$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/dKFcBSXoOdOtkzauz22Lhe05k8M.roa File: dKFcBSXoOdOtkzauz22Lhe05k8M.roa (raw, json) Hash identifier: T4frtTROvElRFijugcMGz4EXItL+/GdnmhXmMUD+GBg= Subject key identifier: 74:A1:5C:05:25:E8:39:D3:AD:93:36:AE:CF:6D:8B:85:ED:39:93:C3 Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Certificate serial: 3245 Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/dKFcBSXoOdOtkzauz22Lhe05k8M.roa Signing time: Fri 31 Jan 2025 01:31:19 +0000 ROA not before: Fri 31 Jan 2025 01:31:19 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7671 IP address blocks: 202.62.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12869 (0x3245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Validity Not Before: Jan 31 01:31:19 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=74A15C0525E839D3AD9336AECF6D8B85ED3993C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:12:5f:34:c0:ac:99:1d:c0:2f:3b:43:00:96: 0c:05:1a:1d:27:f3:f4:8c:fe:d0:2e:8c:a6:80:c4: d3:c2:ac:7d:75:5e:fc:b5:62:a9:ba:71:07:70:42: 63:ae:c7:9b:cb:62:56:d7:fa:d9:3a:8a:3b:98:70: 3c:45:53:96:1a:61:0f:bf:ed:2d:19:29:46:e2:01: 4c:a5:2c:0b:21:56:74:a7:a3:71:02:c3:65:37:04: c6:54:d5:da:35:da:b3:c4:3e:0a:ab:79:08:ca:85: 7a:96:14:2d:f2:1c:cb:58:9d:5d:c8:57:db:de:dc: 9d:34:48:29:7a:c2:d3:b7:b9:ce:c7:4f:c4:5a:1f: 0b:6d:20:f6:46:da:73:4e:39:6b:29:56:fe:6f:80: 8b:1f:71:7f:28:9d:63:91:91:89:e8:48:4a:2f:e6: 6b:84:a3:2a:10:44:77:ec:7e:61:00:b1:d1:24:5b: 95:14:7c:23:6f:6a:fe:58:f1:51:08:f8:e9:6b:5c: 68:37:34:04:66:43:d6:d7:60:5d:ce:5a:be:f0:13: 77:7e:5e:ad:97:b0:43:96:f4:a9:c7:66:88:af:63: 31:64:cb:32:1d:2a:99:a8:e8:6c:df:40:0b:fa:f2: 6c:47:4e:8e:3e:43:a6:dd:dd:22:1e:8b:9a:c9:9e: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A1:5C:05:25:E8:39:D3:AD:93:36:AE:CF:6D:8B:85:ED:39:93:C3 X509v3 Authority Key Identifier: keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/dKFcBSXoOdOtkzauz22Lhe05k8M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.62.176.0/20 Signature Algorithm: sha256WithRSAEncryption 0d:69:d5:5f:f1:87:4f:40:d0:a7:fe:c0:7b:f5:0d:c8:40:82: 5e:81:32:88:bd:f3:e2:6f:c1:0f:fb:e2:4f:6f:f5:08:5b:f5: 17:c1:8f:ae:33:a9:7d:cb:25:d9:e8:4c:28:17:de:ca:a8:7b: e0:ae:1f:df:e7:5b:6b:ae:21:e3:39:27:1b:b2:b1:ca:16:0e: eb:05:08:71:7d:26:7d:bd:24:71:7d:42:c7:95:e1:fb:db:77: d9:a1:da:d6:d3:83:b5:a0:d8:2d:56:01:62:9c:ce:69:52:47: ac:aa:d9:0d:88:3e:69:eb:ef:6c:4e:d7:44:eb:3a:67:bc:a0: b9:a5:c4:24:d1:ba:a5:31:71:75:d4:85:9d:88:91:ad:1e:7f: 60:bf:43:27:1c:f0:36:b6:93:41:da:92:77:2f:df:78:a8:26: 48:22:7f:d9:80:01:70:77:76:0f:9d:98:f1:72:87:24:7c:61: ac:fc:bb:c8:60:1c:92:40:3f:4d:e6:ba:26:b1:b2:b1:37:83: 8d:1c:28:ea:48:cd:c0:75:06:a5:86:74:a6:d0:e6:ff:62:a9: 12:ca:3f:cf:40:4f:dc:58:97:d3:64:47:23:4d:66:16:12:40: 52:c7:b9:0e:a6:8e:81:2c:8e:12:0a:53:9f:58:20:e8:89:03: 93:ec:cc:12 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICMkUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yNTAxMzEw MTMxMTlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc0QTE1QzA1MjVFODM5 RDNBRDkzMzZBRUNGNkQ4Qjg1RUQzOTkzQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJEl80wKyZHcAvO0MAlgwFGh0n8/SM/tAujKaAxNPCrH11Xvy1 Yqm6cQdwQmOux5vLYlbX+tk6ijuYcDxFU5YaYQ+/7S0ZKUbiAUylLAshVnSno3EC w2U3BMZU1do12rPEPgqreQjKhXqWFC3yHMtYnV3IV9ve3J00SCl6wtO3uc7HT8Ra HwttIPZG2nNOOWspVv5vgIsfcX8onWORkYnoSEov5muEoyoQRHfsfmEAsdEkW5UU fCNvav5Y8VEI+OlrXGg3NARmQ9bXYF3OWr7wE3d+Xq2XsEOW9KnHZoivYzFkyzId Kpmo6GzfQAv68mxHTo4+Q6bd3SIei5rJnsvHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdKFcBSXoOdOtkzauz22Lhe05k8MwHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjk5L2RLRmNCU1hvT2RPdGt6YXV6MjJMaGUwNWs4TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKPrAwDQYJKoZIhvcNAQELBQADggEBAA1p1V/xh09A0Kf+wHv1DchAgl6B Moi98+JvwQ/74k9v9Qhb9RfBj64zqX3LJdnoTCgX3sqoe+CuH9/nW2uuIeM5Jxuy scoWDusFCHF9Jn29JHF9QseV4fvbd9mh2tbTg7Wg2C1WAWKczmlSR6yq2Q2IPmnr 72xO10TrOme8oLmlxCTRuqUxcXXUhZ2Ika0ef2C/Qycc8Da2k0Hakncv33ioJkgi f9mAAXB3dg+dmPFyhyR8Yaz8u8hgHJJAP03muiaxsrE3g40cKOpIzcB1BqWGdKbQ 5v9iqRLKP89AT9xYl9NkRyNNZhYSQFLHuQ6mjoEsjhIKU59YIOiJA5PszBI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:31:35 2025 by rpki-client