$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KWMLT-y-FPFcThZmw13kO32QtfQ.roa File: KWMLT-y-FPFcThZmw13kO32QtfQ.roa (raw, json) Hash identifier: VydMup2objEABhiI0J/ivZTZ3mXZ2UAeTuH0fpQukRw= Subject key identifier: 29:63:0B:4F:EC:BE:14:F1:5C:4E:16:66:C3:5D:E4:3B:7D:90:B5:F4 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 8D Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KWMLT-y-FPFcThZmw13kO32QtfQ.roa Signing time: Tue 03 Dec 2024 17:44:24 +0000 ROA not before: Tue 03 Dec 2024 17:44:24 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2914 IP address blocks: 61.120.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 3 17:44:24 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=29630B4FECBE14F15C4E1666C35DE43B7D90B5F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:cd:c2:b9:0d:0a:26:fa:df:cf:22:47:a6: d0:90:5c:34:c6:b8:a9:fe:a8:d3:9d:92:90:03:ee: 73:fb:cf:81:8f:0c:ca:66:17:9f:a5:2e:01:38:76: 3a:38:94:63:1e:50:de:c6:d3:cc:2f:57:7d:16:16: 59:27:cf:63:dd:e9:8b:b7:54:89:4f:8c:4e:31:19: e3:7b:ab:76:3e:38:7c:d1:9d:7d:9c:ad:ac:64:ab: 76:0d:a8:ad:cd:ab:d4:32:03:d5:06:e2:81:b9:d8: b8:a6:5b:5e:f0:5e:d0:85:09:60:5b:94:b1:a2:43: d6:12:d0:d0:9a:b5:0e:61:3e:14:49:19:d6:79:3d: 47:3f:67:5a:b9:c9:e8:29:5d:8d:5e:7a:3f:04:da: ca:6d:08:c4:ff:b6:b1:ad:1b:55:a5:2a:5b:8a:6d: 06:03:cc:0a:b7:9b:43:5a:e2:ea:ca:20:e6:fe:82: 68:1b:3d:97:be:ee:a1:90:a7:2b:aa:c6:53:6d:78: b6:36:d4:02:ef:3b:1f:79:60:06:47:0f:e9:01:95: d2:5b:73:93:6f:81:89:97:4e:1c:9d:07:37:69:04: ad:29:8a:8c:0c:ed:90:61:8d:1d:ae:31:c4:99:17: 7c:fd:d8:29:3c:30:1c:39:23:41:aa:14:93:8a:c5: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:63:0B:4F:EC:BE:14:F1:5C:4E:16:66:C3:5D:E4:3B:7D:90:B5:F4 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KWMLT-y-FPFcThZmw13kO32QtfQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.120.152.0/21 Signature Algorithm: sha256WithRSAEncryption 16:c5:8c:f1:00:a6:8e:9d:b9:ef:1f:e5:31:91:4b:67:12:1d: ec:d6:6f:0d:1f:20:2f:8f:64:c9:eb:ca:12:3a:3b:c1:75:68: ec:33:ac:6a:1a:3c:ed:61:33:40:af:11:28:3b:c5:74:4d:05: 05:a6:bb:3f:ef:3d:f9:52:72:2f:e7:c6:e1:01:fd:fe:3f:07: bb:42:48:ac:0e:4f:a6:f4:57:bf:a5:fd:64:ea:94:31:0d:73: 8c:af:57:97:e6:3d:1b:a6:0f:bf:d3:fe:8d:9f:77:6c:92:0e: 8f:52:d5:10:56:a4:93:1d:87:63:5f:05:9a:0f:c0:fd:78:c9: fb:3b:61:ac:9a:91:0a:85:bf:ec:09:df:5a:69:20:86:9f:75: ca:d8:90:84:3e:84:19:a9:ba:2c:41:d7:2f:40:e8:f3:12:39: c5:c6:3c:db:32:55:0f:9a:3e:78:5e:5c:c5:f5:b4:57:66:4e: 85:12:be:84:4d:5c:15:56:7a:fb:e8:64:48:61:1c:1a:f4:c4: 2f:f3:45:62:d3:69:99:5d:2e:3f:8b:1c:f4:c6:ba:11:66:81: c2:82:e9:a2:bf:62:43:3e:f5:fc:89:e9:a1:88:0c:f7:e1:7b: e1:0e:d9:6a:b0:da:3e:2d:5a:df:68:96:70:ef:37:ba:4e:43: d4:46:25:c9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDMx NzQ0MjRaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI5NjMwQjRGRUNCRTE0 RjE1QzRFMTY2NkMzNURFNDNCN0Q5MEI1RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD9c3CuQ0KJvrfzyJHptCQXDTGuKn+qNOdkpAD7nP7z4GPDMpm F5+lLgE4djo4lGMeUN7G08wvV30WFlknz2Pd6Yu3VIlPjE4xGeN7q3Y+OHzRnX2c raxkq3YNqK3Nq9QyA9UG4oG52LimW17wXtCFCWBblLGiQ9YS0NCatQ5hPhRJGdZ5 PUc/Z1q5yegpXY1eej8E2sptCMT/trGtG1WlKluKbQYDzAq3m0Na4urKIOb+gmgb PZe+7qGQpyuqxlNteLY21ALvOx95YAZHD+kBldJbc5NvgYmXThydBzdpBK0piowM 7ZBhjR2uMcSZF3z92Ck8MBw5I0GqFJOKxfLlAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUKWMLT+y+FPFcThZmw13kO32QtfQwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9LV01MVC15LUZQRmNUaFptdzEza08zMlF0ZlEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDPXiYMA0GCSqGSIb3DQEBCwUAA4IBAQAWxYzxAKaOnbnvH+UxkUtn Eh3s1m8NHyAvj2TJ68oSOjvBdWjsM6xqGjztYTNArxEoO8V0TQUFprs/7z35UnIv 58bhAf3+Pwe7QkisDk+m9Fe/pf1k6pQxDXOMr1eX5j0bpg+/0/6Nn3dskg6PUtUQ VqSTHYdjXwWaD8D9eMn7O2GsmpEKhb/sCd9aaSCGn3XK2JCEPoQZqbosQdcvQOjz EjnFxjzbMlUPmj54XlzF9bRXZk6FEr6ETVwVVnr76GRIYRwa9MQv80Vi02mZXS4/ ixz0xroRZoHCgumiv2JDPvX8iemhiAz34XvhDtlqsNo+LVrfaJZw7ze6TkPURiXJ -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:38 2025 by rpki-client