$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/D_8el0X3FvLQNBxnghircQjiGXY.roa File: D_8el0X3FvLQNBxnghircQjiGXY.roa (raw, json) Hash identifier: Gs74H00z0jru5RrwgzoT+LaMuyCAl+j5pNAMKf2AzIw= Subject key identifier: 0F:FF:1E:97:45:F7:16:F2:D0:34:1C:67:82:18:AB:71:08:E2:19:76 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 8C Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/D_8el0X3FvLQNBxnghircQjiGXY.roa Signing time: Tue 03 Dec 2024 17:44:23 +0000 ROA not before: Tue 03 Dec 2024 17:44:23 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2914 IP address blocks: 61.120.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 3 17:44:23 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=0FFF1E9745F716F2D0341C678218AB7108E21976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ac:c1:6b:86:03:43:d4:2d:d1:08:52:46:01: ca:c8:57:54:69:d1:64:40:9c:e7:7c:28:90:41:4c: b1:bb:f0:fd:62:6c:08:4b:8b:76:d3:c8:ad:6b:c6: 87:3e:71:1d:47:d7:21:81:6d:99:e3:b2:3d:5d:35: 09:88:2a:52:b7:37:6f:e7:2e:bc:56:4d:16:b8:c6: 52:83:af:cd:27:37:ad:ae:79:0a:71:27:cf:4b:35: 96:ad:34:f9:f2:39:e6:c4:e3:1c:6a:5d:bd:56:ed: 25:ea:fb:47:a9:16:7d:5e:c4:d3:98:12:da:e1:d3: 41:36:cf:60:5a:8e:b9:45:ea:99:6a:f8:cf:64:f5: b5:b0:84:e4:9e:93:94:a2:24:db:b8:cb:89:f3:40: 3e:89:c2:f3:1c:c3:0e:0b:55:58:3d:b1:4f:09:27: 15:74:34:22:24:22:65:b5:1d:63:0f:4a:dd:77:79: 52:b2:d4:5b:b4:f7:78:7d:9d:66:9e:f0:be:13:cc: 5f:32:58:7f:96:84:1b:fb:b0:3f:bf:3d:4d:f7:67: 0a:cb:83:ac:3e:d0:7c:1a:95:37:6e:24:8e:37:69: 09:fb:88:85:05:e6:21:87:19:27:d2:8b:f2:48:f0: 65:c5:2f:c5:9f:57:11:b2:68:f6:eb:0b:6d:18:d0: 04:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FF:1E:97:45:F7:16:F2:D0:34:1C:67:82:18:AB:71:08:E2:19:76 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/D_8el0X3FvLQNBxnghircQjiGXY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.120.144.0/20 Signature Algorithm: sha256WithRSAEncryption 61:89:3b:1e:d7:8e:52:2f:e3:15:13:7f:8b:55:0a:68:eb:88: 92:80:68:cb:5f:0e:94:79:2b:78:84:b5:59:51:b2:85:de:cc: ca:50:19:43:3b:f5:69:9f:1c:11:a7:cb:75:2c:64:d7:e8:a2: ca:17:22:08:66:36:cb:5d:a9:67:f4:37:b6:65:57:f6:40:21: 70:3f:e3:8d:d8:0f:e1:21:71:38:d4:29:f1:3a:53:f2:79:82: ae:e4:aa:f5:0a:c8:b7:cf:81:73:7c:1c:b7:0e:1b:45:2f:c8: 0a:c0:8a:fd:65:a6:4b:f6:f9:79:42:8a:b3:2c:19:ed:b6:44: 5a:d8:8d:5c:a2:b7:89:90:36:45:cd:8e:33:ad:52:f3:f5:bf: 34:d6:46:b2:3e:86:b2:bd:33:69:22:8f:3c:71:c3:82:f6:ab: d5:f1:f4:42:50:28:6d:0a:77:9f:d6:2c:92:53:61:01:a5:c8: 37:37:7b:38:e5:b1:17:df:c0:b7:1d:4d:e8:70:99:2c:e7:35: 50:54:8d:c0:00:76:14:9b:72:6a:7c:be:8d:3c:61:ed:f3:1e: f2:32:71:e1:70:8a:b3:56:69:5c:5f:43:5f:b7:27:37:16:fa: 5a:d1:de:63:0a:d2:b8:8b:49:a0:22:94:ac:fe:c3:4d:eb:d4: 59:64:96:4b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDMx NzQ0MjNaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBGRkYxRTk3NDVGNzE2 RjJEMDM0MUM2NzgyMThBQjcxMDhFMjE5NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQrMFrhgND1C3RCFJGAcrIV1Rp0WRAnOd8KJBBTLG78P1ibAhL i3bTyK1rxoc+cR1H1yGBbZnjsj1dNQmIKlK3N2/nLrxWTRa4xlKDr80nN62ueQpx J89LNZatNPnyOebE4xxqXb1W7SXq+0epFn1exNOYEtrh00E2z2BajrlF6plq+M9k 9bWwhOSek5SiJNu4y4nzQD6JwvMcww4LVVg9sU8JJxV0NCIkImW1HWMPSt13eVKy 1Fu093h9nWae8L4TzF8yWH+WhBv7sD+/PU33ZwrLg6w+0HwalTduJI43aQn7iIUF 5iGHGSfSi/JI8GXFL8WfVxGyaPbrC20Y0ARFAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUD/8el0X3FvLQNBxnghircQjiGXYwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9EXzhlbDBYM0Z2TFFOQnhuZ2hpcmNRamlHWFku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEPXiQMA0GCSqGSIb3DQEBCwUAA4IBAQBhiTse145SL+MVE3+LVQpo 64iSgGjLXw6UeSt4hLVZUbKF3szKUBlDO/VpnxwRp8t1LGTX6KLKFyIIZjbLXaln 9De2ZVf2QCFwP+ON2A/hIXE41CnxOlPyeYKu5Kr1Csi3z4FzfBy3DhtFL8gKwIr9 ZaZL9vl5QoqzLBnttkRa2I1coreJkDZFzY4zrVLz9b801kayPoayvTNpIo88ccOC 9qvV8fRCUChtCnef1iySU2EBpcg3N3s45bEX38C3HU3ocJks5zVQVI3AAHYUm3Jq fL6NPGHt8x7yMnHhcIqzVmlcX0Nftyc3Fvpa0d5jCtK4i0mgIpSs/sNN69RZZJZL -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:58 2025 by rpki-client