$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/GvaPYFq3kaJfq22AHlsQQ-WVicc.roa File: GvaPYFq3kaJfq22AHlsQQ-WVicc.roa (raw, json) Hash identifier: wk4pm8o3EjEJQ+3v1FCDBd5h9VRZouFzRe1akcJ4Snc= Subject key identifier: 1A:F6:8F:60:5A:B7:91:A2:5F:AB:6D:80:1E:5B:10:43:E5:95:89:C7 Certificate issuer: /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8 Certificate serial: 64 Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/GvaPYFq3kaJfq22AHlsQQ-WVicc.roa Signing time: Fri 31 Jan 2025 01:31:02 +0000 ROA not before: Fri 31 Jan 2025 01:31:02 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7671 IP address blocks: 122.50.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8 Validity Not Before: Jan 31 01:31:02 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=1AF68F605AB791A25FAB6D801E5B1043E59589C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:ae:e0:b5:8e:4e:7e:29:89:78:4f:33:57: 6d:21:98:32:41:f0:8d:57:72:2a:bc:3a:ab:b8:3f: b0:b5:49:75:4d:01:0e:d4:76:07:7d:12:d2:e2:c4: 76:44:70:8f:4a:d2:be:bb:8d:ff:8f:d4:a4:f3:06: ba:93:a3:ee:cd:99:48:83:bd:16:9c:21:4d:60:f7: 5e:d8:11:69:0a:c3:74:80:c0:aa:2e:5d:fb:09:9a: 8e:fe:5e:f2:ad:33:f9:c4:89:ea:68:b3:5a:a0:99: ea:ec:d2:c0:80:5c:02:99:71:92:b7:a4:f7:e9:e8: 38:b7:da:4d:dc:f9:6b:6d:56:62:bc:6a:95:6e:72: 55:0a:0d:17:d7:81:94:53:72:95:1c:27:a8:31:55: 92:9c:2e:89:f1:69:b7:e9:a9:65:25:a5:6f:14:ea: 93:91:70:13:bf:0d:d1:b5:7c:a2:5d:87:28:b6:9b: 5a:15:70:e9:b1:b9:de:a6:e1:d7:62:1b:27:43:7a: e3:4e:c5:f1:51:f6:9d:32:67:c3:7e:0e:7c:31:0d: 02:3e:a9:b2:f1:33:c0:fd:96:84:36:6d:82:42:db: 2b:77:09:7a:41:f2:55:d7:7f:92:60:21:9b:73:d4: 7e:48:80:a2:71:1b:9c:54:97:2c:02:94:e4:78:2c: f7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F6:8F:60:5A:B7:91:A2:5F:AB:6D:80:1E:5B:10:43:E5:95:89:C7 X509v3 Authority Key Identifier: keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/GvaPYFq3kaJfq22AHlsQQ-WVicc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.50.16.0/20 Signature Algorithm: sha256WithRSAEncryption 6b:a2:e4:82:07:9a:80:a2:f3:2c:a1:70:1d:c2:90:58:0e:14: 82:df:38:d0:95:44:41:75:12:ba:4e:7e:f1:b1:1a:35:d8:4a: 87:20:a4:0f:33:14:da:11:7e:85:be:b0:b7:21:bc:a2:77:24: a9:b6:2d:66:90:a4:af:51:3d:d5:2f:74:af:47:b3:1d:d8:ad: 0b:fc:3e:86:50:3d:b1:f7:2b:6c:10:ab:8e:c5:cc:45:f4:08: 58:40:a2:6e:4c:a0:f5:64:8f:55:d4:e7:f8:4b:8f:18:c6:2e: 34:d8:be:fc:56:e7:ba:be:2d:6e:14:f6:25:70:13:7c:83:7e: fa:70:b1:47:66:45:4e:7b:1b:76:d6:8f:7c:56:f0:6d:45:89: 8e:42:a2:bc:62:af:5d:07:17:23:0c:81:e1:3b:cc:31:02:1d: b1:27:23:94:02:b7:63:2d:c0:ad:c7:af:7c:85:cc:4a:be:21: c8:4f:2d:70:a7:f1:b5:bd:c1:f7:30:24:17:f6:45:3c:29:05: ce:a6:6a:74:7a:92:28:18:18:77:21:f9:70:a9:6f:31:4f:36: 2d:49:75:41:c2:b0:3a:81:05:7b:dc:9b:50:e7:de:58:ce:f7: 6e:10:b1:8a:7f:2a:6b:74:01:23:5d:ed:40:5c:a0:0f:92:c9: a8:2f:01:e6 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRkVB MkMyQUFENjNCQ0NBNEQ0QUM5NkE4NTIxNDBENDI2MTU5N0I4MB4XDTI1MDEzMTAx MzEwMloXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoMUFGNjhGNjA1QUI3OTFB MjVGQUI2RDgwMUU1QjEwNDNFNTk1ODlDNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALD7ruC1jk5+KYl4TzNXbSGYMkHwjVdyKrw6q7g/sLVJdU0BDtR2 B30S0uLEdkRwj0rSvruN/4/UpPMGupOj7s2ZSIO9FpwhTWD3XtgRaQrDdIDAqi5d +wmajv5e8q0z+cSJ6mizWqCZ6uzSwIBcAplxkrek9+noOLfaTdz5a21WYrxqlW5y VQoNF9eBlFNylRwnqDFVkpwuifFpt+mpZSWlbxTqk5FwE78N0bV8ol2HKLabWhVw 6bG53qbh12IbJ0N6407F8VH2nTJnw34OfDENAj6psvEzwP2WhDZtgkLbK3cJekHy Vdd/kmAhm3PUfkiAonEbnFSXLAKU5Hgs94sCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQa9o9gWreRol+rbYAeWxBD5ZWJxzAfBgNVHSMEGDAWgBTP6iwqrWO8yk1KyWqF IUDUJhWXuDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2OTkvei1vc0txMWp2TXBOU3NscWhTRkExQ1lWbDdnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvei1vc0txMWp2TXBOU3NscWhTRkEx Q1lWbDdnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwNjk5L0d2YVBZRnEza2FKZnEyMkFIbHNRUS1XVmljYy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAR6MhAwDQYJKoZIhvcNAQELBQADggEBAGui5IIHmoCi8yyhcB3CkFgO FILfONCVREF1ErpOfvGxGjXYSocgpA8zFNoRfoW+sLchvKJ3JKm2LWaQpK9RPdUv dK9Hsx3YrQv8PoZQPbH3K2wQq47FzEX0CFhAom5MoPVkj1XU5/hLjxjGLjTYvvxW 57q+LW4U9iVwE3yDfvpwsUdmRU57G3bWj3xW8G1FiY5Corxir10HFyMMgeE7zDEC HbEnI5QCt2MtwK3Hr3yFzEq+IchPLXCn8bW9wfcwJBf2RTwpBc6manR6kigYGHch +XCpbzFPNi1JdUHCsDqBBXvcm1Dn3ljO924QsYp/Kmt0ASNd7UBcoA+SyagvAeY= -----END CERTIFICATE-----Generated at Sun Apr 6 01:51:50 2025 by rpki-client