$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/kDPxcp7iq4_STyniVj91rFBsZUc.roa File: kDPxcp7iq4_STyniVj91rFBsZUc.roa (raw, json) Hash identifier: Lo7SOWUjPjUSSJJkmKlNJ9PLvDkWl4ZMH2unMUi0BM0= Subject key identifier: 90:33:F1:72:9E:E2:AB:8F:D2:4F:29:E2:56:3F:75:AC:50:6C:65:47 Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: C8 Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/kDPxcp7iq4_STyniVj91rFBsZUc.roa Signing time: Fri 31 Jan 2025 01:31:22 +0000 ROA not before: Fri 31 Jan 2025 01:31:22 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18126 IP address blocks: 202.124.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Jan 31 01:31:22 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=9033F1729EE2AB8FD24F29E2563F75AC506C6547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f6:11:62:53:aa:fb:ca:97:10:df:97:45:3c: 25:dc:f8:5e:cc:f6:62:93:41:6d:67:e3:c1:c3:1c: 8c:58:6f:e3:01:b3:ea:6b:5b:d6:f4:a3:8d:59:07: da:03:ec:7d:07:80:a9:e2:78:25:7a:5c:c2:74:73: 4f:44:84:d6:24:63:c2:a4:a3:c2:1b:ec:16:a7:db: 3e:8a:10:8f:d7:2e:35:b9:3c:59:d9:db:8d:cd:bd: 3d:91:ad:dc:75:bf:cb:65:b0:7d:b6:41:88:54:ba: 44:22:05:c1:9b:e2:ed:1e:3c:02:08:d0:cb:91:7c: 49:41:21:d3:70:7a:4f:ef:9e:15:51:8b:78:fc:b9: 71:5c:6f:97:cf:c0:f5:bd:d8:7c:b6:34:a3:dc:98: 59:77:0d:d6:9d:43:2d:8b:01:71:cc:06:8f:a9:15: 69:ff:2d:37:04:b9:d3:a8:ee:1b:82:14:c3:89:e7: 9e:67:fd:66:7f:c9:35:13:b8:61:f7:da:b8:8e:9f: 50:df:13:43:3f:b5:68:1c:70:9d:be:b7:d4:c9:4b: 38:9d:72:81:35:ce:04:57:57:ed:28:af:bb:2b:8a: 37:50:dc:4f:ae:0b:d1:68:6f:f2:f7:bb:5f:27:7c: c6:2e:3f:bc:1a:45:b5:56:b0:18:d8:7f:97:3b:bd: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:33:F1:72:9E:E2:AB:8F:D2:4F:29:E2:56:3F:75:AC:50:6C:65:47 X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/kDPxcp7iq4_STyniVj91rFBsZUc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.124.208.0/20 Signature Algorithm: sha256WithRSAEncryption 60:69:bb:01:57:ad:b7:c1:0e:e5:4a:b3:70:73:f2:ae:f5:93: 20:54:55:a5:f9:5a:bd:77:0e:15:0f:17:2f:b4:13:0d:1d:5a: 44:dd:44:12:a0:d7:38:de:e9:0b:8a:88:bf:1d:18:dd:f0:04: 78:a4:74:be:81:87:a6:a8:2d:06:24:a1:fd:14:cd:94:bd:bc: cc:09:3a:35:60:3f:75:99:fb:bd:7f:c4:26:46:63:fd:11:b4: b8:0d:a7:21:68:21:56:42:b0:cc:e6:45:6a:4b:77:3c:96:99: d0:f5:ba:7c:0c:a9:f1:4e:ee:eb:fb:05:82:d2:60:17:ba:44: 21:c7:bb:8c:15:d4:51:8c:da:24:95:ba:4c:fe:e3:15:e1:8f: 45:b5:08:6f:10:8b:7c:93:a8:ed:8f:69:c3:92:f7:66:0c:a9: 99:c9:d5:4b:ee:d7:57:40:32:94:a9:7c:7a:26:43:63:6d:32: fb:1e:be:f6:91:82:f8:7a:bc:e3:21:51:3a:f1:8b:61:71:ab: 30:28:ed:4f:e4:82:e0:d5:9c:ae:a6:e6:ee:85:f8:fc:30:db: ee:1c:82:c7:2e:6f:80:8f:e4:45:02:e9:e4:8c:ff:48:22:c6: 99:35:86:aa:e9:9e:98:f4:9d:de:81:0d:00:79:2a:4a:f7:ab: 9c:a9:87:b4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNTAxMzEw MTMxMjJaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkwMzNGMTcyOUVFMkFC OEZEMjRGMjlFMjU2M0Y3NUFDNTA2QzY1NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY9hFiU6r7ypcQ35dFPCXc+F7M9mKTQW1n48HDHIxYb+MBs+pr W9b0o41ZB9oD7H0HgKnieCV6XMJ0c09EhNYkY8Kko8Ib7Ban2z6KEI/XLjW5PFnZ 243NvT2Rrdx1v8tlsH22QYhUukQiBcGb4u0ePAII0MuRfElBIdNwek/vnhVRi3j8 uXFcb5fPwPW92Hy2NKPcmFl3DdadQy2LAXHMBo+pFWn/LTcEudOo7huCFMOJ555n /WZ/yTUTuGH32riOn1DfE0M/tWgccJ2+t9TJSzidcoE1zgRXV+0or7srijdQ3E+u C9Fob/L3u18nfMYuP7waRbVWsBjYf5c7vZ5HAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkDPxcp7iq4/STyniVj91rFBsZUcwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTczL2tEUHhjcDdpcTRfU1R5bmlWajkxckZCc1pVYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKfNAwDQYJKoZIhvcNAQELBQADggEBAGBpuwFXrbfBDuVKs3Bz8q71kyBU VaX5Wr13DhUPFy+0Ew0dWkTdRBKg1zje6QuKiL8dGN3wBHikdL6Bh6aoLQYkof0U zZS9vMwJOjVgP3WZ+71/xCZGY/0RtLgNpyFoIVZCsMzmRWpLdzyWmdD1unwMqfFO 7uv7BYLSYBe6RCHHu4wV1FGM2iSVukz+4xXhj0W1CG8Qi3yTqO2PacOS92YMqZnJ 1Uvu11dAMpSpfHomQ2NtMvsevvaRgvh6vOMhUTrxi2FxqzAo7U/kguDVnK6m5u6F +Pww2+4cgscub4CP5EUC6eSM/0gixpk1hqrpnpj0nd6BDQB5Kkr3q5yph7Q= -----END CERTIFICATE-----Generated at Sat Apr 26 20:33:38 2025 by rpki-client