$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/bSFclYtck_zlS__8f0ieZqBfPEs.roa File: bSFclYtck_zlS__8f0ieZqBfPEs.roa (raw, json) Hash identifier: 2+J3SbVAlW9XZRH4UKFamchP/QQk4E8mO0qTwvxTM5Q= Subject key identifier: 6D:21:5C:95:8B:5C:93:FC:E5:4B:FF:FC:7F:48:9E:66:A0:5F:3C:4B Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554 Certificate serial: 45 Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/bSFclYtck_zlS__8f0ieZqBfPEs.roa Signing time: Fri 31 Jan 2025 01:28:57 +0000 ROA not before: Fri 31 Jan 2025 01:28:57 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 131934 IP address blocks: 210.231.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D79B3890C2DA3795148976B954C2024056797554 Validity Not Before: Jan 31 01:28:57 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=6D215C958B5C93FCE54BFFFC7F489E66A05F3C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:db:12:20:d9:fc:f1:ff:89:65:70:99:26:9e: 90:21:95:35:e4:45:32:d6:ab:ad:8a:cd:07:f5:a5: 97:5e:71:a3:7d:e7:6d:d3:eb:77:ec:f9:e8:b6:09: 92:80:cc:00:80:55:4b:8a:72:9c:c6:55:78:a0:35: 6d:7f:ad:78:e6:91:9b:9b:9a:92:08:72:15:99:60: 94:b6:71:43:f8:f7:7c:66:e1:de:88:b7:8b:4c:23: 24:c0:52:b1:d5:77:ff:6c:62:66:32:f2:e7:8a:02: 84:df:3d:74:57:44:a5:ba:f2:7b:5a:ee:17:bb:b5: 9d:10:d4:2e:bf:0e:c4:b4:0f:0f:2b:82:7c:2f:ef: 82:ff:5a:36:43:a4:64:0e:20:8c:80:e7:10:ef:38: 4a:9b:d6:f9:3a:81:46:db:40:13:35:53:28:b3:aa: 88:d3:44:f4:fd:ef:c9:a6:7f:96:27:0b:01:db:2b: 9c:91:a9:97:e9:d7:64:ca:d8:29:b2:44:35:bb:b6: ed:a9:df:64:49:d2:55:48:ab:2f:c3:e1:01:0f:59: 01:c6:51:ac:e7:63:96:24:5e:e9:44:d0:d3:55:3e: 6d:3e:f0:9f:25:0c:c4:a6:b7:df:19:dc:98:bd:6c: b3:10:ff:39:ef:e8:e6:55:34:dd:be:f3:0d:f8:ae: ba:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:21:5C:95:8B:5C:93:FC:E5:4B:FF:FC:7F:48:9E:66:A0:5F:3C:4B X509v3 Authority Key Identifier: keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/bSFclYtck_zlS__8f0ieZqBfPEs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.231.192.0/20 Signature Algorithm: sha256WithRSAEncryption 57:3b:cb:f2:a9:24:29:d8:08:09:18:42:6b:a7:06:1c:23:7f: c3:e6:5c:be:b8:87:e9:82:b4:fc:83:c1:41:9d:4a:a3:d3:4b: 82:62:d8:65:d9:09:82:3c:d6:28:b0:4c:92:2f:b1:8d:4d:41: e9:84:db:4f:1a:41:b2:85:ae:3c:7a:11:8c:95:e3:f4:c7:6c: ac:eb:08:de:c9:57:b9:a4:4a:7f:38:9a:36:09:09:5c:6d:48: 0b:4c:f2:a0:5b:11:4b:8d:07:5b:a8:70:39:7b:8a:d6:80:e7: 2e:b6:e6:38:8e:98:bf:bb:0e:46:64:b0:80:07:8a:7c:f4:38: 2b:ab:fb:21:8b:38:e9:5c:93:19:7d:33:f6:a0:ab:91:b8:e2: 28:93:7c:2f:20:f5:2c:d7:64:ce:e1:cd:b2:dc:6d:6c:95:82: a7:bf:4f:46:9e:4f:e9:ba:c6:61:60:10:04:5c:e7:17:48:5e: e8:13:41:fd:66:16:cf:58:d0:8a:82:a3:65:42:de:2b:8b:f2: 88:79:8f:db:32:1c:67:ca:21:f1:7d:7a:c6:50:0e:0e:01:3f: 13:7d:36:0c:c6:3f:70:31:07:02:93:82:69:d4:06:63:ed:42: 40:7b:8f:83:0d:c8:4d:00:a2:f9:4b:4f:3c:95:b5:d1:ef:8d: 7e:d2:c4:71 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTI1MDEzMTAx Mjg1N1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNkQyMTVDOTU4QjVDOTNG Q0U1NEJGRkZDN0Y0ODlFNjZBMDVGM0M0QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAObbEiDZ/PH/iWVwmSaekCGVNeRFMtarrYrNB/Wll15xo33nbdPr d+z56LYJkoDMAIBVS4pynMZVeKA1bX+teOaRm5uakghyFZlglLZxQ/j3fGbh3oi3 i0wjJMBSsdV3/2xiZjLy54oChN89dFdEpbrye1ruF7u1nRDULr8OxLQPDyuCfC/v gv9aNkOkZA4gjIDnEO84SpvW+TqBRttAEzVTKLOqiNNE9P3vyaZ/licLAdsrnJGp l+nXZMrYKbJENbu27anfZEnSVUirL8PhAQ9ZAcZRrOdjliRe6UTQ01U+bT7wnyUM xKa33xncmL1ssxD/Oe/o5lU03b7zDfiuuuUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRtIVyVi1yT/OVL//x/SJ5moF88SzAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NDAvYlNGY2xZdGNrX3psU19fOGYwaWVacUJmUEVzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNLnwDANBgkqhkiG9w0BAQsFAAOCAQEAVzvL8qkkKdgICRhCa6cGHCN/w+Zc vriH6YK0/IPBQZ1Ko9NLgmLYZdkJgjzWKLBMki+xjU1B6YTbTxpBsoWuPHoRjJXj 9MdsrOsI3slXuaRKfziaNgkJXG1IC0zyoFsRS40HW6hwOXuK1oDnLrbmOI6Yv7sO RmSwgAeKfPQ4K6v7IYs46VyTGX0z9qCrkbjiKJN8LyD1LNdkzuHNstxtbJWCp79P Rp5P6brGYWAQBFznF0he6BNB/WYWz1jQioKjZULeK4vyiHmP2zIcZ8oh8X16xlAO DgE/E302DMY/cDEHApOCadQGY+1CQHuPgw3ITQCi+UtPPJW10e+NftLEcQ== -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:43 2025 by rpki-client