$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/4l3WxyiLv9wQMyh4Kz3vwnqo4d0.roa File: 4l3WxyiLv9wQMyh4Kz3vwnqo4d0.roa (raw, json) Hash identifier: aHJO4jMMemDawCcUa7R7pI0QfvcQql3EQdjQXbaw65U= Subject key identifier: E2:5D:D6:C7:28:8B:BF:DC:10:33:28:78:2B:3D:EF:C2:7A:A8:E1:DD Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 84 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/4l3WxyiLv9wQMyh4Kz3vwnqo4d0.roa Signing time: Tue 03 Dec 2024 17:28:19 +0000 ROA not before: Tue 03 Dec 2024 17:28:19 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 30103 IP address blocks: 120.29.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 3 17:28:19 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=E25DD6C7288BBFDC103328782B3DEFC27AA8E1DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:17:01:79:94:94:1e:f4:15:48:6c:a5:7c:74: 60:a2:78:18:c7:4c:eb:e8:2d:dd:40:94:53:cc:dd: 72:f8:59:2b:d3:3a:f8:30:30:78:20:f4:6d:4f:df: 49:b6:2c:6d:66:dd:d6:d7:62:bf:19:6b:d6:9f:83: b3:83:a5:85:20:56:4b:71:d1:bb:f2:7e:a7:75:09: 4a:fd:e8:6d:31:84:0e:41:4f:87:0c:79:fc:a7:45: 8c:0a:34:d3:6c:cd:8a:95:4c:25:47:17:ba:4e:36: 99:22:94:94:21:29:b4:f0:ee:3b:a7:bb:16:30:79: ac:99:00:f9:83:5a:3e:dc:c2:77:9c:a9:a3:6f:14: 6c:90:b5:e4:b1:99:72:99:2a:0c:3f:35:8e:3e:2a: 5a:15:3e:e6:49:e8:4c:e2:4c:59:ec:02:b7:e8:44: 72:be:96:d3:ef:26:a0:3d:f4:f4:91:bd:e7:00:9d: 13:86:9d:4f:9b:2b:83:71:dc:86:a4:22:21:0a:2f: 26:fd:e2:c7:b2:10:77:62:db:cf:52:d7:d9:83:37: 9e:3f:b0:82:cf:e5:1f:be:2b:67:30:bb:9f:4e:53: a0:2e:a4:87:65:64:34:58:33:bb:ba:72:af:c5:be: 61:23:cd:6e:98:58:9e:44:ed:e1:51:65:83:34:e0: 3e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5D:D6:C7:28:8B:BF:DC:10:33:28:78:2B:3D:EF:C2:7A:A8:E1:DD X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/4l3WxyiLv9wQMyh4Kz3vwnqo4d0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.148.0/24 Signature Algorithm: sha256WithRSAEncryption b8:21:3e:ba:c2:1b:b8:96:07:10:87:73:06:33:52:8c:03:dc: be:4e:65:c0:fd:b9:2c:ee:38:53:38:7a:e7:4a:61:bb:8c:4b: 9e:2c:a0:48:75:43:09:3b:ea:bb:de:2f:55:6d:01:ec:4c:34: 5f:a0:67:c4:82:7c:91:b3:3a:e9:35:6d:3b:80:f7:97:65:13: a6:b9:bc:84:4a:40:fd:a9:87:45:db:2c:4b:93:87:04:3b:c3: 2c:ea:51:f7:77:4d:ec:bd:2b:48:2c:e5:f2:e7:1e:d1:b0:7d: 05:2a:73:64:6c:37:14:29:76:e3:73:e9:52:e2:af:38:78:65: 16:21:61:70:fa:66:d4:b2:8f:3e:54:8a:04:e9:27:9b:2d:da: e9:5b:e8:2d:6b:b1:53:46:56:7f:00:13:fa:10:ec:d0:2e:92: 7a:15:1f:f3:c5:06:27:4c:1e:ff:ad:6a:22:4d:29:00:38:5f: 9a:5c:9f:57:e0:8b:c4:99:22:9a:6c:a2:0b:c7:1f:96:21:34: 9f:81:85:58:29:29:4c:2c:51:3b:90:ea:2f:42:8e:53:bc:3d: 3f:d2:1a:70:01:6a:f4:74:b5:bb:46:d6:7a:d6:c8:9f:81:ba: d3:52:38:e2:ab:e6:8e:ac:30:75:df:cb:4c:a9:26:86:e8:f8: 32:86:c0:34 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDMx NzI4MTlaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUyNURENkM3Mjg4QkJG REMxMDMzMjg3ODJCM0RFRkMyN0FBOEUxREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcFwF5lJQe9BVIbKV8dGCieBjHTOvoLd1AlFPM3XL4WSvTOvgw MHgg9G1P30m2LG1m3dbXYr8Za9afg7ODpYUgVktx0bvyfqd1CUr96G0xhA5BT4cM efynRYwKNNNszYqVTCVHF7pONpkilJQhKbTw7junuxYweayZAPmDWj7cwnecqaNv FGyQteSxmXKZKgw/NY4+KloVPuZJ6EziTFnsArfoRHK+ltPvJqA99PSRvecAnROG nU+bK4Nx3IakIiEKLyb94seyEHdi289S19mDN54/sILP5R++K2cwu59OU6AupIdl ZDRYM7u6cq/FvmEjzW6YWJ5E7eFRZYM04D7DAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU4l3WxyiLv9wQMyh4Kz3vwnqo4d0wHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC80bDNXeHlpTHY5d1FNeWg0S3ozdnducW80ZDAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAeB2UMA0GCSqGSIb3DQEBCwUAA4IBAQC4IT66whu4lgcQh3MGM1KM A9y+TmXA/bks7jhTOHrnSmG7jEueLKBIdUMJO+q73i9VbQHsTDRfoGfEgnyRszrp NW07gPeXZROmubyESkD9qYdF2yxLk4cEO8Ms6lH3d03svStILOXy5x7RsH0FKnNk bDcUKXbjc+lS4q84eGUWIWFw+mbUso8+VIoE6SebLdrpW+gta7FTRlZ/ABP6EOzQ LpJ6FR/zxQYnTB7/rWoiTSkAOF+aXJ9X4IvEmSKabKILxx+WITSfgYVYKSlMLFE7 kOovQo5TvD0/0hpwAWr0dLW7RtZ61sifgbrTUjjiq+aOrDB138tMqSaG6PgyhsA0 -----END CERTIFICATE-----Generated at Sat Apr 26 17:10:59 2025 by rpki-client