$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YZyJqwll_HCa08H9-7E0Dc6dRiE.roa File: YZyJqwll_HCa08H9-7E0Dc6dRiE.roa (raw, json) Hash identifier: b4OonhxukXtIJDnQ8WGh8jsJCbEQSBwluz2EFobMELs= Subject key identifier: 61:9C:89:AB:09:65:FC:70:9A:D3:C1:FD:FB:B1:34:0D:CE:9D:46:21 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 7A Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YZyJqwll_HCa08H9-7E0Dc6dRiE.roa Signing time: Sat 30 Nov 2024 01:28:56 +0000 ROA not before: Sat 30 Nov 2024 01:28:56 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 6220 IP address blocks: 61.200.83.64/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 30 01:28:56 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=619C89AB0965FC709AD3C1FDFBB1340DCE9D4621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9c:27:cf:60:19:ba:9f:39:1b:d3:38:0d:3d: ae:cd:9c:e9:9a:c3:52:5a:26:e3:e8:4d:0d:7b:02: 59:11:88:74:c7:38:80:53:6a:b3:d9:ab:a3:3f:f8: 8c:f2:42:bf:23:92:9d:9e:f2:12:74:3e:f0:17:76: c7:c2:93:7a:e9:4d:51:78:cc:7b:56:b8:c1:e6:c9: 43:93:b3:c8:bc:cf:92:d8:c0:a9:88:b3:6b:31:30: db:89:5e:10:36:f0:f9:de:ed:ac:b4:63:e7:fb:66: 40:44:56:bf:33:e6:2e:58:66:1b:0a:07:03:f0:ca: 1c:75:6b:79:fc:0b:f0:a0:c7:a8:77:79:88:17:b9: 34:7f:72:b6:cf:11:f5:e8:e4:52:96:a9:5d:71:f6: d7:86:10:f5:e1:c3:16:88:df:a6:2a:03:08:bc:a4: a6:ba:c0:0b:a4:6b:b4:d4:18:d4:04:7d:03:74:b2: 70:78:6f:d3:7c:d4:71:87:ac:a0:da:2f:0e:20:5d: b2:11:28:c6:5f:c7:98:b4:c6:5c:26:c3:9b:03:b7: b0:88:ea:8e:65:ad:2b:15:d2:fa:b9:43:1c:32:4a: 90:eb:de:bf:bb:b6:09:cc:ee:3e:3e:5b:af:51:a3: db:79:32:aa:e0:9d:71:b0:f8:eb:72:27:9c:8e:4b: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9C:89:AB:09:65:FC:70:9A:D3:C1:FD:FB:B1:34:0D:CE:9D:46:21 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YZyJqwll_HCa08H9-7E0Dc6dRiE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.200.83.64/28 Signature Algorithm: sha256WithRSAEncryption 95:a2:69:25:87:c4:a7:62:03:26:f2:5d:d6:9d:c6:f5:c6:1b: 79:7b:54:92:cf:4b:84:8f:c9:1b:40:7a:ad:4e:f0:bf:6d:a6: b9:80:2e:b9:53:bf:c8:74:64:0f:be:88:05:6b:79:17:e9:16: ca:c4:3d:18:55:63:58:2b:84:64:95:5c:15:f7:6a:af:0e:94: 41:43:71:d2:65:cc:dc:3d:06:d4:15:4a:d6:93:97:06:78:1d: d3:f4:8e:b1:97:42:3c:cc:70:2c:85:d7:34:87:f7:58:81:b1: 1b:ce:2e:bd:80:3a:f7:02:54:c2:b2:e0:2f:5a:3d:a8:8c:09: c1:45:70:53:a3:6f:2b:59:0a:9f:f6:be:51:b9:40:33:d4:03: d1:19:ca:0e:1c:84:62:4a:e4:79:83:5e:8b:b4:99:ac:48:ff: a6:fd:59:e8:4f:b4:5d:af:ac:bc:75:46:e1:a1:12:e4:7c:9d: 9a:7c:81:4d:10:df:fc:8c:e6:10:ee:3a:a6:d3:a4:09:8e:20: 5f:5f:78:b9:cc:9f:6a:d1:35:05:01:69:5b:1f:56:20:74:ce: 25:04:15:8d:49:f2:5d:b5:ff:3e:f6:7c:cc:2f:3c:50:54:d0: e1:48:5d:3f:15:3b:ce:ad:bb:f9:56:81:a3:b0:12:28:a6:f8: 24:b0:52:60 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDQ2 RERGODhBNDZFNEVDMkQ5QTlCQUI1RkYxMzA1RkQwNTdGMTM4MB4XDTI0MTEzMDAx Mjg1NloXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoNjE5Qzg5QUIwOTY1RkM3 MDlBRDNDMUZERkJCMTM0MERDRTlENDYyMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANCcJ89gGbqfORvTOA09rs2c6ZrDUlom4+hNDXsCWRGIdMc4gFNq s9mroz/4jPJCvyOSnZ7yEnQ+8Bd2x8KTeulNUXjMe1a4webJQ5OzyLzPktjAqYiz azEw24leEDbw+d7trLRj5/tmQERWvzPmLlhmGwoHA/DKHHVrefwL8KDHqHd5iBe5 NH9yts8R9ejkUpapXXH214YQ9eHDFojfpioDCLykprrAC6RrtNQY1AR9A3SycHhv 03zUcYesoNovDiBdshEoxl/HmLTGXCbDmwO3sIjqjmWtKxXS+rlDHDJKkOvev7u2 CczuPj5br1Gj23kyquCdcbD463InnI5LYJsCAwEAAaOCAikwggIlMB0GA1UdDgQW BBRhnImrCWX8cJrTwf37sTQNzp1GITAfBgNVHSMEGDAWgBSNRt34ikbk7C2am6tf 8TBf0FfxODAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMjgvalViZC1JcEc1T3d0bXB1clhfRXdYOUJYOFRnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalViZC1JcEc1T3d0bXB1clhfRXdY OUJYOFRnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTI4L1laeUpxd2xsX0hDYTA4SDktN0UwRGM2ZFJpRS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgABMAcDBQQ9yFNAMA0GCSqGSIb3DQEBCwUAA4IBAQCVomklh8SnYgMm8l3Wncb1 xht5e1SSz0uEj8kbQHqtTvC/baa5gC65U7/IdGQPvogFa3kX6RbKxD0YVWNYK4Rk lVwV92qvDpRBQ3HSZczcPQbUFUrWk5cGeB3T9I6xl0I8zHAshdc0h/dYgbEbzi69 gDr3AlTCsuAvWj2ojAnBRXBTo28rWQqf9r5RuUAz1APRGcoOHIRiSuR5g16LtJms SP+m/VnoT7Rdr6y8dUbhoRLkfJ2afIFNEN/8jOYQ7jqm06QJjiBfX3i5zJ9q0TUF AWlbH1YgdM4lBBWNSfJdtf8+9nzMLzxQVNDhSF0/FTvOrbv5VoGjsBIopvgksFJg -----END CERTIFICATE-----Generated at Sat Apr 26 19:44:30 2025 by rpki-client