$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tP5xUc-mvkDh0LMbNVmQTsPiHX0.roa File: tP5xUc-mvkDh0LMbNVmQTsPiHX0.roa (raw, json) Hash identifier: i15GyDl5WWsVbq6Xdzb4y3iC0oeVnDTlsL2jZOmgfS8= Subject key identifier: B4:FE:71:51:CF:A6:BE:40:E1:D0:B3:1B:35:59:90:4E:C3:E2:1D:7D Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 7C Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tP5xUc-mvkDh0LMbNVmQTsPiHX0.roa Signing time: Tue 03 Dec 2024 17:16:18 +0000 ROA not before: Tue 03 Dec 2024 17:16:18 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2914 IP address blocks: 153.254.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 3 17:16:18 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=B4FE7151CFA6BE40E1D0B31B3559904EC3E21D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4e:80:a8:86:12:d1:17:31:da:d4:a9:38:40: 33:c5:db:13:53:06:20:28:8a:aa:1c:6c:95:f2:59: a5:17:46:55:55:17:d7:5b:cc:3c:a7:2c:1c:32:bf: 09:d7:4f:9b:ac:02:00:dc:47:a2:9e:ad:89:c5:6d: ab:f6:5c:02:1c:df:26:35:35:c3:26:2b:ba:d3:e2: 25:ab:cd:9d:25:fc:19:20:44:76:01:32:94:b6:a7: 49:61:c2:07:34:19:0a:b7:2c:50:d1:db:43:59:c8: 59:88:64:5c:66:d0:d5:b3:3f:bf:16:b8:27:e5:7f: 78:93:de:87:56:0e:7b:8d:a2:23:a4:fa:39:d2:5d: ee:ce:8c:58:b4:d9:26:8e:e6:f3:75:25:f8:10:51: de:14:5d:bc:b0:73:50:83:44:92:01:20:0f:9b:e1: 27:c1:72:3c:3e:15:43:54:6c:32:d2:ea:53:7b:f3: 09:e3:d6:80:32:b9:14:08:ac:9a:19:9e:19:49:dd: 10:fa:e0:cb:89:a2:6d:01:48:d4:d1:3d:a7:8d:20: ae:47:40:21:8f:c7:7e:2f:93:d6:4c:fe:06:c9:64: 8e:da:cd:17:77:8e:a7:a1:4a:a9:3a:c0:18:0c:b8: fc:53:27:7d:d7:54:79:b7:c1:e5:10:c9:d7:dc:67: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FE:71:51:CF:A6:BE:40:E1:D0:B3:1B:35:59:90:4E:C3:E2:1D:7D X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tP5xUc-mvkDh0LMbNVmQTsPiHX0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.254.92.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:b0:b9:28:b4:bb:26:7f:20:f4:80:7d:2c:af:6a:12:0f:be: 45:bf:9f:d5:19:5b:d0:10:09:6d:87:24:13:6e:2a:82:7b:13: d6:7a:8b:54:6f:9d:96:7c:14:cc:c6:df:d3:9a:17:2a:16:55: 7f:67:af:f7:3e:ef:5e:65:72:ab:99:d4:42:57:67:54:d9:6f: 07:c9:06:fe:6c:aa:c8:b9:9b:67:b3:8e:9e:58:0a:72:bb:49: 56:e1:36:56:75:f6:5a:71:a1:ac:fe:c9:cc:42:9a:d9:8e:f2: 56:a6:ac:f7:2c:2d:5c:cc:17:3b:89:72:5d:48:5e:fe:e3:55: b8:6a:48:e7:d1:56:9c:7b:2a:e2:d4:d0:2e:0e:64:2f:ad:56: 13:91:0f:40:4b:b7:c6:60:af:2b:0d:35:8c:3e:7c:4b:3b:d7: c0:45:64:6d:2b:a5:5f:bf:4f:28:ad:1a:6b:d8:88:83:9c:11: 42:b3:11:17:9d:58:77:b7:99:fe:80:e2:f9:55:05:0a:3a:69: 53:ac:38:83:b6:03:ff:7c:f8:36:e6:6f:95:ea:41:7b:ac:ac: 83:ca:b7:c4:5b:5f:bb:53:fc:1d:bf:dc:b3:d5:30:ff:ca:ff: 38:b9:c6:b1:de:29:72:07:24:51:3a:54:18:67:ef:c2:7a:37: e1:6a:82:99 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDQ2 RERGODhBNDZFNEVDMkQ5QTlCQUI1RkYxMzA1RkQwNTdGMTM4MB4XDTI0MTIwMzE3 MTYxOFoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQjRGRTcxNTFDRkE2QkU0 MEUxRDBCMzFCMzU1OTkwNEVDM0UyMUQ3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKVOgKiGEtEXMdrUqThAM8XbE1MGICiKqhxslfJZpRdGVVUX11vM PKcsHDK/CddPm6wCANxHop6ticVtq/ZcAhzfJjU1wyYrutPiJavNnSX8GSBEdgEy lLanSWHCBzQZCrcsUNHbQ1nIWYhkXGbQ1bM/vxa4J+V/eJPeh1YOe42iI6T6OdJd 7s6MWLTZJo7m83Ul+BBR3hRdvLBzUINEkgEgD5vhJ8FyPD4VQ1RsMtLqU3vzCePW gDK5FAismhmeGUndEPrgy4mibQFI1NE9p40grkdAIY/Hfi+T1kz+BslkjtrNF3eO p6FKqTrAGAy4/FMnfddUebfB5RDJ19xnuBkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBS0/nFRz6a+QOHQsxs1WZBOw+IdfTAfBgNVHSMEGDAWgBSNRt34ikbk7C2am6tf 8TBf0FfxODAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMjgvalViZC1JcEc1T3d0bXB1clhfRXdYOUJYOFRnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalViZC1JcEc1T3d0bXB1clhfRXdY OUJYOFRnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTI4L3RQNXhVYy1tdmtEaDBMTWJOVm1RVHNQaUhYMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAKZ/lwwDQYJKoZIhvcNAQELBQADggEBAC6wuSi0uyZ/IPSAfSyvahIP vkW/n9UZW9AQCW2HJBNuKoJ7E9Z6i1RvnZZ8FMzG39OaFyoWVX9nr/c+715lcquZ 1EJXZ1TZbwfJBv5sqsi5m2ezjp5YCnK7SVbhNlZ19lpxoaz+ycxCmtmO8lamrPcs LVzMFzuJcl1IXv7jVbhqSOfRVpx7KuLU0C4OZC+tVhORD0BLt8ZgrysNNYw+fEs7 18BFZG0rpV+/TyitGmvYiIOcEUKzERedWHe3mf6A4vlVBQo6aVOsOIO2A/98+Dbm b5XqQXusrIPKt8RbX7tT/B2/3LPVMP/K/zi5xrHeKXIHJFE6VBhn78J6N+Fqgpk= -----END CERTIFICATE-----Generated at Sat Apr 26 17:14:09 2025 by rpki-client