$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/4y9Xn_BwmwAleguL89YpzIdoXdY.roa File: 4y9Xn_BwmwAleguL89YpzIdoXdY.roa (raw, json) Hash identifier: D4nez3K7mGUyDilQHtrJWbdganLxYw34cnbH2RZOC+Y= Subject key identifier: E3:2F:57:9F:F0:70:9B:00:25:7A:0B:8B:F3:D6:29:CC:87:68:5D:D6 Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Certificate serial: 9C Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/4y9Xn_BwmwAleguL89YpzIdoXdY.roa Signing time: Sat 30 Nov 2024 01:31:18 +0000 ROA not before: Sat 30 Nov 2024 01:31:18 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 9351 IP address blocks: 218.228.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Validity Not Before: Nov 30 01:31:18 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=E32F579FF0709B00257A0B8BF3D629CC87685DD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:da:b2:5c:70:72:27:de:40:f4:84:82:e2:12: 65:b4:ec:13:d7:34:04:a3:0c:8f:94:36:ea:45:76: 55:e8:f3:bc:52:8e:6b:26:6d:13:eb:66:f9:19:ed: 05:49:e3:5b:88:1a:b2:27:72:6a:4f:84:27:c1:2e: 78:0c:81:6a:9f:fd:5c:c5:45:21:2c:97:58:88:ff: a4:bf:5a:69:8b:c6:51:d3:73:eb:f0:1b:f3:9f:61: 29:cf:4f:29:78:34:f2:86:7b:b0:7d:0c:b7:2b:37: 42:82:c5:5e:cd:89:2c:67:7f:01:c6:1b:79:e9:ac: f1:c6:93:ca:6a:d3:5f:61:45:55:ef:13:5a:8f:b2: 54:51:77:85:ab:2a:1c:7b:23:8f:ca:4a:ae:3a:e3: 4f:48:45:e2:2c:cd:9a:a5:18:f1:4f:91:94:a5:f9: 3e:a2:1d:6f:2f:f3:99:e4:be:a6:2e:ea:76:58:d3: c2:8e:aa:ab:f3:cf:07:d7:b8:59:1d:2f:04:ec:7d: f4:c9:5d:02:fe:b4:a9:9f:b3:a4:dc:7a:b4:3b:79: 01:41:b3:d1:4d:ad:5c:cc:ea:7f:fb:43:0e:52:63: e2:8c:6f:5c:98:df:fc:90:4a:08:97:e8:ad:23:58: f7:73:20:7a:2c:75:ba:c6:e5:78:f4:b9:fc:fb:bf: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2F:57:9F:F0:70:9B:00:25:7A:0B:8B:F3:D6:29:CC:87:68:5D:D6 X509v3 Authority Key Identifier: keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/4y9Xn_BwmwAleguL89YpzIdoXdY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.228.0.0/20 Signature Algorithm: sha256WithRSAEncryption 7e:e3:cf:72:3b:c6:2b:c0:f2:70:38:3c:da:9b:37:08:6d:77: 49:af:70:16:44:dc:06:e2:21:d5:92:03:e2:07:d7:e9:6d:9d: 9d:26:67:52:90:d8:f2:d9:52:a6:31:bd:3e:02:16:dd:3e:ea: f4:fb:3e:e6:7c:7a:c9:7b:16:22:40:55:45:1d:e8:da:07:08: be:87:53:a9:62:f5:80:ea:7f:15:a1:c7:92:fb:37:9c:64:7b: 02:aa:9a:be:32:0c:a8:2b:58:d1:dc:00:a4:fb:f2:ba:25:bf: ef:78:15:b3:24:73:f5:8f:4e:2c:75:0d:f9:48:07:ad:8c:7d: 32:76:bc:4b:dc:c3:7d:d9:ae:51:50:2e:4d:93:67:65:08:ad: 2d:eb:bf:3b:e2:af:a2:5d:2c:2d:18:3e:a5:59:4a:e0:3d:01: be:51:22:24:09:f7:6c:a2:54:57:09:e8:44:a9:21:95:46:23: a8:36:2e:b7:e2:60:9b:e9:4c:46:2b:8f:75:d0:a9:18:66:ef: 2f:c5:10:c0:9f:cf:ef:2c:aa:d3:60:c5:6b:82:d9:f7:18:2a: 8a:32:64:65:54:19:d1:49:31:4c:38:e4:ca:6f:a7:83:19:4b: e5:d1:04:05:e9:4e:57:b2:9a:e7:11:1e:a7:3d:b2:81:d6:0a: 70:fc:21:19 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNDExMzAw MTMxMThaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUzMkY1NzlGRjA3MDlC MDAyNTdBMEI4QkYzRDYyOUNDODc2ODVERDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD2rJccHIn3kD0hILiEmW07BPXNASjDI+UNupFdlXo87xSjmsm bRPrZvkZ7QVJ41uIGrIncmpPhCfBLngMgWqf/VzFRSEsl1iI/6S/WmmLxlHTc+vw G/OfYSnPTyl4NPKGe7B9DLcrN0KCxV7NiSxnfwHGG3nprPHGk8pq019hRVXvE1qP slRRd4WrKhx7I4/KSq46409IReIszZqlGPFPkZSl+T6iHW8v85nkvqYu6nZY08KO qqvzzwfXuFkdLwTsffTJXQL+tKmfs6TcerQ7eQFBs9FNrVzM6n/7Qw5SY+KMb1yY 3/yQSgiX6K0jWPdzIHosdbrG5Xj0ufz7v1sBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4y9Xn/BwmwAleguL89YpzIdoXdYwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM0LzR5OVhuX0J3bXdBbGVndUw4OVlweklkb1hkWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATa5AAwDQYJKoZIhvcNAQELBQADggEBAH7jz3I7xivA8nA4PNqbNwhtd0mv cBZE3AbiIdWSA+IH1+ltnZ0mZ1KQ2PLZUqYxvT4CFt0+6vT7PuZ8esl7FiJAVUUd 6NoHCL6HU6li9YDqfxWhx5L7N5xkewKqmr4yDKgrWNHcAKT78rolv+94FbMkc/WP Tix1DflIB62MfTJ2vEvcw33ZrlFQLk2TZ2UIrS3rvzvir6JdLC0YPqVZSuA9Ab5R IiQJ92yiVFcJ6ESpIZVGI6g2LrfiYJvpTEYrj3XQqRhm7y/FEMCfz+8sqtNgxWuC 2fcYKooyZGVUGdFJMUw45Mpvp4MZS+XRBAXpTleymucRHqc9soHWCnD8IRk= -----END CERTIFICATE-----Generated at Sat Apr 5 17:31:05 2025 by rpki-client