$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/mW1VEbkxhOYpZhKUw1L5UYLHXsY.roa File: mW1VEbkxhOYpZhKUw1L5UYLHXsY.roa (raw, json) Hash identifier: 9xk7vCYBMCpZ3CLSQwrPkIp5WMX8/urNyDtEHSYsvAk= Subject key identifier: 99:6D:55:11:B9:31:84:E6:29:66:12:94:C3:52:F9:51:82:C7:5E:C6 Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Certificate serial: 27 Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/mW1VEbkxhOYpZhKUw1L5UYLHXsY.roa Signing time: Sun 30 Jun 2024 01:32:40 +0000 ROA not before: Sun 30 Jun 2024 01:32:40 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 38628 IP address blocks: 115.126.136.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Validity Not Before: Jun 30 01:32:40 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=996D5511B93184E629661294C352F95182C75EC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:ea:82:38:82:21:d9:13:24:19:15:8a:6f: 22:06:af:98:9d:ae:c8:75:10:65:75:d1:9b:aa:66: 47:62:8b:b8:ce:c7:7f:36:af:eb:b5:6f:c3:79:37: 5d:d0:d0:1c:4f:42:45:c8:e8:e6:2d:13:3b:f0:7e: ba:76:e3:9c:99:1e:40:c2:84:c8:a1:bf:0b:1c:5c: ce:bd:2b:76:5a:10:b8:66:8f:9e:1e:d0:af:58:e9: 25:89:be:d6:18:7d:5f:54:f0:11:48:9a:02:bd:82: 23:74:b5:9b:b4:74:c1:b5:5c:64:2a:8e:58:73:9e: 29:90:c3:1c:ff:db:b5:29:05:b0:19:90:f8:51:bb: e1:01:03:99:eb:46:6a:00:85:fb:3f:2b:a0:95:ce: ff:4a:d0:39:df:14:5d:a7:f6:0c:bb:13:7a:ae:28: 75:fc:d6:e7:7f:bc:52:a3:1a:e8:f8:77:ff:91:8f: 0b:38:fd:d4:8f:80:23:5c:49:73:39:79:d9:c8:f5: fd:5b:34:e4:31:d4:6c:24:c8:a4:3a:21:03:54:f4: f4:5b:aa:83:37:13:9f:d2:a4:20:5b:e9:ae:d6:6d: f6:1e:46:ba:e4:ce:e4:23:c3:e1:7f:34:7a:35:65: 6b:8c:05:22:38:94:27:fe:1b:39:97:fb:dd:01:38: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6D:55:11:B9:31:84:E6:29:66:12:94:C3:52:F9:51:82:C7:5E:C6 X509v3 Authority Key Identifier: keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/mW1VEbkxhOYpZhKUw1L5UYLHXsY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.126.136.0/21 Signature Algorithm: sha256WithRSAEncryption 11:3a:a4:71:aa:94:e4:03:ba:c1:5c:4c:55:23:f8:b1:d6:21: ba:90:d8:86:a4:6e:03:95:5a:61:31:d4:29:3f:f4:6e:56:0a: b5:ce:bf:a6:31:19:f0:1f:c7:1f:b5:b9:83:4f:5f:e7:29:1b: 0c:64:05:10:10:ad:35:54:5b:4b:c0:0a:7e:29:60:14:c0:eb: 1a:9a:7a:c6:e4:02:87:be:5e:b8:41:51:a8:70:09:4e:f4:86: 2f:0e:4e:70:ea:db:91:0f:ae:b5:cb:78:c1:43:bf:6b:6f:40: fc:e6:d9:3e:19:2d:3c:62:f5:42:fa:44:74:a8:a0:70:1d:60: c6:5b:58:14:f4:36:17:07:fa:43:12:31:3f:4c:1a:ca:46:0a: 45:c0:f2:be:7e:d8:20:e5:84:04:3e:8b:bb:8d:e7:69:d7:70: df:d1:2e:96:d0:42:01:d0:3d:b9:6e:aa:22:19:7d:f8:66:43: c9:4b:3b:0d:4d:5b:01:9d:c8:99:09:59:e6:1c:50:50:1e:c8: d2:d7:c3:6c:8c:0f:ed:2b:9e:db:f6:88:31:00:e2:d3:a6:c4: c3:c4:6e:2d:da:62:b5:f8:72:61:01:50:2b:dd:55:90:54:4b: c0:bc:3a:70:ee:6f:7f:e7:14:c3:87:fd:35:1f:20:9b:6e:2d: 63:a8:64:0e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5 NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI0MDYzMDAx MzI0MFoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoOTk2RDU1MTFCOTMxODRF NjI5NjYxMjk0QzM1MkY5NTE4MkM3NUVDNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKu06oI4giHZEyQZFYpvIgavmJ2uyHUQZXXRm6pmR2KLuM7Hfzav 67Vvw3k3XdDQHE9CRcjo5i0TO/B+unbjnJkeQMKEyKG/Cxxczr0rdloQuGaPnh7Q r1jpJYm+1hh9X1TwEUiaAr2CI3S1m7R0wbVcZCqOWHOeKZDDHP/btSkFsBmQ+FG7 4QEDmetGagCF+z8roJXO/0rQOd8UXaf2DLsTeq4odfzW53+8UqMa6Ph3/5GPCzj9 1I+AI1xJczl52cj1/Vs05DHUbCTIpDohA1T09FuqgzcTn9KkIFvprtZt9h5GuuTO 5CPD4X80ejVla4wFIjiUJ/4bOZf73QE4dGkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSZbVURuTGE5ilmEpTDUvlRgsdexjAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ 0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NDgvbVcxVkVia3hoT1lwWmhLVXcxTDVVWUxIWHNZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3N+iDANBgkqhkiG9w0BAQsFAAOCAQEAETqkcaqU5AO6wVxMVSP4sdYhupDY hqRuA5VaYTHUKT/0blYKtc6/pjEZ8B/HH7W5g09f5ykbDGQFEBCtNVRbS8AKfilg FMDrGpp6xuQCh75euEFRqHAJTvSGLw5OcOrbkQ+utct4wUO/a29A/ObZPhktPGL1 QvpEdKigcB1gxltYFPQ2Fwf6QxIxP0waykYKRcDyvn7YIOWEBD6Lu43naddw39Eu ltBCAdA9uW6qIhl9+GZDyUs7DU1bAZ3ImQlZ5hxQUB7I0tfDbIwP7Sue2/aIMQDi 06bEw8RuLdpitfhyYQFQK91VkFRLwLw6cO5vf+cUw4f9NR8gm24tY6hkDg== -----END CERTIFICATE-----Generated at Sun Feb 16 22:03:42 2025 by rpki-client