$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/rj5Lxyu2lkQgPL0mf_tVITHHkLU.roa File: rj5Lxyu2lkQgPL0mf_tVITHHkLU.roa (raw, json) Hash identifier: woLkTyKvOILJ2S4k3wzALbdgCS7+KaVjhMfxwXBVI5E= Subject key identifier: AE:3E:4B:C7:2B:B6:96:44:20:3C:BD:26:7F:FB:55:21:31:C7:90:B5 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 011E Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/rj5Lxyu2lkQgPL0mf_tVITHHkLU.roa Signing time: Mon 30 Sep 2024 01:30:24 +0000 ROA not before: Mon 30 Sep 2024 01:30:24 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 10021 IP address blocks: 114.31.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 20:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Sep 30 01:30:24 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=AE3E4BC72BB69644203CBD267FFB552131C790B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:69:82:0a:4b:02:fb:0c:88:de:19:e7:e1:61: 2c:71:b3:bd:5d:1c:f8:03:87:b5:ab:aa:ac:2f:ed: b4:fe:6c:f3:5d:f7:f9:48:4f:70:0f:3a:7c:43:30: 4d:d3:15:72:10:b9:61:69:bf:b2:c1:39:a0:ff:98: ae:9b:76:ae:9b:b3:81:8f:10:65:e4:5e:90:98:21: 58:8d:49:32:d2:bb:3e:47:54:7a:6b:c4:bf:9e:9c: dd:b4:28:d3:54:be:b5:8f:4d:1d:96:1a:f1:42:cd: 17:43:59:c5:da:51:e6:33:8c:0c:f2:81:af:b5:68: d8:76:94:10:19:38:d6:e9:87:64:5c:90:73:38:bb: be:d5:b1:b2:47:ae:6d:3b:d9:fc:29:4d:f5:95:54: 2e:dd:bf:8a:01:92:b3:b3:f6:48:6a:f0:bc:30:99: 55:ec:27:02:73:b8:6f:e2:a3:e0:c5:85:f8:b7:33: 41:31:57:51:a1:7a:5b:9b:17:24:0e:ff:24:63:4b: a3:35:20:df:fa:32:c4:64:d8:31:28:8d:d0:e7:74: 67:03:f9:0d:94:f8:dd:36:2a:7a:5d:d7:02:5d:f5: f7:51:c5:dd:4b:89:f6:fb:ac:a8:32:13:3a:e5:a0: f8:11:ce:4a:77:eb:e3:dd:75:c9:56:c9:1b:35:5f: 54:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3E:4B:C7:2B:B6:96:44:20:3C:BD:26:7F:FB:55:21:31:C7:90:B5 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/rj5Lxyu2lkQgPL0mf_tVITHHkLU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.31.80.0/20 Signature Algorithm: sha256WithRSAEncryption 50:c3:6a:60:4d:87:cf:f2:7a:23:ce:48:19:af:f2:65:7f:d5: 4a:94:b5:95:67:3b:f8:3d:07:71:93:b1:8e:b7:94:56:a1:cc: da:7c:24:75:cb:aa:ae:f6:2f:13:20:0e:ca:6e:6a:88:1d:dc: d4:d2:04:79:aa:34:b3:a1:00:1e:01:24:b6:27:e8:af:31:a4: 2c:e9:52:a1:36:ca:73:5d:3f:7b:0b:c5:4b:fc:c5:d3:07:bc: 4d:e8:4e:36:17:10:fc:e2:1c:b0:87:7b:94:96:64:c0:8d:52: d3:7e:e1:94:ac:0d:62:e5:3e:50:72:55:b9:e2:ae:48:97:36: ae:2e:ee:3a:b8:6a:ec:1e:50:7f:bc:0e:bd:7c:fc:de:af:1f: e7:5a:73:f2:35:ba:d1:35:e8:fe:35:cf:ee:5a:57:f6:cb:2f: eb:20:0a:3a:b8:99:42:cc:b9:87:f8:aa:18:c7:96:f2:6f:4c: 58:32:d9:fe:90:f7:10:c3:98:0f:da:76:a5:d3:99:fe:43:58: e3:16:45:6a:6f:3c:dc:84:cf:35:8d:af:a9:1a:94:5d:ac:26: c5:c4:4e:63:1f:cf:a8:d9:ff:f8:c2:d0:24:48:c7:71:b6:4f: d1:59:e9:8e:76:4e:8e:22:cd:cf:83:06:7f:fc:96:55:61:46: 85:4c:de:b1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNDA5MzAw MTMwMjRaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFFM0U0QkM3MkJCNjk2 NDQyMDNDQkQyNjdGRkI1NTIxMzFDNzkwQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7aYIKSwL7DIjeGefhYSxxs71dHPgDh7Wrqqwv7bT+bPNd9/lI T3APOnxDME3TFXIQuWFpv7LBOaD/mK6bdq6bs4GPEGXkXpCYIViNSTLSuz5HVHpr xL+enN20KNNUvrWPTR2WGvFCzRdDWcXaUeYzjAzyga+1aNh2lBAZONbph2RckHM4 u77VsbJHrm072fwpTfWVVC7dv4oBkrOz9khq8LwwmVXsJwJzuG/io+DFhfi3M0Ex V1GhelubFyQO/yRjS6M1IN/6MsRk2DEojdDndGcD+Q2U+N02Knpd1wJd9fdRxd1L ifb7rKgyEzrloPgRzkp36+PddclWyRs1X1SpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrj5Lxyu2lkQgPL0mf/tVITHHkLUwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L3JqNUx4eXUybGtRZ1BMMG1mX3RWSVRISGtMVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARyH1AwDQYJKoZIhvcNAQELBQADggEBAFDDamBNh8/yeiPOSBmv8mV/1UqU tZVnO/g9B3GTsY63lFahzNp8JHXLqq72LxMgDspuaogd3NTSBHmqNLOhAB4BJLYn 6K8xpCzpUqE2ynNdP3sLxUv8xdMHvE3oTjYXEPziHLCHe5SWZMCNUtN+4ZSsDWLl PlByVbnirkiXNq4u7jq4auweUH+8Dr18/N6vH+dac/I1utE16P41z+5aV/bLL+sg Cjq4mULMuYf4qhjHlvJvTFgy2f6Q9xDDmA/adqXTmf5DWOMWRWpvPNyEzzWNr6ka lF2sJsXETmMfz6jZ//jC0CRIx3G2T9FZ6Y52To4izc+DBn/8llVhRoVM3rE= -----END CERTIFICATE-----Generated at Thu Mar 13 01:43:17 2025 by rpki-client