$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/CZc3rRBqgHdCR3LLIB6_sTxrfw8.roa File: CZc3rRBqgHdCR3LLIB6_sTxrfw8.roa (raw, json) Hash identifier: xjKMGhmitPRZ/oJXnY3/KoF6xe3F4Gb1H5ohbI1YbSU= Subject key identifier: 09:97:37:AD:10:6A:80:77:42:47:72:CB:20:1E:BF:B1:3C:6B:7F:0F Certificate issuer: /CN=7EECCB87C1EAB7372BC31505E682DC581055A52F Certificate serial: 10 Authority key identifier: 7E:EC:CB:87:C1:EA:B7:37:2B:C3:15:05:E6:82:DC:58:10:55:A5:2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/CZc3rRBqgHdCR3LLIB6_sTxrfw8.roa Signing time: Thu 18 Jul 2024 01:47:20 +0000 ROA not before: Thu 18 Jul 2024 01:47:20 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 24259 IP address blocks: 157.120.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EECCB87C1EAB7372BC31505E682DC581055A52F Validity Not Before: Jul 18 01:47:20 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=099737AD106A8077424772CB201EBFB13C6B7F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:74:c5:47:08:27:4f:58:01:f4:31:33:0d: 83:87:fd:e1:a6:2e:83:28:cd:62:7c:8b:18:57:8e: 09:49:6b:17:f3:dc:27:e2:52:77:7a:8e:99:b0:7c: a9:c3:55:86:7d:e4:95:56:da:cd:44:61:c2:7e:f1: e9:5d:37:be:4a:e1:16:3e:cf:40:86:a3:c8:6e:8c: 25:67:da:f3:09:c3:58:52:72:23:37:a8:0f:59:2f: 76:3e:40:2e:20:a8:6c:fe:1b:19:59:02:cb:d5:89: 67:22:26:c3:14:94:b9:86:ff:5b:e6:26:35:52:9f: d8:d2:b5:58:e7:fc:0d:39:84:e2:e7:22:c1:ee:30: 37:e9:6f:66:8c:58:0a:4b:88:9a:0e:ef:3e:28:b6: 57:f2:29:f0:a5:38:67:47:b9:24:71:ed:28:62:c8: 01:6a:8a:85:32:f8:08:d2:fa:cf:61:c9:ec:06:06: 87:02:d5:7e:79:54:3b:5b:80:f8:1c:82:f4:ad:7d: 8e:24:d9:ba:4d:62:5d:39:08:35:ba:de:f3:d9:26: 8c:60:b9:81:a4:c0:8b:4e:15:b3:29:cf:8a:a5:9b: cf:0f:00:48:91:ed:50:d0:17:31:20:ca:df:13:aa: b4:7c:10:31:04:9e:c0:9c:8f:c0:0a:6b:a3:10:9e: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:97:37:AD:10:6A:80:77:42:47:72:CB:20:1E:BF:B1:3C:6B:7F:0F X509v3 Authority Key Identifier: keyid:7E:EC:CB:87:C1:EA:B7:37:2B:C3:15:05:E6:82:DC:58:10:55:A5:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/CZc3rRBqgHdCR3LLIB6_sTxrfw8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.120.120.0/22 Signature Algorithm: sha256WithRSAEncryption 05:c2:1b:da:a0:3d:d6:1d:de:ad:ef:e7:9e:c0:71:74:ec:55: 15:4c:15:d9:7d:f2:d8:f0:b7:a3:5c:39:a6:8b:78:0c:0d:fe: cd:e4:68:1b:d3:86:b5:e9:7f:f5:58:ba:3a:b6:1b:aa:04:fa: 67:b6:3d:0a:04:75:79:80:5f:93:e7:52:02:37:a8:9c:4a:d1: d0:5f:e6:ba:45:af:a8:67:13:25:c6:ee:a4:13:de:22:f3:f8: cf:aa:bd:94:2f:1b:c3:6e:c9:40:d5:05:02:a3:2d:6c:ce:ed: 8b:f6:1d:01:79:7c:c4:09:32:e0:d7:95:83:2c:c8:30:5d:75: 47:1d:76:63:19:78:75:38:15:0d:c2:1e:42:58:a0:14:72:65: 19:28:be:e5:8c:98:49:c1:24:1a:65:a7:b6:a6:17:f1:c6:e3: fd:62:26:75:39:3c:c5:f6:8e:0c:76:76:03:bc:9f:bc:26:47: d9:7c:48:7e:1a:3e:07:eb:fb:b9:da:f1:25:13:35:3d:21:38: 7c:e4:e5:e6:ad:f1:54:08:74:81:81:0e:fd:58:d0:b3:65:2d: 02:02:17:f4:fe:9d:b5:ab:0f:58:fa:94:5a:61:9a:f7:b3:17: f5:79:b5:8f:0e:27:8c:c7:d3:11:42:59:ea:b8:fb:7f:24:29: 20:67:ff:c7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3RUVD Q0I4N0MxRUFCNzM3MkJDMzE1MDVFNjgyREM1ODEwNTVBNTJGMB4XDTI0MDcxODAx NDcyMFoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMDk5NzM3QUQxMDZBODA3 NzQyNDc3MkNCMjAxRUJGQjEzQzZCN0YwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK3TdMVHCCdPWAH0MTMNg4f94aYugyjNYnyLGFeOCUlrF/PcJ+JS d3qOmbB8qcNVhn3klVbazURhwn7x6V03vkrhFj7PQIajyG6MJWfa8wnDWFJyIzeo D1kvdj5ALiCobP4bGVkCy9WJZyImwxSUuYb/W+YmNVKf2NK1WOf8DTmE4uciwe4w N+lvZoxYCkuImg7vPii2V/Ip8KU4Z0e5JHHtKGLIAWqKhTL4CNL6z2HJ7AYGhwLV fnlUO1uA+ByC9K19jiTZuk1iXTkINbre89kmjGC5gaTAi04VsynPiqWbzw8ASJHt UNAXMSDK3xOqtHwQMQSewJyPwAproxCeE1sCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQJlzetEGqAd0JHcssgHr+xPGt/DzAfBgNVHSMEGDAWgBR+7MuHweq3NyvDFQXm gtxYEFWlLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L2Z1ekxoOEhxdHpjcnd4VUY1b0xjV0JCVnBTOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2Z1ekxoOEhxdHpjcnd4VUY1b0xjV0JC VnBTOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvQ1pjM3JSQnFnSGRDUjNMTElCNl9zVHhyZnc4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAp14eDANBgkqhkiG9w0BAQsFAAOCAQEABcIb2qA91h3ere/nnsBxdOxVFUwV 2X3y2PC3o1w5pot4DA3+zeRoG9OGtel/9Vi6OrYbqgT6Z7Y9CgR1eYBfk+dSAjeo nErR0F/mukWvqGcTJcbupBPeIvP4z6q9lC8bw27JQNUFAqMtbM7ti/YdAXl8xAky 4NeVgyzIMF11Rx12Yxl4dTgVDcIeQligFHJlGSi+5YyYScEkGmWntqYX8cbj/WIm dTk8xfaODHZ2A7yfvCZH2XxIfho+B+v7udrxJRM1PSE4fOTl5q3xVAh0gYEO/VjQ s2UtAgIX9P6dtasPWPqUWmGa97MX9Xm1jw4njMfTEUJZ6rj7fyQpIGf/xw== -----END CERTIFICATE-----Generated at Sat Apr 5 17:39:55 2025 by rpki-client