$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/QUWqxhSDc2wiMRCMKC9Vs6fMi_c.roa File: QUWqxhSDc2wiMRCMKC9Vs6fMi_c.roa (raw, json) Hash identifier: K0T0Uf8sbeecCirF4fSRBLV0xU2+Czc9eD7ElfZG0Qw= Subject key identifier: 41:45:AA:C6:14:83:73:6C:22:31:10:8C:28:2F:55:B3:A7:CC:8B:F7 Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Certificate serial: 36 Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/QUWqxhSDc2wiMRCMKC9Vs6fMi_c.roa Signing time: Fri 31 Jan 2025 01:33:30 +0000 ROA not before: Fri 31 Jan 2025 01:33:30 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7679 IP address blocks: 58.3.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Validity Not Before: Jan 31 01:33:30 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=4145AAC61483736C2231108C282F55B3A7CC8BF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:03:4c:b7:7e:78:e4:8a:bb:a6:64:ce:ed:9f: a2:07:78:b2:e1:67:3d:1a:cf:ec:0a:56:8a:14:f2: 77:fb:7f:7f:41:66:43:fa:ea:39:bc:4e:ff:30:2a: 61:60:33:aa:c6:c0:bf:94:65:ff:51:be:e6:88:03: ba:45:29:34:b1:eb:c8:16:54:1d:80:0c:4c:a8:0c: c3:30:d3:0e:c8:a9:51:31:6c:e2:e3:1f:de:0c:bf: 05:a8:fd:42:66:88:b0:38:70:52:5d:b4:6f:a7:eb: 79:c4:bb:e6:1b:72:45:d1:d3:32:65:fe:5d:ac:f5: 7a:e3:f7:44:d1:c4:30:97:69:00:24:99:a7:28:b5: d2:21:c4:e9:61:88:ef:08:c5:68:b6:a5:2b:f2:f4: 41:dd:44:e2:25:82:c2:c5:a6:c3:3f:d4:97:65:43: 11:8c:cf:88:02:6c:96:e7:b2:1c:a8:7a:d3:f2:c9: 0d:ce:ab:f8:fc:bd:8f:58:4a:5a:95:04:b0:44:e5: 7d:8a:7b:1a:9a:10:a3:de:c0:26:9a:fa:e3:2d:ac: 2f:82:fa:d1:bf:b0:cc:8f:fe:2a:17:06:cc:ce:ca: f5:68:8d:24:cc:84:65:a6:65:97:e3:52:86:08:92: 99:f7:ce:45:18:26:df:e7:2e:4c:70:b1:6e:b6:11: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:45:AA:C6:14:83:73:6C:22:31:10:8C:28:2F:55:B3:A7:CC:8B:F7 X509v3 Authority Key Identifier: keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/QUWqxhSDc2wiMRCMKC9Vs6fMi_c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.3.128.0/17 Signature Algorithm: sha256WithRSAEncryption 34:6c:48:9d:bc:a4:43:7b:ee:2d:a4:2c:32:45:7f:c9:d3:d9: 64:44:e2:8c:16:39:eb:17:ca:8b:4a:94:94:00:6d:c7:c8:a0: 99:a1:f2:dc:d6:ab:27:55:05:74:3a:fe:72:b2:3a:45:43:7a: eb:36:e4:1c:1e:ca:b3:43:d8:b1:f6:73:9a:d2:2c:1f:6c:71: e0:ee:64:5f:b8:50:7b:1c:d0:24:1e:5b:fd:7a:84:9d:05:08: f4:53:27:dd:cb:39:d0:46:12:5d:e8:f7:37:dc:4e:f2:d7:5e: e8:fb:7f:b8:63:5a:b1:38:22:7e:47:6a:16:66:94:99:21:3d: 31:8f:e6:89:c5:bf:17:ae:46:b2:b2:cf:14:87:e0:72:c7:52: b5:b4:8e:85:0d:89:8f:2e:ee:95:69:e4:7f:f6:12:e2:48:89: 10:19:87:fa:f9:70:88:31:44:81:3b:4c:21:f1:cb:ab:a5:05: da:88:31:a9:ef:41:95:64:7e:f6:8b:1c:f1:cc:25:9f:6c:b7: 56:29:f0:2b:81:a0:14:87:e0:39:a5:29:44:f2:8a:d2:09:27: 00:57:77:f8:f6:0c:e6:a8:7c:32:7c:b1:e3:db:7a:8c:e4:d2: 43:82:6c:5c:9b:27:38:66:67:41:d6:9c:95:9e:ec:c9:96:17: 10:7a:74:69 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI1MDEzMTAx MzMzMFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNDE0NUFBQzYxNDgzNzM2 QzIyMzExMDhDMjgyRjU1QjNBN0NDOEJGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOUDTLd+eOSKu6Zkzu2fogd4suFnPRrP7ApWihTyd/t/f0FmQ/rq ObxO/zAqYWAzqsbAv5Rl/1G+5ogDukUpNLHryBZUHYAMTKgMwzDTDsipUTFs4uMf 3gy/Baj9QmaIsDhwUl20b6frecS75htyRdHTMmX+Xaz1euP3RNHEMJdpACSZpyi1 0iHE6WGI7wjFaLalK/L0Qd1E4iWCwsWmwz/Ul2VDEYzPiAJslueyHKh60/LJDc6r +Py9j1hKWpUEsETlfYp7GpoQo97AJpr64y2sL4L60b+wzI/+KhcGzM7K9WiNJMyE ZaZll+NShgiSmffORRgm3+cuTHCxbrYRgwkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRBRarGFINzbCIxEIwoL1Wzp8yL9zAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDkvUVVXcXhoU0RjMndpTVJDTUtDOVZzNmZNaV9jLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBzoDgDANBgkqhkiG9w0BAQsFAAOCAQEANGxInbykQ3vuLaQsMkV/ydPZZETi jBY56xfKi0qUlABtx8igmaHy3NarJ1UFdDr+crI6RUN66zbkHB7Ks0PYsfZzmtIs H2xx4O5kX7hQexzQJB5b/XqEnQUI9FMn3cs50EYSXej3N9xO8tde6Pt/uGNasTgi fkdqFmaUmSE9MY/micW/F65GsrLPFIfgcsdStbSOhQ2Jjy7ulWnkf/YS4kiJEBmH +vlwiDFEgTtMIfHLq6UF2ogxqe9BlWR+9osc8cwln2y3VinwK4GgFIfgOaUpRPKK 0gknAFd3+PYM5qh8Mnyx49t6jOTSQ4JsXJsnOGZnQdaclZ7syZYXEHp0aQ== -----END CERTIFICATE-----Generated at Sat Apr 26 17:54:36 2025 by rpki-client