$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/uvPgXsfKJypwxjm6FrAFfRTaAIs.roa File: uvPgXsfKJypwxjm6FrAFfRTaAIs.roa (raw, json) Hash identifier: RXBHOWk4HFbWrBkq8fZSfsjfCHInfeP1Io96b/fRsnU= Subject key identifier: BA:F3:E0:5E:C7:CA:27:2A:70:C6:39:BA:16:B0:05:7D:14:DA:00:8B Certificate issuer: /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4 Certificate serial: 6D Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/uvPgXsfKJypwxjm6FrAFfRTaAIs.roa Signing time: Fri 31 Jan 2025 01:30:58 +0000 ROA not before: Fri 31 Jan 2025 01:30:58 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 59105 IP address blocks: 202.226.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 19:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4 Validity Not Before: Jan 31 01:30:58 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=BAF3E05EC7CA272A70C639BA16B0057D14DA008B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a9:4d:4f:94:31:72:18:e7:fe:15:1f:3a:50: 46:63:58:86:80:b2:61:5b:35:1d:41:ac:9c:2e:a3: 35:67:ef:a7:d0:a0:4f:a0:0d:93:b8:39:93:18:2a: a2:9c:c7:a8:dc:7b:0c:f2:a1:2d:d4:34:6b:de:46: 37:21:de:fc:3c:ec:fd:56:9b:83:ad:b2:2d:30:b6: d1:4b:4d:78:ab:5a:64:04:53:b0:1d:12:a4:82:4f: ec:c3:df:74:a9:f7:4b:e7:6e:72:bb:af:5e:36:2d: 79:1c:8d:84:35:6e:cc:28:af:d6:da:75:d3:27:72: 96:ce:29:77:48:ec:6a:d2:f2:53:cd:d7:2f:5b:cd: ab:6a:3a:6d:3c:61:1c:5b:a4:27:9d:53:9c:a7:cc: 0f:d3:f7:dc:de:42:30:c5:15:57:63:8a:0c:3e:22: 99:e4:e7:7f:b4:8e:b4:c9:e1:3e:a6:d5:fc:fb:f5: f8:9f:94:80:f5:e8:5f:1e:49:90:13:96:74:f2:9c: 0b:a1:e7:42:29:f4:19:8e:3c:ff:ed:c4:ca:bf:e7: a2:3c:ec:3a:94:bc:d1:01:c3:aa:b4:dd:77:ba:89: 32:c8:7f:a9:21:ca:29:82:24:3f:40:01:1f:94:6a: d9:a1:c3:08:06:ba:c3:16:41:88:d3:fb:1e:9d:94: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F3:E0:5E:C7:CA:27:2A:70:C6:39:BA:16:B0:05:7D:14:DA:00:8B X509v3 Authority Key Identifier: keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/uvPgXsfKJypwxjm6FrAFfRTaAIs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.226.4.0/22 Signature Algorithm: sha256WithRSAEncryption 71:fa:a5:86:61:59:31:fb:5a:32:2a:1d:f6:2b:0b:ad:8d:4a: 27:de:e6:91:84:b7:b6:e0:76:b2:e8:2c:f9:1e:a8:d4:e0:ca: 96:bb:1c:b8:51:65:d5:ba:4a:95:23:93:ac:27:ea:43:d6:83: 70:1e:c5:a8:22:62:d2:3f:61:b6:09:b9:a6:6d:de:d8:b1:22: 9d:b6:7b:0e:81:9c:ce:f1:8d:ee:b9:79:a7:79:85:ac:b2:d4: 4d:c0:f2:dd:62:d3:e9:c2:55:8c:89:a7:f2:02:03:45:96:d0: 82:48:80:68:45:64:48:34:1d:42:72:82:71:ae:47:0c:c1:89: bc:14:14:b0:42:72:7c:4a:cd:38:5c:27:1c:9b:18:d1:2a:20: b3:ac:77:b4:e5:5d:de:e4:90:56:cb:3e:8c:56:24:34:d4:5c: 67:b0:23:e9:cb:50:9a:a6:fb:e5:34:26:ba:eb:19:d6:13:a8: 46:1f:0e:13:bd:7e:cc:6b:7b:f5:38:6b:0c:b5:9f:cf:9b:5d: b7:88:e8:b8:e8:e4:7a:74:83:b0:35:7b:34:0e:1a:77:b3:b7: d1:44:7f:bd:d1:20:86:fb:80:26:71:f7:45:f1:e7:45:de:e7: dc:33:a1:f4:3f:f8:5b:2b:98:a7:a0:ca:4d:6d:51:94:81:71: 82:f6:2d:7b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMkZE RjkwQTk5NkYwQTMwRDMxRTkwOUM3MkJFMDU2REQ0NEEwNkU0MB4XDTI1MDEzMTAx MzA1OFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQkFGM0UwNUVDN0NBMjcy QTcwQzYzOUJBMTZCMDA1N0QxNERBMDA4QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALGpTU+UMXIY5/4VHzpQRmNYhoCyYVs1HUGsnC6jNWfvp9CgT6AN k7g5kxgqopzHqNx7DPKhLdQ0a95GNyHe/Dzs/Vabg62yLTC20UtNeKtaZARTsB0S pIJP7MPfdKn3S+ducruvXjYteRyNhDVuzCiv1tp10ydyls4pd0jsatLyU83XL1vN q2o6bTxhHFukJ51TnKfMD9P33N5CMMUVV2OKDD4imeTnf7SOtMnhPqbV/Pv1+J+U gPXoXx5JkBOWdPKcC6HnQin0GY48/+3Eyr/nojzsOpS80QHDqrTdd7qJMsh/qSHK KYIkP0ABH5Rq2aHDCAa6wxZBiNP7Hp2UXScCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS68+Bex8onKnDGOboWsAV9FNoAizAfBgNVHSMEGDAWgBTC/fkKmW8KMNMekJxy vgVt1EoG5DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTk4L3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRSS0J1US5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRS S0J1US5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81OTgvdXZQZ1hzZktKeXB3eGptNkZyQUZmUlRhQUlzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsriBDANBgkqhkiG9w0BAQsFAAOCAQEAcfqlhmFZMftaMiod9isLrY1KJ97m kYS3tuB2sugs+R6o1ODKlrscuFFl1bpKlSOTrCfqQ9aDcB7FqCJi0j9htgm5pm3e 2LEinbZ7DoGczvGN7rl5p3mFrLLUTcDy3WLT6cJVjImn8gIDRZbQgkiAaEVkSDQd QnKCca5HDMGJvBQUsEJyfErNOFwnHJsY0Sogs6x3tOVd3uSQVss+jFYkNNRcZ7Aj 6ctQmqb75TQmuusZ1hOoRh8OE71+zGt79ThrDLWfz5tdt4jouOjkenSDsDV7NA4a d7O30UR/vdEghvuAJnH3RfHnRd7n3DOh9D/4WyuYp6DKTW1RlIFxgvYtew== -----END CERTIFICATE-----Generated at Wed Feb 19 22:29:05 2025 by rpki-client