$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/OwdrmzAvVoRqZfdng5fXePwvIJY.roa File: OwdrmzAvVoRqZfdng5fXePwvIJY.roa (raw, json) Hash identifier: GUvSyAAJGP94m23GDyzxH0jEuMiQkmW8wq1tJT4ULCc= Subject key identifier: 3B:07:6B:9B:30:2F:56:84:6A:65:F7:67:83:97:D7:78:FC:2F:20:96 Certificate issuer: /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15 Certificate serial: 2D Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/OwdrmzAvVoRqZfdng5fXePwvIJY.roa Signing time: Tue 31 Dec 2024 01:31:27 +0000 ROA not before: Tue 31 Dec 2024 01:31:27 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 23614 IP address blocks: 210.158.181.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15 Validity Not Before: Dec 31 01:31:27 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=3B076B9B302F56846A65F7678397D778FC2F2096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:cb:07:f5:cd:91:74:bb:b0:af:70:db:b2: a1:2e:73:a9:bd:97:ed:4f:fe:79:88:96:92:f0:f2: 84:7f:e9:23:73:cc:ca:11:43:4c:9e:d4:da:76:79: d3:2d:eb:21:57:5d:09:1a:d2:0e:9a:69:18:b7:47: 24:95:8a:e0:97:3b:ca:f1:bb:5f:9b:94:7d:cb:09: b6:61:12:6c:4d:7c:5d:49:c7:b6:41:e3:a2:5e:8a: f8:7b:50:15:51:23:24:fc:b7:f8:df:16:d4:cd:0d: 2f:26:d2:45:fe:d0:2b:fe:3a:88:cb:88:de:86:df: 00:26:b0:ae:0e:72:f1:0f:ce:8d:77:4e:a4:dd:3b: 1c:42:29:25:b4:52:d8:b4:af:f5:96:7f:d2:35:a2: 0f:4b:e3:00:12:0d:f2:8c:f6:a9:f0:ce:73:a1:3a: 11:af:25:b4:a7:f6:26:96:f9:81:4b:13:82:56:9f: e4:82:04:f7:15:a2:84:85:ea:f2:69:8a:9f:df:10: ea:d1:47:3a:f3:51:fe:6c:79:6e:b4:68:09:f5:e7: d5:bf:4d:0f:57:c7:a4:11:9c:62:28:ce:52:08:8b: c2:73:cf:2c:fc:1a:92:05:03:9f:f3:37:e7:36:bc: 4b:23:49:27:d1:e8:73:42:4c:67:93:3e:f5:74:a3: 67:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:07:6B:9B:30:2F:56:84:6A:65:F7:67:83:97:D7:78:FC:2F:20:96 X509v3 Authority Key Identifier: keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/OwdrmzAvVoRqZfdng5fXePwvIJY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.158.181.0/24 Signature Algorithm: sha256WithRSAEncryption d5:61:3f:98:e7:11:a7:5f:93:9a:7b:be:34:e8:ca:eb:ee:bd: b6:be:7e:aa:11:31:02:b3:ad:83:d0:75:f7:f6:81:89:84:db: 19:d6:da:0a:3a:6f:13:9b:c7:4c:2e:02:a7:d8:67:60:36:77: 88:c1:5a:46:1d:77:55:58:8f:31:5d:d0:34:af:9c:7e:13:d7: 21:42:c8:f3:f2:e2:e0:73:17:6c:40:c1:55:4a:a1:50:3b:2a: 3d:5e:b1:8e:5c:80:2c:43:85:69:e1:65:9a:a2:51:6b:4c:0d: 13:0a:06:1f:13:88:08:f9:71:30:a9:e1:12:1b:63:a3:64:b0: bd:0d:d8:b6:1d:c4:d1:e1:b6:39:7c:ed:ba:4f:c2:2c:52:f9: cd:a6:1b:a4:4b:bb:e6:2e:63:a8:f5:d8:1f:c8:50:29:54:16: cb:38:e7:8f:b7:da:17:46:65:7b:4d:69:e4:3c:ec:0d:8f:0f: 5b:23:4f:58:48:dd:b0:90:c0:17:84:bc:8c:28:38:17:96:bf: 18:1a:dc:37:9b:f4:8e:32:ae:d0:aa:20:d6:bf:6b:1a:09:49: 4d:a5:9b:87:b2:30:9b:3f:59:78:39:aa:fb:e1:2a:58:60:5e: 68:02:42:64:2a:2b:99:c5:1b:b1:f0:fa:c0:e3:d7:eb:1e:45: ac:ce:08:ae -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RkVC MTA1QzY3RTVGRDVDOUUxQUZEMDZBMzQzQzg0MUYwNUE3RjE1MB4XDTI0MTIzMTAx MzEyN1oXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoM0IwNzZCOUIzMDJGNTY4 NDZBNjVGNzY3ODM5N0Q3NzhGQzJGMjA5NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALrZywf1zZF0u7CvcNuyoS5zqb2X7U/+eYiWkvDyhH/pI3PMyhFD TJ7U2nZ50y3rIVddCRrSDpppGLdHJJWK4Jc7yvG7X5uUfcsJtmESbE18XUnHtkHj ol6K+HtQFVEjJPy3+N8W1M0NLybSRf7QK/46iMuI3obfACawrg5y8Q/OjXdOpN07 HEIpJbRS2LSv9ZZ/0jWiD0vjABIN8oz2qfDOc6E6Ea8ltKf2Jpb5gUsTglaf5IIE 9xWihIXq8mmKn98Q6tFHOvNR/mx5brRoCfXn1b9ND1fHpBGcYijOUgiLwnPPLPwa kgUDn/M35za8SyNJJ9Hoc0JMZ5M+9XSjZ/MCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ7B2ubMC9WhGpl92eDl9d4/C8gljAfBgNVHSMEGDAWgBSf6xBcZ+X9XJ4a/Qaj Q8hB8Fp/FTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODIwL24tc1FYR2ZsX1Z5ZUd2MEdvMFBJUWZCYWZ4VS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL24tc1FYR2ZsX1Z5ZUd2MEdvMFBJUWZC YWZ4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MjAvT3dkcm16QXZWb1JxWmZkbmc1ZlhlUHd2SUpZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANKetTANBgkqhkiG9w0BAQsFAAOCAQEA1WE/mOcRp1+Tmnu+NOjK6+69tr5+ qhExArOtg9B19/aBiYTbGdbaCjpvE5vHTC4Cp9hnYDZ3iMFaRh13VViPMV3QNK+c fhPXIULI8/Li4HMXbEDBVUqhUDsqPV6xjlyALEOFaeFlmqJRa0wNEwoGHxOICPlx MKnhEhtjo2SwvQ3Yth3E0eG2OXztuk/CLFL5zaYbpEu75i5jqPXYH8hQKVQWyzjn j7faF0Zle01p5DzsDY8PWyNPWEjdsJDAF4S8jCg4F5a/GBrcN5v0jjKu0Kog1r9r GglJTaWbh7Iwmz9ZeDmq++EqWGBeaAJCZCormcUbsfD6wOPX6x5FrM4Irg== -----END CERTIFICATE-----Generated at Wed Feb 19 22:34:19 2025 by rpki-client