$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yK9-j4AZoyy5OJhnx8u240PpgSU.roa File: yK9-j4AZoyy5OJhnx8u240PpgSU.roa (raw, json) Hash identifier: uRiOJ7qCYvfPF7w1Lm9MzLfNWgmJFHLNTJeGvZsH9XI= Subject key identifier: C8:AF:7E:8F:80:19:A3:2C:B9:38:98:67:C7:CB:B6:E3:43:E9:81:25 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0350 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yK9-j4AZoyy5OJhnx8u240PpgSU.roa Signing time: Fri 24 Jan 2025 01:07:24 +0000 ROA not before: Fri 24 Jan 2025 01:07:24 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10013 IP address blocks: 203.181.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 848 (0x350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jan 24 01:07:24 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=C8AF7E8F8019A32CB9389867C7CBB6E343E98125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:7f:27:34:1a:72:39:ab:db:20:de:ed:49: 27:78:11:41:be:33:c4:04:be:81:16:8d:fa:31:f6: 77:b1:09:f7:2f:53:67:6f:de:59:59:9b:0a:30:bb: a0:0a:1a:63:b5:3d:b7:09:9a:eb:e0:de:04:68:23: d5:29:5d:70:3e:9c:e3:32:f4:b3:6a:1b:07:6b:b5: ca:7b:56:88:ed:6b:31:6d:40:85:71:80:a7:e5:e1: 3c:05:e4:f3:17:ae:c8:0e:96:5c:3b:4a:71:7b:34: a4:33:e5:3e:d3:a6:57:a4:5f:25:6c:8a:d8:15:4d: 96:2b:8e:f8:11:4a:cb:1d:df:b8:f1:ff:e3:dc:bf: 87:6d:ca:cc:03:8f:61:6e:0b:00:73:5e:4e:79:c7: 52:b9:9b:16:ed:8e:25:3d:4f:ff:1e:10:e7:6c:9b: 4e:fa:f9:bb:2d:cf:3e:57:93:a1:c8:3e:d2:80:ba: 47:80:5c:55:f6:df:e1:eb:1c:db:2e:a8:d5:81:52: ca:85:4e:95:ce:77:ea:d6:ee:63:5c:7b:38:0b:d7: f3:3d:31:7b:27:f3:47:69:a1:1e:17:ab:9b:cf:b2: 7e:79:24:be:6f:f6:9e:2c:c9:ba:ed:36:7b:a3:9b: 8a:43:61:22:7c:99:4c:30:79:40:bd:71:b9:4a:19: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AF:7E:8F:80:19:A3:2C:B9:38:98:67:C7:CB:B6:E3:43:E9:81:25 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yK9-j4AZoyy5OJhnx8u240PpgSU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.181.82.0/23 Signature Algorithm: sha256WithRSAEncryption 30:e6:c4:bb:7e:95:8d:59:38:22:65:e3:5e:98:71:5d:1f:80: bf:e0:55:b6:45:19:12:9c:8d:1a:d9:68:e6:4c:c7:b3:56:42: 08:45:9d:7f:44:c8:67:e8:a5:7e:f0:aa:75:63:90:27:9e:8a: 26:24:95:7b:02:22:f9:cb:bf:03:8c:87:8c:f9:6d:ae:fd:35: 49:e8:f0:63:8e:25:91:8e:05:4e:c9:9b:a8:a6:33:e4:4f:08: 5d:89:81:4a:9d:98:72:b0:08:f0:2c:1e:bf:15:64:31:dc:33: f8:ed:7b:fc:66:fb:ee:2d:27:74:d9:2b:08:1d:41:f3:38:cf: 26:1b:d8:7b:56:34:71:0c:4c:98:4b:9c:d1:79:28:72:73:fe: c0:00:27:7a:9d:73:64:10:85:fd:8f:2b:91:c0:7b:e7:98:23: c2:a2:84:e8:7b:b2:87:98:a7:4c:fc:80:81:39:f2:a3:93:2a: ad:1d:45:0f:64:57:f2:1f:ab:cd:e7:1a:4a:da:c4:b3:d3:95: 7a:44:88:d1:bd:f3:d2:a3:d1:ee:2e:fe:3b:6e:cb:2d:a6:b6: 59:fd:70:fc:ce:0c:56:b1:3d:12:4e:83:ef:1d:26:c3:52:18: 61:53:cf:27:34:eb:f5:5d:37:1b:05:45:a8:ae:ea:e5:a3:1d: 41:89:bb:7e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMjQw MTA3MjRaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM4QUY3RThGODAxOUEz MkNCOTM4OTg2N0M3Q0JCNkUzNDNFOTgxMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP/X8nNBpyOavbIN7tSSd4EUG+M8QEvoEWjfox9nexCfcvU2dv 3llZmwowu6AKGmO1PbcJmuvg3gRoI9UpXXA+nOMy9LNqGwdrtcp7VojtazFtQIVx gKfl4TwF5PMXrsgOllw7SnF7NKQz5T7TplekXyVsitgVTZYrjvgRSssd37jx/+Pc v4dtyswDj2FuCwBzXk55x1K5mxbtjiU9T/8eEOdsm076+bstzz5Xk6HIPtKAukeA XFX23+HrHNsuqNWBUsqFTpXOd+rW7mNcezgL1/M9MXsn80dpoR4Xq5vPsn55JL5v 9p4sybrtNnujm4pDYSJ8mUwweUC9cblKGZcVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyK9+j4AZoyy5OJhnx8u240PpgSUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3lLOS1qNEFab3l5NU9KaG54OHUyNDBQcGdTVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHLtVIwDQYJKoZIhvcNAQELBQADggEBADDmxLt+lY1ZOCJl416YcV0fgL/g VbZFGRKcjRrZaOZMx7NWQghFnX9EyGfopX7wqnVjkCeeiiYklXsCIvnLvwOMh4z5 ba79NUno8GOOJZGOBU7Jm6imM+RPCF2JgUqdmHKwCPAsHr8VZDHcM/jte/xm++4t J3TZKwgdQfM4zyYb2HtWNHEMTJhLnNF5KHJz/sAAJ3qdc2QQhf2PK5HAe+eYI8Ki hOh7soeYp0z8gIE58qOTKq0dRQ9kV/Ifq83nGkraxLPTlXpEiNG989Kj0e4u/jtu yy2mtln9cPzODFaxPRJOg+8dJsNSGGFTzyc06/VdNxsFRaiu6uWjHUGJu34= -----END CERTIFICATE-----Generated at Wed Feb 19 22:33:00 2025 by rpki-client