$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/dcaQuBE44AwLuNd6dxZPWYD9438.roa File: dcaQuBE44AwLuNd6dxZPWYD9438.roa (raw, json) Hash identifier: oDkGhTTo4qslT5MFOngO6/aJZ0TE6+XDFLgbx9j629o= Subject key identifier: 75:C6:90:B8:11:38:E0:0C:0B:B8:D7:7A:77:16:4F:59:80:FD:E3:7F Certificate issuer: /CN=D6E9A21E81CA12EB8455ADEC46610477EA5F4F4C Certificate serial: 2C Authority key identifier: D6:E9:A2:1E:81:CA:12:EB:84:55:AD:EC:46:61:04:77:EA:5F:4F:4C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/dcaQuBE44AwLuNd6dxZPWYD9438.roa Signing time: Thu 01 May 2025 01:33:05 +0000 ROA not before: Thu 01 May 2025 01:33:05 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 7672 IP address blocks: 216.8.0.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E9A21E81CA12EB8455ADEC46610477EA5F4F4C Validity Not Before: May 1 01:33:05 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=75C690B81138E00C0BB8D77A77164F5980FDE37F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:d7:b7:bf:51:4a:8b:4c:ff:d9:ad:84:a1: f4:38:51:09:6e:07:64:27:23:7c:48:9d:d6:3d:03: 22:fa:ea:99:bc:98:8a:a1:a1:8d:e7:ba:ec:fc:29: 16:f3:87:9d:f1:b7:f9:e9:74:79:0b:2d:3d:cb:32: 20:60:65:4d:b2:08:7d:2b:48:7f:51:d4:f0:18:2d: b5:4d:aa:2b:16:f7:f0:9e:3f:fd:e6:cd:d8:8b:4c: 8f:5c:37:33:6d:73:90:26:b4:68:bb:91:ee:17:5b: 2a:e7:64:fa:12:dd:c5:a7:f1:1f:60:87:63:81:bf: 63:38:00:23:79:c9:e5:53:12:ce:28:62:6c:4e:c0: 57:4c:e5:db:db:9f:e2:cd:7c:aa:aa:2e:3f:21:b8: 46:ec:0f:b7:2a:d9:3b:62:b4:9c:15:94:65:72:66: d2:c3:59:f5:6f:9b:23:87:95:4c:52:97:47:7a:bf: 7d:97:b6:37:93:cf:c4:e7:d3:55:54:1c:64:59:3c: 8c:a2:b8:17:9c:07:f1:0f:0e:53:e9:4f:37:08:09: a8:b6:85:49:8b:6f:68:4b:af:6b:50:b3:fc:2d:b5: 69:a9:ee:62:96:cd:b1:cd:a6:a3:80:35:bf:d1:89: 46:21:19:c5:06:0d:14:5d:6c:1d:66:55:ea:d2:06: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C6:90:B8:11:38:E0:0C:0B:B8:D7:7A:77:16:4F:59:80:FD:E3:7F X509v3 Authority Key Identifier: keyid:D6:E9:A2:1E:81:CA:12:EB:84:55:AD:EC:46:61:04:77:EA:5F:4F:4C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/dcaQuBE44AwLuNd6dxZPWYD9438.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 216.8.0.0/19 Signature Algorithm: sha256WithRSAEncryption 92:fd:5f:51:52:e4:e0:cc:3c:9c:1d:0a:73:5c:f6:4e:7f:78: 97:29:23:8b:8b:9d:c0:30:49:8e:75:c1:af:eb:05:0f:d4:9c: 58:cf:41:a1:ab:48:b8:bd:c3:88:19:ae:36:07:c7:87:e0:4e: 35:f4:d3:89:bc:ee:31:f0:db:55:ae:a3:30:f1:4d:e5:80:78: 4e:7c:89:88:bf:49:9a:16:cc:e8:06:f6:a5:22:74:91:c1:25: 4b:2d:47:b5:01:5d:fe:df:a5:7a:cc:ad:df:3d:8a:bb:f6:f9: c6:c2:2f:67:0d:c7:52:e1:d5:eb:21:54:e6:2f:bd:aa:c9:f8: a4:10:b8:25:61:c0:eb:c4:aa:17:dc:47:a2:14:6b:cc:da:d9: c6:71:30:e8:f6:f8:01:ac:d4:e6:8d:02:3e:4f:98:56:a0:67: f1:65:b9:4b:52:da:96:eb:f2:27:55:5f:72:5a:81:6d:95:1f: 43:2a:c9:79:97:1d:97:26:02:35:f9:e2:4c:c9:10:fa:e2:58: a3:05:32:7e:c1:58:8b:12:8b:76:30:89:65:04:f9:37:0e:ed: ea:59:b6:21:00:62:ea:56:d3:ab:9a:12:a1:8b:10:cc:80:3b: f6:25:1b:d3:6c:7c:40:a4:1d:aa:ec:f6:c7:d9:af:78:b4:03: ce:be:16:49 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENkU5 QTIxRTgxQ0ExMkVCODQ1NUFERUM0NjYxMDQ3N0VBNUY0RjRDMB4XDTI1MDUwMTAx MzMwNVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNzVDNjkwQjgxMTM4RTAw QzBCQjhENzdBNzcxNjRGNTk4MEZERTM3RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALKn17e/UUqLTP/ZrYSh9DhRCW4HZCcjfEid1j0DIvrqmbyYiqGh jee67PwpFvOHnfG3+el0eQstPcsyIGBlTbIIfStIf1HU8BgttU2qKxb38J4//ebN 2ItMj1w3M21zkCa0aLuR7hdbKudk+hLdxafxH2CHY4G/YzgAI3nJ5VMSzihibE7A V0zl29uf4s18qqouPyG4RuwPtyrZO2K0nBWUZXJm0sNZ9W+bI4eVTFKXR3q/fZe2 N5PPxOfTVVQcZFk8jKK4F5wH8Q8OU+lPNwgJqLaFSYtvaEuva1Cz/C21aanuYpbN sc2mo4A1v9GJRiEZxQYNFF1sHWZV6tIGEuMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR1xpC4ETjgDAu413p3Fk9ZgP3jfzAfBgNVHSMEGDAWgBTW6aIegcoS64RVrexG YQR36l9PTDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyLzF1bWlIb0hLRXV1RVZhM3NSbUVFZC1wZlQwdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzF1bWlIb0hLRXV1RVZhM3NSbUVFZC1w ZlQwdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzIvZGNhUXVCRTQ0QXdMdU5kNmR4WlBXWUQ5NDM4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdgIADANBgkqhkiG9w0BAQsFAAOCAQEAkv1fUVLk4Mw8nB0Kc1z2Tn94lykj i4udwDBJjnXBr+sFD9ScWM9BoatIuL3DiBmuNgfHh+BONfTTibzuMfDbVa6jMPFN 5YB4TnyJiL9JmhbM6Ab2pSJ0kcElSy1HtQFd/t+lesyt3z2Ku/b5xsIvZw3HUuHV 6yFU5i+9qsn4pBC4JWHA68SqF9xHohRrzNrZxnEw6Pb4AazU5o0CPk+YVqBn8WW5 S1LaluvyJ1VfclqBbZUfQyrJeZcdlyYCNfniTMkQ+uJYowUyfsFYixKLdjCJZQT5 Nw7t6lm2IQBi6lbTq5oSoYsQzIA79iUb02x8QKQdquz2x9mveLQDzr4WSQ== -----END CERTIFICATE-----Generated at Wed May 7 04:37:34 2025 by rpki-client