$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/cWUIOe7zQovKTW-j9bcwWM2776Y.roa File: cWUIOe7zQovKTW-j9bcwWM2776Y.roa (raw, json) Hash identifier: 165wM9HxTZcouJB57lJwrDZYrCa4XMw6ASpB5DBeZTs= Subject key identifier: 71:65:08:39:EE:F3:42:8B:CA:4D:6F:A3:F5:B7:30:58:CD:BB:EF:A6 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 05A1 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/cWUIOe7zQovKTW-j9bcwWM2776Y.roa Signing time: Fri 31 Jan 2025 01:42:17 +0000 ROA not before: Fri 31 Jan 2025 01:42:17 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 182.20.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:42:17 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=71650839EEF3428BCA4D6FA3F5B73058CDBBEFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:19:df:68:4b:ed:c4:f1:e0:29:47:9a:d9: 90:94:fb:be:8c:a4:71:de:af:2e:97:85:c8:72:7a: 32:eb:3f:bf:ce:a3:e4:aa:36:2d:e9:ec:1e:63:98: 71:ef:24:2b:b0:68:a2:1f:0e:75:6f:7d:21:76:75: 2c:14:1b:7e:bd:b3:f7:8d:9c:9d:f5:81:3b:bf:12: 1b:07:46:0f:b4:8e:bc:fc:8f:18:03:4a:13:ff:cf: a1:29:7d:2b:87:b7:27:06:7e:03:1a:c2:43:12:84: 65:b4:e4:e3:57:98:50:96:99:fe:c7:7a:53:6e:4f: 9b:d3:61:53:1c:25:3c:71:c7:d3:07:ac:21:86:39: 13:d2:1f:a4:9f:22:6d:5e:77:2d:4a:01:fd:b4:ef: b3:02:aa:67:46:37:3d:a0:8e:53:43:b7:f0:d8:6b: 7e:5e:19:05:e0:c2:d6:dc:30:1c:f4:b1:c6:79:34: 2d:06:55:dd:4b:78:69:6f:33:6f:db:ce:40:f5:4a: b3:0f:fe:79:80:20:f9:37:a6:72:c8:8e:dd:27:48: 47:a1:ef:24:50:6d:ce:0c:c0:4c:28:4b:ed:cc:31: c7:01:dd:b4:7e:cc:73:d1:a7:19:cf:20:ac:27:7b: 33:84:66:62:bf:64:0f:16:d1:e9:76:23:ad:44:46: cd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:65:08:39:EE:F3:42:8B:CA:4D:6F:A3:F5:B7:30:58:CD:BB:EF:A6 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/cWUIOe7zQovKTW-j9bcwWM2776Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption aa:94:55:44:35:77:a8:7b:60:3b:6e:b0:96:d0:f8:04:07:69: e4:74:cd:1d:73:55:65:65:72:26:dc:e8:d2:23:63:48:aa:5d: 72:01:14:6a:b4:8f:6d:86:f8:da:79:64:a0:99:76:3e:dc:33: 54:66:db:d5:aa:22:77:46:ae:c1:2a:12:b6:8c:12:cd:8d:a4: 34:1f:f3:e5:ae:b2:04:43:3f:80:bc:d7:0a:11:ac:61:9a:21: 8f:03:00:f6:c5:5e:77:1d:90:8f:d1:8c:6f:77:97:b4:f6:a2: 62:2d:d1:8a:26:e0:fd:9e:78:32:27:93:66:57:9e:d3:7b:37: 29:8c:2d:aa:d0:e1:64:1a:47:b1:ac:f9:77:d5:fa:44:92:05: 81:c3:97:17:2c:60:72:4f:b7:a3:2d:11:d9:af:1a:a9:d1:26: 50:c8:4e:ec:a4:66:da:7f:25:3c:41:5d:23:9b:49:d7:52:55: 9d:05:b1:bf:12:0e:33:41:49:71:9d:c1:ed:12:ec:ca:52:cf: 76:d9:9e:0d:77:8b:1f:a6:99:03:f0:ca:ec:10:6a:d5:6d:37: 18:b4:eb:a3:b9:44:f8:ad:1a:97:0c:d9:2c:85:ef:11:0d:5e: 97:90:6e:ed:23:2e:e2:0c:30:cc:4e:6b:e6:36:70:ef:e1:d8: 94:0b:7f:2b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTQyMTdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDcxNjUwODM5RUVGMzQy OEJDQTRENkZBM0Y1QjczMDU4Q0RCQkVGQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzXxnfaEvtxPHgKUea2ZCU+76MpHHery6XhchyejLrP7/Oo+Sq Ni3p7B5jmHHvJCuwaKIfDnVvfSF2dSwUG369s/eNnJ31gTu/EhsHRg+0jrz8jxgD ShP/z6EpfSuHtycGfgMawkMShGW05ONXmFCWmf7HelNuT5vTYVMcJTxxx9MHrCGG ORPSH6SfIm1edy1KAf2077MCqmdGNz2gjlNDt/DYa35eGQXgwtbcMBz0scZ5NC0G Vd1LeGlvM2/bzkD1SrMP/nmAIPk3pnLIjt0nSEeh7yRQbc4MwEwoS+3MMccB3bR+ zHPRpxnPIKwnezOEZmK/ZA8W0el2I61ERs3HAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUcWUIOe7zQovKTW+j9bcwWM2776YwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L2NXVUlPZTd6UW92S1RXLWo5YmN3V00yNzc2WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwC2FDANBgkqhkiG9w0BAQsFAAOCAQEAqpRVRDV3qHtgO26wltD4BAdp5HTN HXNVZWVyJtzo0iNjSKpdcgEUarSPbYb42nlkoJl2PtwzVGbb1aoid0auwSoStowS zY2kNB/z5a6yBEM/gLzXChGsYZohjwMA9sVedx2Qj9GMb3eXtPaiYi3Riibg/Z54 MieTZlee03s3KYwtqtDhZBpHsaz5d9X6RJIFgcOXFyxgck+3oy0R2a8aqdEmUMhO 7KRm2n8lPEFdI5tJ11JVnQWxvxIOM0FJcZ3B7RLsylLPdtmeDXeLH6aZA/DK7BBq 1W03GLTro7lE+K0alwzZLIXvEQ1el5Bu7SMu4gwwzE5r5jZw7+HYlAt/Kw== -----END CERTIFICATE-----Generated at Sun Apr 27 05:16:01 2025 by rpki-client