$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/JLNqIMDP7NK8VDvRfxsurruSk00.roa File: JLNqIMDP7NK8VDvRfxsurruSk00.roa (raw, json) Hash identifier: +RznV8jGmcr3KqPgdh+tp5DMf0mTETRZLEXIvl4XA18= Subject key identifier: 24:B3:6A:20:C0:CF:EC:D2:BC:54:3B:D1:7F:1B:2E:AE:BB:92:93:4D Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Certificate serial: 3244 Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/JLNqIMDP7NK8VDvRfxsurruSk00.roa Signing time: Fri 31 Jan 2025 01:31:18 +0000 ROA not before: Fri 31 Jan 2025 01:31:18 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7671 IP address blocks: 125.252.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12868 (0x3244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Validity Not Before: Jan 31 01:31:18 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=24B36A20C0CFECD2BC543BD17F1B2EAEBB92934D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:86:fb:13:3b:cd:46:a8:db:ac:ec:73:20:b1: 9e:b2:3e:34:cf:f4:83:f8:4f:eb:45:2a:2b:b0:73: 5a:b6:ce:b0:4e:ab:d4:1d:6f:82:3a:61:20:ec:d5: 36:fe:87:98:05:7b:34:a1:b7:86:19:dc:55:fb:63: f1:0b:ab:49:f7:7f:83:94:7a:b5:c0:fc:d3:23:eb: 20:25:8c:82:2f:01:6f:79:24:11:1f:5b:7f:04:31: a9:2f:7a:1d:60:79:18:e4:85:99:93:41:c8:9d:aa: 88:3c:2f:07:23:82:88:4d:5f:46:93:c5:a6:89:f4: 12:e2:d4:b0:d1:3e:e8:9a:2b:a1:f1:b2:a5:4e:68: 4a:8a:46:f0:24:d8:c7:ab:b1:4a:90:70:ed:af:9f: 6c:11:b2:52:c6:15:de:97:bb:01:1c:ab:d9:75:23: a9:32:04:f2:a5:75:75:30:14:ac:b6:22:22:ab:ce: 93:fe:93:3e:23:e1:a8:84:78:38:2a:4f:fe:66:73: 8b:76:d6:a5:fe:ce:0f:ec:92:37:94:30:25:1d:69: c1:e0:7f:9f:23:89:f4:f2:47:77:50:c4:98:dd:e4: 34:2d:aa:59:a1:9d:b1:91:ed:62:80:a6:c6:89:94: 9c:4e:b5:0d:8b:b0:a7:e7:03:72:b1:9e:87:53:d6: 0a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B3:6A:20:C0:CF:EC:D2:BC:54:3B:D1:7F:1B:2E:AE:BB:92:93:4D X509v3 Authority Key Identifier: keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/JLNqIMDP7NK8VDvRfxsurruSk00.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.252.128.0/18 Signature Algorithm: sha256WithRSAEncryption 33:4b:9a:06:48:c9:37:fd:ef:f1:a2:3b:1a:45:f8:6d:29:f6: b0:54:12:c7:cf:e5:d3:ea:f9:61:13:7e:2d:7c:52:52:ab:71: 50:f4:b7:eb:f4:64:a6:a2:d4:c5:88:62:d6:19:1b:d7:65:f1: c3:47:82:69:8e:16:c6:fe:3a:63:51:9b:55:24:7f:ca:a5:32: b0:04:9f:79:b3:d8:70:44:1e:8c:1d:24:76:e8:12:44:c3:df: ac:58:25:e7:5a:99:64:4f:88:a5:83:4d:b4:9f:78:7b:95:70: c7:4b:dd:a5:a0:6c:2f:8d:47:e1:a0:b5:9b:59:03:81:20:9c: 69:72:8b:0c:3c:fc:76:3f:d7:8f:5c:5b:83:f8:8c:2e:a5:17: 34:b9:66:3a:30:90:e1:2d:1b:6d:0c:a5:a2:d4:a2:8b:63:3c: 07:14:2f:cb:19:08:d5:ba:93:50:50:30:16:cd:6b:2d:d4:2a: 13:46:2e:30:24:1b:c8:55:1f:45:e5:a9:7d:c1:6e:ff:a7:a3: ac:44:7f:2f:a6:19:55:66:42:b9:af:82:98:98:62:74:bb:4a: 55:ee:ee:22:a4:2e:34:9b:78:16:6d:93:4b:df:a6:74:62:12: 54:f6:45:45:3a:b1:ca:66:3f:cb:67:a9:37:67:35:5e:b3:fb: d8:c1:d4:f5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICMkQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yNTAxMzEw MTMxMThaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI0QjM2QTIwQzBDRkVD RDJCQzU0M0JEMTdGMUIyRUFFQkI5MjkzNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlhvsTO81GqNus7HMgsZ6yPjTP9IP4T+tFKiuwc1q2zrBOq9Qd b4I6YSDs1Tb+h5gFezSht4YZ3FX7Y/ELq0n3f4OUerXA/NMj6yAljIIvAW95JBEf W38EMakveh1geRjkhZmTQcidqog8LwcjgohNX0aTxaaJ9BLi1LDRPuiaK6HxsqVO aEqKRvAk2MersUqQcO2vn2wRslLGFd6XuwEcq9l1I6kyBPKldXUwFKy2IiKrzpP+ kz4j4aiEeDgqT/5mc4t21qX+zg/skjeUMCUdacHgf58jifTyR3dQxJjd5DQtqlmh nbGR7WKApsaJlJxOtQ2LsKfnA3KxnodT1gqVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJLNqIMDP7NK8VDvRfxsurruSk00wHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjk5L0pMTnFJTURQN05LOFZEdlJmeHN1cnJ1U2swMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ9/IAwDQYJKoZIhvcNAQELBQADggEBADNLmgZIyTf97/GiOxpF+G0p9rBU EsfP5dPq+WETfi18UlKrcVD0t+v0ZKai1MWIYtYZG9dl8cNHgmmOFsb+OmNRm1Uk f8qlMrAEn3mz2HBEHowdJHboEkTD36xYJedamWRPiKWDTbSfeHuVcMdL3aWgbC+N R+GgtZtZA4EgnGlyiww8/HY/149cW4P4jC6lFzS5ZjowkOEtG20MpaLUootjPAcU L8sZCNW6k1BQMBbNay3UKhNGLjAkG8hVH0XlqX3Bbv+no6xEfy+mGVVmQrmvgpiY YnS7SlXu7iKkLjSbeBZtk0vfpnRiElT2RUU6scpmP8tnqTdnNV6z+9jB1PU= -----END CERTIFICATE-----Generated at Sat Apr 26 17:25:32 2025 by rpki-client