$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/C7WSwaBaVWnZjz4pO8819PLJ8A0.roa File: C7WSwaBaVWnZjz4pO8819PLJ8A0.roa (raw, json) Hash identifier: Tv0JjNo4zoecWqwoFRvku0rpTbkh7BstJNZHBHmI2+M= Subject key identifier: 0B:B5:92:C1:A0:5A:55:69:D9:8F:3E:29:3B:CF:35:F4:F2:C9:F0:0D Certificate issuer: /CN=55061B7BA6111F230BDB61E29781E46D0165E99E Certificate serial: 42 Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/C7WSwaBaVWnZjz4pO8819PLJ8A0.roa Signing time: Sat 30 Nov 2024 01:28:42 +0000 ROA not before: Sat 30 Nov 2024 01:28:42 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 9354 IP address blocks: 219.100.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E Validity Not Before: Nov 30 01:28:42 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=0BB592C1A05A5569D98F3E293BCF35F4F2C9F00D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f0:e0:70:cc:44:93:da:63:a3:e1:d3:b6:b8: f1:0d:55:96:4e:a6:e7:8a:51:a4:81:9f:a5:f5:3a: 44:5f:44:5d:55:c7:61:fc:48:7d:16:d7:a9:de:a2: d1:c5:2b:b9:cc:e9:2e:fa:d3:fc:15:09:c6:65:82: c7:c2:11:24:02:74:15:b5:9a:4a:ae:9f:e5:60:3b: 2c:9e:1d:b5:f3:8a:2f:6e:73:40:17:5d:ab:98:09: 36:67:66:e9:26:89:90:a6:14:da:1c:1d:10:d4:0e: 1f:24:ef:d1:6b:0f:3d:e7:80:4d:66:c3:4d:26:c2: ec:42:46:a7:38:a7:38:0b:e9:7f:02:32:22:16:99: 78:4c:56:01:62:78:bd:0e:40:20:40:75:e9:47:ca: 6b:e8:75:75:4f:43:ae:58:c9:30:6b:a7:e7:03:de: d7:7d:ce:bc:5a:1f:f6:ef:a8:08:58:86:f9:a5:74: 2e:af:9e:13:2e:c8:4d:63:ba:98:4c:9b:8b:af:5d: 94:de:75:56:bb:37:91:dc:75:12:5a:cb:59:49:e3: cb:c3:a3:89:a4:50:f0:7f:62:28:52:c0:6e:cf:77: 24:62:2c:30:3d:7f:18:f5:ea:ae:12:6e:af:60:10: 20:ac:56:18:18:9e:46:ef:24:19:36:38:3f:33:4f: 66:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B5:92:C1:A0:5A:55:69:D9:8F:3E:29:3B:CF:35:F4:F2:C9:F0:0D X509v3 Authority Key Identifier: keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/C7WSwaBaVWnZjz4pO8819PLJ8A0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.224.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:06:ea:85:03:16:b7:bc:df:df:ed:90:52:c3:4b:bc:90:4c: 17:45:96:b5:ab:ad:1f:57:c5:24:25:ed:e1:60:65:24:ab:21: 1b:87:97:d4:10:99:e1:bf:23:10:a0:d7:57:4f:fe:54:fc:96: 3a:27:60:a8:ff:4f:e7:9e:1d:8b:a6:aa:56:24:b7:ae:17:8c: 93:53:86:67:19:9b:c0:17:75:48:3a:d5:46:83:b4:63:b4:2f: 1a:78:fb:ec:ef:bf:86:36:ff:99:51:98:1d:79:ca:4f:2b:da: eb:c2:9b:f1:b8:f2:08:a1:c0:4b:57:d1:35:2a:d2:d0:a9:be: 1a:21:6f:8e:ee:f6:77:ab:4a:4a:2b:c5:84:c4:4f:f3:b7:5c: 99:37:77:05:4c:15:55:b4:70:f3:80:eb:d2:bb:ae:4f:71:38: 9f:9a:dd:ba:5d:7d:96:3d:03:02:9b:a2:a8:b9:0f:b8:10:58: ff:43:54:4d:8e:8d:4c:b2:6e:1b:f4:3a:3b:45:10:95:5a:17: ca:f6:cf:94:bd:83:c0:9d:f8:46:4a:ab:3f:70:b7:55:c8:c2: 84:75:32:9a:27:40:68:a5:64:5f:49:ac:4c:16:43:bf:0b:10: 93:b9:d5:57:4b:f0:0f:3c:2f:3c:9b:0f:37:ee:72:9b:ca:83: 66:13:b9:86 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NTA2 MUI3QkE2MTExRjIzMEJEQjYxRTI5NzgxRTQ2RDAxNjVFOTlFMB4XDTI0MTEzMDAx Mjg0MloXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoMEJCNTkyQzFBMDVBNTU2 OUQ5OEYzRTI5M0JDRjM1RjRGMkM5RjAwRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOPw4HDMRJPaY6Ph07a48Q1Vlk6m54pRpIGfpfU6RF9EXVXHYfxI fRbXqd6i0cUruczpLvrT/BUJxmWCx8IRJAJ0FbWaSq6f5WA7LJ4dtfOKL25zQBdd q5gJNmdm6SaJkKYU2hwdENQOHyTv0WsPPeeATWbDTSbC7EJGpzinOAvpfwIyIhaZ eExWAWJ4vQ5AIEB16UfKa+h1dU9DrljJMGun5wPe133OvFof9u+oCFiG+aV0Lq+e Ey7ITWO6mEybi69dlN51Vrs3kdx1ElrLWUnjy8OjiaRQ8H9iKFLAbs93JGIsMD1/ GPXqrhJur2AQIKxWGBieRu8kGTY4PzNPZu8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQLtZLBoFpVadmPPik7zzX08snwDTAfBgNVHSMEGDAWgBRVBht7phEfIwvbYeKX geRtAWXpnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODIyL1ZRWWJlNllSSHlNTDIySGlsNEhrYlFGbDZaNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZRWWJlNllSSHlNTDIySGlsNEhrYlFG bDZaNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MjIvQzdXU3dhQmFWV25aano0cE84ODE5UExKOEEwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAttk4DANBgkqhkiG9w0BAQsFAAOCAQEAGwbqhQMWt7zf3+2QUsNLvJBMF0WW tautH1fFJCXt4WBlJKshG4eX1BCZ4b8jEKDXV0/+VPyWOidgqP9P554di6aqViS3 rheMk1OGZxmbwBd1SDrVRoO0Y7QvGnj77O+/hjb/mVGYHXnKTyva68Kb8bjyCKHA S1fRNSrS0Km+GiFvju72d6tKSivFhMRP87dcmTd3BUwVVbRw84Dr0ruuT3E4n5rd ul19lj0DApuiqLkPuBBY/0NUTY6NTLJuG/Q6O0UQlVoXyvbPlL2DwJ34RkqrP3C3 VcjChHUymidAaKVkX0msTBZDvwsQk7nVV0vwDzwvPJsPN+5ym8qDZhO5hg== -----END CERTIFICATE-----Generated at Sat Apr 26 18:21:50 2025 by rpki-client