$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/EjXJz-aXcHrm0q2Yg5GjHVsqMC8.roa File: EjXJz-aXcHrm0q2Yg5GjHVsqMC8.roa (raw, json) Hash identifier: 6s6aq+ouyYHDk+yhzLxgFw88vigQ/hhI1nI/O/ygYT4= Subject key identifier: 12:35:C9:CF:E6:97:70:7A:E6:D2:AD:98:83:91:A3:1D:5B:2A:30:2F Certificate issuer: /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D Certificate serial: 16 Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/EjXJz-aXcHrm0q2Yg5GjHVsqMC8.roa Signing time: Wed 07 Aug 2024 06:09:27 +0000 ROA not before: Wed 07 Aug 2024 06:09:27 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 23784 IP address blocks: 202.67.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D Validity Not Before: Aug 7 06:09:27 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=1235C9CFE697707AE6D2AD988391A31D5B2A302F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:18:ed:af:e9:67:f9:64:0b:d4:a8:d1:41:c4: 68:b3:c7:06:ae:ba:ca:0f:7c:38:3a:82:49:14:f8: f1:17:f4:ba:0f:43:4a:81:ee:54:c1:92:d3:d5:ec: 8e:e6:52:3e:89:a4:7e:19:cd:c0:e4:17:92:ad:40: 8c:0b:28:f8:d2:fc:de:7a:6d:1d:ea:11:d6:c7:14: 8f:64:be:df:2d:bb:a5:43:47:dd:3f:b4:43:e8:41: 60:98:cf:8d:5a:43:9c:9b:16:cb:7b:cb:cc:eb:25: 67:77:cb:bf:21:41:5a:fa:40:f6:7d:08:77:f1:50: 88:67:e5:cf:4c:a2:37:98:2a:37:24:02:e0:dc:5c: 1e:61:dd:19:b2:b1:fa:fb:2e:3d:75:d3:6a:7c:26: bc:a7:46:42:94:1d:01:8c:98:47:87:d1:07:c9:07: b6:b4:b9:56:61:7f:70:da:62:67:61:96:92:c8:75: 76:7b:a6:b6:75:9f:6b:6d:92:d6:9a:cb:c9:a2:a3: 50:7d:98:e8:56:b6:cf:67:69:a9:4b:bf:b7:1f:d0: d6:2b:68:da:c7:89:d8:f5:20:e5:88:63:48:3c:92: 6e:f9:29:58:51:6f:de:b7:34:e4:db:d0:4e:be:fc: da:9d:05:52:e3:32:bb:22:51:db:c3:24:ba:84:40: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:35:C9:CF:E6:97:70:7A:E6:D2:AD:98:83:91:A3:1D:5B:2A:30:2F X509v3 Authority Key Identifier: keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/EjXJz-aXcHrm0q2Yg5GjHVsqMC8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.67.48.0/20 Signature Algorithm: sha256WithRSAEncryption 90:82:7e:9a:f3:38:68:10:b9:a9:9a:ea:d8:60:65:08:ba:79: 0c:a7:c3:7e:e6:a3:8f:17:0e:fa:b0:d8:95:38:86:91:73:c1: d0:9e:9d:d8:66:2a:a6:06:89:fb:93:fb:db:3d:ce:3e:bd:ad: cf:fa:c7:c0:e2:a6:9c:68:de:22:1a:91:83:07:89:33:53:bf: c4:0d:b8:6f:2e:2c:a8:4a:6e:6c:17:63:68:52:c0:d9:97:de: 00:70:13:55:44:e8:58:a8:06:f1:d3:41:41:05:f7:63:55:f5: 3a:62:74:ab:29:1d:74:09:5f:e8:84:5b:9d:97:80:96:e9:3c: 1a:a3:3c:92:0f:d4:52:5c:9f:30:6d:fa:30:7e:c0:b2:a8:95: 8c:cb:9f:fd:84:ad:fe:71:6d:57:88:49:eb:b0:df:66:6f:e9: a8:43:a7:0e:56:1d:2c:ed:a9:e0:61:cd:28:10:04:04:7c:b7: 95:99:f5:26:42:07:ed:0b:35:ec:29:6f:ff:a7:23:7a:f6:f3: 4c:4f:de:2c:99:84:bd:00:99:70:aa:d5:46:02:b9:0f:58:0f: 40:17:87:a1:63:9e:9e:94:c4:18:d1:b4:d0:9c:46:7c:38:22: ec:9f:7f:9c:e4:f6:28:72:16:64:97:86:3e:05:23:8b:a9:5e: 94:e3:23:82 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCRDY5 MDAyRDBFOEI3RUQyQzNEMUQ1RDA3QUU2OTIyQzc0OTdGMDJEMB4XDTI0MDgwNzA2 MDkyN1oXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMTIzNUM5Q0ZFNjk3NzA3 QUU2RDJBRDk4ODM5MUEzMUQ1QjJBMzAyRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOQY7a/pZ/lkC9So0UHEaLPHBq66yg98ODqCSRT48Rf0ug9DSoHu VMGS09XsjuZSPomkfhnNwOQXkq1AjAso+NL83nptHeoR1scUj2S+3y27pUNH3T+0 Q+hBYJjPjVpDnJsWy3vLzOslZ3fLvyFBWvpA9n0Id/FQiGflz0yiN5gqNyQC4Nxc HmHdGbKx+vsuPXXTanwmvKdGQpQdAYyYR4fRB8kHtrS5VmF/cNpiZ2GWksh1dnum tnWfa22S1prLyaKjUH2Y6Fa2z2dpqUu/tx/Q1ito2seJ2PUg5YhjSDySbvkpWFFv 3rc05NvQTr782p0FUuMyuyJR28MkuoRAjgUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQSNcnP5pdweubSrZiDkaMdWyowLzAfBgNVHSMEGDAWgBS9aQAtDot+0sPR1dB6 5pIsdJfwLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTc3L3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhTWDhDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhT WDhDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NzcvRWpYSnotYVhjSHJtMHEyWWc1R2pIVnNxTUM4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMpDMDANBgkqhkiG9w0BAQsFAAOCAQEAkIJ+mvM4aBC5qZrq2GBlCLp5DKfD fuajjxcO+rDYlTiGkXPB0J6d2GYqpgaJ+5P72z3OPr2tz/rHwOKmnGjeIhqRgweJ M1O/xA24by4sqEpubBdjaFLA2ZfeAHATVUToWKgG8dNBQQX3Y1X1OmJ0qykddAlf 6IRbnZeAluk8GqM8kg/UUlyfMG36MH7AsqiVjMuf/YSt/nFtV4hJ67DfZm/pqEOn DlYdLO2p4GHNKBAEBHy3lZn1JkIH7Qs17Clv/6cjevbzTE/eLJmEvQCZcKrVRgK5 D1gPQBeHoWOenpTEGNG00JxGfDgi7J9/nOT2KHIWZJeGPgUji6lelOMjgg== -----END CERTIFICATE-----Generated at Sat Apr 26 18:48:28 2025 by rpki-client