$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/0YpUfFsotJRFQf6Y_aahHrOFiCo.roa File: 0YpUfFsotJRFQf6Y_aahHrOFiCo.roa (raw, json) Hash identifier: L9zpaP8GD/7W4KzRuW8jopJVxo+Utwf+fRDEFcxl9Hc= Subject key identifier: D1:8A:54:7C:5B:28:B4:94:45:41:FE:98:FD:A6:A1:1E:B3:85:88:2A Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 6C Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/0YpUfFsotJRFQf6Y_aahHrOFiCo.roa Signing time: Wed 04 Sep 2024 06:33:10 +0000 ROA not before: Wed 04 Sep 2024 06:33:10 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 15830 IP address blocks: 203.191.224.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Sep 4 06:33:10 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=D18A547C5B28B4944541FE98FDA6A11EB385882A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dd:0e:9e:e3:01:67:fb:68:9d:39:30:fa:32: 33:47:52:25:81:1d:ba:72:0a:ad:00:62:a9:f8:13: 5a:40:3b:ab:88:02:d2:9e:9b:51:d1:48:d7:57:31: fd:f1:8d:1a:58:92:f4:db:d6:0c:e2:de:ba:c7:42: 3d:93:80:82:f6:bd:85:c4:f2:17:9a:dd:57:87:42: 85:0c:32:f5:55:38:4f:bf:96:83:61:c1:f6:23:aa: 47:f3:d9:48:0f:20:7e:36:c1:11:d3:7c:7e:d0:dd: b2:77:8a:2f:81:01:c3:82:8d:b7:e3:a7:e2:cb:04: 81:b2:13:bb:aa:dc:f1:b4:27:f6:94:33:80:b9:91: 8e:27:45:29:9d:ad:f9:fb:b7:b7:d9:38:d6:7a:f6: c2:76:9c:e6:3d:84:15:4f:7e:2f:3d:11:ae:22:5f: 37:bb:5b:b1:16:6c:40:70:50:2d:58:e3:18:e5:09: 8a:c2:0c:3f:9f:cb:dd:ea:6d:72:b4:21:92:71:30: 3e:72:82:b9:dd:0c:77:b7:3a:cd:68:4b:b7:2c:7c: 85:9a:de:f6:91:bf:d0:41:c4:7d:c6:02:c4:94:7c: b5:2a:a2:62:b2:f8:7f:35:c0:72:ed:e7:57:92:23: 97:68:ba:25:37:35:c0:d1:92:be:84:dd:76:c9:3d: d3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8A:54:7C:5B:28:B4:94:45:41:FE:98:FD:A6:A1:1E:B3:85:88:2A X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/0YpUfFsotJRFQf6Y_aahHrOFiCo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.191.224.0/19 Signature Algorithm: sha256WithRSAEncryption 6f:a7:a1:2b:4a:18:ed:e4:17:1d:fc:b2:7f:4c:15:50:bc:4b: e6:7a:9f:f1:d5:68:50:7f:28:e6:2e:60:a9:87:ad:2e:cf:58: 0e:de:65:cc:a5:73:69:c4:ec:ee:f2:09:0c:66:10:07:38:2a: 3c:98:55:f7:94:c0:cd:7e:4e:12:5a:17:a0:e2:7b:b4:61:e1: 21:de:9c:db:fa:69:e6:87:da:d1:62:5f:df:53:f1:ff:cd:76: 59:39:d6:91:c0:99:fc:d3:59:c1:70:e3:a7:74:62:17:9c:b0: 9f:c0:70:9a:0b:55:f0:42:bb:73:fb:7b:ee:10:b7:e4:9e:7b: 68:ab:46:60:6a:b0:ae:cd:89:6a:d0:14:40:f6:cd:4f:1a:30: fc:f2:b9:c3:86:2b:30:a8:15:2a:7f:c2:93:c3:c8:18:1b:6b: ff:b7:2d:53:56:16:62:ca:8e:17:3c:18:36:28:e3:d9:83:e0: 03:c4:fb:f6:fe:31:8b:6d:1b:a0:c9:d8:21:be:38:de:51:1d: 4e:49:16:90:b8:24:8c:14:ee:3c:c3:12:e2:aa:a8:f3:ee:f5: 9b:0e:63:a3:33:07:0f:28:0e:b7:33:a0:cc:99:a7:6d:d2:3a: ac:ee:63:87:90:6c:dc:3d:58:6e:ae:23:80:c9:d6:24:03:65: 72:1c:03:c1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTI0MDkwNDA2 MzMxMFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRDE4QTU0N0M1QjI4QjQ5 NDQ1NDFGRTk4RkRBNkExMUVCMzg1ODgyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOPdDp7jAWf7aJ05MPoyM0dSJYEdunIKrQBiqfgTWkA7q4gC0p6b UdFI11cx/fGNGliS9NvWDOLeusdCPZOAgva9hcTyF5rdV4dChQwy9VU4T7+Wg2HB 9iOqR/PZSA8gfjbBEdN8ftDdsneKL4EBw4KNt+On4ssEgbITu6rc8bQn9pQzgLmR jidFKZ2t+fu3t9k41nr2wnac5j2EFU9+Lz0RriJfN7tbsRZsQHBQLVjjGOUJisIM P5/L3eptcrQhknEwPnKCud0Md7c6zWhLtyx8hZre9pG/0EHEfcYCxJR8tSqiYrL4 fzXAcu3nV5Ijl2i6JTc1wNGSvoTddsk90x0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBTRilR8Wyi0lEVB/pj9pqEes4WIKjAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit 6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5 M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDQyLzBZcFVmRnNvdEpSRlFmNllfYWFoSHJPRmlDby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAXLv+AwDQYJKoZIhvcNAQELBQADggEBAG+noStKGO3kFx38sn9MFVC8 S+Z6n/HVaFB/KOYuYKmHrS7PWA7eZcylc2nE7O7yCQxmEAc4KjyYVfeUwM1+ThJa F6Die7Rh4SHenNv6aeaH2tFiX99T8f/Ndlk51pHAmfzTWcFw46d0YhecsJ/AcJoL VfBCu3P7e+4Qt+See2irRmBqsK7NiWrQFED2zU8aMPzyucOGKzCoFSp/wpPDyBgb a/+3LVNWFmLKjhc8GDYo49mD4APE+/b+MYttG6DJ2CG+ON5RHU5JFpC4JIwU7jzD EuKqqPPu9ZsOY6MzBw8oDrczoMyZp23SOqzuY4eQbNw9WG6uI4DJ1iQDZXIcA8E= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:48 2025 by rpki-client