$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/CkLYDJI93MQmxbIIxYyUxEn2Prk.roa File: CkLYDJI93MQmxbIIxYyUxEn2Prk.roa (raw, json) Hash identifier: OE1yvOQTTJ89y3E4eFebhvp49fxPGUx2x7jATSjR76E= Subject key identifier: 0A:42:D8:0C:92:3D:DC:C4:26:C5:B2:08:C5:8C:94:C4:49:F6:3E:B9 Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Certificate serial: 48 Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/CkLYDJI93MQmxbIIxYyUxEn2Prk.roa Signing time: Fri 31 Jan 2025 01:33:37 +0000 ROA not before: Fri 31 Jan 2025 01:33:37 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7679 IP address blocks: 203.114.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Validity Not Before: Jan 31 01:33:37 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=0A42D80C923DDCC426C5B208C58C94C449F63EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c9:d7:3f:40:86:e5:f9:ab:46:cf:0f:31:32: 8d:6d:15:fd:cd:7a:64:0d:22:2d:ac:db:fc:c3:d6: ed:5b:f4:f7:71:2d:e9:32:35:91:8e:b5:d5:ea:10: c3:49:6f:0a:33:f0:ac:3a:e6:64:29:43:73:f7:ee: 25:7e:b2:d9:a0:c8:4b:80:09:66:bd:3c:44:b2:14: 69:34:cd:69:45:40:58:2b:bd:7c:a4:19:67:8d:ea: 95:e8:f7:89:b1:a0:15:0e:69:18:00:ee:3c:4c:7b: d6:f3:3e:f1:8b:22:25:c8:c5:12:eb:b0:9c:16:04: d4:4c:74:5c:78:ff:9f:14:d4:b7:f2:5b:32:74:9e: 8a:30:7a:e6:ad:76:44:7e:76:e5:10:a5:da:32:f8: 12:8f:03:aa:67:32:ae:70:f2:81:75:29:12:be:ca: 61:09:ce:2f:54:41:f7:78:65:cf:4f:d8:6f:ae:ad: d3:ba:11:46:12:ed:94:a6:79:00:da:34:d1:7a:05: 2a:23:af:8b:f5:e1:c5:12:f6:44:fb:a2:a3:21:6d: b5:c8:77:76:ef:39:6f:40:cc:9b:36:36:a1:da:c7: d3:61:3e:f7:8f:1c:ca:e4:df:71:d1:37:56:73:d6: 76:30:c8:17:d9:76:23:c3:55:0a:f8:5c:2b:bf:ec: ba:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:42:D8:0C:92:3D:DC:C4:26:C5:B2:08:C5:8C:94:C4:49:F6:3E:B9 X509v3 Authority Key Identifier: keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/CkLYDJI93MQmxbIIxYyUxEn2Prk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.114.192.0/19 Signature Algorithm: sha256WithRSAEncryption bd:ab:2a:eb:ef:81:53:55:d4:2a:5f:2e:4f:91:55:a9:13:a8: b3:6c:26:82:10:9b:db:88:b4:2b:36:5f:bb:7a:81:d1:1f:35: cd:72:b7:ef:52:b1:e4:95:b3:56:fa:60:36:7c:68:16:43:2f: f4:15:b9:a8:da:41:00:24:0a:57:93:ae:ea:51:fa:2a:d8:d2: a8:0b:6e:ce:33:de:a7:47:dd:06:2c:3a:0f:5b:21:a5:f0:ac: bf:bf:68:e0:6b:9d:8f:16:36:a4:b2:ac:82:76:85:91:ba:45: ca:ad:7d:ad:ec:2b:16:e4:de:2d:64:ec:8d:bd:66:a8:6a:5c: 50:e4:88:c7:72:d5:1a:94:c0:6c:43:d4:df:27:12:1c:01:a8: ce:83:d8:a7:01:e1:72:31:86:ed:bd:4d:b0:f2:bc:83:f0:0c: 27:ff:1f:f1:31:bb:12:1d:92:5a:c3:11:29:85:40:eb:a8:05: e1:10:e9:0d:8b:73:76:2a:c3:f8:5d:b4:b5:55:4b:89:5f:d4: 0f:89:ea:c7:d3:33:8e:6d:ea:4c:22:ea:d0:0d:61:be:23:51: 0b:da:e1:c6:57:c3:a5:3f:8b:7b:1f:55:8a:e9:9a:6f:8f:84: 3e:13:b0:19:d9:07:9d:b3:f0:ea:33:dc:b4:2b:d2:ce:f8:ff: 7c:82:b7:58 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI1MDEzMTAx MzMzN1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoMEE0MkQ4MEM5MjNEREND NDI2QzVCMjA4QzU4Qzk0QzQ0OUY2M0VCOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANvJ1z9AhuX5q0bPDzEyjW0V/c16ZA0iLazb/MPW7Vv093Et6TI1 kY611eoQw0lvCjPwrDrmZClDc/fuJX6y2aDIS4AJZr08RLIUaTTNaUVAWCu9fKQZ Z43qlej3ibGgFQ5pGADuPEx71vM+8YsiJcjFEuuwnBYE1Ex0XHj/nxTUt/JbMnSe ijB65q12RH525RCl2jL4Eo8DqmcyrnDygXUpEr7KYQnOL1RB93hlz0/Yb66t07oR RhLtlKZ5ANo00XoFKiOvi/XhxRL2RPuioyFttch3du85b0DMmzY2odrH02E+948c yuTfcdE3VnPWdjDIF9l2I8NVCvhcK7/suhECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQKQtgMkj3cxCbFsgjFjJTESfY+uTAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDkvQ2tMWURKSTkzTVFteGJJSXhZeVV4RW4yUHJrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBctywDANBgkqhkiG9w0BAQsFAAOCAQEAvasq6++BU1XUKl8uT5FVqROos2wm ghCb24i0KzZfu3qB0R81zXK371Kx5JWzVvpgNnxoFkMv9BW5qNpBACQKV5Ou6lH6 KtjSqAtuzjPep0fdBiw6D1shpfCsv79o4GudjxY2pLKsgnaFkbpFyq19rewrFuTe LWTsjb1mqGpcUOSIx3LVGpTAbEPU3ycSHAGozoPYpwHhcjGG7b1NsPK8g/AMJ/8f 8TG7Eh2SWsMRKYVA66gF4RDpDYtzdirD+F20tVVLiV/UD4nqx9Mzjm3qTCLq0A1h viNRC9rhxlfDpT+Lex9Viumab4+EPhOwGdkHnbPw6jPctCvSzvj/fIK3WA== -----END CERTIFICATE-----Generated at Sat Apr 26 19:47:26 2025 by rpki-client