$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/PSZ66TCcxAFRahhHYUW9dqlE1nQ.roa File: PSZ66TCcxAFRahhHYUW9dqlE1nQ.roa (raw, json) Hash identifier: ppRhsKTV3p+JubfhAQTNOQqtGlm42g8kdhewaJY/E7Y= Subject key identifier: 3D:26:7A:E9:30:9C:C4:01:51:6A:18:47:61:45:BD:76:A9:44:D6:74 Certificate issuer: /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4 Certificate serial: 6E Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/PSZ66TCcxAFRahhHYUW9dqlE1nQ.roa Signing time: Fri 31 Jan 2025 01:30:58 +0000 ROA not before: Fri 31 Jan 2025 01:30:58 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 59105 IP address blocks: 103.202.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4 Validity Not Before: Jan 31 01:30:58 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=3D267AE9309CC401516A18476145BD76A944D674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:e9:97:93:bf:74:61:f6:ed:8a:04:eb:18: 9e:fb:39:52:ba:9d:93:c6:85:a2:56:f8:59:1a:27: f3:bf:d6:67:87:c9:87:65:97:0d:30:17:b1:26:ee: 97:dc:0d:78:d9:0a:8b:5f:6b:0e:1e:9a:1f:54:d1: d1:64:57:37:ca:89:eb:83:30:fd:82:99:52:e5:8f: 29:6d:35:c9:94:49:4f:65:ad:ae:53:e4:d3:9d:5c: 6e:e5:da:3c:db:9a:05:a1:86:4d:13:5f:dd:49:8c: 02:bd:2b:85:1d:7a:08:ba:93:66:a9:29:bb:e8:d7: a9:23:e1:5c:6e:a0:29:87:f1:fd:dc:c8:45:1f:7f: cc:fd:bc:f6:69:e7:2d:6a:6f:8b:c0:2e:54:15:e0: a3:06:d4:36:01:54:e9:94:83:a0:a5:3a:e1:8d:dc: b5:ca:fb:b9:3d:ff:e4:87:43:6a:86:cc:70:55:84: ab:61:3c:d8:35:81:a2:bf:ba:0c:79:36:33:b3:4f: 01:ce:3c:1c:90:f0:f5:69:75:19:b0:5c:a1:c5:2b: 41:c7:34:a6:7f:eb:a3:86:c1:fd:cc:47:1d:6b:7f: c6:2e:fc:a0:8e:de:05:f3:f7:f5:1b:03:46:4b:c7: 4d:e4:d8:a1:55:23:20:ab:51:c5:48:49:f8:53:26: 19:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:26:7A:E9:30:9C:C4:01:51:6A:18:47:61:45:BD:76:A9:44:D6:74 X509v3 Authority Key Identifier: keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/PSZ66TCcxAFRahhHYUW9dqlE1nQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.202.216.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:1f:4c:ce:78:01:68:09:10:e7:2f:78:2f:bb:f4:40:50:d0: b6:ca:c5:6d:64:2a:bd:e9:15:c3:ef:2a:31:f7:af:38:39:e5: c6:e4:67:70:91:98:25:61:fa:85:a7:3f:51:9a:50:83:fa:b5: 6c:7a:1c:da:70:f7:b9:61:2d:86:2d:d8:f0:e0:02:22:d4:2c: 42:4b:f5:35:9d:50:a7:5f:ef:b4:3c:a0:54:40:34:cb:34:04: d3:5c:2f:7b:f1:0f:fc:27:e2:f0:26:83:ec:ca:0c:97:d0:54: 49:05:b6:92:b0:1b:44:67:2e:11:84:5e:9c:fe:77:2d:bf:5b: 83:b0:93:cc:b0:17:00:66:c4:80:3e:56:59:8c:97:ed:a2:99: d3:5d:f8:11:e0:70:1b:8a:1a:d9:37:50:2b:47:99:44:f3:84: 61:7a:fc:6f:55:9f:05:a6:2c:96:fe:05:df:35:b6:9f:bb:56: 97:e8:ff:c7:3a:34:34:80:fa:23:a2:9b:6a:57:0e:f2:25:65: 7d:f3:d0:a1:b9:b1:b2:c6:47:e6:5e:62:69:d8:5b:f8:d0:4c: db:3a:60:b2:70:ab:8b:c7:c2:75:3e:22:7b:e7:30:a3:1a:89: 7a:b3:47:8a:20:ed:5e:5a:99:b6:82:92:09:98:87:7d:8a:79: bb:d6:00:6c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMkZE RjkwQTk5NkYwQTMwRDMxRTkwOUM3MkJFMDU2REQ0NEEwNkU0MB4XDTI1MDEzMTAx MzA1OFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoM0QyNjdBRTkzMDlDQzQw MTUxNkExODQ3NjE0NUJENzZBOTQ0RDY3NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKYm6ZeTv3Rh9u2KBOsYnvs5Urqdk8aFolb4WRon87/WZ4fJh2WX DTAXsSbul9wNeNkKi19rDh6aH1TR0WRXN8qJ64Mw/YKZUuWPKW01yZRJT2WtrlPk 051cbuXaPNuaBaGGTRNf3UmMAr0rhR16CLqTZqkpu+jXqSPhXG6gKYfx/dzIRR9/ zP289mnnLWpvi8AuVBXgowbUNgFU6ZSDoKU64Y3ctcr7uT3/5IdDaobMcFWEq2E8 2DWBor+6DHk2M7NPAc48HJDw9Wl1GbBcocUrQcc0pn/ro4bB/cxHHWt/xi78oI7e BfP39RsDRkvHTeTYoVUjIKtRxUhJ+FMmGQMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ9JnrpMJzEAVFqGEdhRb12qUTWdDAfBgNVHSMEGDAWgBTC/fkKmW8KMNMekJxy vgVt1EoG5DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTk4L3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRSS0J1US5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRS S0J1US5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81OTgvUFNaNjZUQ2N4QUZSYWhoSFlVVzlkcWxFMW5RLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWfK2DANBgkqhkiG9w0BAQsFAAOCAQEAGh9MzngBaAkQ5y94L7v0QFDQtsrF bWQqvekVw+8qMfevODnlxuRncJGYJWH6hac/UZpQg/q1bHoc2nD3uWEthi3Y8OAC ItQsQkv1NZ1Qp1/vtDygVEA0yzQE01wve/EP/Cfi8CaD7MoMl9BUSQW2krAbRGcu EYRenP53Lb9bg7CTzLAXAGbEgD5WWYyX7aKZ0134EeBwG4oa2TdQK0eZRPOEYXr8 b1WfBaYslv4F3zW2n7tWl+j/xzo0NID6I6KbalcO8iVlffPQobmxssZH5l5iadhb +NBM2zpgsnCri8fCdT4ie+cwoxqJerNHiiDtXlqZtoKSCZiHfYp5u9YAbA== -----END CERTIFICATE-----Generated at Wed Feb 19 22:37:26 2025 by rpki-client