$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/gMC81FudrQOzSWsz7Z3N9CvVUxQ.roa File: gMC81FudrQOzSWsz7Z3N9CvVUxQ.roa (raw, json) Hash identifier: vM74dXzlXAwxdSz2OWZoNoGVhhfUp4XQuginiHJRigk= Subject key identifier: 80:C0:BC:D4:5B:9D:AD:03:B3:49:6B:33:ED:9D:CD:F4:2B:D5:53:14 Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Certificate serial: 47 Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/gMC81FudrQOzSWsz7Z3N9CvVUxQ.roa Signing time: Sat 31 Aug 2024 01:30:22 +0000 ROA not before: Sat 31 Aug 2024 01:30:22 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 23805 IP address blocks: 202.76.192.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Validity Not Before: Aug 31 01:30:22 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=80C0BCD45B9DAD03B3496B33ED9DCDF42BD55314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:c2:bd:e9:a6:be:c9:9b:aa:ee:bc:53:ce: de:af:63:ba:db:4a:0f:f3:18:c5:32:e5:df:dd:90: 40:98:e6:18:a3:3e:dc:2c:15:dc:d2:5c:21:e1:99: bd:4e:73:33:14:b5:cf:bd:7c:6f:36:2e:ab:77:d9: a6:e3:1e:73:80:6a:83:c1:30:2c:14:e1:1c:79:76: c4:e8:dd:ad:0c:4c:33:20:c0:bb:65:c0:9d:e8:bd: 9d:30:1b:51:56:81:08:61:00:2e:ac:57:10:24:58: d1:7e:3c:c2:ed:4f:84:94:b7:c1:f0:88:89:74:4b: eb:23:d9:0a:94:0b:3d:1d:2e:d1:79:96:52:2c:52: aa:0a:da:e5:01:f2:f4:a2:15:75:0b:5e:b0:07:ba: 5a:55:76:f1:21:99:8f:8e:73:8c:f6:ee:86:84:54: 4f:66:4f:1c:47:ae:56:de:64:02:d6:e2:00:05:52: 60:1b:30:40:9b:6d:a1:99:4b:d7:21:ec:d3:3c:38: 6d:ba:29:9a:e0:75:5c:e5:16:19:d6:12:2f:0c:e0: 4f:62:2c:3f:aa:2c:d5:98:e0:f9:ab:f5:4e:05:b4: 94:8b:16:2d:ff:66:10:56:63:f6:b1:eb:09:01:4c: 75:ea:d1:bd:e6:a8:30:0f:4f:44:d3:f3:ee:c4:42: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C0:BC:D4:5B:9D:AD:03:B3:49:6B:33:ED:9D:CD:F4:2B:D5:53:14 X509v3 Authority Key Identifier: keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/gMC81FudrQOzSWsz7Z3N9CvVUxQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.76.192.0/19 Signature Algorithm: sha256WithRSAEncryption 38:e7:7c:4f:a7:f3:ff:cf:4b:9f:c4:02:bc:18:28:08:f2:78: ff:18:96:a1:a6:23:93:aa:b1:14:24:a1:50:a9:20:66:a1:d2: c8:4e:74:fe:d0:67:51:47:bd:e0:5f:c2:9d:e5:d6:1b:cf:4b: 20:0f:34:4a:ce:86:94:7c:a2:fb:96:ee:c6:9e:0e:1a:b7:41: 31:47:a5:ac:02:54:b7:80:7c:3e:99:66:18:7a:fc:62:c2:69: 8d:e2:44:24:28:3a:e4:c1:2e:08:65:ed:5e:06:7e:10:6a:af: cf:c1:c0:c7:8b:df:20:be:11:6f:fd:f9:b7:84:9b:14:2e:5a: 0c:c9:f4:9b:15:26:81:ab:4d:24:a6:5b:a2:28:44:89:1a:00: 7d:2b:79:02:96:91:f8:c4:70:33:0a:f8:73:d9:a3:6a:11:56: 10:b1:d1:9b:09:04:b3:0f:c0:c5:7f:6d:56:8b:2d:03:a2:89: 2f:38:e0:3f:69:96:b9:bb:e5:61:a9:99:0d:fb:78:ec:f6:84: 2f:c6:6d:ca:d7:9a:f6:b8:3f:08:e8:9d:d8:4a:7a:74:d2:4e: ee:f3:1e:02:18:8c:f1:59:c3:a5:f2:ac:e4:b8:64:b8:49:43: b6:b3:85:05:2b:97:79:0b:b3:7b:6f:89:a9:6a:3b:4f:e5:3f: 34:14:34:16 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDBF MDgzOTM2ODhCMDQ3Mzc4NzRFQ0Q2M0REOEJFNzhFNUVGMkQwMB4XDTI0MDgzMTAx MzAyMloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoODBDMEJDRDQ1QjlEQUQw M0IzNDk2QjMzRUQ5RENERjQyQkQ1NTMxNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMLYwr3ppr7Jm6ruvFPO3q9juttKD/MYxTLl392QQJjmGKM+3CwV 3NJcIeGZvU5zMxS1z718bzYuq3fZpuMec4Bqg8EwLBThHHl2xOjdrQxMMyDAu2XA nei9nTAbUVaBCGEALqxXECRY0X48wu1PhJS3wfCIiXRL6yPZCpQLPR0u0XmWUixS qgra5QHy9KIVdQtesAe6WlV28SGZj45zjPbuhoRUT2ZPHEeuVt5kAtbiAAVSYBsw QJttoZlL1yHs0zw4bbopmuB1XOUWGdYSLwzgT2IsP6os1Zjg+av1TgW0lIsWLf9m EFZj9rHrCQFMderRveaoMA9PRNPz7sRCPB0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSAwLzUW52tA7NJazPtnc30K9VTFDAfBgNVHSMEGDAWgBTQDgg5NoiwRzeHTs1j 3Yvnjl7y0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgxLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1ZTh0QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1 ZTh0QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODEvZ01DODFGdWRyUU96U1dzejdaM045Q3ZWVXhRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBcpMwDANBgkqhkiG9w0BAQsFAAOCAQEAOOd8T6fz/89Ln8QCvBgoCPJ4/xiW oaYjk6qxFCShUKkgZqHSyE50/tBnUUe94F/CneXWG89LIA80Ss6GlHyi+5buxp4O GrdBMUelrAJUt4B8PplmGHr8YsJpjeJEJCg65MEuCGXtXgZ+EGqvz8HAx4vfIL4R b/35t4SbFC5aDMn0mxUmgatNJKZboihEiRoAfSt5ApaR+MRwMwr4c9mjahFWELHR mwkEsw/AxX9tVostA6KJLzjgP2mWubvlYamZDft47PaEL8Ztytea9rg/COid2Ep6 dNJO7vMeAhiM8VnDpfKs5LhkuElDtrOFBSuXeQuze2+JqWo7T+U/NBQ0Fg== -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:51 2025 by rpki-client