$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/fub8q1utzdKzCZNCpXolxcRlYPI.roa File: fub8q1utzdKzCZNCpXolxcRlYPI.roa (raw, json) Hash identifier: 4f8sL6XRmg0N7DjF3D5WAIUiyQuRthRDISvBH5uwpH4= Subject key identifier: 7E:E6:FC:AB:5B:AD:CD:D2:B3:09:93:42:A5:7A:25:C5:C4:65:60:F2 Certificate issuer: /CN=47A27188E214C396304497DB571B23F93EBFBDC6 Certificate serial: 5D Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/fub8q1utzdKzCZNCpXolxcRlYPI.roa Signing time: Sat 30 Nov 2024 01:28:48 +0000 ROA not before: Sat 30 Nov 2024 01:28:48 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 10011 IP address blocks: 219.106.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6 Validity Not Before: Nov 30 01:28:48 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=7EE6FCAB5BADCDD2B3099342A57A25C5C46560F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0c:b4:00:25:0c:fd:67:bf:99:6e:06:5c:f5: 53:60:4b:32:6d:be:97:ab:d7:8f:4c:3b:f3:38:f7: 11:95:28:15:69:14:76:a2:d8:46:fa:b8:dc:2a:f7: 65:c2:a9:7e:1a:22:7e:f2:b3:d3:5e:62:2a:6a:f0: 24:a0:4e:cd:bc:14:b1:8b:68:4b:7d:9e:b4:db:c6: 12:a0:08:4f:a1:9b:6e:98:d0:bc:9f:ce:b8:a9:37: e4:e1:74:fb:4b:80:f3:42:9e:48:ad:9e:09:7e:5a: 69:4b:76:c0:02:4a:19:1e:38:55:0a:40:d5:a5:bb: ff:10:df:12:87:71:ff:c5:55:7d:94:e0:ec:1b:0c: 07:c8:96:41:c6:82:a7:59:0e:dc:ed:90:f4:c4:ea: cd:1f:db:ad:50:65:0a:7d:85:99:30:82:ff:93:47: 53:65:04:f8:ab:db:7a:fe:0b:41:c8:3c:c1:51:09: 06:18:e5:5d:64:37:de:89:5c:62:17:f2:7c:e1:f7: 86:03:f5:44:c7:c9:17:95:11:11:19:6d:05:24:dc: 24:9c:0b:f2:42:b5:3b:9d:5b:34:02:ca:d2:33:2a: 88:c5:10:bb:48:f2:26:11:6f:25:47:7e:05:2b:00: f1:09:ee:a5:13:01:9d:5b:d1:8e:fb:01:db:47:f6: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E6:FC:AB:5B:AD:CD:D2:B3:09:93:42:A5:7A:25:C5:C4:65:60:F2 X509v3 Authority Key Identifier: keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/fub8q1utzdKzCZNCpXolxcRlYPI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.106.176.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:72:53:5e:d8:e9:f1:b0:91:0c:d6:ed:f2:f1:9f:f6:54:17: 6e:fa:3c:a8:5b:07:8f:c3:53:a7:28:f0:8c:f1:6c:ce:6f:3a: 8a:32:96:7d:f6:7b:9c:96:78:ad:c3:a4:d4:ff:1a:45:f9:76: fe:da:b3:89:a9:ad:e2:d7:c6:20:6f:15:a1:f8:be:f0:8f:03: ed:d9:4e:bd:00:b2:a9:86:2b:04:16:ef:45:0e:80:41:3e:dd: 4e:11:5a:a1:74:66:ef:da:5d:c0:bc:0b:7d:a5:35:e4:ae:11: 3b:34:09:72:c6:52:a2:29:56:55:aa:e3:1e:b4:c0:f5:41:2e: ae:88:98:95:b1:2b:76:e5:09:8b:4e:aa:92:29:6f:1b:f4:31: eb:cc:c3:75:d1:63:65:05:8f:03:da:62:fd:3e:e3:d9:47:0c: c6:73:18:a9:3d:1b:30:1e:d2:61:03:95:5a:1d:a0:56:55:eb: 75:2e:46:2f:2e:9f:6f:1d:26:54:77:39:91:7b:59:25:31:98: ec:bf:b9:c0:a3:26:72:70:fd:06:fe:f4:7b:45:bb:43:1c:8e: ae:a6:81:1e:f3:da:c0:4c:c9:4d:90:43:aa:af:e2:94:75:f2: 30:db:cd:c3:bb:55:22:d4:56:30:e5:60:0b:98:b4:2c:0e:31: 56:c9:73:4a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0N0Ey NzE4OEUyMTRDMzk2MzA0NDk3REI1NzFCMjNGOTNFQkZCREM2MB4XDTI0MTEzMDAx Mjg0OFoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoN0VFNkZDQUI1QkFEQ0RE MkIzMDk5MzQyQTU3QTI1QzVDNDY1NjBGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN0MtAAlDP1nv5luBlz1U2BLMm2+l6vXj0w78zj3EZUoFWkUdqLY Rvq43Cr3ZcKpfhoifvKz015iKmrwJKBOzbwUsYtoS32etNvGEqAIT6GbbpjQvJ/O uKk35OF0+0uA80KeSK2eCX5aaUt2wAJKGR44VQpA1aW7/xDfEodx/8VVfZTg7BsM B8iWQcaCp1kO3O2Q9MTqzR/brVBlCn2FmTCC/5NHU2UE+Kvbev4LQcg8wVEJBhjl XWQ33olcYhfyfOH3hgP1RMfJF5URERltBSTcJJwL8kK1O51bNALK0jMqiMUQu0jy JhFvJUd+BSsA8QnupRMBnVvRjvsB20f2cGkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR+5vyrW63N0rMJk0KleiXFxGVg8jAfBgNVHSMEGDAWgBRHonGI4hTDljBEl9tX GyP5Pr+9xjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDY1L1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2X3ZjWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2 X3ZjWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NjUvZnViOHExdXR6ZEt6Q1pOQ3BYb2x4Y1JsWVBJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNtqsDANBgkqhkiG9w0BAQsFAAOCAQEAPXJTXtjp8bCRDNbt8vGf9lQXbvo8 qFsHj8NTpyjwjPFszm86ijKWffZ7nJZ4rcOk1P8aRfl2/tqziamt4tfGIG8Vofi+ 8I8D7dlOvQCyqYYrBBbvRQ6AQT7dThFaoXRm79pdwLwLfaU15K4ROzQJcsZSoilW VarjHrTA9UEuroiYlbErduUJi06qkilvG/Qx68zDddFjZQWPA9pi/T7j2UcMxnMY qT0bMB7SYQOVWh2gVlXrdS5GLy6fbx0mVHc5kXtZJTGY7L+5wKMmcnD9Bv70e0W7 QxyOrqaBHvPawEzJTZBDqq/ilHXyMNvNw7tVItRWMOVgC5i0LA4xVslzSg== -----END CERTIFICATE-----Generated at Sat Apr 5 17:23:10 2025 by rpki-client