$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/wcXUBGbRJGQLS0aqXFND5orNoJU.roa File: wcXUBGbRJGQLS0aqXFND5orNoJU.roa (raw, json) Hash identifier: ApC5aXzzVZGnOceBJ1e4Viy5CAMWh1QURWVh4EpxZPI= Subject key identifier: C1:C5:D4:04:66:D1:24:64:0B:4B:46:AA:5C:53:43:E6:8A:CD:A0:95 Certificate issuer: /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2 Certificate serial: 36 Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/wcXUBGbRJGQLS0aqXFND5orNoJU.roa Signing time: Fri 31 Jan 2025 01:29:01 +0000 ROA not before: Fri 31 Jan 2025 01:29:01 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 17530 IP address blocks: 122.201.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2 Validity Not Before: Jan 31 01:29:01 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=C1C5D40466D124640B4B46AA5C5343E68ACDA095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:75:69:2d:c5:a6:c1:55:d6:d6:01:df:03: 7d:34:48:2e:fd:e7:7e:c6:a9:f0:d3:7a:af:93:65: ff:af:fa:14:a4:15:5f:f3:ee:de:eb:33:e8:67:3f: 12:db:59:4a:e0:73:23:18:f9:8a:fb:b4:e6:5d:cd: ba:e5:6d:f9:6e:a0:6d:d4:13:b2:f8:5f:49:55:77: 24:d1:70:aa:27:8f:2b:78:77:ef:56:d6:2b:7e:16: 21:f1:26:59:a2:ac:b4:85:c2:33:65:c3:a6:7b:c0: ab:8c:ca:9e:c4:26:59:27:11:c2:e8:8f:ca:01:e1: ad:6e:9d:29:d2:be:a8:f1:e7:30:4c:58:b9:b8:dd: a2:73:63:34:06:fb:df:f0:cf:47:2c:99:9c:60:e6: 2f:7f:ed:06:6b:87:6d:d1:e5:01:9c:73:99:b8:ec: 7b:bf:e4:44:6d:fc:13:54:fe:a4:70:11:a1:41:ab: a1:cc:a3:82:ff:c1:c8:f8:22:5d:18:94:81:d2:c6: 25:2f:42:d9:f8:7c:d1:e9:3a:4c:81:3a:62:e7:91: 48:47:07:26:ea:80:de:b5:39:a5:2b:bd:26:6b:c7: b9:55:fa:c6:49:54:5a:75:9e:6d:da:d8:11:ec:b5: 5c:df:dd:c2:a6:cc:be:18:84:c7:e3:00:5a:82:fd: 0c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C5:D4:04:66:D1:24:64:0B:4B:46:AA:5C:53:43:E6:8A:CD:A0:95 X509v3 Authority Key Identifier: keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/wcXUBGbRJGQLS0aqXFND5orNoJU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.201.0.0/21 Signature Algorithm: sha256WithRSAEncryption a4:a0:a0:b0:cc:3b:42:04:ce:ec:6c:32:3d:4c:03:15:ae:5a: 5d:cd:49:df:6e:50:d0:24:25:28:40:16:b8:82:a4:a4:8e:0e: 3d:99:5e:be:01:b6:d8:7e:b6:81:be:5f:03:48:06:7c:e8:9c: 28:3a:5f:8f:3e:aa:f5:44:06:e1:01:68:de:6a:2e:5b:ff:7e: 6a:e6:5c:91:6c:ba:fc:e6:81:6e:b2:9a:b9:f8:f2:a8:0a:4e: 67:56:eb:08:3e:2a:10:27:7b:8f:57:3e:dd:f9:44:28:48:df: d9:55:f2:45:f6:47:c9:c9:e3:19:25:a5:8f:6e:0c:7d:a4:3d: 44:9b:b2:16:28:07:f5:05:dd:83:b7:13:2d:bc:fd:06:4b:dd: 85:95:85:b0:a0:9b:03:11:a9:9b:c9:aa:bc:9e:27:80:91:08: 6e:ba:fc:d7:58:d6:63:ba:05:5f:34:72:94:41:66:05:0f:88: c4:61:a4:bd:51:ec:14:c5:57:fa:f0:87:c6:d2:b3:ef:cd:58: 22:14:cd:ca:f2:4f:76:b8:a9:3a:d4:d1:a3:41:27:b4:24:54: 66:38:7c:eb:9c:ac:46:ea:cb:ee:89:3b:7e:a1:de:fb:c6:6e: da:cc:07:d5:fd:e0:07:47:01:36:40:42:a8:c9:64:d0:ac:a2: 53:94:9c:88 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OEQx MjRCRjU2QjM3OEQ2M0VDOEJEODU2RjI4M0U1M0U5NjVFQ0EyMB4XDTI1MDEzMTAx MjkwMVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQzFDNUQ0MDQ2NkQxMjQ2 NDBCNEI0NkFBNUM1MzQzRTY4QUNEQTA5NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMgvdWktxabBVdbWAd8DfTRILv3nfsap8NN6r5Nl/6/6FKQVX/Pu 3usz6Gc/EttZSuBzIxj5ivu05l3NuuVt+W6gbdQTsvhfSVV3JNFwqiePK3h371bW K34WIfEmWaKstIXCM2XDpnvAq4zKnsQmWScRwuiPygHhrW6dKdK+qPHnMExYubjd onNjNAb73/DPRyyZnGDmL3/tBmuHbdHlAZxzmbjse7/kRG38E1T+pHARoUGrocyj gv/ByPgiXRiUgdLGJS9C2fh80ek6TIE6YueRSEcHJuqA3rU5pSu9JmvHuVX6xklU WnWebdrYEey1XN/dwqbMvhiEx+MAWoL9DGECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTBxdQEZtEkZAtLRqpcU0Pmis2glTAfBgNVHSMEGDAWgBSY0SS/VrN41j7IvYVv KD5T6WXsojAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjAzL21ORWt2MWF6ZU5ZLXlMMkZieWctVS1sbDdLSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21ORWt2MWF6ZU5ZLXlMMkZieWctVS1s bDdLSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82MDMvd2NYVUJHYlJKR1FMUzBhcVhGTkQ1b3JOb0pVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3rJADANBgkqhkiG9w0BAQsFAAOCAQEApKCgsMw7QgTO7GwyPUwDFa5aXc1J 325Q0CQlKEAWuIKkpI4OPZlevgG22H62gb5fA0gGfOicKDpfjz6q9UQG4QFo3mou W/9+auZckWy6/OaBbrKaufjyqApOZ1brCD4qECd7j1c+3flEKEjf2VXyRfZHycnj GSWlj24MfaQ9RJuyFigH9QXdg7cTLbz9BkvdhZWFsKCbAxGpm8mqvJ4ngJEIbrr8 11jWY7oFXzRylEFmBQ+IxGGkvVHsFMVX+vCHxtKz781YIhTNyvJPdripOtTRo0En tCRUZjh865ysRurL7ok7fqHe+8Zu2swH1f3gB0cBNkBCqMlk0KyiU5SciA== -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:37 2025 by rpki-client