$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5444/zEdFHnMZM1JZk4OUZ5kz70o6uSs.roa File: zEdFHnMZM1JZk4OUZ5kz70o6uSs.roa (raw, json) Hash identifier: gm/wHJmIP38TmwJ+tsgGZ3xWzb4ONXALpLotNj/rhYM= Subject key identifier: CC:47:45:1E:73:19:33:52:59:93:83:94:67:99:33:EF:4A:3A:B9:2B Certificate issuer: /CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1 Certificate serial: 3A Authority key identifier: 3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/zEdFHnMZM1JZk4OUZ5kz70o6uSs.roa Signing time: Fri 31 Jan 2025 01:28:15 +0000 ROA not before: Fri 31 Jan 2025 01:28:15 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 131984 IP address blocks: 103.162.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1 Validity Not Before: Jan 31 01:28:15 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=CC47451E7319335259938394679933EF4A3AB92B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:56:a1:04:d8:31:81:fd:5e:a6:c2:f0:db:df: f5:b7:bb:c7:50:53:b6:b2:5c:38:0f:a5:aa:a4:94: 76:f5:d5:ea:27:0d:4f:f8:d3:95:67:94:bc:cc:a5: 82:2b:b7:3d:e0:01:4b:e7:e4:40:f8:8a:cb:b2:d6: 65:0b:e1:de:81:f6:b6:fc:48:ad:8f:24:03:f5:c7: 05:d2:0d:6b:2a:ed:e8:6d:7c:c4:b3:e2:d9:a6:f3: 56:df:9a:62:53:61:26:1b:9d:8f:dd:9c:38:e4:92: df:bb:be:3e:70:4a:30:42:06:1a:b3:3c:15:42:92: b4:18:3e:3b:90:da:2a:9f:d1:d3:3d:38:70:dc:21: d0:30:ae:dd:e3:1b:86:3a:06:67:2b:87:25:49:75: 93:6e:0e:7e:da:fd:c0:24:ca:e9:62:bc:21:a1:3f: 03:db:6f:ca:3b:0c:7d:10:04:0c:2e:47:bb:d3:6f: 83:71:21:a2:62:a7:36:fc:51:46:26:0a:c1:44:37: 1b:0d:ea:b9:8c:8b:3f:d0:9b:e4:22:7b:3c:d9:f0: 55:e3:c7:69:9e:46:22:f8:9f:72:74:96:31:11:ab: 37:55:1b:48:01:7a:57:a8:55:22:b8:5c:0c:65:db: 56:66:f4:0e:d0:2a:66:48:ba:83:96:42:a1:e9:6a: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:47:45:1E:73:19:33:52:59:93:83:94:67:99:33:EF:4A:3A:B9:2B X509v3 Authority Key Identifier: keyid:3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/zEdFHnMZM1JZk4OUZ5kz70o6uSs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.255.0/24 Signature Algorithm: sha256WithRSAEncryption 64:a2:a2:26:d1:05:3b:34:e6:27:5b:68:fa:9a:26:00:0f:25: 9b:5d:c0:80:a4:25:bb:a2:ce:c4:bc:e3:64:ee:f7:26:bd:17: d8:9c:73:6e:9d:57:06:5a:4c:e8:9f:a6:97:da:79:26:c5:0b: ea:9b:0d:4d:3e:5a:77:f0:88:47:84:dd:35:3f:2d:2a:d8:63: 7e:17:ce:77:44:1d:2b:c1:08:a7:bb:8b:c0:8f:bd:c5:81:32: eb:16:2c:fa:fa:b7:d7:a4:2a:dc:be:22:f1:98:a3:4d:b2:24: 3c:74:57:68:e1:bf:c6:da:94:01:91:6d:95:ce:b8:48:3c:ea: 04:e1:f9:a9:ac:0f:95:d6:bb:ac:b5:30:ac:0c:f3:1f:6e:49: d3:cb:26:da:5c:bf:62:26:46:bd:04:ad:f1:ca:89:5c:84:bc: 44:69:f1:6d:9f:7e:06:11:28:06:1a:17:ed:53:04:c0:b7:72: 60:7f:7a:01:b9:3e:6c:84:d6:67:2f:1f:07:c8:51:87:05:9b: bc:57:55:f6:ac:4f:e7:8c:ab:ce:88:9e:cb:ba:23:83:98:91: 64:dd:47:57:f9:9e:79:f9:f3:fc:d1:52:84:b7:de:71:e6:ef: 64:5c:a5:26:8d:c7:db:34:d6:4f:57:e6:8d:85:1f:f1:b9:58: 3f:f3:f1:a1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQjcw OUUxMkM0NzJBRUQzREM1MjQyOEE5QzhCNTZDQTIxQzhGQ0ExMB4XDTI1MDEzMTAx MjgxNVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQ0M0NzQ1MUU3MzE5MzM1 MjU5OTM4Mzk0Njc5OTMzRUY0QTNBQjkyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMxWoQTYMYH9XqbC8Nvf9be7x1BTtrJcOA+lqqSUdvXV6icNT/jT lWeUvMylgiu3PeABS+fkQPiKy7LWZQvh3oH2tvxIrY8kA/XHBdINayrt6G18xLPi 2abzVt+aYlNhJhudj92cOOSS37u+PnBKMEIGGrM8FUKStBg+O5DaKp/R0z04cNwh 0DCu3eMbhjoGZyuHJUl1k24Oftr9wCTK6WK8IaE/A9tvyjsMfRAEDC5Hu9Nvg3Eh omKnNvxRRiYKwUQ3Gw3quYyLP9Cb5CJ7PNnwVePHaZ5GIvifcnSWMRGrN1UbSAF6 V6hVIrhcDGXbVmb0DtAqZki6g5ZCoelqTW0CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTMR0UecxkzUlmTg5RnmTPvSjq5KzAfBgNVHSMEGDAWgBQ7cJ4SxHKu09xSQoqc i1bKIcj8oTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTQ0NC9PM0NlRXNSeXJ0UGNVa0tLbkl0V3lpSElfS0UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9PM0NlRXNSeXJ0UGNVa0tLbkl0V3lp SElfS0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ0NC96RWRGSG5NWk0xSlprNE9VWjVrejcwbzZ1U3Mucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6L/MA0GCSqGSIb3DQEBCwUAA4IBAQBkoqIm0QU7NOYnW2j6miYADyWb XcCApCW7os7EvONk7vcmvRfYnHNunVcGWkzon6aX2nkmxQvqmw1NPlp38IhHhN01 Py0q2GN+F853RB0rwQinu4vAj73FgTLrFiz6+rfXpCrcviLxmKNNsiQ8dFdo4b/G 2pQBkW2VzrhIPOoE4fmprA+V1rustTCsDPMfbknTyybaXL9iJka9BK3xyolchLxE afFtn34GESgGGhftUwTAt3Jgf3oBuT5shNZnLx8HyFGHBZu8V1X2rE/njKvOiJ7L uiODmJFk3UdX+Z55+fP80VKEt95x5u9kXKUmjcfbNNZPV+aNhR/xuVg/8/Gh -----END CERTIFICATE-----Generated at Wed Feb 19 22:43:17 2025 by rpki-client