$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1949/rM0xxUU2x3sY-dTLSgoDBcKfi28.roa File: rM0xxUU2x3sY-dTLSgoDBcKfi28.roa (raw, json) Hash identifier: T6KnAo60JRCJqXYKayoPSCjakSanKu6VTNeJA9Jm+0w= Subject key identifier: AC:CD:31:C5:45:36:C7:7B:18:F9:D4:CB:4A:0A:03:05:C2:9F:8B:6F Certificate issuer: /CN=DF98C5899E61FB775E1B767EB169536D57A07BAC Certificate serial: 51 Authority key identifier: DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/rM0xxUU2x3sY-dTLSgoDBcKfi28.roa Signing time: Fri 31 Jan 2025 01:32:12 +0000 ROA not before: Fri 31 Jan 2025 01:32:12 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 2504 IP address blocks: 192.50.26.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF98C5899E61FB775E1B767EB169536D57A07BAC Validity Not Before: Jan 31 01:32:12 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=ACCD31C54536C77B18F9D4CB4A0A0305C29F8B6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:3d:0b:d8:4f:7c:f7:05:ef:9d:3f:f3:c6: ec:39:13:72:ea:a5:60:d4:50:cb:78:43:7c:d8:45: ec:db:95:2d:a4:8a:45:df:be:d6:2c:12:b7:23:25: 50:81:49:50:42:68:7e:b4:cd:0a:05:a4:aa:91:15: 8b:65:ba:3b:22:33:df:c3:4b:88:0a:60:7f:0e:c8: aa:37:36:cb:fb:32:fc:6c:99:2e:f9:13:1e:9e:a6: d4:e7:2c:88:82:1f:68:86:cb:a8:45:72:46:85:25: 54:9d:fd:07:da:38:78:9f:33:eb:b6:ef:0e:b4:b4: 9a:4f:dc:08:c7:9b:1a:9c:8f:39:e2:6a:7f:b8:ef: 2f:e3:54:4a:9f:d6:b4:8a:89:3d:6a:bb:6e:a1:f4: 4f:4b:a7:89:a9:10:b2:72:79:07:5c:4c:22:3e:a8: b6:eb:1b:b8:be:9e:71:e5:71:b8:6d:ff:0a:47:a0: 7e:58:45:8c:2f:9b:b3:34:60:ee:9b:92:28:03:80: e1:9e:41:2e:65:68:3b:f7:76:5a:a0:ca:d5:3f:99: 8a:1b:a2:13:a5:8b:9a:5e:62:36:bf:44:3f:d1:ad: a3:53:71:18:c5:65:67:41:0e:47:fa:f0:53:29:59: 85:84:6b:77:6a:93:f4:40:33:63:6e:fe:aa:71:3c: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CD:31:C5:45:36:C7:7B:18:F9:D4:CB:4A:0A:03:05:C2:9F:8B:6F X509v3 Authority Key Identifier: keyid:DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/rM0xxUU2x3sY-dTLSgoDBcKfi28.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.50.26.0/24 Signature Algorithm: sha256WithRSAEncryption 64:40:a4:39:ab:e0:25:7d:d5:80:51:b9:07:c1:af:c9:92:88: b8:6b:45:5b:ec:09:b2:d3:31:1d:f2:e3:c6:8c:a1:01:b2:75: f9:8a:23:be:9d:7b:0d:18:d8:20:a0:cc:cc:1e:17:f0:35:a2: 01:f2:12:17:00:24:98:03:56:d7:66:43:7c:73:1a:34:c4:b1: af:93:2d:0b:e8:fd:9d:f6:3f:82:e2:7e:1f:2e:d5:10:ae:93: 7a:86:e1:ad:46:d1:5c:95:04:08:9b:16:40:ed:16:1b:f1:e1: 9f:97:cf:ad:67:0f:6d:8a:8f:67:32:e3:6a:a5:d4:76:cd:4c: 5e:e3:5c:79:e6:d1:6e:c6:38:82:e3:48:39:3b:be:ba:4d:5a: 32:55:3f:81:64:09:f4:68:c8:67:94:49:5c:09:2e:46:60:bf: c7:05:d0:78:07:3c:fc:9b:47:5c:d7:c5:95:01:de:07:e9:9a: cf:cb:55:a5:7e:6e:eb:d2:56:80:04:4a:8a:68:37:89:b5:51: ea:e5:5d:6b:a5:b1:ae:d2:41:73:46:d2:6b:87:23:2a:14:8a: 54:8c:6f:40:0e:97:7b:68:0e:df:24:af:56:2c:5e:cf:f1:98: ae:7b:98:6b:ce:0a:48:51:c2:24:1e:c3:04:c8:e3:ed:45:d7: db:69:f5:79 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERjk4 QzU4OTlFNjFGQjc3NUUxQjc2N0VCMTY5NTM2RDU3QTA3QkFDMB4XDTI1MDEzMTAx MzIxMloXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQUNDRDMxQzU0NTM2Qzc3 QjE4RjlENENCNEEwQTAzMDVDMjlGOEI2RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALJ4PQvYT3z3Be+dP/PG7DkTcuqlYNRQy3hDfNhF7NuVLaSKRd++ 1iwStyMlUIFJUEJofrTNCgWkqpEVi2W6OyIz38NLiApgfw7Iqjc2y/sy/GyZLvkT Hp6m1OcsiIIfaIbLqEVyRoUlVJ39B9o4eJ8z67bvDrS0mk/cCMebGpyPOeJqf7jv L+NUSp/WtIqJPWq7bqH0T0uniakQsnJ5B1xMIj6otusbuL6eceVxuG3/CkegflhF jC+bszRg7puSKAOA4Z5BLmVoO/d2WqDK1T+ZihuiE6WLml5iNr9EP9Gto1NxGMVl Z0EOR/rwUylZhYRrd2qT9EAzY27+qnE8nc0CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBSszTHFRTbHexj51MtKCgMFwp+LbzAfBgNVHSMEGDAWgBTfmMWJnmH7d14bdn6x aVNtV6B7rDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTk0OS8zNWpGaVo1aC0zZGVHM1otc1dsVGJWZWdlNncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8zNWpGaVo1aC0zZGVHM1otc1dsVGJW ZWdlNncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTk0OS9yTTB4eFVVMngzc1ktZFRMU2dvREJjS2ZpMjgucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwDIaMA0GCSqGSIb3DQEBCwUAA4IBAQBkQKQ5q+AlfdWAUbkHwa/Jkoi4 a0Vb7Amy0zEd8uPGjKEBsnX5iiO+nXsNGNggoMzMHhfwNaIB8hIXACSYA1bXZkN8 cxo0xLGvky0L6P2d9j+C4n4fLtUQrpN6huGtRtFclQQImxZA7RYb8eGfl8+tZw9t io9nMuNqpdR2zUxe41x55tFuxjiC40g5O766TVoyVT+BZAn0aMhnlElcCS5GYL/H BdB4Bzz8m0dc18WVAd4H6ZrPy1Wlfm7r0laABEqKaDeJtVHq5V1rpbGu0kFzRtJr hyMqFIpUjG9ADpd7aA7fJK9WLF7P8Ziue5hrzgpIUcIkHsMEyOPtRdfbafV5 -----END CERTIFICATE-----Generated at Sat Apr 26 17:54:35 2025 by rpki-client