$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/El9Upde91dghy5Ue9IbIkIZiCaE.roa File: El9Upde91dghy5Ue9IbIkIZiCaE.roa (raw, json) Hash identifier: oO98QGcuqFAFnHq/OuCHnz9F329q/mJSjq4mlVWmpkE= Subject key identifier: 12:5F:54:A5:D7:BD:D5:D8:21:CB:95:1E:F4:86:C8:90:86:62:09:A1 Certificate issuer: /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542 Certificate serial: 76 Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/El9Upde91dghy5Ue9IbIkIZiCaE.roa Signing time: Fri 31 Jan 2025 01:32:15 +0000 ROA not before: Fri 31 Jan 2025 01:32:15 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 32787 IP address blocks: 210.193.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542 Validity Not Before: Jan 31 01:32:15 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=125F54A5D7BDD5D821CB951EF486C890866209A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:4e:7a:9c:0d:63:99:8d:3a:7c:43:b4:98: aa:68:14:c2:35:c6:84:cc:15:88:80:c7:7d:e8:2a: e5:49:65:86:97:80:be:8f:94:61:39:9c:6d:ed:7a: 74:bd:a0:9b:e5:98:80:5a:b8:2a:ad:c8:5d:c0:11: 98:40:53:9b:b4:e5:68:5a:97:cf:7e:31:cb:60:88: dc:18:1b:2e:04:c9:6e:61:b5:b8:14:59:ae:3c:85: 13:b9:d5:65:e9:b2:5a:56:0f:f2:1a:ea:73:fd:39: e4:6f:99:8b:50:b3:8a:4a:b7:ed:5d:4f:14:85:50: 45:ae:6c:22:df:76:8d:cd:1e:e5:a1:30:e1:33:32: e6:33:3c:07:6d:22:f7:fb:90:02:4f:f9:ee:0f:73: 33:87:f2:c6:9a:c6:48:ea:52:b5:bb:74:0b:87:c6: 68:56:8c:b5:34:f6:22:49:7b:53:a8:2c:7f:7b:be: 33:f8:6c:3f:af:e4:60:99:15:d2:ef:48:a1:c4:bb: 5f:78:18:8d:b6:27:bb:fd:3f:45:d8:2d:a7:ce:6f: fc:26:54:be:f8:a3:90:1e:af:6f:6a:bb:fd:99:86: 68:07:76:6c:ab:6a:57:1a:08:4d:b3:34:91:7f:64: a1:63:c2:cf:25:3e:af:e2:d4:55:5b:78:cf:ba:79: f9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5F:54:A5:D7:BD:D5:D8:21:CB:95:1E:F4:86:C8:90:86:62:09:A1 X509v3 Authority Key Identifier: keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/El9Upde91dghy5Ue9IbIkIZiCaE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.193.97.0/24 Signature Algorithm: sha256WithRSAEncryption b4:22:44:7c:1d:91:6e:c2:9d:8e:2e:41:a2:de:7a:9d:66:9d: 9a:71:8f:d0:1b:e7:b1:e4:c4:bf:70:7b:c7:27:dc:8f:1d:db: ea:fd:33:43:59:87:60:57:86:21:6c:79:ff:b1:9f:55:33:1a: 4d:0f:d0:72:dc:e0:8c:c5:40:c9:e7:2a:75:a3:ed:25:8c:9d: e1:18:1f:04:e2:b5:f5:0d:ed:75:51:2e:79:d1:df:7a:b4:c4: 6f:75:4d:18:18:b6:75:0e:55:fb:7a:6c:6a:01:fe:c2:1a:84: b9:12:91:63:2d:35:98:c1:b6:f9:f3:7e:52:26:b6:56:9f:c4: f7:4e:62:78:74:18:44:ce:8e:9d:3e:ed:20:08:05:6c:c8:e8: 58:1c:17:90:1c:0d:99:b8:0f:b3:4b:49:23:e3:e4:3c:9a:f3: a0:30:d2:18:44:ec:eb:32:43:4c:23:8f:9d:b4:e6:54:55:d0: b2:4f:c1:90:ee:38:c6:e7:63:d6:25:98:63:65:b0:81:7d:0f: e4:9b:3b:b0:38:97:d3:49:23:e7:27:40:ca:49:d9:3a:8a:94: dc:9a:95:d6:f4:b7:64:6d:a8:8c:ed:10:91:4b:64:8b:d2:bc: e4:9a:e7:27:88:8a:ea:b8:fc:a7:4a:1b:bb:72:ae:6c:c4:06: 79:0d:9b:a6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTI1MDEzMTAx MzIxNVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoMTI1RjU0QTVEN0JERDVE ODIxQ0I5NTFFRjQ4NkM4OTA4NjYyMDlBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMJgTnqcDWOZjTp8Q7SYqmgUwjXGhMwViIDHfegq5UllhpeAvo+U YTmcbe16dL2gm+WYgFq4Kq3IXcARmEBTm7TlaFqXz34xy2CI3BgbLgTJbmG1uBRZ rjyFE7nVZemyWlYP8hrqc/055G+Zi1Czikq37V1PFIVQRa5sIt92jc0e5aEw4TMy 5jM8B20i9/uQAk/57g9zM4fyxprGSOpStbt0C4fGaFaMtTT2Ikl7U6gsf3u+M/hs P6/kYJkV0u9IocS7X3gYjbYnu/0/Rdgtp85v/CZUvvijkB6vb2q7/ZmGaAd2bKtq VxoITbM0kX9koWPCzyU+r+LUVVt4z7p5+ZcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQSX1Sl173V2CHLlR70hsiQhmIJoTAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93 t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82MDIvRWw5VXBkZTkxZGdoeTVVZTlJYklrSVppQ2FFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANLBYTANBgkqhkiG9w0BAQsFAAOCAQEAtCJEfB2RbsKdji5Bot56nWadmnGP 0BvnseTEv3B7xyfcjx3b6v0zQ1mHYFeGIWx5/7GfVTMaTQ/QctzgjMVAyecqdaPt JYyd4RgfBOK19Q3tdVEuedHferTEb3VNGBi2dQ5V+3psagH+whqEuRKRYy01mMG2 +fN+Uia2Vp/E905ieHQYRM6OnT7tIAgFbMjoWBwXkBwNmbgPs0tJI+PkPJrzoDDS GETs6zJDTCOPnbTmVFXQsk/BkO44xudj1iWYY2WwgX0P5Js7sDiX00kj5ydAyknZ OoqU3JqV1vS3ZG2ojO0QkUtki9K85JrnJ4iK6rj8p0obu3KubMQGeQ2bpg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:28:13 2025 by rpki-client