$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/dTFdNcxeL1O8ICwGJ23pBIR6h4o.roa File: dTFdNcxeL1O8ICwGJ23pBIR6h4o.roa (raw, json) Hash identifier: eLYfIc03JWQvAsoGTuRXfA5SoOp16CGlyWjl/3U6rFA= Subject key identifier: 75:31:5D:35:CC:5E:2F:53:BC:20:2C:06:27:6D:E9:04:84:7A:87:8A Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 01E1 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dTFdNcxeL1O8ICwGJ23pBIR6h4o.roa Signing time: Fri 31 May 2024 01:30:59 +0000 ROA not before: Fri 31 May 2024 01:30:59 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 4713 IP address blocks: 219.160.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 31 01:30:59 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=75315D35CC5E2F53BC202C06276DE904847A878A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:ed:d8:bb:f4:ce:31:da:21:f6:f9:b4:96: 02:9c:54:e1:3b:c5:5e:f0:1d:e6:6d:a6:f1:d6:5c: 73:16:61:eb:38:b8:94:fa:c7:a5:e3:73:b3:41:75: b8:8f:4d:61:9e:a5:bd:f0:56:fb:a9:86:d7:85:7d: a2:b2:06:12:3e:61:1c:35:0c:21:c1:76:76:c5:2f: 3e:38:56:5b:46:d4:78:c2:0b:d7:2d:46:05:e5:a6: d1:f4:55:2d:e2:e5:62:94:76:4a:f1:43:58:98:45: 8e:26:56:00:fe:ab:95:e7:c2:0b:97:05:38:00:93: 7f:33:29:1f:f2:ca:5e:4e:71:37:69:0a:99:98:0d: 88:0a:76:f4:28:3b:68:68:b5:05:d3:f1:1c:94:72: 6e:7d:86:bf:22:3f:0e:c2:c0:b4:9b:a4:38:18:6c: 55:a4:20:18:56:27:33:92:3e:ca:5c:d6:c7:0a:1c: b1:52:a3:ed:4d:04:a1:2e:88:c6:04:4b:e2:ea:26: 20:5a:44:54:c9:9a:1c:53:3f:ca:aa:ab:ad:41:34: 2a:1f:fe:7d:98:41:bc:2b:17:b5:aa:bf:91:ea:85: 71:7a:6c:06:8c:de:76:8c:71:da:34:6b:08:d3:bf: 8c:b4:fe:95:15:2b:a9:da:dc:b8:aa:b2:8c:1b:c2: 6d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:31:5D:35:CC:5E:2F:53:BC:20:2C:06:27:6D:E9:04:84:7A:87:8A X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dTFdNcxeL1O8ICwGJ23pBIR6h4o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.160.0.0/13 Signature Algorithm: sha256WithRSAEncryption 54:2a:f2:1c:9a:2c:50:aa:ff:49:d5:4b:8f:c7:1f:da:c8:a3: f4:62:9b:b9:13:8e:cf:90:9c:3e:c6:43:bb:29:c2:a2:2b:33: 11:66:bc:2f:95:6c:de:12:1c:17:02:e5:37:b0:55:8a:26:e3: 22:39:34:2d:1b:b8:39:e1:c6:a4:6b:f7:35:36:45:14:50:af: 96:9c:1e:6f:db:a3:ff:7a:bb:f0:51:7f:3e:e3:96:1b:29:f3: 62:be:9f:b6:78:ee:37:0d:16:d7:c6:7f:8e:b9:b6:0a:75:4f: 0c:3d:6d:34:b2:16:91:03:88:96:d0:b3:7b:b1:ef:06:83:3b: e2:dc:9c:8a:fd:ec:e7:0f:c7:b8:51:44:64:96:9d:2e:ce:ce: 94:f3:bf:69:a2:2c:be:8e:10:a4:19:e3:8b:b6:2d:a6:fa:fc: 0c:67:2e:8c:b3:69:40:52:2b:75:c6:85:fa:f8:fa:ef:63:26: 01:7b:96:a0:b0:15:d4:cb:ce:5a:ff:2a:b4:f3:c1:a1:83:ab: ec:14:20:79:19:9b:39:fc:b7:c9:ed:06:35:49:9b:3b:70:cc: 91:51:7b:44:f2:2b:50:5d:9a:28:f5:79:70:d9:b9:82:cc:e9: 78:a9:e3:67:fc:21:b6:02:cb:cc:02:41:ee:cc:d7:3d:e3:39: 91:6b:90:a0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDA1MzEw MTMwNTlaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc1MzE1RDM1Q0M1RTJG NTNCQzIwMkMwNjI3NkRFOTA0ODQ3QTg3OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7s+3Yu/TOMdoh9vm0lgKcVOE7xV7wHeZtpvHWXHMWYes4uJT6 x6Xjc7NBdbiPTWGepb3wVvuphteFfaKyBhI+YRw1DCHBdnbFLz44VltG1HjCC9ct RgXlptH0VS3i5WKUdkrxQ1iYRY4mVgD+q5XnwguXBTgAk38zKR/yyl5OcTdpCpmY DYgKdvQoO2hotQXT8RyUcm59hr8iPw7CwLSbpDgYbFWkIBhWJzOSPspc1scKHLFS o+1NBKEuiMYES+LqJiBaRFTJmhxTP8qqq61BNCof/n2YQbwrF7Wqv5HqhXF6bAaM 3naMcdo0awjTv4y0/pUVK6na3Liqsowbwm35AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUdTFdNcxeL1O8ICwGJ23pBIR6h4owHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL2RURmROY3hlTDFPOElDd0dKMjNwQklSNmg0by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwPboDANBgkqhkiG9w0BAQsFAAOCAQEAVCryHJosUKr/SdVLj8cf2sij9GKb uROOz5CcPsZDuynCoiszEWa8L5Vs3hIcFwLlN7BViibjIjk0LRu4OeHGpGv3NTZF FFCvlpweb9uj/3q78FF/PuOWGynzYr6ftnjuNw0W18Z/jrm2CnVPDD1tNLIWkQOI ltCze7HvBoM74tyciv3s5w/HuFFEZJadLs7OlPO/aaIsvo4QpBnji7Ytpvr8DGcu jLNpQFIrdcaF+vj672MmAXuWoLAV1MvOWv8qtPPBoYOr7BQgeRmbOfy3ye0GNUmb O3DMkVF7RPIrUF2aKPV5cNm5gszpeKnjZ/whtgLLzAJB7szXPeM5kWuQoA== -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:06 2025 by rpki-client