$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/cUkUTqGPV1RuVkImprR04OrV-Zc.roa File: cUkUTqGPV1RuVkImprR04OrV-Zc.roa (raw, json) Hash identifier: ipXmiUuj+1Q0LaBOADTh/wHILMJuRPvweZOnkzmhwTE= Subject key identifier: 71:49:14:4E:A1:8F:57:54:6E:56:42:26:A6:B4:74:E0:EA:D5:F9:97 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 01E6 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/cUkUTqGPV1RuVkImprR04OrV-Zc.roa Signing time: Fri 31 May 2024 01:34:47 +0000 ROA not before: Fri 31 May 2024 01:34:47 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 4713 IP address blocks: 221.113.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 31 01:34:47 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=7149144EA18F57546E564226A6B474E0EAD5F997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:06:51:eb:7c:c8:58:74:11:fa:d2:54:d5: 50:79:58:a9:d5:59:f1:97:e3:b1:a8:2f:62:6f:9f: 44:07:7b:03:15:76:c3:0d:a3:81:76:77:92:1d:a6: 1c:31:a6:bc:0e:0e:18:a4:a6:42:23:6f:a2:9a:c9: 10:30:36:2c:ef:56:2d:75:d0:ab:2e:2c:d2:55:86: a2:bb:d8:67:ca:95:e1:12:99:50:4f:79:3f:8c:61: 53:fb:10:7f:3a:de:28:57:04:21:c3:2e:b8:87:38: 5c:49:b1:2b:59:e4:7e:97:fe:c8:06:1a:ec:4f:e5: 0b:b9:13:24:b5:0a:38:d3:96:eb:06:68:4c:4b:05: e1:5d:02:8e:b4:f1:e1:a2:4c:1c:dc:c2:38:c7:62: 38:da:34:59:9f:ed:7d:0f:44:1e:17:40:a7:01:7c: 19:34:c2:d2:3d:92:fb:9e:92:6e:ad:e5:2e:aa:cc: 9e:cc:be:64:80:ab:31:5e:89:ad:f8:64:82:59:59: 7c:1a:51:09:4c:b0:f2:6a:06:e1:10:b1:22:a9:91: 61:17:6f:e7:14:02:8d:46:98:a1:22:d3:c6:f5:62: 41:c3:b8:8f:c8:2d:ff:ae:fe:65:1c:ba:a1:87:92: 22:a0:c3:ac:74:1f:c3:9a:b5:64:12:66:1b:59:d9: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:49:14:4E:A1:8F:57:54:6E:56:42:26:A6:B4:74:E0:EA:D5:F9:97 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/cUkUTqGPV1RuVkImprR04OrV-Zc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 221.113.128.0/17 Signature Algorithm: sha256WithRSAEncryption b1:c2:9e:f8:8d:7e:62:0b:1a:e3:8a:6d:bd:38:48:13:ee:ad: 4b:0c:05:7e:20:e4:bf:3f:1f:5a:61:ee:03:e3:ab:cb:e5:93: 50:ee:7e:ae:14:c8:90:d0:b4:e7:a7:4e:d0:ca:4b:3e:4a:b6: 7c:07:fe:ab:b3:00:97:a4:c4:12:a2:c3:6c:ba:e5:44:d6:3d: e2:66:4e:5b:97:83:f3:b1:0b:76:7a:c2:58:ef:27:53:e3:74: 3b:57:cd:0f:05:e2:8e:9f:23:6f:b6:e0:f8:ed:0d:4d:9d:87: 54:c0:3c:4b:ab:d8:e0:a8:8f:e8:16:e6:0f:b4:01:13:8e:e7: 2a:fb:ec:e3:46:13:b8:01:66:1e:f3:55:10:44:7e:85:09:5f: 6e:14:4c:9b:5c:81:95:8f:fa:a3:59:8b:60:3b:7b:ed:12:4b: b0:b6:a2:db:56:47:77:b6:d3:49:a6:2c:c1:82:a6:5a:a8:ff: 98:a8:bd:0d:c2:5f:c0:aa:49:b5:ad:9e:c0:76:0b:65:e1:2a: 9e:0d:7a:02:73:fb:98:f7:d1:c3:fb:d8:8f:ec:2b:89:73:cb: 88:3a:88:a4:b9:25:bd:64:6c:b2:0c:63:1d:39:59:07:47:65: 8d:68:f8:09:00:43:8d:a5:0a:09:9b:bd:bf:6f:fe:a9:07:3c: 34:57:b3:c4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDA1MzEw MTM0NDdaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDcxNDkxNDRFQTE4RjU3 NTQ2RTU2NDIyNkE2QjQ3NEUwRUFENUY5OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgQQZR63zIWHQR+tJU1VB5WKnVWfGX47GoL2Jvn0QHewMVdsMN o4F2d5IdphwxprwODhikpkIjb6KayRAwNizvVi110KsuLNJVhqK72GfKleESmVBP eT+MYVP7EH863ihXBCHDLriHOFxJsStZ5H6X/sgGGuxP5Qu5EyS1CjjTlusGaExL BeFdAo608eGiTBzcwjjHYjjaNFmf7X0PRB4XQKcBfBk0wtI9kvuekm6t5S6qzJ7M vmSAqzFeia34ZIJZWXwaUQlMsPJqBuEQsSKpkWEXb+cUAo1GmKEi08b1YkHDuI/I Lf+u/mUcuqGHkiKgw6x0H8OatWQSZhtZ2Q1LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcUkUTqGPV1RuVkImprR04OrV+ZcwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL2NVa1VUcUdQVjFSdVZrSW1wclIwNE9yVi1aYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfdcYAwDQYJKoZIhvcNAQELBQADggEBALHCnviNfmILGuOKbb04SBPurUsM BX4g5L8/H1ph7gPjq8vlk1Dufq4UyJDQtOenTtDKSz5KtnwH/quzAJekxBKiw2y6 5UTWPeJmTluXg/OxC3Z6wljvJ1PjdDtXzQ8F4o6fI2+24PjtDU2dh1TAPEur2OCo j+gW5g+0AROO5yr77ONGE7gBZh7zVRBEfoUJX24UTJtcgZWP+qNZi2A7e+0SS7C2 ottWR3e200mmLMGCplqo/5iovQ3CX8CqSbWtnsB2C2XhKp4NegJz+5j30cP72I/s K4lzy4g6iKS5Jb1kbLIMYx05WQdHZY1o+AkAQ42lCgmbvb9v/qkHPDRXs8Q= -----END CERTIFICATE-----Generated at Sun Feb 16 22:04:58 2025 by rpki-client