$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VdU70kDVWF85CxDfpTMqjbJNL0Q.roa File: VdU70kDVWF85CxDfpTMqjbJNL0Q.roa (raw, json) Hash identifier: IAgFSDL8toZ1zEULmX/gWGNjXaTExAfa/MvG7Ziao5o= Subject key identifier: 55:D5:3B:D2:40:D5:58:5F:39:0B:10:DF:A5:33:2A:8D:B2:4D:2F:44 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0300 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VdU70kDVWF85CxDfpTMqjbJNL0Q.roa Signing time: Thu 17 Oct 2024 01:41:00 +0000 ROA not before: Thu 17 Oct 2024 01:41:00 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 111.234.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 768 (0x300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 17 01:41:00 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=55D53BD240D5585F390B10DFA5332A8DB24D2F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:ed:bf:71:95:96:40:de:1b:d6:47:26:19: e8:10:77:e0:3e:c1:f1:a1:92:7f:36:52:e1:bd:2b: 9c:69:f4:c4:de:ce:0b:98:9c:ca:90:7e:59:86:09: dd:e6:6c:aa:87:ad:68:4f:65:73:e2:78:5c:f2:4a: 58:5d:79:a3:aa:7e:6d:01:5c:e1:81:b9:74:a5:3d: 05:ff:d1:f2:cb:7e:7b:8c:fb:5d:a6:ca:7b:cd:15: da:e8:0a:01:f2:33:67:1e:5d:76:77:df:25:c4:88: 4f:b3:dc:e3:35:2a:6f:ff:07:04:dd:bf:e6:3a:0d: 8a:06:99:55:f7:d3:5e:62:4c:9a:e9:80:a7:45:54: 1b:13:93:24:d5:e7:4a:17:0a:52:83:6c:7f:91:08: aa:d6:15:a9:0e:1b:6e:09:bf:f9:62:66:27:0a:dd: 16:ac:a0:7e:7d:bb:2b:27:9b:25:95:b0:3d:87:b4: 32:af:22:a6:b0:d1:94:44:e4:49:fb:36:a6:77:9a: dd:57:23:0f:64:fc:5d:a8:b7:17:1c:9f:36:d7:5a: c8:ea:30:0d:73:c2:c2:59:9c:13:d7:ea:53:56:2c: 3b:8d:05:ab:2a:c1:15:a8:c2:04:f7:f8:1b:8c:87: 13:d1:0f:3f:3c:4a:9a:74:3a:ae:5f:bc:b8:77:cb: 47:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D5:3B:D2:40:D5:58:5F:39:0B:10:DF:A5:33:2A:8D:B2:4D:2F:44 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VdU70kDVWF85CxDfpTMqjbJNL0Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.234.220.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:bd:b8:93:fb:c8:55:78:b9:4b:13:37:20:7b:67:02:60:b0: a4:04:00:56:a8:49:2c:03:c3:fe:fe:8e:72:90:4f:f6:22:97: 2f:cb:0d:01:e2:f1:77:4a:f7:fb:fa:f9:58:1a:6b:c0:de:9f: d5:4c:3a:8f:20:4a:af:dc:0e:8a:b5:e2:b3:0f:b5:66:ef:d6: 6f:8a:a7:77:6b:25:80:06:44:73:be:8e:0f:fe:d5:38:42:46: 00:29:db:d7:70:5c:90:27:e4:25:ce:b5:6b:96:38:e8:50:48: c2:bf:88:91:f8:d7:b8:20:aa:1c:94:3d:8e:3d:cd:94:9f:2f: 15:26:d6:f7:de:6a:83:8f:5c:e3:38:86:44:87:b2:c3:37:7a: c4:02:c8:cd:2c:d1:5b:d4:e6:78:88:21:99:11:7a:2d:23:30: 43:9b:5a:e4:59:d7:2f:af:b0:2b:73:11:85:2b:b9:81:ad:8b: 29:a6:88:7f:25:45:bc:8a:c5:44:14:00:ec:74:60:68:14:d7: 07:97:5e:1e:18:36:e9:98:7c:53:a6:d2:96:f0:bf:e5:42:b3: 6b:a5:8f:e4:64:48:30:8a:6b:3a:20:5f:c2:76:0c:80:ab:9c: 2c:62:8b:6b:88:ba:11:3e:df:bf:2d:90:48:26:3d:8e:ae:11: fd:73:87:f5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMTcw MTQxMDBaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU1RDUzQkQyNDBENTU4 NUYzOTBCMTBERkE1MzMyQThEQjI0RDJGNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY7O2/cZWWQN4b1kcmGegQd+A+wfGhkn82UuG9K5xp9MTezguY nMqQflmGCd3mbKqHrWhPZXPieFzySlhdeaOqfm0BXOGBuXSlPQX/0fLLfnuM+12m ynvNFdroCgHyM2ceXXZ33yXEiE+z3OM1Km//BwTdv+Y6DYoGmVX3015iTJrpgKdF VBsTkyTV50oXClKDbH+RCKrWFakOG24Jv/liZicK3RasoH59uysnmyWVsD2HtDKv Iqaw0ZRE5En7NqZ3mt1XIw9k/F2otxccnzbXWsjqMA1zwsJZnBPX6lNWLDuNBasq wRWowgT3+BuMhxPRDz88Spp0Oq5fvLh3y0cjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVdU70kDVWF85CxDfpTMqjbJNL0QwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1ZkVTcwa0RWV0Y4NUN4RGZwVE1xamJKTkwwUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJv6twwDQYJKoZIhvcNAQELBQADggEBAFq9uJP7yFV4uUsTNyB7ZwJgsKQE AFaoSSwDw/7+jnKQT/Yily/LDQHi8XdK9/v6+Vgaa8Den9VMOo8gSq/cDoq14rMP tWbv1m+Kp3drJYAGRHO+jg/+1ThCRgAp29dwXJAn5CXOtWuWOOhQSMK/iJH417gg qhyUPY49zZSfLxUm1vfeaoOPXOM4hkSHssM3esQCyM0s0VvU5niIIZkRei0jMEOb WuRZ1y+vsCtzEYUruYGtiymmiH8lRbyKxUQUAOx0YGgU1weXXh4YNumYfFOm0pbw v+VCs2ulj+RkSDCKazogX8J2DICrnCxii2uIuhE+378tkEgmPY6uEf1zh/U= -----END CERTIFICATE-----Generated at Sat Apr 26 20:15:48 2025 by rpki-client