$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10029/-GBf3ODYopEAy_xbwhIeC8yOpUI.roa File: -GBf3ODYopEAy_xbwhIeC8yOpUI.roa (raw, json) Hash identifier: GXBFyjk5vCQzdU5K/JCO3kNA6k5WUloicOHrsTVdncY= Subject key identifier: F8:60:5F:DC:E0:D8:A2:91:00:CB:FC:5B:C2:12:1E:0B:CC:8E:A5:42 Certificate issuer: /CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF Certificate serial: 1F Authority key identifier: 2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/-GBf3ODYopEAy_xbwhIeC8yOpUI.roa Signing time: Wed 31 Jul 2024 01:29:44 +0000 ROA not before: Wed 31 Jul 2024 01:29:44 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 2514 IP address blocks: 203.141.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF Validity Not Before: Jul 31 01:29:44 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=F8605FDCE0D8A29100CBFC5BC2121E0BCC8EA542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:a3:aa:a0:51:17:22:fc:5b:86:3d:67:3e: 67:0d:1a:fe:c4:99:69:80:df:70:42:a5:b6:c9:68: a1:85:31:c7:da:cb:e0:d0:f3:a0:8f:e9:20:da:bc: 22:dc:a3:ab:7d:8f:8d:80:ad:25:91:f0:31:6f:af: ce:6f:76:a6:d1:6f:10:1f:a8:4d:05:c3:3c:18:3a: d1:79:e0:9c:14:0d:cd:d6:2e:a1:55:ec:94:83:2e: 1e:30:cb:dd:ed:48:d9:12:8c:41:c1:d2:c0:11:f3: 92:e6:0f:9e:c5:2a:60:60:4b:b9:c1:60:ab:56:bd: 57:d9:79:c3:c3:32:ac:55:58:27:43:32:6a:72:f2: 86:2c:1a:18:00:52:1e:ba:68:95:2f:ff:6f:8f:a1: 6a:58:56:c3:95:4d:11:62:75:bf:5d:e2:d1:a5:04: af:e4:3f:ce:af:e8:a6:f2:ce:f4:e8:97:08:a9:78: 9e:03:c3:ef:93:b1:e2:43:77:eb:8b:02:1d:1f:2a: d2:cc:84:0d:c6:b4:6c:44:b1:32:1b:a9:a1:2d:c4: 13:43:7b:a7:01:e6:aa:c8:9a:60:f5:99:c2:56:5e: 77:a4:16:c0:a2:47:2f:3b:63:21:76:c5:b9:e4:a4: 4b:73:3f:3f:40:85:6e:8c:27:b7:60:75:28:2e:75: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:60:5F:DC:E0:D8:A2:91:00:CB:FC:5B:C2:12:1E:0B:CC:8E:A5:42 X509v3 Authority Key Identifier: keyid:2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/-GBf3ODYopEAy_xbwhIeC8yOpUI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.141.240.0/20 Signature Algorithm: sha256WithRSAEncryption 94:5b:43:87:51:6d:ea:35:4a:86:9c:d2:ce:fa:71:c3:bd:32: 4c:72:9d:52:dd:9a:55:af:9a:c4:27:76:71:bd:a9:04:3c:fc: db:c3:60:3f:75:2e:5e:ab:39:40:57:3d:69:54:7e:9b:d1:2f: ae:20:53:9e:d7:ac:1a:45:6e:b9:82:12:8b:da:c7:ff:ef:7f: 4e:2b:6e:57:2e:74:8f:ca:14:63:af:be:87:05:51:d1:2f:4c: ea:b7:de:46:a1:5d:05:3d:d4:6f:4a:c1:ce:49:cb:9c:5a:0d: 81:05:12:65:94:6c:a7:57:6a:61:68:5c:d2:42:ed:ad:80:b6: c5:26:24:2f:05:93:bb:85:b4:f0:1f:bb:01:5b:65:13:8a:48: a1:b2:50:38:f8:9c:50:da:05:c7:a4:45:28:0b:31:ee:ea:3b: bb:a3:95:5b:2e:01:8e:3d:be:2e:af:af:fe:0e:42:e0:2f:98: f6:e6:31:ce:02:37:c9:8c:7a:78:46:be:fd:70:9d:41:37:30: 20:05:bf:c3:87:f6:68:ca:cf:5c:5b:45:86:3f:42:9f:f0:5c: 89:7e:3e:0c:64:67:bf:47:2e:95:8f:11:50:2f:5e:1b:0b:c1: 48:48:5b:d1:73:a5:38:e1:f2:8a:79:af:6e:80:35:b8:6f:82: 6b:18:f5:68 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRUY2 QTlDOTQ1MEY3MTFCRjMzQUJBNzdBOTVFMjQ2MEQwQTg0NEJGMB4XDTI0MDczMTAx Mjk0NFoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoRjg2MDVGRENFMEQ4QTI5 MTAwQ0JGQzVCQzIxMjFFMEJDQzhFQTU0MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMIro6qgURci/FuGPWc+Zw0a/sSZaYDfcEKltslooYUxx9rL4NDz oI/pINq8Ityjq32PjYCtJZHwMW+vzm92ptFvEB+oTQXDPBg60XngnBQNzdYuoVXs lIMuHjDL3e1I2RKMQcHSwBHzkuYPnsUqYGBLucFgq1a9V9l5w8MyrFVYJ0MyanLy hiwaGABSHrpolS//b4+halhWw5VNEWJ1v13i0aUEr+Q/zq/opvLO9OiXCKl4ngPD 75Ox4kN364sCHR8q0syEDca0bESxMhupoS3EE0N7pwHmqsiaYPWZwlZed6QWwKJH LztjIXbFueSkS3M/P0CFbownt2B1KC51fJsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBT4YF/c4NiikQDL/FvCEh4LzI6lQjAfBgNVHSMEGDAWgBQu9qnJRQ9xG/M6unep XiRg0KhEvzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTAwMjkvTHZhcHlVVVBjUnZ6T3JwM3FWNGtZTkNvUkw4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTHZhcHlVVVBjUnZ6T3JwM3FWNGtZ TkNvUkw4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwMDI5Ly1HQmYzT0RZb3BFQXlfeGJ3aEllQzh5T3BVSS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBATLjfAwDQYJKoZIhvcNAQELBQADggEBAJRbQ4dRbeo1Soac0s76ccO9 MkxynVLdmlWvmsQndnG9qQQ8/NvDYD91Ll6rOUBXPWlUfpvRL64gU57XrBpFbrmC Eovax//vf04rblcudI/KFGOvvocFUdEvTOq33kahXQU91G9Kwc5Jy5xaDYEFEmWU bKdXamFoXNJC7a2AtsUmJC8Fk7uFtPAfuwFbZROKSKGyUDj4nFDaBcekRSgLMe7q O7ujlVsuAY49vi6vr/4OQuAvmPbmMc4CN8mMenhGvv1wnUE3MCAFv8OH9mjKz1xb RYY/Qp/wXIl+PgxkZ79HLpWPEVAvXhsLwUhIW9FzpTjh8op5r26ANbhvgmsY9Wg= -----END CERTIFICATE-----Generated at Sun Feb 16 22:20:12 2025 by rpki-client