$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/W9wsGtKBuuMSd-5w6scJ2m4esAI.roa File: W9wsGtKBuuMSd-5w6scJ2m4esAI.roa (raw, json) Hash identifier: dQvl64XfCVBI3LFsfn3WxayA8pH0ewTA/qxMUaAZNIw= Subject key identifier: 5B:DC:2C:1A:D2:81:BA:E3:12:77:EE:70:EA:C7:09:DA:6E:1E:B0:02 Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578 Certificate serial: 3B Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/W9wsGtKBuuMSd-5w6scJ2m4esAI.roa Signing time: Fri 31 Jan 2025 01:29:11 +0000 ROA not before: Fri 31 Jan 2025 01:29:11 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 37908 IP address blocks: 202.236.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578 Validity Not Before: Jan 31 01:29:11 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=5BDC2C1AD281BAE31277EE70EAC709DA6E1EB002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:9d:98:ae:68:34:d6:11:4e:99:10:04:2a: f4:f6:22:77:16:94:8b:d9:c0:cf:71:45:8a:d9:1a: 08:ac:16:05:8d:cc:31:7b:02:ab:b7:45:61:e5:e6: 5b:07:3d:90:98:b4:c7:4c:bf:1e:77:cc:61:72:24: 42:88:89:48:bf:9e:62:9b:80:ce:0e:0d:2e:f5:a3: 17:cf:22:bb:34:bc:48:68:c7:94:10:e9:0a:67:2a: 4b:1d:22:6a:e5:92:c3:1d:ab:f1:37:22:36:47:5b: 73:1d:2f:b3:7c:d3:98:44:7f:47:45:f6:6b:20:37: 10:df:cd:85:c9:f9:10:2c:63:bd:d9:c2:2c:ee:63: 59:97:b7:82:6f:14:52:7f:e7:9b:9a:3a:6d:d1:a3: 5d:8c:c7:be:d8:5c:4b:c5:36:97:73:2f:cd:1c:78: 6d:05:b2:9b:64:ce:1f:ab:36:29:a9:92:db:b3:aa: 19:ad:22:e0:82:d2:f2:1d:eb:48:43:c8:4a:69:5f: 08:7b:53:39:0b:bc:06:34:99:44:c1:b4:0b:e7:4c: 77:42:6f:a9:c1:ee:43:87:20:ab:e4:d7:de:07:2f: 7c:09:49:93:7f:cf:0a:a6:e7:8c:8e:af:2f:fc:ea: 0f:7b:1d:b0:b0:22:b5:19:88:d2:ea:10:87:81:76: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DC:2C:1A:D2:81:BA:E3:12:77:EE:70:EA:C7:09:DA:6E:1E:B0:02 X509v3 Authority Key Identifier: keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/W9wsGtKBuuMSd-5w6scJ2m4esAI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.236.157.0/24 Signature Algorithm: sha256WithRSAEncryption bb:62:3a:65:61:a0:1f:de:34:15:26:70:f4:b2:41:2f:2c:3b: 45:35:1c:0a:6a:12:43:25:cc:32:0b:ad:6c:b4:ba:1e:39:fd: e1:01:da:ac:d8:bf:2f:88:30:ec:c4:34:70:33:66:24:19:38: d1:95:1e:58:9f:2d:1a:b6:f3:bb:cb:b2:89:1e:03:11:a0:b1: b1:a7:9c:d5:22:b2:6b:c3:01:ea:60:11:ce:31:61:83:b8:d2: 82:73:e9:da:fd:4b:73:48:84:0c:da:67:57:bb:dd:67:fb:9b: a6:e4:8c:c5:40:50:46:97:19:7c:2f:f5:98:69:49:0d:18:95: c9:f3:3c:a2:bd:be:cf:2d:1d:7f:c4:76:86:3d:77:e0:9c:ac: 40:c1:61:87:27:2f:56:19:0b:26:b4:36:6e:58:70:e8:52:a9: b5:52:7c:8f:6a:fc:d3:81:de:42:a3:2a:17:86:53:e7:fb:a9: 87:c5:74:76:a3:27:77:d2:41:b5:a5:e1:ab:ac:78:e3:cd:58: 0f:bf:f8:b5:a0:43:2e:2b:44:99:96:10:10:af:61:6d:f4:7a: 69:3b:16:6f:7f:70:68:fa:b0:99:51:8d:ce:70:07:47:1c:4f: a2:a5:5d:3c:49:8e:b8:55:b0:2b:f3:d7:70:54:a8:ce:a0:d3: 91:47:f4:da -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTFF NzI1MTc2QkZEOUFCREE1Q0NCN0IyMUExMEI4RjhEQjdENTc4MB4XDTI1MDEzMTAx MjkxMVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNUJEQzJDMUFEMjgxQkFF MzEyNzdFRTcwRUFDNzA5REE2RTFFQjAwMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMYbnZiuaDTWEU6ZEAQq9PYidxaUi9nAz3FFitkaCKwWBY3MMXsC q7dFYeXmWwc9kJi0x0y/HnfMYXIkQoiJSL+eYpuAzg4NLvWjF88iuzS8SGjHlBDp CmcqSx0iauWSwx2r8TciNkdbcx0vs3zTmER/R0X2ayA3EN/Nhcn5ECxjvdnCLO5j WZe3gm8UUn/nm5o6bdGjXYzHvthcS8U2l3MvzRx4bQWym2TOH6s2KamS27OqGa0i 4ILS8h3rSEPISmlfCHtTOQu8BjSZRMG0C+dMd0JvqcHuQ4cgq+TX3gcvfAlJk3/P CqbnjI6vL/zqD3sdsLAitRmI0uoQh4F2JA0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRb3Cwa0oG64xJ37nDqxwnabh6wAjAfBgNVHSMEGDAWgBSKHnJRdr/Zq9pcy3sh oQuPjbfVeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQyL2loNXlVWGFfMmF2YVhNdDdJYUVMajQyMzFYZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2loNXlVWGFfMmF2YVhNdDdJYUVMajQy MzFYZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NDIvVzl3c0d0S0J1dU1TZC01dzZzY0oybTRlc0FJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMrsnTANBgkqhkiG9w0BAQsFAAOCAQEAu2I6ZWGgH940FSZw9LJBLyw7RTUc CmoSQyXMMgutbLS6Hjn94QHarNi/L4gw7MQ0cDNmJBk40ZUeWJ8tGrbzu8uyiR4D EaCxsaec1SKya8MB6mARzjFhg7jSgnPp2v1Lc0iEDNpnV7vdZ/ubpuSMxUBQRpcZ fC/1mGlJDRiVyfM8or2+zy0df8R2hj134JysQMFhhycvVhkLJrQ2blhw6FKptVJ8 j2r804HeQqMqF4ZT5/uph8V0dqMnd9JBtaXhq6x4481YD7/4taBDLitEmZYQEK9h bfR6aTsWb39waPqwmVGNznAHRxxPoqVdPEmOuFWwK/PXcFSozqDTkUf02g== -----END CERTIFICATE-----Generated at Wed Feb 19 22:38:10 2025 by rpki-client