$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/834/bso1WIdW4aijXO-OGd3MfMycUQM.roa File: bso1WIdW4aijXO-OGd3MfMycUQM.roa (raw, json) Hash identifier: yNgbW2m5YTdQev5xUVtZZ9wOccsvVfoQsrma71FQmEY= Subject key identifier: 6E:CA:35:58:87:56:E1:A8:A3:5C:EF:8E:19:DD:CC:7C:CC:9C:51:03 Certificate issuer: /CN=DFBEE141DC34E893640343A7F312A702EF91A698 Certificate serial: 14 Authority key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/bso1WIdW4aijXO-OGd3MfMycUQM.roa Signing time: Thu 30 Jan 2025 03:30:17 +0000 ROA not before: Thu 30 Jan 2025 03:30:17 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 23630 IP address blocks: 210.134.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBEE141DC34E893640343A7F312A702EF91A698 Validity Not Before: Jan 30 03:30:17 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=6ECA35588756E1A8A35CEF8E19DDCC7CCC9C5103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d7:e9:b1:80:e6:4f:5c:b4:29:8f:77:a5:f6: 43:9e:d6:7c:97:9f:b2:32:88:85:5a:69:88:cb:2e: 65:85:69:75:60:20:ac:46:3c:b9:ca:f4:ff:eb:02: d8:a3:1c:42:10:a7:18:0d:fa:0c:85:37:28:cc:29: 1f:7d:34:f6:8b:72:07:c0:e1:26:4f:ea:ee:2a:9b: 98:19:34:6e:53:c4:9d:b0:d8:87:f2:f5:9b:eb:1f: 7c:44:9c:d4:c1:71:4c:31:cb:0c:09:32:1b:06:25: 53:a3:7c:27:25:26:2c:df:3f:01:c5:bd:d9:d6:f8: 59:99:0a:24:80:f8:8d:3e:73:6f:1f:45:ff:92:38: 23:e5:30:39:82:d3:97:ba:18:1f:83:45:b7:f5:f7: 47:48:e0:be:fc:e4:ce:ce:35:80:27:83:ec:f7:24: 17:38:e8:c4:79:df:16:07:67:74:f0:ad:a8:05:43: 4f:97:6b:3a:34:af:da:12:a0:e1:af:ed:81:51:8b: 4d:99:c9:e8:f5:be:1a:bf:22:d6:9c:95:0d:28:69: 85:7a:e7:47:78:50:05:c1:64:df:a0:38:01:23:ed: f2:34:66:47:02:db:7b:7f:89:01:21:7e:d8:85:de: c3:f0:c4:27:6f:34:6c:4d:bb:07:f4:07:0d:13:c5: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CA:35:58:87:56:E1:A8:A3:5C:EF:8E:19:DD:CC:7C:CC:9C:51:03 X509v3 Authority Key Identifier: keyid:DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/bso1WIdW4aijXO-OGd3MfMycUQM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.134.192.0/20 Signature Algorithm: sha256WithRSAEncryption 9d:02:45:d0:07:7a:db:05:36:63:6f:c0:7c:e6:eb:00:16:0f: 25:aa:60:5a:ba:dd:4d:04:ed:05:66:6d:fc:76:8d:de:c5:47: c4:bb:d8:04:92:8f:2c:07:17:41:57:89:0e:5c:a8:50:12:3f: c0:cf:47:27:bb:16:43:eb:ac:e5:8e:45:f4:bf:7a:78:9a:3d: c6:a0:fb:6d:79:bf:6e:9a:0e:d9:1b:0d:aa:5b:98:61:ac:87: 8a:07:4b:eb:33:bc:24:e1:a3:5f:69:25:26:72:30:95:8a:2a: c3:58:08:06:71:5b:eb:3e:7e:94:9a:8e:bc:66:0f:bb:9e:3c: 33:ae:ae:69:4b:36:da:54:00:4b:aa:5f:dd:74:42:b5:28:d1: f7:e1:8e:6b:c0:70:47:30:88:bc:4c:35:4c:05:b1:5c:27:ea: 1b:f7:f0:6e:55:70:2d:20:28:09:30:3b:d6:ae:e6:05:fe:4b: a7:3e:20:4b:d4:9a:cf:93:73:73:a6:0c:7e:f5:9d:4f:2b:81: 5d:9c:c6:2d:14:bd:5a:fb:0a:ce:a1:d6:d3:a7:e1:4a:99:33: 7d:21:f4:81:f5:49:84:c5:a4:69:eb:19:eb:6b:1a:4e:0f:ef: 71:30:f0:4d:cd:dd:2f:9b:fb:6e:66:34:46:f0:a9:52:45:05: 54:9e:89:9c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJF RTE0MURDMzRFODkzNjQwMzQzQTdGMzEyQTcwMkVGOTFBNjk4MB4XDTI1MDEzMDAz MzAxN1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNkVDQTM1NTg4NzU2RTFB OEEzNUNFRjhFMTlERENDN0NDQzlDNTEwMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANjX6bGA5k9ctCmPd6X2Q57WfJefsjKIhVppiMsuZYVpdWAgrEY8 ucr0/+sC2KMcQhCnGA36DIU3KMwpH3009otyB8DhJk/q7iqbmBk0blPEnbDYh/L1 m+sffESc1MFxTDHLDAkyGwYlU6N8JyUmLN8/AcW92db4WZkKJID4jT5zbx9F/5I4 I+UwOYLTl7oYH4NFt/X3R0jgvvzkzs41gCeD7PckFzjoxHnfFgdndPCtqAVDT5dr OjSv2hKg4a/tgVGLTZnJ6PW+Gr8i1pyVDShphXrnR3hQBcFk36A4ASPt8jRmRwLb e3+JASF+2IXew/DEJ280bE27B/QHDRPFI18CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRuyjVYh1bhqKNc744Z3cx8zJxRAzAfBgNVHSMEGDAWgBTfvuFB3DTok2QDQ6fz EqcC75GmmDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODM0LzM3N2hRZHcwNkpOa0EwT244eEtuQXUtUnBwZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM3N2hRZHcwNkpOa0EwT244eEtuQXUt UnBwZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MzQvYnNvMVdJZFc0YWlqWE8tT0dkM01mTXljVVFNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNKGwDANBgkqhkiG9w0BAQsFAAOCAQEAnQJF0Ad62wU2Y2/AfObrABYPJapg WrrdTQTtBWZt/HaN3sVHxLvYBJKPLAcXQVeJDlyoUBI/wM9HJ7sWQ+us5Y5F9L96 eJo9xqD7bXm/bpoO2RsNqluYYayHigdL6zO8JOGjX2klJnIwlYoqw1gIBnFb6z5+ lJqOvGYPu548M66uaUs22lQAS6pf3XRCtSjR9+GOa8BwRzCIvEw1TAWxXCfqG/fw blVwLSAoCTA71q7mBf5Lpz4gS9Saz5Nzc6YMfvWdTyuBXZzGLRS9WvsKzqHW06fh SpkzfSH0gfVJhMWkaesZ62saTg/vcTDwTc3dL5v7bmY0RvCpUkUFVJ6JnA== -----END CERTIFICATE-----Generated at Sat Apr 26 20:33:36 2025 by rpki-client