$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/6Ggf3uxGUpf-uR5n5ebnh1TmTHI.roa File: 6Ggf3uxGUpf-uR5n5ebnh1TmTHI.roa (raw, json) Hash identifier: ZRj22WyFx8+ymnfHaPhuOwi2iVnMQpPxWkJEX50xc/g= Subject key identifier: E8:68:1F:DE:EC:46:52:97:FE:B9:1E:67:E5:E6:E7:87:54:E6:4C:72 Certificate issuer: /CN=87EE394CC8B1651B758F388F73A88E68BD27222F Certificate serial: 35 Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/6Ggf3uxGUpf-uR5n5ebnh1TmTHI.roa Signing time: Thu 28 Mar 2024 08:31:37 +0000 ROA not before: Thu 28 Mar 2024 08:31:37 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2519 IP address blocks: 113.212.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F Validity Not Before: Mar 28 08:31:37 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=E8681FDEEC465297FEB91E67E5E6E78754E64C72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:fd:bc:ed:05:c0:fa:0c:72:d6:fe:47:1e: 7c:9f:d4:6b:3c:38:86:8a:33:01:48:1b:14:8c:bd: 59:d4:9c:90:b6:78:bc:31:20:a3:0e:c6:c3:ee:65: af:81:6b:64:ab:6f:ac:56:a7:7d:c7:8b:69:2f:cd: 94:ae:fd:b4:07:4c:29:17:0c:e5:23:f6:c2:f9:a0: 92:97:ed:bc:4c:ff:f3:2a:ba:51:f9:b2:d3:ba:e9: 79:14:c0:89:c6:74:a2:e1:cb:3f:6c:dc:bd:63:d3: b6:db:4e:82:16:f4:53:65:db:c8:bf:52:08:84:6a: ae:9f:d9:41:2d:b0:fa:5e:2c:7d:36:be:b0:86:68: 99:0e:3b:61:f2:10:98:ae:79:b8:99:05:03:4a:79: 30:60:c2:6c:5c:c7:11:06:fd:13:35:97:20:55:02: 1a:b2:ae:67:63:cf:a0:4a:5a:ff:90:e1:fc:2e:f4: 65:7c:c4:0c:0b:05:c5:ae:e5:68:77:bb:29:df:fd: 50:ec:9d:90:7a:ec:10:0d:5b:91:a3:dc:dd:18:a7: 4e:07:9e:0d:a3:92:97:34:6e:4b:9d:d0:34:b2:e0: 8c:7e:bc:a1:b3:df:da:7e:9f:fa:77:88:73:68:e3: 84:d0:35:1b:de:d3:e6:53:8a:8d:71:d3:82:f0:75: 8a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:68:1F:DE:EC:46:52:97:FE:B9:1E:67:E5:E6:E7:87:54:E6:4C:72 X509v3 Authority Key Identifier: keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/6Ggf3uxGUpf-uR5n5ebnh1TmTHI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.212.105.0/24 Signature Algorithm: sha256WithRSAEncryption 93:30:89:d6:c0:e1:92:a7:56:7d:19:86:2e:72:8f:df:7a:6a: 67:01:fd:4c:92:5d:2e:8c:97:dc:c4:40:f2:ca:d7:af:32:7e: 9e:c9:2c:ba:92:ee:8a:74:e1:88:16:12:df:eb:3c:5b:7f:2c: 70:d0:98:13:0f:fc:dd:15:f1:57:7e:19:03:fb:6f:54:20:11: d8:ba:4c:5c:c6:9e:db:5e:4e:1b:52:21:8d:8e:d4:a1:13:24: 78:44:35:28:3c:ec:47:a6:74:bb:3b:e4:13:3d:4e:53:58:e4: c3:59:46:d3:63:62:ee:3a:1c:15:a4:31:7b:7e:6c:8e:c2:05: 90:cf:83:6c:d5:f3:c1:7d:bf:fa:1b:b2:b4:d7:c9:b6:dc:39: 26:0a:d0:3f:98:ed:fa:9e:d6:bb:b7:f7:7a:35:6f:b3:02:51: 62:c0:00:99:64:e1:6d:69:8f:4b:b2:be:37:b9:4b:cb:6a:6d: 08:0f:3f:33:49:ba:79:51:ba:83:8b:e9:c4:54:39:18:80:93: 42:11:04:79:43:71:25:c9:e3:0a:47:0b:3a:78:5e:1c:99:f7: 1b:fc:09:be:99:77:29:bb:d5:ca:12:b6:83:0c:dd:2e:48:27: ea:98:64:b7:95:75:2c:60:89:5d:c4:37:4a:1f:b3:7f:d0:b3: 23:bd:49:fe -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0VF Mzk0Q0M4QjE2NTFCNzU4RjM4OEY3M0E4OEU2OEJEMjcyMjJGMB4XDTI0MDMyODA4 MzEzN1oXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTg2ODFGREVFQzQ2NTI5 N0ZFQjkxRTY3RTVFNkU3ODc1NEU2NEM3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMqL/bztBcD6DHLW/kcefJ/Uazw4hoozAUgbFIy9WdSckLZ4vDEg ow7Gw+5lr4FrZKtvrFanfceLaS/NlK79tAdMKRcM5SP2wvmgkpftvEz/8yq6Ufmy 07rpeRTAicZ0ouHLP2zcvWPTtttOghb0U2XbyL9SCIRqrp/ZQS2w+l4sfTa+sIZo mQ47YfIQmK55uJkFA0p5MGDCbFzHEQb9EzWXIFUCGrKuZ2PPoEpa/5Dh/C70ZXzE DAsFxa7laHe7Kd/9UOydkHrsEA1bkaPc3RinTgeeDaOSlzRuS53QNLLgjH68obPf 2n6f+neIc2jjhNA1G97T5lOKjXHTgvB1iisCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBToaB/e7EZSl/65Hmfl5ueHVOZMcjAfBgNVHSMEGDAWgBSH7jlMyLFlG3WPOI9z qI5ovSciLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgzL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUwwbklpOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUww bklpOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODMvNkdnZjN1eEdVcGYtdVI1bjVlYm5oMVRtVEhJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHHUaTANBgkqhkiG9w0BAQsFAAOCAQEAkzCJ1sDhkqdWfRmGLnKP33pqZwH9 TJJdLoyX3MRA8srXrzJ+nsksupLuinThiBYS3+s8W38scNCYEw/83RXxV34ZA/tv VCAR2LpMXMae215OG1IhjY7UoRMkeEQ1KDzsR6Z0uzvkEz1OU1jkw1lG02Ni7joc FaQxe35sjsIFkM+DbNXzwX2/+huytNfJttw5JgrQP5jt+p7Wu7f3ejVvswJRYsAA mWThbWmPS7K+N7lLy2ptCA8/M0m6eVG6g4vpxFQ5GICTQhEEeUNxJcnjCkcLOnhe HJn3G/wJvpl3KbvVyhK2gwzdLkgn6phkt5V1LGCJXcQ3Sh+zf9CzI71J/g== -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:04 2025 by rpki-client