$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/csV3fdvHsFWhLjdUfljwe3c2z_Q.roa File: csV3fdvHsFWhLjdUfljwe3c2z_Q.roa (raw, json) Hash identifier: 9K10pg07ERwfz+U90I/LQIAQD2j642OZoWFWalv0jFo= Subject key identifier: 72:C5:77:7D:DB:C7:B0:55:A1:2E:37:54:7E:58:F0:7B:77:36:CF:F4 Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Certificate serial: 9F Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/csV3fdvHsFWhLjdUfljwe3c2z_Q.roa Signing time: Sat 30 Nov 2024 01:31:20 +0000 ROA not before: Sat 30 Nov 2024 01:31:20 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 9351 IP address blocks: 219.109.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Validity Not Before: Nov 30 01:31:20 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=72C5777DDBC7B055A12E37547E58F07B7736CFF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:5a:89:8e:08:64:41:fa:0f:8e:95:85:98: 6d:bf:c9:dd:f9:ff:84:a9:ce:a8:4c:68:ee:6c:e6: 80:fe:18:46:36:2b:1c:10:5d:76:5b:cf:4e:e6:85: c6:e4:2b:bf:1b:87:c1:68:56:9c:64:a8:bf:84:c9: 34:d5:f5:0a:c7:e7:3f:0c:dc:09:ff:04:64:f8:43: 53:52:94:93:aa:5e:70:0a:5d:3c:6b:0b:89:48:ee: 64:15:f2:55:d9:61:ce:9d:7f:b1:f5:48:72:71:3d: c3:f2:bf:38:9d:1d:9f:7a:63:d5:8e:56:e5:2b:b1: c4:ef:47:3f:3e:48:7c:84:cd:4f:5f:aa:a1:fa:1d: d1:f5:0f:59:b9:93:33:b6:de:7f:92:3d:25:5a:06: 9f:8a:cf:f2:9f:94:ba:e0:13:5f:43:cb:ce:ab:dd: 10:fd:a9:96:ec:9f:9f:a3:d2:c0:13:a4:b9:97:7b: f6:72:83:f4:df:d8:c7:ce:33:73:1e:d8:52:6e:57: 29:e1:9c:3f:0c:a2:02:3b:fd:be:f8:32:05:19:52: a1:4c:50:0b:de:aa:9d:09:e0:70:85:80:7d:06:97: ef:56:c9:cc:e7:51:fb:ba:d8:c2:14:84:f5:dc:86: 52:a6:d8:17:82:d7:01:a3:0b:3a:16:c5:d4:a7:86: 90:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C5:77:7D:DB:C7:B0:55:A1:2E:37:54:7E:58:F0:7B:77:36:CF:F4 X509v3 Authority Key Identifier: keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/csV3fdvHsFWhLjdUfljwe3c2z_Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.109.240.0/20 Signature Algorithm: sha256WithRSAEncryption 54:22:e5:30:fa:d5:32:76:3c:73:d6:b3:a7:90:de:7d:2e:08: 10:0f:95:bb:41:0f:81:2c:eb:63:41:3f:0a:11:1d:bb:ae:9a: b6:d1:27:89:5b:97:2c:cf:6a:c5:97:15:2b:aa:de:8c:d9:f2: 10:72:0c:bd:c3:f2:18:c3:7d:74:e0:6c:40:7e:43:e2:a9:32: 87:4b:45:c0:71:2a:98:bb:09:6e:b9:06:15:45:7e:4c:a2:c3: 47:fc:f5:29:84:22:1a:13:37:57:d9:ef:ca:98:27:98:0c:ef: 99:b2:7f:85:21:56:72:8d:5a:16:d0:cd:ff:29:f6:9e:f0:d9: b2:aa:1c:05:a1:1c:6d:da:55:dc:ff:fc:89:ca:6d:2d:48:6f: de:b1:a7:b4:ac:8b:6c:fb:08:3d:22:1d:e2:eb:11:bc:a2:03: 40:31:2d:fe:c9:c0:ac:8d:fe:3c:5f:43:56:8b:b0:9e:3a:37: b5:17:41:5d:f6:05:38:83:8d:65:a9:38:6d:a3:33:c7:39:fc: 52:89:17:ce:eb:6c:e3:18:b6:39:36:b0:00:1d:21:e8:15:2a: 80:b8:76:05:83:d1:97:c6:0a:40:b5:d2:50:bb:e5:0d:3f:2a: 85:49:a6:44:c6:ed:2b:2e:e7:12:00:5e:96:f1:14:da:74:bf: a6:46:e4:34 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNDExMzAw MTMxMjBaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDcyQzU3NzdEREJDN0Iw NTVBMTJFMzc1NDdFNThGMDdCNzczNkNGRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1lFqJjghkQfoPjpWFmG2/yd35/4SpzqhMaO5s5oD+GEY2KxwQ XXZbz07mhcbkK78bh8FoVpxkqL+EyTTV9QrH5z8M3An/BGT4Q1NSlJOqXnAKXTxr C4lI7mQV8lXZYc6df7H1SHJxPcPyvzidHZ96Y9WOVuUrscTvRz8+SHyEzU9fqqH6 HdH1D1m5kzO23n+SPSVaBp+Kz/KflLrgE19Dy86r3RD9qZbsn5+j0sATpLmXe/Zy g/Tf2MfOM3Me2FJuVynhnD8MogI7/b74MgUZUqFMUAveqp0J4HCFgH0Gl+9Wyczn Ufu62MIUhPXchlKm2BeC1wGjCzoWxdSnhpC3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcsV3fdvHsFWhLjdUfljwe3c2z/QwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM0L2NzVjNmZHZIc0ZXaExqZFVmbGp3ZTNjMnpfUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATbbfAwDQYJKoZIhvcNAQELBQADggEBAFQi5TD61TJ2PHPWs6eQ3n0uCBAP lbtBD4Es62NBPwoRHbuumrbRJ4lblyzPasWXFSuq3ozZ8hByDL3D8hjDfXTgbEB+ Q+KpModLRcBxKpi7CW65BhVFfkyiw0f89SmEIhoTN1fZ78qYJ5gM75myf4UhVnKN WhbQzf8p9p7w2bKqHAWhHG3aVdz//InKbS1Ib96xp7Ssi2z7CD0iHeLrEbyiA0Ax Lf7JwKyN/jxfQ1aLsJ46N7UXQV32BTiDjWWpOG2jM8c5/FKJF87rbOMYtjk2sAAd IegVKoC4dgWD0ZfGCkC10lC75Q0/KoVJpkTG7Ssu5xIAXpbxFNp0v6ZG5DQ= -----END CERTIFICATE-----Generated at Sun Apr 6 21:07:56 2025 by rpki-client