$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/aCKUeZU3WSLhACxmTMwCPJCZLUw.roa File: aCKUeZU3WSLhACxmTMwCPJCZLUw.roa (raw, json) Hash identifier: gTGxvDID6/8y43sm1M1aG0OHolLQnUlbjN1MRV66t2Y= Subject key identifier: 68:22:94:79:95:37:59:22:E1:00:2C:66:4C:CC:02:3C:90:99:2D:4C Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Certificate serial: C0 Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/aCKUeZU3WSLhACxmTMwCPJCZLUw.roa Signing time: Fri 31 Jan 2025 01:31:35 +0000 ROA not before: Fri 31 Jan 2025 01:31:35 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18126 IP address blocks: 202.62.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Validity Not Before: Jan 31 01:31:35 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=6822947995375922E1002C664CCC023C90992D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:14:49:77:68:d9:6e:75:55:e5:da:1a:b4: 5c:f8:bf:94:08:ce:45:4b:03:df:97:34:ca:4d:2b: 17:47:75:22:d0:ea:82:c8:8b:b4:ea:4f:23:0b:14: 87:b9:5f:50:0f:b2:09:52:65:81:27:ab:96:0e:f6: 80:cb:6e:c6:9c:04:6b:83:98:d1:ab:8e:27:21:8e: 3b:4b:88:35:5e:3b:66:e9:e5:ec:bc:3c:b0:45:f0: e1:cb:c5:53:7d:7c:a9:ef:00:42:b8:92:77:d5:f7: 79:63:55:b8:1e:fb:be:b3:b0:fd:ee:bb:45:4a:39: ef:60:13:7a:2d:80:ff:e2:5a:4d:c7:98:33:bb:e8: f3:e0:37:35:9e:56:d6:78:09:1d:46:a9:ba:f2:7f: 60:5a:08:72:63:71:2b:99:ba:28:ef:ec:f6:c7:19: 9e:73:7c:64:36:6d:82:92:e4:5f:19:61:fd:1c:b9: cf:6a:8c:52:65:8b:2b:84:b2:d1:6a:6f:59:53:e2: 88:a4:06:b0:4d:c0:9f:ed:ce:8a:51:da:43:76:aa: 14:58:d4:f8:bc:c3:04:90:0a:1d:7f:ec:af:30:3f: e9:39:d3:5d:2e:7e:b5:28:4f:fd:f4:5f:96:e6:c5: cb:ec:80:9d:ba:ef:5f:df:79:48:71:a0:2a:cc:e6: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:22:94:79:95:37:59:22:E1:00:2C:66:4C:CC:02:3C:90:99:2D:4C X509v3 Authority Key Identifier: keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/aCKUeZU3WSLhACxmTMwCPJCZLUw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.62.160.0/20 Signature Algorithm: sha256WithRSAEncryption 30:6a:d0:0e:56:fd:ea:69:11:b9:e6:e1:12:50:2d:8f:57:23: 2e:fa:d8:7e:2d:33:e4:98:89:1d:c4:c3:d3:89:7d:f6:56:aa: 68:38:4a:13:b9:17:08:ab:99:a4:e2:22:5c:55:1e:24:a2:18: 13:6a:07:58:16:50:cc:43:47:28:20:a7:0e:4a:0e:74:e9:85: e2:fd:6b:9f:f0:51:8c:cc:9e:ab:a2:65:f8:1b:85:78:85:3c: 48:53:9b:8b:9e:71:d5:8c:48:71:2b:f3:41:23:ae:8e:3d:f4: d5:94:84:85:e5:de:9d:ce:bd:32:db:7f:a9:df:98:2d:5d:b3: 46:5c:c2:29:30:2f:d4:5b:4a:c9:01:f7:cf:24:5b:08:ad:40: 21:dc:a0:85:12:a6:56:a7:cc:c1:7a:94:54:33:68:1c:a7:2e: 2e:7f:b6:b8:06:52:08:f5:3b:b0:e0:c1:76:50:5e:b7:a7:c1: 13:6b:36:ef:69:24:ad:a0:d2:a4:4e:d5:be:b8:7e:2a:3a:0f: 97:75:e2:16:e7:44:27:12:42:ad:3c:f2:15:81:eb:34:45:25: 5f:bf:0c:3a:6f:7a:bd:6d:24:0f:34:7e:68:b1:7d:10:70:91: e9:7e:c4:16:c2:e4:89:b4:90:a0:be:79:81:6a:c8:ca:d1:fc: 1c:5c:26:9b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNTAxMzEw MTMxMzVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY4MjI5NDc5OTUzNzU5 MjJFMTAwMkM2NjRDQ0MwMjNDOTA5OTJENEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBhhRJd2jZbnVV5doatFz4v5QIzkVLA9+XNMpNKxdHdSLQ6oLI i7TqTyMLFIe5X1APsglSZYEnq5YO9oDLbsacBGuDmNGrjichjjtLiDVeO2bp5ey8 PLBF8OHLxVN9fKnvAEK4knfV93ljVbge+76zsP3uu0VKOe9gE3otgP/iWk3HmDO7 6PPgNzWeVtZ4CR1Gqbryf2BaCHJjcSuZuijv7PbHGZ5zfGQ2bYKS5F8ZYf0cuc9q jFJliyuEstFqb1lT4oikBrBNwJ/tzopR2kN2qhRY1Pi8wwSQCh1/7K8wP+k5010u frUoT/30X5bmxcvsgJ2671/feUhxoCrM5ldnAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUaCKUeZU3WSLhACxmTMwCPJCZLUwwHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDE3My9hQ0tVZVpVM1dTTGhBQ3htVE13Q1BKQ1pMVXcu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEyj6gMA0GCSqGSIb3DQEBCwUAA4IBAQAwatAOVv3qaRG55uESUC2P VyMu+th+LTPkmIkdxMPTiX32VqpoOEoTuRcIq5mk4iJcVR4kohgTagdYFlDMQ0co IKcOSg506YXi/Wuf8FGMzJ6romX4G4V4hTxIU5uLnnHVjEhxK/NBI66OPfTVlISF 5d6dzr0y23+p35gtXbNGXMIpMC/UW0rJAffPJFsIrUAh3KCFEqZWp8zBepRUM2gc py4uf7a4BlII9Tuw4MF2UF63p8ETazbvaSStoNKkTtW+uH4qOg+XdeIW50QnEkKt PPIVges0RSVfvww6b3q9bSQPNH5osX0QcJHpfsQWwuSJtJCgvnmBasjK0fwcXCab -----END CERTIFICATE-----Generated at Sat Apr 26 19:44:07 2025 by rpki-client