$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa File: 04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa (raw, json) Hash identifier: of9jy/236C5LLy+6DH4lkOJjZfn4Fj+8je+OmVXYK8A= Subject key identifier: D3:81:86:D8:D9:F8:3F:05:AB:86:84:26:87:41:80:7B:F1:A5:77:E9 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 01C5 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa Signing time: Fri 31 May 2024 01:30:45 +0000 ROA not before: Fri 31 May 2024 01:30:45 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 4713 IP address blocks: 202.191.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 31 01:30:45 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=D38186D8D9F83F05AB8684268741807BF1A577E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b6:7b:73:af:c4:84:e6:d6:45:61:c0:cf:3e: 2f:4d:25:96:b4:4b:59:d0:7b:96:e7:16:16:a5:6c: 4c:6b:3c:ac:62:db:77:b6:41:3a:86:19:1f:39:ef: 55:0a:d1:4b:6e:a0:d4:b0:70:e3:c2:69:86:e1:b9: 9b:93:f4:b6:b8:fc:3d:b9:d8:df:a6:5f:63:4e:b5: 9c:dd:e2:12:8a:36:43:3f:69:0c:8f:f0:be:d6:4a: eb:8c:c8:7a:b4:21:02:5b:8b:2e:30:31:fa:d8:3a: 52:28:42:f5:c6:29:d2:f7:5b:e6:d8:6c:02:b0:0c: 2e:d2:89:a2:5e:86:34:7b:4b:dd:cd:87:df:26:63: 13:1e:6d:de:f2:83:09:42:81:33:b4:6e:34:0f:43: 5b:eb:34:d7:1d:18:95:57:0d:31:9b:a1:93:a1:82: f5:78:68:e3:62:80:39:88:94:04:1d:5b:da:17:8d: 87:02:b1:cf:44:fe:5b:6c:55:10:23:63:fe:d1:db: 30:19:ef:1b:2f:c5:77:5a:a4:72:f6:7b:d3:bb:22: 1f:1e:87:ac:73:fe:db:d7:a3:15:6a:1e:1f:0d:53: 85:8e:dc:a5:bd:3b:a1:e8:b7:3b:dd:ce:71:d8:0a: 23:c4:dd:1e:86:6b:8b:15:39:25:54:3b:5a:7c:86: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:81:86:D8:D9:F8:3F:05:AB:86:84:26:87:41:80:7B:F1:A5:77:E9 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.191.16.0/20 Signature Algorithm: sha256WithRSAEncryption 9d:06:5e:ce:89:f3:4b:90:7d:60:7c:57:ab:cf:49:d1:2e:50: 85:2a:11:81:d4:ca:e8:a2:99:de:b0:70:d5:fe:18:d6:e9:48: d3:0c:6f:5a:77:b2:01:4c:2f:84:1d:a1:d0:9e:53:9f:e3:15: 78:92:e3:f2:0b:0f:6d:fb:60:70:46:97:a2:d5:0e:43:a9:eb: a0:96:73:7d:1a:68:4f:45:93:a1:e0:32:fd:a4:9f:f3:56:18: ba:1b:ee:38:11:7c:89:84:9a:97:c1:14:fd:57:ae:53:c2:99: ce:f1:af:dd:16:42:28:06:2b:24:ec:0d:f9:8a:df:cf:fa:d9: 77:2c:c4:d8:b0:49:1b:02:28:ff:15:fb:7a:5d:d0:09:a5:b3: a4:64:40:ea:b7:e6:80:ef:71:0f:c3:fd:f6:f0:b1:f5:4e:65: 98:a6:69:0c:a1:44:4c:6a:4a:33:01:5e:80:35:5c:96:35:f3: b0:47:71:2a:11:df:65:ed:5f:2e:4b:62:71:47:bf:d3:40:02: 04:7c:29:a8:a5:76:59:06:96:83:dd:4a:84:80:79:28:4e:4c: d7:8e:f8:41:96:b6:64:3c:f9:00:5b:b9:dc:72:6d:fc:bf:72: 59:b4:57:cf:f9:89:83:7d:43:dc:95:83:d4:b6:3b:58:2a:4c: 2e:18:cd:d5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDA1MzEw MTMwNDVaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQzODE4NkQ4RDlGODNG MDVBQjg2ODQyNjg3NDE4MDdCRjFBNTc3RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGtntzr8SE5tZFYcDPPi9NJZa0S1nQe5bnFhalbExrPKxi23e2 QTqGGR8571UK0UtuoNSwcOPCaYbhuZuT9La4/D252N+mX2NOtZzd4hKKNkM/aQyP 8L7WSuuMyHq0IQJbiy4wMfrYOlIoQvXGKdL3W+bYbAKwDC7SiaJehjR7S93Nh98m YxMebd7ygwlCgTO0bjQPQ1vrNNcdGJVXDTGboZOhgvV4aONigDmIlAQdW9oXjYcC sc9E/ltsVRAjY/7R2zAZ7xsvxXdapHL2e9O7Ih8eh6xz/tvXoxVqHh8NU4WO3KW9 O6HotzvdznHYCiPE3R6Ga4sVOSVUO1p8htxRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU04GG2Nn4PwWrhoQmh0GAe/Gld+kwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxLzA0R0cyTm40UHdXcmhvUW1oMEdBZV9HbGQtay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKvxAwDQYJKoZIhvcNAQELBQADggEBAJ0GXs6J80uQfWB8V6vPSdEuUIUq EYHUyuiimd6wcNX+GNbpSNMMb1p3sgFML4QdodCeU5/jFXiS4/ILD237YHBGl6LV DkOp66CWc30aaE9Fk6HgMv2kn/NWGLob7jgRfImEmpfBFP1XrlPCmc7xr90WQigG KyTsDfmK38/62XcsxNiwSRsCKP8V+3pd0Amls6RkQOq35oDvcQ/D/fbwsfVOZZim aQyhRExqSjMBXoA1XJY187BHcSoR32XtXy5LYnFHv9NAAgR8KaildlkGloPdSoSA eShOTNeO+EGWtmQ8+QBbudxybfy/clm0V8/5iYN9Q9yVg9S2O1gqTC4YzdU= -----END CERTIFICATE-----Generated at Sun Feb 16 22:22:29 2025 by rpki-client