$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/F5Cax4UZDcLQKJ2aRJdCuRZTSgQ.roa File: F5Cax4UZDcLQKJ2aRJdCuRZTSgQ.roa (raw, json) Hash identifier: n/1i0YgOpn4My8OHpnPryBpentZf+vfUkdDcamlQv08= Subject key identifier: 17:90:9A:C7:85:19:0D:C2:D0:28:9D:9A:44:97:42:B9:16:53:4A:04 Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 25 Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/F5Cax4UZDcLQKJ2aRJdCuRZTSgQ.roa Signing time: Thu 18 Jul 2024 01:47:21 +0000 ROA not before: Thu 18 Jul 2024 01:47:21 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 24259 IP address blocks: 202.89.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Jul 18 01:47:21 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=17909AC785190DC2D0289D9A449742B916534A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:c5:85:b9:58:47:3d:a6:92:5d:7c:b3:a6: 72:af:d3:a3:9f:52:f5:35:21:62:f7:d3:5b:50:24: db:ab:05:f5:11:83:e3:73:fe:59:b2:71:a4:e7:9d: 7f:b6:b0:88:8b:1d:54:db:9e:36:7e:d9:1e:6a:46: b5:48:6d:72:de:b7:50:ae:56:8b:41:16:13:ae:08: 6d:82:00:d2:b0:58:13:f9:fa:74:bc:19:d7:54:00: ae:c1:41:11:d5:8b:77:16:06:bd:b1:48:a8:f7:64: 61:8e:9e:a5:a3:26:ae:ea:bd:fb:d0:50:3f:69:b0: d1:74:4a:92:70:e8:6f:49:ec:53:91:1a:d4:bc:8a: 21:f6:13:82:cf:b6:e1:1e:1a:b9:c8:25:34:6f:e6: 6b:1b:e0:a8:97:c7:3a:25:f1:f1:9c:ff:cf:1d:f8: 38:49:ac:f9:f7:df:ee:e5:c3:b1:3c:1b:c7:5d:de: 8f:e0:4b:4f:b1:af:5c:41:cd:cd:3e:50:57:cf:f3: a3:36:5d:72:fd:61:ac:69:e4:58:a4:3b:79:3c:ec: b5:60:4d:a0:d0:a7:e3:f8:ba:32:d4:6c:55:ce:c6: 39:b5:10:83:7e:a5:ed:46:82:e0:7e:e7:fe:e6:ab: c6:b7:37:0b:45:ab:cf:78:20:22:bb:45:65:0b:91: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:90:9A:C7:85:19:0D:C2:D0:28:9D:9A:44:97:42:B9:16:53:4A:04 X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/F5Cax4UZDcLQKJ2aRJdCuRZTSgQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.89.240.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:67:d0:57:31:b1:47:ca:9b:89:6c:5b:e8:a9:5f:c3:81:fd: c1:b5:16:6b:1d:51:1d:a8:61:36:b7:44:2a:39:13:97:49:c5: fa:6c:14:af:24:83:a0:a5:31:55:08:2c:5f:fb:67:11:0c:ac: 56:57:44:e9:1a:0f:35:49:a0:b5:5b:d1:ec:ab:5a:1b:83:3c: 54:f2:ef:9f:98:c9:43:bd:95:d7:cd:a1:4d:ee:12:a2:a4:de: e7:54:94:90:23:3e:53:fa:78:10:48:37:f0:b7:e1:7f:5f:06: 71:64:86:55:b5:34:b4:a5:74:4e:0f:a4:de:e2:7e:e6:5a:63: 48:69:3d:62:3a:2d:bb:b7:a8:27:2d:82:23:9a:10:c6:99:76: b4:7b:a6:d4:fb:c5:18:0e:30:d6:82:1e:36:96:07:d5:e2:95: 36:dc:11:75:b7:bc:64:68:7e:71:fe:7a:a0:29:0d:0a:0d:27: a0:28:c7:3a:b6:1a:9d:b6:df:14:73:dd:67:dd:0a:20:50:2c: ef:77:f4:c4:35:2d:17:e7:f3:1d:84:60:04:89:54:b5:79:0e: 6b:cd:57:45:36:df:e5:84:e8:4d:51:42:1e:41:a6:df:cd:a6: ad:a5:10:0a:4b:16:05:66:b9:6f:a3:e1:02:b4:f6:9e:1e:b1: b7:8d:58:f6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI0MDcxODAx NDcyMVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMTc5MDlBQzc4NTE5MERD MkQwMjg5RDlBNDQ5NzQyQjkxNjUzNEEwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMDtxYW5WEc9ppJdfLOmcq/To59S9TUhYvfTW1Ak26sF9RGD43P+ WbJxpOedf7awiIsdVNueNn7ZHmpGtUhtct63UK5Wi0EWE64IbYIA0rBYE/n6dLwZ 11QArsFBEdWLdxYGvbFIqPdkYY6epaMmruq9+9BQP2mw0XRKknDob0nsU5Ea1LyK IfYTgs+24R4aucglNG/maxvgqJfHOiXx8Zz/zx34OEms+fff7uXDsTwbx13ej+BL T7GvXEHNzT5QV8/zozZdcv1hrGnkWKQ7eTzstWBNoNCn4/i6MtRsVc7GObUQg36l 7UaC4H7n/uarxrc3C0Wrz3ggIrtFZQuRN9ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQXkJrHhRkNwtAonZpEl0K5FlNKBDAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvRjVDYXg0VVpEY0xRS0oyYVJKZEN1UlpUU2dRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8pZ8DANBgkqhkiG9w0BAQsFAAOCAQEAnmfQVzGxR8qbiWxb6Klfw4H9wbUW ax1RHahhNrdEKjkTl0nF+mwUrySDoKUxVQgsX/tnEQysVldE6RoPNUmgtVvR7Kta G4M8VPLvn5jJQ72V182hTe4SoqTe51SUkCM+U/p4EEg38Lfhf18GcWSGVbU0tKV0 Tg+k3uJ+5lpjSGk9Yjotu7eoJy2CI5oQxpl2tHum1PvFGA4w1oIeNpYH1eKVNtwR dbe8ZGh+cf56oCkNCg0noCjHOrYanbbfFHPdZ90KIFAs73f0xDUtF+fzHYRgBIlU tXkOa81XRTbf5YToTVFCHkGm382mraUQCksWBWa5b6PhArT2nh6xt41Y9g== -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:28 2025 by rpki-client