$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/J5Rz8oXbQEJk8gssAfFbzH27kWE.roa File: J5Rz8oXbQEJk8gssAfFbzH27kWE.roa (raw, json) Hash identifier: /NvhgjAlB+2N48IuXxAhT1RxoomG+cancg5GOevnSpk= Subject key identifier: 27:94:73:F2:85:DB:40:42:64:F2:0B:2C:01:F1:5B:CC:7D:BB:91:61 Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Certificate serial: BC Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/J5Rz8oXbQEJk8gssAfFbzH27kWE.roa Signing time: Fri 31 Jan 2025 01:31:33 +0000 ROA not before: Fri 31 Jan 2025 01:31:33 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18126 IP address blocks: 123.48.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Validity Not Before: Jan 31 01:31:33 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=279473F285DB404264F20B2C01F15BCC7DBB9161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6f:0a:9c:bc:ca:f2:4d:aa:62:33:05:a9:7b: 93:91:5a:f7:da:d9:af:44:ad:bd:73:aa:23:a2:9e: 7d:67:81:d0:44:d1:e9:5c:2b:0d:ee:0a:52:7d:d6: 4f:ea:0f:39:90:1e:01:e0:d1:0b:f2:a0:1f:d0:15: cb:75:73:48:d6:89:ae:e5:bd:69:6b:31:4e:5c:6a: a2:e6:cd:45:88:a3:70:5c:3a:bf:fb:8c:b9:ba:1f: cb:a2:92:c5:59:5a:6e:fd:b2:e2:2c:62:60:f1:18: ec:a1:45:f2:65:3b:7e:11:62:b4:87:39:8a:5f:6e: 82:da:31:01:6a:e2:40:ee:5b:1e:1a:f8:0e:83:65: 45:e7:4e:7e:ca:eb:31:e9:1d:d1:1f:39:d6:f6:16: 3a:15:6a:9c:df:d9:33:b8:2d:ea:50:1b:de:d7:b2: 4d:83:ba:ac:fc:00:2f:9f:12:06:51:c9:ff:3f:f7: 16:29:a1:a5:fc:11:3e:3a:03:9b:07:4d:f9:15:e8: 38:42:cc:99:94:e4:8f:93:13:0b:d6:7e:87:9d:20: 5f:7d:f4:56:3f:b9:b9:d9:cf:81:a0:a3:79:05:55: 9c:30:34:f8:10:1c:dd:75:43:38:78:14:93:bb:be: 87:a0:b4:76:a7:23:6e:41:09:f1:20:44:f8:a0:1c: 00:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:94:73:F2:85:DB:40:42:64:F2:0B:2C:01:F1:5B:CC:7D:BB:91:61 X509v3 Authority Key Identifier: keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/J5Rz8oXbQEJk8gssAfFbzH27kWE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.48.0.0/16 Signature Algorithm: sha256WithRSAEncryption ac:23:9e:8b:b3:24:1f:76:21:64:17:bd:38:3b:a6:c0:5f:72: 07:8f:fe:c7:52:d8:cf:63:9f:d1:e1:1c:ba:05:89:9a:5b:d0: d4:fb:76:95:4b:c9:70:52:37:e4:6f:a1:33:4c:8b:6e:7d:40: 3b:ff:8c:99:8e:f1:3e:76:e7:65:75:4c:db:1c:53:41:5f:5d: 81:e9:a5:f1:9b:de:e8:f0:78:5e:1a:a1:5d:dd:bd:b7:86:8b: 3c:59:d8:4c:8f:be:94:0e:f5:d9:63:ae:06:29:4a:bb:5b:a5: 78:8b:51:9f:43:de:e0:19:62:4d:05:04:37:c0:b5:9a:ca:25: 35:cb:94:04:80:a0:26:2f:4e:cd:26:e8:39:51:73:6c:f6:b8: b8:5e:d6:c9:89:96:82:e4:0d:26:f1:3a:ba:a2:55:98:3e:1c: 26:c8:ff:74:c6:f7:c5:62:00:d1:f0:96:9b:1e:f7:5d:86:a3: b8:82:70:22:c2:96:47:d2:30:25:b4:f9:91:f3:08:9f:8f:3b: 2e:ab:bb:50:24:40:82:df:6d:52:14:b5:48:45:7d:b9:59:67: 5c:bf:f8:04:53:5d:66:b1:86:35:03:2d:a3:7d:81:c3:6c:dc: d0:9c:8b:79:4d:6c:35:45:c2:9b:d6:1e:1f:04:07:52:b6:dd: 6f:f3:ee:1f -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNTAxMzEw MTMxMzNaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI3OTQ3M0YyODVEQjQw NDI2NEYyMEIyQzAxRjE1QkNDN0RCQjkxNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvbwqcvMryTapiMwWpe5ORWvfa2a9Erb1zqiOinn1ngdBE0elc Kw3uClJ91k/qDzmQHgHg0QvyoB/QFct1c0jWia7lvWlrMU5caqLmzUWIo3BcOr/7 jLm6H8uiksVZWm79suIsYmDxGOyhRfJlO34RYrSHOYpfboLaMQFq4kDuWx4a+A6D ZUXnTn7K6zHpHdEfOdb2FjoVapzf2TO4LepQG97Xsk2Duqz8AC+fEgZRyf8/9xYp oaX8ET46A5sHTfkV6DhCzJmU5I+TEwvWfoedIF999FY/ubnZz4Ggo3kFVZwwNPgQ HN11Qzh4FJO7voegtHanI25BCfEgRPigHABBAgMBAAGjggInMIICIzAdBgNVHQ4E FgQUJ5Rz8oXbQEJk8gssAfFbzH27kWEwHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDE3My9KNVJ6OG9YYlFFSms4Z3NzQWZGYnpIMjdrV0Uu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAezAwDQYJKoZIhvcNAQELBQADggEBAKwjnouzJB92IWQXvTg7psBf cgeP/sdS2M9jn9HhHLoFiZpb0NT7dpVLyXBSN+RvoTNMi259QDv/jJmO8T5252V1 TNscU0FfXYHppfGb3ujweF4aoV3dvbeGizxZ2EyPvpQO9dljrgYpSrtbpXiLUZ9D 3uAZYk0FBDfAtZrKJTXLlASAoCYvTs0m6DlRc2z2uLhe1smJloLkDSbxOrqiVZg+ HCbI/3TG98ViANHwlpse912Go7iCcCLClkfSMCW0+ZHzCJ+POy6ru1AkQILfbVIU tUhFfblZZ1y/+ARTXWaxhjUDLaN9gcNs3NCci3lNbDVFwpvWHh8EB1K23W/z7h8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:54:48 2025 by rpki-client