$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/pvHuTe96eBYDK1nMJ9t7o7wVdXs.roa File: pvHuTe96eBYDK1nMJ9t7o7wVdXs.roa (raw, json) Hash identifier: WX/p8vu6I3WrLdpxbCY+0kYKSVM5y92Aaz+Tyj+QjAU= Subject key identifier: A6:F1:EE:4D:EF:7A:78:16:03:2B:59:CC:27:DB:7B:A3:BC:15:75:7B Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 55 Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/pvHuTe96eBYDK1nMJ9t7o7wVdXs.roa Signing time: Sat 31 Aug 2024 01:30:28 +0000 ROA not before: Sat 31 Aug 2024 01:30:28 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 18144 IP address blocks: 116.81.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 31 01:30:28 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=A6F1EE4DEF7A7816032B59CC27DB7BA3BC15757B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0e:57:eb:67:9a:b0:73:84:a2:69:c4:3a:c9: 30:a2:94:eb:ef:e5:bf:8c:65:a9:f2:1b:36:6b:75: 0d:21:8d:f5:83:29:69:ab:1a:87:ee:cc:84:40:a8: 50:72:1d:18:3f:b9:81:f1:bb:fa:6e:a1:60:d8:dc: 25:74:e4:d3:b4:db:a2:29:53:72:2d:89:a6:ae:ab: 27:04:c0:57:4b:ec:59:60:27:bc:09:c0:61:28:8b: 6b:dc:94:b6:db:3d:c3:8a:05:c3:bb:3c:64:8a:a9: e4:8f:1e:61:bf:4e:0c:6f:46:53:e8:7c:9f:88:6b: d0:7c:aa:cc:d6:2f:69:fb:00:1d:45:7b:d7:5d:aa: 2d:ac:d6:37:1e:53:dc:f6:6a:5c:9a:8c:02:84:bf: f1:31:f0:cd:ac:b2:d8:81:91:84:7a:cb:2d:5f:61: 5e:47:97:85:c4:b4:3e:97:75:da:98:d8:33:57:23: 41:79:96:c3:01:6e:6d:fe:86:8c:17:0e:34:60:ad: 79:63:a8:8b:f4:2e:d4:86:e1:34:7b:6a:c0:3f:67: c4:8d:ba:97:07:f5:c8:3a:18:7f:56:e9:c0:73:6b: 5a:de:15:66:72:ec:7b:53:8b:c0:6a:be:fd:e2:1e: 39:f4:96:1f:5c:78:92:7f:6b:45:80:e0:5c:37:3d: 97:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F1:EE:4D:EF:7A:78:16:03:2B:59:CC:27:DB:7B:A3:BC:15:75:7B X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/pvHuTe96eBYDK1nMJ9t7o7wVdXs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.81.0.0/16 Signature Algorithm: sha256WithRSAEncryption 97:43:8d:b1:49:cc:85:13:24:f2:37:61:11:f3:ec:a1:2e:6d: 43:ab:a0:30:97:85:8f:14:0f:f3:56:11:14:47:66:18:fb:c7: 38:f4:32:27:3e:ce:2c:c4:12:fb:08:7d:e2:d5:38:02:bd:59: f8:f4:28:7e:28:86:63:2b:f1:20:9b:26:6b:d4:3a:fa:6f:03: 68:33:a5:64:4f:ac:e9:78:33:35:d0:d5:f8:a9:e2:e6:d1:f6: 7d:2b:eb:41:51:a6:71:79:aa:1c:23:2c:c0:19:35:3b:c5:a3: ca:e5:11:59:75:c7:83:13:2d:38:fd:46:ed:b8:00:f1:e5:15: e0:21:94:e0:f2:50:0e:d8:e3:8a:61:89:76:69:64:d2:40:3a: a0:c3:fd:a5:17:68:23:0d:fa:6c:91:4a:bb:56:26:53:ff:d9: c8:3a:40:71:e0:5a:20:72:30:b5:2e:83:cc:be:76:55:84:60: ff:77:38:27:c0:d4:42:b4:95:cf:58:c7:f9:3e:c1:65:3b:cc: cd:24:4f:5b:70:6e:9a:95:b1:f5:72:9e:38:ea:76:ec:da:66: 54:d7:9d:56:05:1e:30:d2:fe:1b:9f:b0:e5:82:cd:7f:c7:05: 47:0e:8c:80:26:3f:5b:d6:e4:06:35:96:6e:c6:cf:f5:63:d9: 2e:6c:da:3d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI0MDgzMTAx MzAyOFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQTZGMUVFNERFRjdBNzgx NjAzMkI1OUNDMjdEQjdCQTNCQzE1NzU3QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJcOV+tnmrBzhKJpxDrJMKKU6+/lv4xlqfIbNmt1DSGN9YMpaasa h+7MhECoUHIdGD+5gfG7+m6hYNjcJXTk07TboilTci2Jpq6rJwTAV0vsWWAnvAnA YSiLa9yUtts9w4oFw7s8ZIqp5I8eYb9ODG9GU+h8n4hr0HyqzNYvafsAHUV7112q LazWNx5T3PZqXJqMAoS/8THwzayy2IGRhHrLLV9hXkeXhcS0Ppd12pjYM1cjQXmW wwFubf6GjBcONGCteWOoi/Qu1IbhNHtqwD9nxI26lwf1yDoYf1bpwHNrWt4VZnLs e1OLwGq+/eIeOfSWH1x4kn9rRYDgXDc9l5ECAwEAAaOCAiMwggIfMB0GA1UdDgQW BBSm8e5N73p4FgMrWcwn23ujvBV1ezAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvcHZIdVRlOTZlQllESzFuTUo5dDdvN3dWZFhzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAHRRMA0GCSqGSIb3DQEBCwUAA4IBAQCXQ42xScyFEyTyN2ER8+yhLm1Dq6Aw l4WPFA/zVhEUR2YY+8c49DInPs4sxBL7CH3i1TgCvVn49Ch+KIZjK/EgmyZr1Dr6 bwNoM6VkT6zpeDM10NX4qeLm0fZ9K+tBUaZxeaocIyzAGTU7xaPK5RFZdceDEy04 /UbtuADx5RXgIZTg8lAO2OOKYYl2aWTSQDqgw/2lF2gjDfpskUq7ViZT/9nIOkBx 4FogcjC1LoPMvnZVhGD/dzgnwNRCtJXPWMf5PsFlO8zNJE9bcG6albH1cp446nbs 2mZU151WBR4w0v4bn7Dlgs1/xwVHDoyAJj9b1uQGNZZuxs/1Y9kubNo9 -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:52 2025 by rpki-client