$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/OxxjtEuceK62mBvGxmQH0rlGEHY.roa File: OxxjtEuceK62mBvGxmQH0rlGEHY.roa (raw, json) Hash identifier: hHiXhAvbQXl+5QQWHFULZGl1q30T4baWqLHQE3Oeng0= Subject key identifier: 3B:1C:63:B4:4B:9C:78:AE:B6:98:1B:C6:C6:64:07:D2:B9:46:10:76 Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Certificate serial: 6F Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/OxxjtEuceK62mBvGxmQH0rlGEHY.roa Signing time: Fri 31 Jan 2025 01:31:42 +0000 ROA not before: Fri 31 Jan 2025 01:31:42 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 45680 IP address blocks: 103.235.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Validity Not Before: Jan 31 01:31:42 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=3B1C63B44B9C78AEB6981BC6C66407D2B9461076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:98:e6:fa:29:61:a7:ab:36:01:a4:cd:47: f0:76:e8:4c:ff:8a:81:a2:ad:01:e7:a6:4c:0a:a8: 4b:4a:cd:75:db:ea:19:4d:7f:9a:5e:9e:63:ed:77: 83:c1:92:ea:35:f3:3a:d7:3b:3e:73:c0:b3:be:90: 79:48:2d:2c:7b:70:31:c0:22:3d:71:bd:9b:fe:8f: 55:8c:a2:79:97:d5:78:b3:07:31:71:42:fe:b3:e4: a6:4b:79:ed:73:2f:2b:83:88:36:ea:93:75:cf:93: 4b:72:83:04:11:e8:a5:64:70:b7:8b:06:89:7c:3c: 5f:76:f7:67:83:01:c4:84:2d:68:5c:48:6f:82:f7: 27:7c:a8:2e:65:bc:7d:67:43:c5:1a:12:5d:9c:e0: e9:9e:83:71:ac:f5:83:48:0d:b2:38:90:72:44:75: bb:db:fa:da:b2:dc:ba:81:8d:1a:8c:ea:ec:6a:1b: bc:d8:00:f8:e4:a4:b4:d4:49:cb:3f:b0:09:88:83: e4:09:5d:53:9a:28:6e:2d:50:6b:14:ed:bb:3a:21: 4e:a4:32:c1:4f:f7:4f:e9:93:9f:31:9b:3e:69:cd: 69:22:da:4e:38:86:bf:d3:7f:f0:f3:e0:e7:bd:b0: 7a:38:78:ee:d3:02:5f:75:de:b2:4c:61:6f:bf:86: 4f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:63:B4:4B:9C:78:AE:B6:98:1B:C6:C6:64:07:D2:B9:46:10:76 X509v3 Authority Key Identifier: keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/OxxjtEuceK62mBvGxmQH0rlGEHY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.235.40.0/22 Signature Algorithm: sha256WithRSAEncryption 77:e8:8a:99:2b:60:78:1b:17:46:56:c8:36:2a:3a:0a:da:34: ac:32:eb:56:70:9a:37:48:04:8a:61:48:a7:ff:ef:05:d6:9e: 48:26:bc:68:cd:ab:d1:7b:bc:5c:28:d4:b9:b9:3f:79:df:4d: ad:e2:97:36:ae:e4:24:12:b4:75:58:32:6d:ed:7f:ba:2d:72: 16:fa:91:8d:84:8a:31:6c:41:34:ce:2c:cf:9e:14:11:fd:a3: 88:c0:62:5d:4e:24:a6:69:87:37:ba:3e:81:93:7f:82:1d:f6: 11:71:cc:24:22:ce:dd:33:f3:76:87:6d:64:ba:b8:6e:9a:0c: 07:d2:d8:88:7d:f0:ba:70:14:25:5a:31:39:38:b0:45:a4:34: c7:4f:f6:21:d6:81:f8:95:e7:68:4a:d8:f9:d6:8d:61:7c:ee: 9e:77:39:c9:c4:06:38:78:47:45:03:b7:44:10:9d:4e:6e:e9: 71:f7:84:0a:3a:e8:78:5d:01:f7:ad:c7:91:54:e8:b2:c4:86: 00:26:8f:2e:4b:e3:5d:3f:13:42:89:0d:04:13:22:02:44:a6: 92:11:d1:61:cb:e5:46:8c:f8:2e:29:06:ca:3a:a5:e2:f3:bf: b2:55:f5:1f:e5:8f:3f:69:67:25:62:15:d2:d6:ae:8a:0e:6d: 29:51:bf:fe -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDI2 RTBEMTdFMzBEOEJGNTcxNEY0QkE5MkVFRUIwRDIyREREQjFEMB4XDTI1MDEzMTAx MzE0MloXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoM0IxQzYzQjQ0QjlDNzhB RUI2OTgxQkM2QzY2NDA3RDJCOTQ2MTA3NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMsGmOb6KWGnqzYBpM1H8HboTP+KgaKtAeemTAqoS0rNddvqGU1/ ml6eY+13g8GS6jXzOtc7PnPAs76QeUgtLHtwMcAiPXG9m/6PVYyieZfVeLMHMXFC /rPkpkt57XMvK4OINuqTdc+TS3KDBBHopWRwt4sGiXw8X3b3Z4MBxIQtaFxIb4L3 J3yoLmW8fWdDxRoSXZzg6Z6Dcaz1g0gNsjiQckR1u9v62rLcuoGNGozq7GobvNgA +OSktNRJyz+wCYiD5AldU5oobi1QaxTtuzohTqQywU/3T+mTnzGbPmnNaSLaTjiG v9N/8PPg572wejh47tMCX3Xeskxhb7+GTxcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ7HGO0S5x4rraYG8bGZAfSuUYQdjAfBgNVHSMEGDAWgBSNJuDRfjDYv1cU9LqS 7usNIt3bHTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTg5L2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNMZDJ4MC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNM ZDJ4MC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85ODkvT3h4anRFdWNlSzYybUJ2R3htUUgwcmxHRUhZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfrKDANBgkqhkiG9w0BAQsFAAOCAQEAd+iKmStgeBsXRlbINio6Cto0rDLr VnCaN0gEimFIp//vBdaeSCa8aM2r0Xu8XCjUubk/ed9NreKXNq7kJBK0dVgybe1/ ui1yFvqRjYSKMWxBNM4sz54UEf2jiMBiXU4kpmmHN7o+gZN/gh32EXHMJCLO3TPz dodtZLq4bpoMB9LYiH3wunAUJVoxOTiwRaQ0x0/2IdaB+JXnaErY+daNYXzunnc5 ycQGOHhHRQO3RBCdTm7pcfeECjroeF0B963HkVTossSGACaPLkvjXT8TQokNBBMi AkSmkhHRYcvlRoz4LikGyjql4vO/slX1H+WPP2lnJWIV0tauig5tKVG//g== -----END CERTIFICATE-----Generated at Sat Apr 26 17:56:44 2025 by rpki-client