjJEMEM1RDg2RjRGQkVBN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI5U1i5261aH25aeWpOEFKLFEhoLqQdH/fz65fSM34y/4s5Z3U pHeLODMueY0Ii/CD7vfYyVMcHWAH2NyV8q/5Y4efdGr+KozTCiJXfrgoPz3wpSl/ yb69m1ECt1bg4zGNwd/6qUs/K8TzBKGZXuXA2hRJ+/YOpMjdRkoBQWWs6z2x3AuT IujQL0113tl1u5FdtnnFdLzV70f0qNu0UP4rBI9e9n8IgfPLF0f85z/d9YFe8rwq B4G7hVJAZ99yfzonFk0G6EK0SdAzkr6pQGsl8/3Ok033i1bTgivroOqNrTIdQQ2e /9AOtKzwE9S9V5xI1zPWtN5VOaP2aSD5Ct1tAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxRJwMEnhnWTwmBKCLQxdhvT76n4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3hSSndNRW5obldUd21CS0NMUXhkaHZUNzZuNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFv6towDQYJKoZIhvcNAQELBQADggEBAJcPimWKzwYEoKXohLciQkX3OxtO 04s0NWf18MRFw3Q6+lRmOL2p3hWv44zP0gm5u5/IMeOa/UgfdBpikiRsa/jmBR3J XWmnTzsa8qINsFirfTzEiMXSs7U8rywf9C21cI8EJV4rQwAwoFdsMC8lbHNMmdfg s4/2L0I37DvYnhOXLvpdsKMAbZ18PUzH1bweIe3+nxj0jC1XwvbNrCDabrMc2/t4 x8xb/jh0QXVWfupQCIYZdOemOGJhCrH2JGPr3KfGFVWoZBt2G3v+BfnRceDzmhnj dww+3GiLTEA1V9p/jqqFLG96r1z5+P8OSi4TVm6AD7RVqS+I5OnVn4Uz6zQ= -----END CERTIFICATE-----Generated at Sun Feb 16 22:33:09 2025 by rpki-client