$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/o1OxvwQODW6bDAWozq75c6Gx4p8.roa File: o1OxvwQODW6bDAWozq75c6Gx4p8.roa (raw, json) Hash identifier: 2on6q9GXYRXdWEjwlq5pl3+ieveMWmAU4pDVXGQFOfE= Subject key identifier: A3:53:B1:BF:04:0E:0D:6E:9B:0C:05:A8:CE:AE:F9:73:A1:B1:E2:9F Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Certificate serial: 50 Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/o1OxvwQODW6bDAWozq75c6Gx4p8.roa Signing time: Thu 31 Oct 2024 01:30:01 +0000 ROA not before: Thu 31 Oct 2024 01:30:01 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 131925 IP address blocks: 160.237.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 19:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Validity Not Before: Oct 31 01:30:01 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=A353B1BF040E0D6E9B0C05A8CEAEF973A1B1E29F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:e4:5d:a8:4f:5b:a1:fb:90:fb:4e:24:cf: 58:d6:23:84:00:b0:6a:a0:92:77:b9:47:6c:f8:23: 4b:e5:b0:88:02:c8:a4:4b:fa:f8:73:79:d3:41:40: 09:30:d5:e9:30:3f:70:74:90:61:3f:df:0f:dd:89: 38:6e:ce:8b:c3:79:a8:e4:d2:6f:f3:4c:89:33:82: 0b:43:e3:8a:f8:f4:d4:f8:b3:97:5e:55:5a:ed:c2: af:a2:15:21:1b:83:55:24:63:a8:53:64:7e:98:5a: 2f:b8:03:04:56:58:43:bd:7e:98:7d:5e:97:4b:9b: 9e:aa:e5:8b:1c:99:a4:e3:b3:96:49:dc:93:0d:42: 2e:14:2a:82:f5:00:06:8a:16:3c:87:d7:d7:7f:86: c7:3c:2e:ac:44:cf:dc:9b:df:c0:ec:97:13:22:52: 64:ee:d6:d1:f7:2e:77:7f:f1:c4:d5:24:7a:db:d9: 2e:97:90:b2:20:ee:80:90:02:02:7e:69:8f:97:68: dc:64:a8:d7:cd:96:92:ec:52:c4:53:b7:48:7c:de: a8:cd:73:92:b4:46:ef:b3:8f:4c:1b:57:54:33:9b: 8e:51:16:e7:b4:f8:c2:06:f7:74:df:84:dd:2c:71: 60:fd:c8:98:09:49:5c:de:0b:a5:96:bb:04:78:68: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:53:B1:BF:04:0E:0D:6E:9B:0C:05:A8:CE:AE:F9:73:A1:B1:E2:9F X509v3 Authority Key Identifier: keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/o1OxvwQODW6bDAWozq75c6Gx4p8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.237.190.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:a1:f5:b5:f2:f5:74:8d:dd:34:67:56:c0:b6:12:a5:7d:4d: f3:e4:0c:02:19:8e:5a:ef:06:46:9c:70:d5:bc:68:5f:38:bf: 10:b0:41:fa:c4:45:e1:f7:07:33:6e:97:8b:d3:9d:48:e4:c9: 4c:7e:94:31:21:89:f4:ba:bc:4f:86:0a:53:0d:06:6f:1b:18: 6e:7b:ed:42:81:bc:16:bb:f2:6e:8f:e9:de:17:7a:af:86:0f: ce:46:8c:3e:8c:54:af:81:4f:09:60:51:7b:e8:25:39:42:6a: ce:ca:3b:70:e6:7a:68:4f:7f:8f:4e:20:38:e9:fc:99:34:f7: 1a:6a:ed:e4:72:16:1b:e0:8b:58:43:5e:38:96:57:d5:20:de: 89:68:dc:dd:6c:b1:05:16:9f:47:6f:6a:78:74:06:87:cf:5b: 7c:2c:65:97:4a:89:f4:42:2b:c2:af:fb:be:f0:59:2e:3c:18: 5b:15:c1:66:56:2e:41:ea:6c:43:e3:51:23:f8:b7:29:f5:55: 9f:07:71:d5:e4:dc:52:b9:70:64:1d:62:33:95:f8:0d:a1:ff: 95:8a:01:24:c0:51:15:21:10:7a:0f:b5:45:31:69:d7:c7:c3: a3:71:38:8a:43:bd:5e:61:53:a6:d1:1f:6b:74:20:06:25:5f: c9:a1:90:52 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MEQy MjBCOUU0QTYzNThFMDNDRDQ3ODY0NTE3RDlEMzAwQjA2RkYwMB4XDTI0MTAzMTAx MzAwMVoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQTM1M0IxQkYwNDBFMEQ2 RTlCMEMwNUE4Q0VBRUY5NzNBMUIxRTI5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJkx5F2oT1uh+5D7TiTPWNYjhACwaqCSd7lHbPgjS+WwiALIpEv6 +HN500FACTDV6TA/cHSQYT/fD92JOG7Oi8N5qOTSb/NMiTOCC0Pjivj01Pizl15V Wu3Cr6IVIRuDVSRjqFNkfphaL7gDBFZYQ71+mH1el0ubnqrlixyZpOOzlknckw1C LhQqgvUABooWPIfX13+GxzwurETP3JvfwOyXEyJSZO7W0fcud3/xxNUketvZLpeQ siDugJACAn5pj5do3GSo182WkuxSxFO3SHzeqM1zkrRG77OPTBtXVDObjlEW57T4 wgb3dN+E3SxxYP3ImAlJXN4LpZa7BHhoYeMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSjU7G/BA4NbpsMBajOrvlzobHinzAfBgNVHSMEGDAWgBRA0iC55KY1jgPNR4ZF F9nTALBv8DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdDd2JfQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdD d2JfQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvbzFPeHZ3UU9EVzZiREFXb3pxNzVjNkd4NHA4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKDtvjANBgkqhkiG9w0BAQsFAAOCAQEAjKH1tfL1dI3dNGdWwLYSpX1N8+QM AhmOWu8GRpxw1bxoXzi/ELBB+sRF4fcHM26Xi9OdSOTJTH6UMSGJ9Lq8T4YKUw0G bxsYbnvtQoG8Frvybo/p3hd6r4YPzkaMPoxUr4FPCWBRe+glOUJqzso7cOZ6aE9/ j04gOOn8mTT3Gmrt5HIWG+CLWENeOJZX1SDeiWjc3WyxBRafR29qeHQGh89bfCxl l0qJ9EIrwq/7vvBZLjwYWxXBZlYuQepsQ+NRI/i3KfVVnwdx1eTcUrlwZB1iM5X4 DaH/lYoBJMBRFSEQeg+1RTFp18fDo3E4ikO9XmFTptEfa3QgBiVfyaGQUg== -----END CERTIFICATE-----Generated at Sat May 10 00:11:58 2025 by rpki-client