$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/BhwgcURuIa_G3L9QHc2XGBdU3r0.roa File: BhwgcURuIa_G3L9QHc2XGBdU3r0.roa (raw, json) Hash identifier: 6cqacPmeQLerHFdsP8dT0OGzX6cQWThkWUOjNsBo1G8= Subject key identifier: 06:1C:20:71:44:6E:21:AF:C6:DC:BF:50:1D:CD:97:18:17:54:DE:BD Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 054A Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BhwgcURuIa_G3L9QHc2XGBdU3r0.roa Signing time: Fri 31 Jan 2025 01:36:07 +0000 ROA not before: Fri 31 Jan 2025 01:36:07 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 116.68.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:36:07 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=061C2071446E21AFC6DCBF501DCD97181754DEBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:9e:20:1b:c7:bf:49:f3:a2:07:f6:02:ef: f6:5d:e1:f0:bf:30:80:d2:d6:8d:fd:ae:98:38:1d: 6a:58:36:78:bf:94:e4:78:81:03:77:88:d0:ab:5c: 47:65:a2:ec:87:eb:98:99:a6:54:ca:a8:47:1f:6a: fd:2f:24:75:df:6a:15:8f:d4:96:49:99:76:96:1b: 03:8d:fa:f7:2d:a2:bd:82:d5:b2:31:29:21:74:8e: 0a:6c:94:ea:fb:bf:55:03:3c:8f:60:18:33:c8:ab: 62:d7:86:f2:b8:4c:c6:a1:3c:dc:49:47:47:d3:6d: 37:40:39:1a:e7:20:11:0a:67:ad:a4:c0:97:5f:67: 40:ab:6b:58:fe:9b:35:ed:f6:8e:a5:0e:81:5d:b6: 6c:e9:7b:b5:2f:70:e9:ce:cd:6a:70:2a:ba:6f:62: 51:64:ad:90:a8:a5:d0:93:3e:26:85:1d:ba:c1:e2: 75:bc:19:9f:33:02:fb:9a:40:de:3e:8f:e5:5d:e2: f9:66:9a:1a:31:83:98:b9:6f:72:4f:dd:66:5d:5f: 6f:ed:8b:d5:1c:c9:1a:c2:a6:aa:f3:96:1b:c4:56: 38:46:55:42:23:87:5a:77:f2:77:e5:dd:e6:06:f5: 08:a7:c7:9c:76:29:c7:73:8e:e2:1d:12:6d:c1:53: 79:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1C:20:71:44:6E:21:AF:C6:DC:BF:50:1D:CD:97:18:17:54:DE:BD X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BhwgcURuIa_G3L9QHc2XGBdU3r0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.68.220.0/22 Signature Algorithm: sha256WithRSAEncryption 42:fa:d8:d4:fe:84:88:ab:3b:cd:23:16:2a:72:5f:87:92:3a: ae:a3:6c:2a:7a:30:b3:b2:23:15:81:cf:f0:84:6e:89:4d:bf: b5:10:32:06:73:a8:5c:9a:a7:66:dc:43:b7:df:fa:c5:6c:1f: e1:01:79:2d:57:ca:ef:9e:1f:6a:1e:80:86:91:84:6f:29:69: c3:ab:fb:f7:36:70:74:30:f9:58:d2:b8:ab:c9:d2:bd:f6:32: 09:9d:e9:ca:aa:9e:3e:73:3c:17:6e:8a:1e:60:e9:c9:60:be: 17:bd:ee:a5:99:9b:2b:46:af:59:86:a0:90:7b:91:1e:84:71: 81:8b:49:02:54:55:5f:35:f4:43:b5:b5:6e:6c:e3:e5:a1:0f: 51:8b:6a:91:75:55:d6:d7:25:23:b6:6f:2d:f9:4d:8a:8c:fd: d5:99:ed:40:7f:1c:f5:47:a7:08:38:82:d9:b1:36:25:53:8e: bf:7c:5b:4f:31:c8:a9:6e:e5:a6:69:85:c3:5c:f7:aa:52:46: 13:73:7b:f6:80:2c:c6:99:7b:32:7e:a5:cb:99:d5:07:da:80: 8c:cb:89:82:99:79:53:3a:3a:f1:b4:1d:d2:14:e9:cc:99:b1: 9d:7c:3c:1e:83:55:52:79:d2:af:2b:b6:de:74:35:70:81:12: 1c:be:7c:d3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM2MDdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA2MUMyMDcxNDQ2RTIx QUZDNkRDQkY1MDFEQ0Q5NzE4MTc1NERFQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmgZ4gG8e/SfOiB/YC7/Zd4fC/MIDS1o39rpg4HWpYNni/lOR4 gQN3iNCrXEdlouyH65iZplTKqEcfav0vJHXfahWP1JZJmXaWGwON+vctor2C1bIx KSF0jgpslOr7v1UDPI9gGDPIq2LXhvK4TMahPNxJR0fTbTdAORrnIBEKZ62kwJdf Z0Cra1j+mzXt9o6lDoFdtmzpe7UvcOnOzWpwKrpvYlFkrZCopdCTPiaFHbrB4nW8 GZ8zAvuaQN4+j+Vd4vlmmhoxg5i5b3JP3WZdX2/ti9UcyRrCpqrzlhvEVjhGVUIj h1p38nfl3eYG9Qinx5x2KcdzjuIdEm3BU3kjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBhwgcURuIa/G3L9QHc2XGBdU3r0wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L0Jod2djVVJ1SWFfRzNMOVFIYzJYR0JkVTNyMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ0RNwwDQYJKoZIhvcNAQELBQADggEBAEL62NT+hIirO80jFipyX4eSOq6j bCp6MLOyIxWBz/CEbolNv7UQMgZzqFyap2bcQ7ff+sVsH+EBeS1Xyu+eH2oegIaR hG8pacOr+/c2cHQw+VjSuKvJ0r32Mgmd6cqqnj5zPBduih5g6clgvhe97qWZmytG r1mGoJB7kR6EcYGLSQJUVV819EO1tW5s4+WhD1GLapF1VdbXJSO2by35TYqM/dWZ 7UB/HPVHpwg4gtmxNiVTjr98W08xyKlu5aZphcNc96pSRhNze/aALMaZezJ+pcuZ 1QfagIzLiYKZeVM6OvG0HdIU6cyZsZ18PB6DVVJ50q8rtt50NXCBEhy+fNM= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:44 2025 by rpki-client on console.sobornost.net