$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/qL5UzpeCazaT3QycdAJDNjr1iYE.roa File: qL5UzpeCazaT3QycdAJDNjr1iYE.roa (raw, json) Hash identifier: 2QJS0Elw1C6FO8G4Yf6/vCTRa1stCpb10QEfSOtCzpU= Subject key identifier: A8:BE:54:CE:97:82:6B:36:93:DD:0C:9C:74:02:43:36:3A:F5:89:81 Certificate issuer: /CN=87EE394CC8B1651B758F388F73A88E68BD27222F Certificate serial: 51 Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/qL5UzpeCazaT3QycdAJDNjr1iYE.roa Signing time: Sat 01 Mar 2025 01:30:49 +0000 ROA not before: Sat 01 Mar 2025 01:30:49 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 23818 IP address blocks: 113.212.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F Validity Not Before: Mar 1 01:30:49 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=A8BE54CE97826B3693DD0C9C740243363AF58981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:92:f2:df:f5:c8:09:65:1d:1f:70:34:2a: 41:53:e8:a3:4e:71:bf:b6:a3:0e:00:4e:f4:93:48: 2c:cc:a9:d2:0c:d3:87:ff:49:51:26:82:40:39:e4: 59:9a:86:42:84:f8:02:6e:2d:99:51:fb:99:b1:05: e2:29:32:2e:c1:6e:91:73:dc:b0:9f:40:f9:67:ca: 01:19:a9:92:0b:13:43:60:45:c5:b0:8a:29:da:c8: 05:d5:02:45:27:fb:2c:25:3e:71:42:8a:03:13:39: f2:ae:c1:49:41:67:99:e9:ee:4d:30:20:84:27:69: c9:de:00:85:3f:22:5c:87:8f:cc:a0:01:98:fa:40: a2:c5:cd:55:e3:3a:a2:d9:11:92:92:6b:eb:17:36: 11:8a:f7:08:e4:6e:4f:30:f0:87:68:fd:c7:b2:95: 5f:5b:fd:b4:bf:8c:83:42:9a:7a:3e:65:b7:61:2b: f4:37:9d:1b:79:4e:22:9b:c3:0c:10:a1:24:62:2b: d6:ca:70:c1:ad:d8:4b:52:9f:5e:37:0b:af:1d:95: f0:7f:e7:4e:4b:e9:3e:7e:4a:4e:08:9f:68:50:38: e5:db:24:3d:d9:04:dc:98:82:c3:03:4b:ad:09:8d: 11:47:ba:14:60:b4:0f:a8:cd:b9:50:7f:6b:6b:fc: 20:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BE:54:CE:97:82:6B:36:93:DD:0C:9C:74:02:43:36:3A:F5:89:81 X509v3 Authority Key Identifier: keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/qL5UzpeCazaT3QycdAJDNjr1iYE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.212.106.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:8e:4f:3e:61:18:03:30:38:1d:f8:6f:77:6f:b7:3d:1e:35: 31:bc:99:9f:76:4f:9b:15:7c:92:6c:e3:09:d6:ee:6c:05:cb: 01:50:53:3b:80:28:7d:09:36:f1:6a:6f:d6:c2:dd:7b:30:86: f2:c8:41:04:8d:9c:4f:c4:a3:c9:d4:6f:05:a9:2f:7f:14:58: 02:71:0f:32:c0:48:6f:f5:51:b9:80:37:86:fe:9d:cc:4a:6c: 8d:8f:2e:95:2a:a9:8d:a0:be:3f:6e:02:c6:43:1e:69:21:a8: a2:c8:e3:46:42:1c:1a:48:0c:e9:85:67:79:f3:86:da:a2:8f: 40:ae:ed:04:86:63:60:0e:d5:4a:9d:b1:b7:04:88:6e:1a:03: d7:6f:39:3c:6b:60:48:05:35:ac:3b:9d:03:bf:36:b1:ec:da: 1e:d4:8b:7e:24:31:b2:a0:c6:b4:64:5e:02:26:20:67:53:01: 54:d7:40:ce:36:59:20:7f:6d:69:a2:de:b6:40:14:b8:0a:b6: 6f:fd:8c:4b:be:c8:4a:07:4a:e2:4a:2b:fe:4e:60:c0:14:45: ce:73:a7:c1:d0:30:0b:e2:77:fd:17:03:ff:15:ce:3b:2d:1f: ea:63:f7:78:3d:dc:82:36:54:07:a2:2f:f0:99:5b:75:10:d0: 36:08:e1:b9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0VF Mzk0Q0M4QjE2NTFCNzU4RjM4OEY3M0E4OEU2OEJEMjcyMjJGMB4XDTI1MDMwMTAx MzA0OVoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQThCRTU0Q0U5NzgyNkIz NjkzREQwQzlDNzQwMjQzMzYzQUY1ODk4MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANCokvLf9cgJZR0fcDQqQVPoo05xv7ajDgBO9JNILMyp0gzTh/9J USaCQDnkWZqGQoT4Am4tmVH7mbEF4ikyLsFukXPcsJ9A+WfKARmpkgsTQ2BFxbCK KdrIBdUCRSf7LCU+cUKKAxM58q7BSUFnmenuTTAghCdpyd4AhT8iXIePzKABmPpA osXNVeM6otkRkpJr6xc2EYr3CORuTzDwh2j9x7KVX1v9tL+Mg0Kaej5lt2Er9Ded G3lOIpvDDBChJGIr1spwwa3YS1KfXjcLrx2V8H/nTkvpPn5KTgifaFA45dskPdkE 3JiCwwNLrQmNEUe6FGC0D6jNuVB/a2v8IOUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSovlTOl4JrNpPdDJx0AkM2OvWJgTAfBgNVHSMEGDAWgBSH7jlMyLFlG3WPOI9z qI5ovSciLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgzL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUwwbklpOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUww bklpOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODMvcUw1VXpwZUNhemFUM1F5Y2RBSkROanIxaVlFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHHUajANBgkqhkiG9w0BAQsFAAOCAQEAmo5PPmEYAzA4Hfhvd2+3PR41MbyZ n3ZPmxV8kmzjCdbubAXLAVBTO4AofQk28Wpv1sLdezCG8shBBI2cT8SjydRvBakv fxRYAnEPMsBIb/VRuYA3hv6dzEpsjY8ulSqpjaC+P24CxkMeaSGoosjjRkIcGkgM 6YVnefOG2qKPQK7tBIZjYA7VSp2xtwSIbhoD1285PGtgSAU1rDudA782sezaHtSL fiQxsqDGtGReAiYgZ1MBVNdAzjZZIH9taaLetkAUuAq2b/2MS77ISgdK4kor/k5g wBRFznOnwdAwC+J3/RcD/xXOOy0f6mP3eD3cgjZUB6Iv8JlbdRDQNgjhuQ== -----END CERTIFICATE-----Generated at Thu Mar 13 07:11:11 2025 by rpki-client