$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZT5ILcSe7CY4BG5EFqFtL7uQE9o.roa File: ZT5ILcSe7CY4BG5EFqFtL7uQE9o.roa (raw, json) Hash identifier: oPoCIYyWipeUOx9fqkJtPby+9ZH7ltLOx2At6hyzJIc= Subject key identifier: 65:3E:48:2D:C4:9E:EC:26:38:04:6E:44:16:A1:6D:2F:BB:90:13:DA Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Certificate serial: 4E Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZT5ILcSe7CY4BG5EFqFtL7uQE9o.roa Signing time: Fri 31 Jan 2025 01:33:40 +0000 ROA not before: Fri 31 Jan 2025 01:33:40 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7679 IP address blocks: 210.238.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Validity Not Before: Jan 31 01:33:40 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=653E482DC49EEC2638046E4416A16D2FBB9013DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e2:22:50:ca:63:a3:27:61:b7:81:d7:13:01: 68:7a:99:c8:1d:55:9c:ff:f3:b8:9d:a2:53:a1:a3: c1:b9:23:43:35:bf:75:e7:ea:b6:bf:3c:af:4f:2d: 7e:f9:e4:73:b9:2b:c0:6d:80:8b:cc:e3:9c:d9:42: ea:17:6c:cf:05:68:e5:20:05:94:5d:90:d7:fd:a6: a4:9e:a5:c9:dc:17:f3:80:42:48:08:19:fe:33:72: ba:4d:c2:80:b6:3b:6d:6a:a8:5e:75:a4:91:2a:1d: 61:7e:f5:b9:4b:5c:33:8b:ef:86:52:6e:62:e8:a1: 1e:88:cb:96:c2:ce:d8:89:b2:11:6e:cf:b2:7b:f4: b7:52:5c:1e:72:c8:47:ce:df:e8:17:01:b5:9d:c6: 55:f3:26:ad:1e:aa:99:5f:e3:de:a8:94:d4:2b:68: e1:a1:ea:0c:66:a8:69:ba:50:69:21:f7:55:1c:9b: 02:02:68:cb:e8:65:bc:19:97:6f:62:03:a4:f9:34: cd:06:5c:32:d8:d1:18:55:25:61:70:b8:6d:6c:63: 78:b8:c9:2b:9f:8e:6c:63:3a:14:2d:94:ef:72:42: 34:b5:67:82:c6:a6:c4:3d:e1:e7:90:91:11:78:a5: 74:77:32:40:99:82:86:b0:72:3e:e1:e6:6e:e6:1a: 40:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3E:48:2D:C4:9E:EC:26:38:04:6E:44:16:A1:6D:2F:BB:90:13:DA X509v3 Authority Key Identifier: keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZT5ILcSe7CY4BG5EFqFtL7uQE9o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.238.32.0/19 Signature Algorithm: sha256WithRSAEncryption 46:bd:42:5c:8d:db:a8:96:56:b5:21:13:14:0b:93:0d:58:a1: 60:ee:31:8c:a7:66:34:9f:1b:25:78:cd:98:d6:37:e9:f9:7e: 29:76:b7:b0:4b:5c:ac:46:28:4c:f2:b1:24:2f:f2:7e:d4:73: b5:48:59:9d:21:00:25:08:38:01:41:be:56:e8:cb:1d:04:df: 3b:f5:f4:01:2b:4b:36:23:f3:f9:31:b3:a4:40:b1:84:e2:c5: 9b:17:0c:10:b5:f9:d8:e7:e5:f2:72:49:45:b8:35:97:01:cf: 09:de:bc:c7:e8:5f:3d:89:7e:d8:fa:a9:ac:77:1a:36:0b:49: 71:32:e0:c9:e2:20:e8:09:70:e9:df:95:f4:23:ea:a8:36:46: 2b:42:b5:c0:d9:da:30:a2:ae:fa:4a:c8:28:1e:1e:dd:65:e7: 5f:15:df:5a:40:dd:0e:d5:0d:e7:07:cc:5f:46:b0:b2:28:3b: c7:f9:d4:c8:a6:2e:8a:71:d3:d4:1d:95:14:11:1c:71:e0:6b: 00:aa:ae:e4:fe:e9:29:f6:ea:20:eb:5d:5f:8f:b8:8a:fa:51: e3:75:a7:fb:79:d0:ce:78:30:c5:70:44:51:b6:dd:0e:71:5d: ef:ad:be:32:9a:a9:97:6f:ff:5d:42:70:fe:38:52:d3:b0:b7: 84:c9:6d:36 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI1MDEzMTAx MzM0MFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNjUzRTQ4MkRDNDlFRUMy NjM4MDQ2RTQ0MTZBMTZEMkZCQjkwMTNEQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOfiIlDKY6MnYbeB1xMBaHqZyB1VnP/zuJ2iU6GjwbkjQzW/defq tr88r08tfvnkc7krwG2Ai8zjnNlC6hdszwVo5SAFlF2Q1/2mpJ6lydwX84BCSAgZ /jNyuk3CgLY7bWqoXnWkkSodYX71uUtcM4vvhlJuYuihHojLlsLO2ImyEW7Psnv0 t1JcHnLIR87f6BcBtZ3GVfMmrR6qmV/j3qiU1Cto4aHqDGaoabpQaSH3VRybAgJo y+hlvBmXb2IDpPk0zQZcMtjRGFUlYXC4bWxjeLjJK5+ObGM6FC2U73JCNLVngsam xD3h55CREXildHcyQJmChrByPuHmbuYaQM0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRlPkgtxJ7sJjgEbkQWoW0vu5AT2jAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDkvWlQ1SUxjU2U3Q1k0Qkc1RUZxRnRMN3VRRTlvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdLuIDANBgkqhkiG9w0BAQsFAAOCAQEARr1CXI3bqJZWtSETFAuTDVihYO4x jKdmNJ8bJXjNmNY36fl+KXa3sEtcrEYoTPKxJC/yftRztUhZnSEAJQg4AUG+VujL HQTfO/X0AStLNiPz+TGzpECxhOLFmxcMELX52Ofl8nJJRbg1lwHPCd68x+hfPYl+ 2PqprHcaNgtJcTLgyeIg6Alw6d+V9CPqqDZGK0K1wNnaMKKu+krIKB4e3WXnXxXf WkDdDtUN5wfMX0awsig7x/nUyKYuinHT1B2VFBEcceBrAKqu5P7pKfbqIOtdX4+4 ivpR43Wn+3nQzngwxXBEUbbdDnFd762+Mpqpl2//XUJw/jhS07C3hMltNg== -----END CERTIFICATE-----Generated at Sat Apr 26 20:10:39 2025 by rpki-client