$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/H2nBp1AQGFbMXfpYkBUEb_C8ZTE.roa File: H2nBp1AQGFbMXfpYkBUEb_C8ZTE.roa (raw, json) Hash identifier: uO/BxL24NzNF3889PmRP+5RdmZfPIO+4/M489wwbPEM= Subject key identifier: 1F:69:C1:A7:50:10:18:56:CC:5D:FA:58:90:15:04:6F:F0:BC:65:31 Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Certificate serial: 8C Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/H2nBp1AQGFbMXfpYkBUEb_C8ZTE.roa Signing time: Sat 30 Nov 2024 01:29:25 +0000 ROA not before: Sat 30 Nov 2024 01:29:25 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 4685 IP address blocks: 202.224.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Validity Not Before: Nov 30 01:29:25 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=1F69C1A750101856CC5DFA589015046FF0BC6531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:03:36:d2:1a:b8:ca:05:f7:79:fd:93:c7:40: 84:a1:0b:f7:90:05:17:8e:b7:0d:05:28:d0:22:70: 66:56:fd:3f:17:ba:5a:db:b8:32:33:e9:70:ea:af: f7:83:c2:60:9c:31:02:77:e8:7b:ed:d4:7a:35:87: c3:8e:07:0f:e9:32:c7:76:08:ca:cf:a9:0f:ef:84: da:0e:6b:da:09:28:9f:14:e7:13:c4:7f:dd:34:af: 82:24:a0:0d:dd:72:8e:3a:69:40:5e:c3:11:86:07: dc:93:30:65:e7:58:61:82:78:51:62:3a:ae:75:81: 44:f3:ab:c1:b6:7b:00:b0:b6:fa:4b:99:78:0e:40: 1b:48:ef:ca:96:83:fb:74:09:e7:0d:d9:c6:fb:b0: eb:34:c5:36:b7:23:56:21:11:ef:33:87:f7:04:86: f5:4f:de:da:3c:ba:13:83:fc:49:42:6e:71:ab:30: 93:8e:b4:f3:00:9c:09:09:b9:2e:de:0d:59:8f:dd: 0e:f0:8b:dd:b7:4f:95:00:e3:a2:67:6c:c3:fc:a7: 21:d4:12:a9:14:88:07:21:65:c5:ec:79:5e:85:95: 55:b4:82:9d:9f:fc:ff:a4:bd:bc:de:7a:b8:29:0d: d4:b7:f5:ff:4e:c6:43:3d:64:75:9a:c3:db:c4:74: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:C1:A7:50:10:18:56:CC:5D:FA:58:90:15:04:6F:F0:BC:65:31 X509v3 Authority Key Identifier: keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/H2nBp1AQGFbMXfpYkBUEb_C8ZTE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.224.32.0/19 Signature Algorithm: sha256WithRSAEncryption 16:68:a6:a1:2b:8b:0a:36:c2:f2:08:a8:a0:b7:98:46:0e:82: 09:2c:8d:02:1d:ff:7e:10:48:17:14:94:4b:d2:4f:b4:be:d4: 14:f9:67:a5:d5:45:1c:cc:0b:d2:23:bb:a4:9c:9e:97:e6:97: dc:d6:be:58:80:f2:61:1a:a0:fe:a0:88:03:b6:46:67:9c:ac: e5:ee:52:f9:fd:7e:b5:19:38:2b:c0:a1:9c:e3:32:ea:dd:90: f6:17:8e:2e:2c:b7:89:5b:c3:7d:b2:94:60:dc:31:0a:46:94: 9e:80:5a:8e:59:af:68:ad:64:27:dd:d5:5f:fa:46:b5:bd:7e: cc:09:a9:67:d2:15:45:95:a6:54:9e:2c:64:8f:92:5d:51:81: 1e:bb:1d:38:4c:aa:92:7a:cb:81:40:0e:b6:f1:de:e8:e3:d6: 7e:8e:7e:f0:b2:dc:ce:99:f5:51:9b:d4:c4:fb:ee:10:10:9c: 7a:7b:83:9a:ad:e9:1f:5c:31:45:73:fb:b6:f5:a9:69:47:cc: e2:09:b7:c4:a0:f8:bd:5f:03:32:da:ed:e4:bd:31:7c:9e:65: 57:c5:e5:40:ee:ed:3d:85:38:2c:90:41:b4:a2:be:03:29:d2: d7:8a:63:48:0a:5d:b8:28:3e:e9:fd:b0:fb:72:08:cb:f6:af: e3:7d:82:78 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNDExMzAw MTI5MjVaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFGNjlDMUE3NTAxMDE4 NTZDQzVERkE1ODkwMTUwNDZGRjBCQzY1MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWAzbSGrjKBfd5/ZPHQIShC/eQBReOtw0FKNAicGZW/T8Xulrb uDIz6XDqr/eDwmCcMQJ36Hvt1Ho1h8OOBw/pMsd2CMrPqQ/vhNoOa9oJKJ8U5xPE f900r4IkoA3dco46aUBewxGGB9yTMGXnWGGCeFFiOq51gUTzq8G2ewCwtvpLmXgO QBtI78qWg/t0CecN2cb7sOs0xTa3I1YhEe8zh/cEhvVP3to8uhOD/ElCbnGrMJOO tPMAnAkJuS7eDVmP3Q7wi923T5UA46JnbMP8pyHUEqkUiAchZcXseV6FlVW0gp2f /P+kvbzeergpDdS39f9OxkM9ZHWaw9vEdOQvAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUH2nBp1AQGFbMXfpYkBUEb/C8ZTEwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51 FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MC9IMm5CcDFBUUdGYk1YZnBZa0JVRWJfQzhaVEUucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFyuAgMA0GCSqGSIb3DQEBCwUAA4IBAQAWaKahK4sKNsLyCKigt5hGDoIJLI0C Hf9+EEgXFJRL0k+0vtQU+Wel1UUczAvSI7uknJ6X5pfc1r5YgPJhGqD+oIgDtkZn nKzl7lL5/X61GTgrwKGc4zLq3ZD2F44uLLeJW8N9spRg3DEKRpSegFqOWa9orWQn 3dVf+ka1vX7MCaln0hVFlaZUnixkj5JdUYEeux04TKqSesuBQA628d7o49Z+jn7w stzOmfVRm9TE++4QEJx6e4OarekfXDFFc/u29alpR8ziCbfEoPi9XwMy2u3kvTF8 nmVXxeVA7u09hTgskEG0or4DKdLXimNICl24KD7p/bD7cgjL9q/jfYJ4 -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:41 2025 by rpki-client