$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ItoJAjkJTrnX9bpKTIcaDnjfDjA.roa File: ItoJAjkJTrnX9bpKTIcaDnjfDjA.roa (raw, json) Hash identifier: pcnZbUJjA7aSYHlxqKsas1+EnPA6Enj8QqJdLQTFD7c= Subject key identifier: 22:DA:09:02:39:09:4E:B9:D7:F5:BA:4A:4C:87:1A:0E:78:DF:0E:30 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 0215 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ItoJAjkJTrnX9bpKTIcaDnjfDjA.roa Signing time: Mon 30 Sep 2024 01:30:08 +0000 ROA not before: Mon 30 Sep 2024 01:30:08 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 7684 IP address blocks: 49.212.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Sep 30 01:30:08 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=22DA090239094EB9D7F5BA4A4C871A0E78DF0E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:82:09:21:40:29:56:4b:ce:57:b9:64:79: 67:63:19:3d:e2:a6:e7:5c:f0:1a:ec:88:85:c8:80: 78:3a:fc:53:a0:0d:01:37:fc:91:5d:9b:8c:7f:b9: 78:bb:38:5e:a0:26:07:13:17:73:5b:1c:68:66:dc: 23:0c:74:37:7e:91:6a:11:8a:83:11:d2:e5:69:f8: d1:93:95:4a:38:31:45:ce:a5:55:96:52:fe:f0:68: 76:dc:76:4f:32:f9:47:44:0c:01:5a:f9:68:f1:b8: ed:cb:37:70:0a:9e:f6:23:5c:e3:7f:7d:17:9f:72: 5a:ee:72:15:8a:9f:d5:d7:e3:1b:c1:46:90:24:c6: 95:46:fa:24:fc:3f:ec:c6:48:ce:ea:d2:6c:56:5c: 44:90:71:83:19:2c:a1:fe:4f:f0:fe:c2:e8:1c:57: 12:db:18:4c:b8:c5:c0:e5:bb:38:ef:68:56:d0:19: 8e:4a:10:89:4f:03:4a:41:28:cd:b4:ec:34:da:4f: f6:22:8b:fa:e1:de:76:f5:11:ea:2a:b5:2d:b6:15: 99:0a:0d:23:64:f2:80:72:01:e7:40:58:6e:fd:34: ef:36:76:8e:d3:e5:95:64:88:8f:9b:74:8a:c4:36: d0:6c:7a:ee:2b:21:09:a8:53:e0:6a:a7:ca:b6:14: d1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DA:09:02:39:09:4E:B9:D7:F5:BA:4A:4C:87:1A:0E:78:DF:0E:30 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ItoJAjkJTrnX9bpKTIcaDnjfDjA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.121.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:c8:cb:27:7f:65:29:9d:86:87:42:ec:2d:7b:e3:9e:93:4a: a2:80:24:e0:48:de:3a:27:32:28:f0:c1:2f:32:71:c0:b8:1d: 2c:e4:87:5f:f8:04:25:74:78:01:e6:37:a2:2f:67:20:fc:77: 6d:2b:1c:1b:c1:d6:8c:e3:74:59:6d:7e:ce:da:46:90:0e:52: d9:77:d9:65:3e:76:98:9d:96:fa:8d:fd:7c:37:38:a5:28:96: b8:3e:02:f8:b6:67:eb:fc:a2:94:e8:65:a6:ba:61:d6:5d:d3: 0a:d7:b4:a3:6d:ea:02:79:0a:a6:a7:76:37:0f:e0:1f:0a:53: 33:d2:dd:f9:ab:78:da:d3:3b:51:09:7f:f2:68:31:4a:05:ae: c7:43:67:84:c1:5e:74:ba:a7:fa:c0:7c:4c:37:54:48:7f:36: 88:b1:44:e0:06:77:6e:0a:63:35:f6:98:33:79:c3:f0:86:77: 26:f9:f4:17:88:f8:d1:44:73:cd:49:63:e9:36:1f:b1:3b:d2: df:03:3f:84:75:0c:9f:60:42:77:76:f9:b2:b0:77:01:5c:37: 58:39:15:70:b2:bc:78:c5:59:5b:21:9e:6f:d6:34:f0:22:87: 88:85:0a:03:b1:3c:45:3d:1a:4b:d9:fd:68:fe:16:f5:e4:e5: 45:57:1f:8c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA5MzAw MTMwMDhaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDIyREEwOTAyMzkwOTRF QjlEN0Y1QkE0QTRDODcxQTBFNzhERjBFMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4LYIJIUApVkvOV7lkeWdjGT3ipudc8BrsiIXIgHg6/FOgDQE3 /JFdm4x/uXi7OF6gJgcTF3NbHGhm3CMMdDd+kWoRioMR0uVp+NGTlUo4MUXOpVWW Uv7waHbcdk8y+UdEDAFa+WjxuO3LN3AKnvYjXON/fRefclruchWKn9XX4xvBRpAk xpVG+iT8P+zGSM7q0mxWXESQcYMZLKH+T/D+wugcVxLbGEy4xcDluzjvaFbQGY5K EIlPA0pBKM207DTaT/Yii/rh3nb1EeoqtS22FZkKDSNk8oByAedAWG79NO82do7T 5ZVkiI+bdIrENtBseu4rIQmoU+Bqp8q2FNGlAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUItoJAjkJTrnX9bpKTIcaDnjfDjAwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9JdG9KQWprSlRyblg5YnBLVEljYURuamZEakEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdR5MA0GCSqGSIb3DQEBCwUAA4IBAQB8yMsnf2UpnYaHQuwte+Oe k0qigCTgSN46JzIo8MEvMnHAuB0s5Idf+AQldHgB5jeiL2cg/HdtKxwbwdaM43RZ bX7O2kaQDlLZd9llPnaYnZb6jf18NzilKJa4PgL4tmfr/KKU6GWmumHWXdMK17Sj beoCeQqmp3Y3D+AfClMz0t35q3ja0ztRCX/yaDFKBa7HQ2eEwV50uqf6wHxMN1RI fzaIsUTgBnduCmM19pgzecPwhncm+fQXiPjRRHPNSWPpNh+xO9LfAz+EdQyfYEJ3 dvmysHcBXDdYORVwsrx4xVlbIZ5v1jTwIoeIhQoDsTxFPRpL2f1o/hb15OVFVx+M -----END CERTIFICATE-----Generated at Sun Feb 16 22:05:07 2025 by rpki-client