$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/sCgQg9_ZgkAvSBlxBIOYM_pVLVQ.roa File: sCgQg9_ZgkAvSBlxBIOYM_pVLVQ.roa (raw, json) Hash identifier: k9LUMyFaLBoab8zVK1Vm/pivMO/sZL6tTHIjy4D9Z6Q= Subject key identifier: B0:28:10:83:DF:D9:82:40:2F:48:19:71:04:83:98:33:FA:55:2D:54 Certificate issuer: /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764 Certificate serial: 56 Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/sCgQg9_ZgkAvSBlxBIOYM_pVLVQ.roa Signing time: Fri 31 Jan 2025 01:31:54 +0000 ROA not before: Fri 31 Jan 2025 01:31:54 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 63774 IP address blocks: 202.226.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764 Validity Not Before: Jan 31 01:31:54 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=B0281083DFD982402F48197104839833FA552D54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b3:fc:47:6a:8a:ef:51:15:a4:bd:79:9a:36: 5d:01:13:bd:51:d2:9e:b3:c7:0e:42:18:0a:72:4a: 17:5b:bf:02:53:bb:89:ad:84:77:93:4c:62:81:c6: 88:34:cb:c1:e0:1f:18:fd:dc:6f:b2:13:e4:9b:9c: 0a:ce:fd:3e:a0:35:06:fd:e2:42:dd:d9:8a:c2:06: cd:63:7a:c1:32:39:73:10:49:61:f9:05:6e:a8:d4: a8:8c:e5:b7:05:e6:5e:e6:e2:06:c1:e5:8c:e2:d2: 04:36:85:3d:40:fe:63:4e:5d:51:8c:1a:3b:1b:53: ed:52:63:a4:1a:2d:ae:a9:45:ae:58:81:01:8b:25: 51:06:6d:e1:c7:47:53:9e:ae:e7:68:cf:31:cf:08: 3e:f2:18:ed:82:9c:f6:e0:a9:77:42:30:c7:3c:7c: 09:86:57:66:46:62:38:60:50:ff:5b:df:1f:85:18: 76:b6:d4:09:40:64:da:a3:f3:57:f1:83:df:3a:5a: 16:6a:d9:8e:d3:48:dd:cc:16:fb:04:3e:2c:80:c4: 23:3b:5a:29:d5:ba:a6:fd:0e:5e:fc:9a:59:5b:66: ba:b4:05:8d:63:99:b0:15:26:21:c7:07:3a:26:8a: d3:e3:4a:f7:b8:df:b1:23:55:07:d9:6b:2c:ef:61: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:28:10:83:DF:D9:82:40:2F:48:19:71:04:83:98:33:FA:55:2D:54 X509v3 Authority Key Identifier: keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/sCgQg9_ZgkAvSBlxBIOYM_pVLVQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.226.0.0/22 Signature Algorithm: sha256WithRSAEncryption 73:4d:e4:4e:33:33:38:93:25:c0:22:39:7c:5c:2f:76:f3:5e: 6f:fe:53:35:e2:43:2f:f8:da:6e:d3:30:9b:ac:c4:45:aa:99: 01:5b:c3:8d:05:48:bd:c8:4f:49:fc:09:fc:ba:95:41:df:d9: a1:32:03:68:d0:00:4f:fa:f5:3e:5c:a7:7b:93:70:e2:31:fb: b4:4f:45:b8:6a:a5:e4:f3:36:df:e6:b2:c3:9f:07:41:05:a7: ec:07:b6:0c:4a:bb:5c:b6:e4:67:1d:b0:a1:d3:dc:5d:30:70: 1a:b4:e5:c1:bf:81:69:9e:d1:b7:a3:8e:5e:69:5e:9b:fa:26: 9e:17:cc:be:a4:f0:41:84:d5:8a:05:65:0f:64:a3:63:ea:0d: e9:42:0c:5e:b4:69:5f:d8:4a:b1:2e:b1:08:ff:59:c8:07:14: f0:45:01:4d:38:d8:48:90:a6:cf:b1:7e:75:e0:69:4a:fb:4b: ce:8c:d0:56:c6:69:36:e2:98:57:e6:95:78:e1:2b:03:95:52: 2e:ba:51:b7:a1:ee:20:18:50:f8:2a:54:2b:4f:a0:54:16:05: 71:67:9f:72:ef:29:79:34:33:b1:e8:3e:b5:f9:d0:40:d1:0a: 01:8f:a5:6c:2c:34:7d:62:c5:cc:fc:d6:be:91:53:99:19:7c: 45:b4:b1:b0 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMEQx ODdEQjFEOUY0RDM2QjRERTQ0OEJFNDM3NjcxMjlBNzlENzY0MB4XDTI1MDEzMTAx MzE1NFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQjAyODEwODNERkQ5ODI0 MDJGNDgxOTcxMDQ4Mzk4MzNGQTU1MkQ1NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPez/Edqiu9RFaS9eZo2XQETvVHSnrPHDkIYCnJKF1u/AlO7ia2E d5NMYoHGiDTLweAfGP3cb7IT5JucCs79PqA1Bv3iQt3ZisIGzWN6wTI5cxBJYfkF bqjUqIzltwXmXubiBsHljOLSBDaFPUD+Y05dUYwaOxtT7VJjpBotrqlFrliBAYsl UQZt4cdHU56u52jPMc8IPvIY7YKc9uCpd0Iwxzx8CYZXZkZiOGBQ/1vfH4UYdrbU CUBk2qPzV/GD3zpaFmrZjtNI3cwW+wQ+LIDEIztaKdW6pv0OXvyaWVtmurQFjWOZ sBUmIccHOiaK0+NK97jfsSNVB9lrLO9hYqcCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSwKBCD39mCQC9IGXEEg5gz+lUtVDAfBgNVHSMEGDAWgBQQ0YfbHZ9NNrTeRIvk N2cSmnnXZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNjQvRU5HSDJ4MmZUVGEwM2tTTDVEZG5FcHA1MTJRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRU5HSDJ4MmZUVGEwM2tTTDVEZG5F cHA1MTJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDY0L3NDZ1FnOV9aZ2tBdlNCbHhCSU9ZTV9wVkxWUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALK4gAwDQYJKoZIhvcNAQELBQADggEBAHNN5E4zMziTJcAiOXxcL3bz Xm/+UzXiQy/42m7TMJusxEWqmQFbw40FSL3IT0n8Cfy6lUHf2aEyA2jQAE/69T5c p3uTcOIx+7RPRbhqpeTzNt/mssOfB0EFp+wHtgxKu1y25GcdsKHT3F0wcBq05cG/ gWme0bejjl5pXpv6Jp4XzL6k8EGE1YoFZQ9ko2PqDelCDF60aV/YSrEusQj/WcgH FPBFAU042EiQps+xfnXgaUr7S86M0FbGaTbimFfmlXjhKwOVUi66Ubeh7iAYUPgq VCtPoFQWBXFnn3LvKXk0M7HoPrX50EDRCgGPpWwsNH1ixcz81r6RU5kZfEW0sbA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:22:46 2025 by rpki-client