$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/2cJTFcIdwr4bwFA40tC7B7c5B98.roa File: 2cJTFcIdwr4bwFA40tC7B7c5B98.roa (raw, json) Hash identifier: 5ADJTWzKyTL+ZPEg4pKnc2eOhS9Sqcomb/DOvVRc+VY= Subject key identifier: D9:C2:53:15:C2:1D:C2:BE:1B:C0:50:38:D2:D0:BB:07:B7:39:07:DF Certificate issuer: /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15 Certificate serial: 2C Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/2cJTFcIdwr4bwFA40tC7B7c5B98.roa Signing time: Tue 31 Dec 2024 01:31:27 +0000 ROA not before: Tue 31 Dec 2024 01:31:27 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 23614 IP address blocks: 210.158.176.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15 Validity Not Before: Dec 31 01:31:27 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=D9C25315C21DC2BE1BC05038D2D0BB07B73907DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:13:9b:5b:c4:05:76:94:31:8e:0d:3f:79: fc:de:92:39:70:41:39:ef:91:8a:70:36:ab:3b:ff: d5:7d:77:31:f1:85:5c:8a:ca:cf:8d:64:a4:30:41: b8:1c:c2:e9:65:ba:03:1c:14:4b:61:80:84:d6:15: 8b:7b:21:5d:e9:84:81:65:8a:6d:ba:31:51:f6:10: 8d:6b:1f:98:6e:a6:fa:39:55:c8:2a:a3:99:63:ba: 8b:28:9d:fb:cf:20:d8:c9:e2:20:67:5e:87:14:25: 3b:61:1e:ae:41:80:40:d3:6c:80:56:39:66:d7:3c: a2:cf:19:05:d1:5e:cc:f7:b8:6f:66:0c:88:a6:5e: 10:ff:f3:40:8e:6c:79:5d:eb:c4:75:93:a3:85:ea: f7:60:92:61:d2:31:b6:32:bd:93:d2:36:e4:8a:1e: ee:81:20:87:33:7d:e6:5f:ba:8d:30:ff:b9:b0:ea: 85:8b:5e:2c:ad:e4:ee:92:66:a1:94:f6:d1:1c:ff: 22:ee:f0:a8:8c:c0:39:bf:42:7f:7d:dc:ac:a8:4f: bd:2e:1c:dd:1f:db:a8:ae:48:ec:83:15:74:c5:8d: eb:21:03:39:ed:fd:fe:e4:a7:1e:28:4e:4a:c3:f9: 75:d0:6b:d9:a0:7f:49:72:5c:b9:c4:8a:bc:69:bf: 1d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C2:53:15:C2:1D:C2:BE:1B:C0:50:38:D2:D0:BB:07:B7:39:07:DF X509v3 Authority Key Identifier: keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/2cJTFcIdwr4bwFA40tC7B7c5B98.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.158.176.0/22 Signature Algorithm: sha256WithRSAEncryption 95:0f:77:9d:08:a2:b6:89:3c:42:12:f4:17:ec:be:a5:b0:8e: 7e:18:b0:b9:24:e2:56:44:a7:d4:23:3a:57:3c:7b:ab:d7:80: 25:c8:76:4b:08:e8:b0:81:6c:6b:b9:00:67:c5:92:8a:69:7b: 3e:02:91:f6:e4:a4:8c:1d:cd:90:f0:2e:e9:b0:10:2c:6d:85: 6f:4d:4a:88:8a:ae:a1:c4:ae:35:e6:92:d4:65:e1:81:f9:75: da:73:35:f4:c5:4e:16:9c:e2:0b:c4:fb:a8:12:a7:df:23:2c: d5:98:33:07:ae:b6:19:5d:44:8d:de:86:33:3a:d9:89:fe:72: 0e:8e:83:7b:52:0e:5e:3d:07:d6:a3:2e:a0:89:2b:5f:44:a7: 50:23:b1:6a:b1:07:4a:44:f9:1b:ff:be:71:8d:19:5e:8c:21: 03:89:f4:18:53:c7:0c:80:0f:3a:a7:cf:73:72:8d:8a:62:fa: 1f:4d:23:a1:7d:d0:e5:cc:2e:dd:08:56:f9:ef:c1:3c:58:9e: 56:b1:d2:a0:5d:85:6c:12:b0:c7:bc:19:2e:c1:ef:b3:12:42: 10:41:2b:3e:69:ad:62:60:ea:0a:e6:e9:ef:4a:2f:0b:f5:3f: 56:60:3f:1e:22:3d:b7:36:ca:5e:bb:29:ed:9e:9c:bd:12:a5: c3:69:ce:4e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RkVC MTA1QzY3RTVGRDVDOUUxQUZEMDZBMzQzQzg0MUYwNUE3RjE1MB4XDTI0MTIzMTAx MzEyN1oXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoRDlDMjUzMTVDMjFEQzJC RTFCQzA1MDM4RDJEMEJCMDdCNzM5MDdERjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKXzE5tbxAV2lDGODT95/N6SOXBBOe+RinA2qzv/1X13MfGFXIrK z41kpDBBuBzC6WW6AxwUS2GAhNYVi3shXemEgWWKbboxUfYQjWsfmG6m+jlVyCqj mWO6iyid+88g2MniIGdehxQlO2EerkGAQNNsgFY5Ztc8os8ZBdFezPe4b2YMiKZe EP/zQI5seV3rxHWTo4Xq92CSYdIxtjK9k9I25Ioe7oEghzN95l+6jTD/ubDqhYte LK3k7pJmoZT20Rz/Iu7wqIzAOb9Cf33crKhPvS4c3R/bqK5I7IMVdMWN6yEDOe39 /uSnHihOSsP5ddBr2aB/SXJcucSKvGm/HW8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTZwlMVwh3CvhvAUDjS0LsHtzkH3zAfBgNVHSMEGDAWgBSf6xBcZ+X9XJ4a/Qaj Q8hB8Fp/FTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODIwL24tc1FYR2ZsX1Z5ZUd2MEdvMFBJUWZCYWZ4VS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL24tc1FYR2ZsX1Z5ZUd2MEdvMFBJUWZC YWZ4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MjAvMmNKVEZjSWR3cjRid0ZBNDB0QzdCN2M1Qjk4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtKesDANBgkqhkiG9w0BAQsFAAOCAQEAlQ93nQiitok8QhL0F+y+pbCOfhiw uSTiVkSn1CM6Vzx7q9eAJch2SwjosIFsa7kAZ8WSiml7PgKR9uSkjB3NkPAu6bAQ LG2Fb01KiIquocSuNeaS1GXhgfl12nM19MVOFpziC8T7qBKn3yMs1ZgzB662GV1E jd6GMzrZif5yDo6De1IOXj0H1qMuoIkrX0SnUCOxarEHSkT5G/++cY0ZXowhA4n0 GFPHDIAPOqfPc3KNimL6H00joX3Q5cwu3QhW+e/BPFieVrHSoF2FbBKwx7wZLsHv sxJCEEErPmmtYmDqCubp70ovC/U/VmA/HiI9tzbKXrsp7Z6cvRKlw2nOTg== -----END CERTIFICATE-----Generated at Wed Feb 19 22:40:22 2025 by rpki-client