$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/DMkgyB4ArXzptfcKx3GnWiDHUBQ.roa File: DMkgyB4ArXzptfcKx3GnWiDHUBQ.roa (raw, json) Hash identifier: XDDuRY4AznXyQQPZOnCiA7jLISDo6whXir0Knz9WS2A= Subject key identifier: 0C:C9:20:C8:1E:00:AD:7C:E9:B5:F7:0A:C7:71:A7:5A:20:C7:50:14 Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: EB Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/DMkgyB4ArXzptfcKx3GnWiDHUBQ.roa Signing time: Fri 31 May 2024 01:31:29 +0000 ROA not before: Fri 31 May 2024 01:31:29 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 9370 IP address blocks: 122.202.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: May 31 01:31:29 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=0CC920C81E00AD7CE9B5F70AC771A75A20C75014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:57:46:6e:04:54:2b:29:c1:97:13:6d:24: e5:74:d6:8e:48:67:55:bc:03:6b:bd:95:07:1a:92: 8a:dc:98:b5:4b:6d:ea:be:53:2a:f6:82:06:80:eb: b3:28:c3:5c:39:f3:9d:b6:e3:e0:3b:e9:36:03:83: 45:f7:63:39:99:0d:43:12:1b:0c:e2:66:c5:96:f2: 9d:fa:f6:47:06:20:6c:58:65:e8:1c:79:c1:90:a1: b7:28:a6:41:94:6a:35:65:18:e6:70:c3:2b:3b:46: 4f:9b:52:45:5a:48:0b:50:7d:66:8c:5a:4f:dc:9e: 74:d0:5f:34:02:41:60:c9:5f:b7:1e:dd:39:74:1c: 63:c1:2c:43:47:f5:d6:dc:ec:c9:8e:8c:1a:e0:04: 4d:15:1a:52:a6:5f:42:08:93:ca:ae:19:df:2c:ad: be:49:13:f2:2e:ee:bf:9b:81:e5:db:5d:27:8a:c8: 5c:c9:1e:96:8e:7c:b9:71:9e:74:1b:57:5b:87:2e: df:2e:c7:8a:86:8b:e5:1d:2f:77:d6:e2:e3:5d:2f: f3:43:cd:df:e2:d3:58:ef:60:37:f4:24:de:79:4f: 0f:77:31:d7:fe:6d:70:b6:ba:17:69:65:73:4e:ef: 98:e7:41:47:b2:ff:91:c3:f5:12:73:86:46:4c:ee: 48:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C9:20:C8:1E:00:AD:7C:E9:B5:F7:0A:C7:71:A7:5A:20:C7:50:14 X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/DMkgyB4ArXzptfcKx3GnWiDHUBQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.202.96.0/19 Signature Algorithm: sha256WithRSAEncryption 1e:7f:7a:fb:fa:85:4e:a0:dc:b2:11:66:a5:29:8d:31:46:7e: 63:86:fd:89:15:e8:0b:42:b8:68:e0:5f:b2:50:b7:aa:b6:40: 63:81:44:f8:b7:dd:9a:24:22:03:ac:7f:94:f1:7d:47:bd:73: 2a:b9:21:28:51:bd:54:5c:f6:6b:21:0b:6b:23:9e:16:74:61: 0c:2d:32:ba:29:37:c2:11:cf:5d:63:a6:3a:00:72:3a:b3:67: 4b:9f:a0:89:5b:c1:74:27:c2:a7:37:96:78:e4:f1:a6:33:25: 88:a5:55:b8:da:d2:09:c5:c3:5b:ec:cf:1c:86:01:37:49:e6: 14:03:62:ad:d1:f3:90:d8:2c:71:98:d5:c3:e6:5a:9b:1d:b0: 2f:49:a0:5a:49:84:1b:55:ab:94:e6:16:16:49:3f:53:fb:9d: fb:c5:a0:15:63:5a:35:ca:d6:bc:87:79:37:6d:09:9f:1d:9d: 96:ae:f7:c6:78:40:74:e1:15:cf:d8:a4:4e:57:6f:4d:6a:88: 62:81:d8:5e:4e:32:c7:bc:7e:30:48:34:08:67:b1:3a:f8:66: b7:21:5a:71:66:45:e4:22:bb:2e:ef:85:ec:38:f6:41:85:90: 43:4b:62:1c:af:85:71:fc:d8:6c:95:6e:16:12:c8:de:1b:61: 4e:86:0d:40 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNDA1MzEw MTMxMjlaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBDQzkyMEM4MUUwMEFE N0NFOUI1RjcwQUM3NzFBNzVBMjBDNzUwMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL5FdGbgRUKynBlxNtJOV01o5IZ1W8A2u9lQcakorcmLVLbeq+ Uyr2ggaA67Mow1w585224+A76TYDg0X3YzmZDUMSGwziZsWW8p369kcGIGxYZegc ecGQobcopkGUajVlGOZwwys7Rk+bUkVaSAtQfWaMWk/cnnTQXzQCQWDJX7ce3Tl0 HGPBLENH9dbc7MmOjBrgBE0VGlKmX0IIk8quGd8srb5JE/Iu7r+bgeXbXSeKyFzJ HpaOfLlxnnQbV1uHLt8ux4qGi+UdL3fW4uNdL/NDzd/i01jvYDf0JN55Tw93Mdf+ bXC2uhdpZXNO75jnQUey/5HD9RJzhkZM7kgfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDMkgyB4ArXzptfcKx3GnWiDHUBQwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ3L0RNa2d5QjRBclh6cHRmY0t4M0duV2lESFVCUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAV6ymAwDQYJKoZIhvcNAQELBQADggEBAB5/evv6hU6g3LIRZqUpjTFGfmOG /YkV6AtCuGjgX7JQt6q2QGOBRPi33ZokIgOsf5TxfUe9cyq5IShRvVRc9mshC2sj nhZ0YQwtMropN8IRz11jpjoAcjqzZ0ufoIlbwXQnwqc3lnjk8aYzJYilVbja0gnF w1vszxyGATdJ5hQDYq3R85DYLHGY1cPmWpsdsC9JoFpJhBtVq5TmFhZJP1P7nfvF oBVjWjXK1ryHeTdtCZ8dnZau98Z4QHThFc/YpE5Xb01qiGKB2F5OMse8fjBINAhn sTr4ZrchWnFmReQiuy7vhew49kGFkENLYhyvhXH82GyVbhYSyN4bYU6GDUA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:29:34 2025 by rpki-client