$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/RgJXte6MsHxEvydFh41XhEr2Luc.roa File: RgJXte6MsHxEvydFh41XhEr2Luc.roa (raw, json) Hash identifier: l9cKrGlA7OVMXPaVSKBf5LQ6ybENo8+qlhipMIIPzNI= Subject key identifier: 46:02:57:B5:EE:8C:B0:7C:44:BF:27:45:87:8D:57:84:4A:F6:2E:E7 Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554 Certificate serial: 44 Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/RgJXte6MsHxEvydFh41XhEr2Luc.roa Signing time: Fri 31 Jan 2025 01:28:56 +0000 ROA not before: Fri 31 Jan 2025 01:28:56 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 131934 IP address blocks: 180.94.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D79B3890C2DA3795148976B954C2024056797554 Validity Not Before: Jan 31 01:28:56 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=460257B5EE8CB07C44BF2745878D57844AF62EE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:30:a9:8f:0d:5b:40:5a:dd:8f:a9:3e:3a: a6:0d:c7:87:0a:45:32:c3:f0:d4:d9:08:bf:09:4f: 1a:e0:4c:34:63:c9:af:36:7a:90:4b:6f:1a:0e:12: 46:07:0d:8e:b5:33:8a:ce:20:ac:c0:df:5d:a2:e9: 13:97:8c:eb:83:b8:8b:c8:eb:6e:42:18:6c:b7:33: 6b:96:96:c2:b9:4e:61:34:7c:46:34:f6:da:f9:9b: ce:8d:3c:b1:9f:eb:ac:29:fe:e5:7e:1a:00:3f:fd: db:9d:c4:f3:21:36:bc:f2:68:6c:b6:20:c2:2b:15: c7:8c:eb:22:48:f4:c5:92:c6:f6:24:6f:29:3b:62: c9:d3:5a:ec:88:b0:dc:64:1b:55:d0:3e:57:3b:8c: c6:2f:b2:83:ad:55:9b:99:85:c6:b3:f0:e8:40:77: 2a:af:e8:da:ee:a9:31:8e:42:0a:8c:a2:02:ed:8b: ba:c1:20:5d:16:cf:3a:2b:66:26:27:98:cd:bd:88: 59:b5:6e:dc:86:f7:43:88:1e:14:b6:a5:3e:70:e8: 46:61:08:ff:21:0b:81:d1:eb:27:5b:52:61:cc:c3: be:ba:d4:6a:1b:af:d5:ba:55:6e:26:a1:4a:2a:09: 69:01:5b:48:c6:b3:3f:32:d3:78:cb:27:db:b9:68: 36:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:02:57:B5:EE:8C:B0:7C:44:BF:27:45:87:8D:57:84:4A:F6:2E:E7 X509v3 Authority Key Identifier: keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/RgJXte6MsHxEvydFh41XhEr2Luc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.94.40.0/21 Signature Algorithm: sha256WithRSAEncryption 19:3b:a9:b9:af:32:7c:3b:59:cb:a8:ad:c6:d1:09:df:bb:db: 90:09:fd:f5:43:25:63:6d:92:05:05:2a:0c:50:75:58:51:8e: eb:fa:63:8c:16:36:fd:f9:f4:e0:ee:bf:c3:8d:67:4b:17:81: fa:b9:d8:18:e3:f6:80:3a:32:cb:36:20:d0:29:fe:64:9b:c9: 1a:bf:fa:06:29:ab:95:6f:e0:fc:37:29:87:95:2e:dc:66:ab: e2:c3:48:b1:fa:cc:96:a2:93:e0:35:9a:b0:f4:b3:a6:22:b3: 19:30:14:4e:5e:4e:62:2e:3d:bb:4b:d5:23:bc:cb:18:dd:63: 9b:89:36:61:91:2e:1b:7c:28:c0:df:96:79:9a:b2:d2:af:96: 00:b1:9f:3d:60:f6:a2:0c:29:14:69:88:2d:8a:74:12:bd:1b: 06:7c:75:e0:0b:57:c3:58:55:67:d6:03:e1:8e:b6:c7:02:0d: e6:08:f8:4e:4e:df:9d:df:2c:30:57:4c:ed:94:c7:00:0d:c8: 94:ce:2d:df:ab:02:77:d2:00:65:1b:88:c4:cd:e4:1d:b4:81: c8:ef:fd:a5:24:c1:f3:20:3e:93:90:18:dc:90:ec:c0:6a:4e: f5:27:ce:5e:ec:97:bb:77:dd:7d:3f:b9:c7:44:86:98:d0:f3: 39:62:90:d7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTI1MDEzMTAx Mjg1NloXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNDYwMjU3QjVFRThDQjA3 QzQ0QkYyNzQ1ODc4RDU3ODQ0QUY2MkVFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALUNMKmPDVtAWt2PqT46pg3HhwpFMsPw1NkIvwlPGuBMNGPJrzZ6 kEtvGg4SRgcNjrUzis4grMDfXaLpE5eM64O4i8jrbkIYbLcza5aWwrlOYTR8RjT2 2vmbzo08sZ/rrCn+5X4aAD/9253E8yE2vPJobLYgwisVx4zrIkj0xZLG9iRvKTti ydNa7Iiw3GQbVdA+VzuMxi+yg61Vm5mFxrPw6EB3Kq/o2u6pMY5CCoyiAu2LusEg XRbPOitmJieYzb2IWbVu3Ib3Q4geFLalPnDoRmEI/yELgdHrJ1tSYczDvrrUahuv 1bpVbiahSioJaQFbSMazPzLTeMsn27loNmsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRGAle17oywfES/J0WHjVeESvYu5zAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NDAvUmdKWHRlNk1zSHhFdnlkRmg0MVhoRXIyTHVjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7ReKDANBgkqhkiG9w0BAQsFAAOCAQEAGTupua8yfDtZy6itxtEJ37vbkAn9 9UMlY22SBQUqDFB1WFGO6/pjjBY2/fn04O6/w41nSxeB+rnYGOP2gDoyyzYg0Cn+ ZJvJGr/6BimrlW/g/Dcph5Uu3Gar4sNIsfrMlqKT4DWasPSzpiKzGTAUTl5OYi49 u0vVI7zLGN1jm4k2YZEuG3wowN+WeZqy0q+WALGfPWD2ogwpFGmILYp0Er0bBnx1 4AtXw1hVZ9YD4Y62xwIN5gj4Tk7fnd8sMFdM7ZTHAA3IlM4t36sCd9IAZRuIxM3k HbSByO/9pSTB8yA+k5AY3JDswGpO9SfOXuyXu3fdfT+5x0SGmNDzOWKQ1w== -----END CERTIFICATE-----Generated at Wed Feb 19 22:33:15 2025 by rpki-client