$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/BP5LhYi0O9JjiiOnq61B57UrMcs.roa File: BP5LhYi0O9JjiiOnq61B57UrMcs.roa (raw, json) Hash identifier: q285FH88yVHx4+jiyYD/zlu0GspN268thPC7MxzoRjc= Subject key identifier: 04:FE:4B:85:88:B4:3B:D2:63:8A:23:A7:AB:AD:41:E7:B5:2B:31:CB Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: B3 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/BP5LhYi0O9JjiiOnq61B57UrMcs.roa Signing time: Wed 04 Dec 2024 19:43:01 +0000 ROA not before: Wed 04 Dec 2024 19:43:01 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2914 IP address blocks: 202.47.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 4 19:43:01 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=04FE4B8588B43BD2638A23A7ABAD41E7B52B31CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:33:48:d7:47:ad:87:30:38:78:5b:40:97: e5:aa:f8:9e:71:25:b3:5d:a2:8d:4b:63:f3:1d:81: 2e:8a:53:c2:4f:62:eb:eb:8b:14:3f:2a:4f:b0:2e: e0:7c:d6:cd:72:43:3d:ca:63:07:6e:01:45:15:9d: 6b:13:c7:5c:4b:ed:f0:2e:69:66:8f:30:33:66:ed: c4:14:23:ac:c6:29:a8:ef:58:fb:de:90:24:67:0f: 82:63:13:fe:d2:36:e6:ed:61:bd:74:51:b7:36:48: 23:49:23:3f:1e:d4:66:24:52:ba:bf:34:19:f4:6f: d9:48:c1:fa:4e:c9:8f:54:45:bd:89:66:38:06:bf: 42:36:36:25:12:27:80:52:43:5e:7e:d7:b2:db:4c: e8:86:a2:7e:3f:3b:c6:7d:1a:6c:5d:e3:ae:cd:68: ab:48:1f:7e:dd:72:1d:7f:b3:49:f5:e6:d6:2e:b1: f0:f9:74:d6:73:8f:0a:0b:06:a9:41:02:7b:88:e7: 60:be:8f:e4:89:fc:fb:06:36:d2:a5:cc:b9:12:40: 41:c4:a3:aa:65:ba:7c:67:f8:eb:2b:68:e9:4c:9a: c7:a1:8d:f3:f1:33:54:58:d0:5e:2c:d4:4c:8d:67: e2:33:73:0c:57:58:1d:8b:d4:2c:71:8c:38:ca:e2: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FE:4B:85:88:B4:3B:D2:63:8A:23:A7:AB:AD:41:E7:B5:2B:31:CB X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/BP5LhYi0O9JjiiOnq61B57UrMcs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.16.0/20 Signature Algorithm: sha256WithRSAEncryption 40:44:e8:b3:72:8d:e0:19:67:b1:e5:71:98:27:b8:7f:53:a1: d3:4f:98:31:a0:65:7b:c6:fe:d1:f4:ca:49:56:71:8c:dc:48: 52:74:a7:1d:b8:38:20:a8:68:d6:d4:be:14:92:05:19:2b:9f: 97:f8:22:3d:9e:ee:dd:ea:e3:c7:eb:73:ec:36:6d:0d:77:2d: d0:c9:3a:19:73:dd:85:bc:33:7f:34:42:be:64:fd:1f:f6:48: d6:96:77:9e:f5:39:da:49:f1:f1:f9:20:20:e1:98:49:3d:c2: 96:f9:bb:ea:72:b7:8e:88:b8:70:f6:9d:e7:c4:cd:78:71:fe: c6:a2:56:7b:1e:d2:4f:b0:3b:18:93:f2:5a:3d:87:41:95:06: 5c:4f:11:27:07:d1:3c:d4:29:dc:b6:b8:ac:ba:c8:2a:22:0b: 95:d9:52:26:c7:52:5d:5d:96:b9:46:dd:be:01:96:c5:da:d2: 6a:0a:95:15:94:a6:ad:18:de:fe:28:2d:d5:05:3b:5b:1a:bb: d0:b7:ee:86:ef:8d:07:90:11:d1:3e:b6:52:c0:f0:48:f9:94: f0:43:c1:e5:65:19:47:50:e9:d2:fe:61:3d:82:2c:e6:27:c7: 46:57:8d:77:79:d5:aa:ba:80:22:b4:09:41:c9:b4:f2:dd:3f: 68:9d:54:6d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICALMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDQx OTQzMDFaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA0RkU0Qjg1ODhCNDNC RDI2MzhBMjNBN0FCQUQ0MUU3QjUyQjMxQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzejNI10ethzA4eFtAl+Wq+J5xJbNdoo1LY/MdgS6KU8JPYuvr ixQ/Kk+wLuB81s1yQz3KYwduAUUVnWsTx1xL7fAuaWaPMDNm7cQUI6zGKajvWPve kCRnD4JjE/7SNubtYb10Ubc2SCNJIz8e1GYkUrq/NBn0b9lIwfpOyY9URb2JZjgG v0I2NiUSJ4BSQ15+17LbTOiGon4/O8Z9Gmxd467NaKtIH37dch1/s0n15tYusfD5 dNZzjwoLBqlBAnuI52C+j+SJ/PsGNtKlzLkSQEHEo6plunxn+OsraOlMmsehjfPx M1RY0F4s1EyNZ+IzcwxXWB2L1CxxjDjK4txzAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUBP5LhYi0O9JjiiOnq61B57UrMcswHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9CUDVMaFlpME85SmppaU9ucTYxQjU3VXJNY3Mu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEyi8QMA0GCSqGSIb3DQEBCwUAA4IBAQBAROizco3gGWex5XGYJ7h/ U6HTT5gxoGV7xv7R9MpJVnGM3EhSdKcduDggqGjW1L4UkgUZK5+X+CI9nu7d6uPH 63PsNm0Ndy3QyToZc92FvDN/NEK+ZP0f9kjWlnee9TnaSfHx+SAg4ZhJPcKW+bvq creOiLhw9p3nxM14cf7GolZ7HtJPsDsYk/JaPYdBlQZcTxEnB9E81Cnctrisusgq IguV2VImx1JdXZa5Rt2+AZbF2tJqCpUVlKatGN7+KC3VBTtbGrvQt+6G740HkBHR PrZSwPBI+ZTwQ8HlZRlHUOnS/mE9gizmJ8dGV413edWquoAitAlBybTy3T9onVRt -----END CERTIFICATE-----Generated at Sat Apr 5 23:09:09 2025 by rpki-client