$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/izeFcsQ3bjdf9zUdptJ52lqDPks.roa File: izeFcsQ3bjdf9zUdptJ52lqDPks.roa (raw, json) Hash identifier: MD3Jl25QSoFNKaWdvgF2iIFDsC52j2gO/kcPRUETZbI= Subject key identifier: 8B:37:85:72:C4:37:6E:37:5F:F7:35:1D:A6:D2:79:DA:5A:83:3E:4B Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Certificate serial: 61 Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/izeFcsQ3bjdf9zUdptJ52lqDPks.roa Signing time: Mon 01 Jul 2024 06:15:44 +0000 ROA not before: Mon 01 Jul 2024 06:15:44 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 38631 IP address blocks: 203.104.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Validity Not Before: Jul 1 06:15:44 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=8B378572C4376E375FF7351DA6D279DA5A833E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:7c:6a:62:5a:34:b5:a1:8f:e2:b7:eb:60: 32:9f:6c:54:f9:6d:6c:a1:e8:5c:17:bb:66:95:9e: 03:f9:39:a6:16:d6:7c:0a:3f:12:28:d9:79:f5:cc: bd:c4:3a:9c:35:6c:f0:d6:b9:a0:84:8a:9e:78:c9: 85:5d:2a:a8:3f:5d:90:64:32:59:61:d6:9f:cb:5c: 5c:87:33:d4:45:c8:3b:b6:f9:7e:67:52:1e:5b:a2: 4d:b8:2f:69:93:a4:08:20:17:0f:f2:d2:02:85:e5: b5:94:33:b9:97:f7:4f:f3:0f:81:79:bd:76:e9:6b: 35:fe:81:ab:9c:38:50:ef:dd:3c:cf:98:2b:bc:89: ef:c2:67:7a:37:93:00:0a:6f:ab:6a:78:af:f4:3e: ba:5b:e1:64:2c:3e:c5:9c:54:da:99:e0:2a:7b:90: 9a:4b:1c:49:e4:b4:02:15:a8:96:19:07:a2:4c:27: 1c:1b:0f:a0:ec:95:0e:d7:2c:43:5f:da:b1:f1:3c: 91:69:5d:cc:6d:41:18:31:4e:6b:11:00:d3:58:c9: a7:eb:d7:0e:f4:53:fd:8b:78:a1:dd:4b:2b:25:3c: db:6c:56:0a:a5:92:77:75:a3:85:8b:0b:d6:7f:68: fa:54:72:7c:dc:01:f6:25:78:25:6c:0c:f1:3b:b0: a2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:37:85:72:C4:37:6E:37:5F:F7:35:1D:A6:D2:79:DA:5A:83:3E:4B X509v3 Authority Key Identifier: keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/izeFcsQ3bjdf9zUdptJ52lqDPks.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.104.144.0/21 Signature Algorithm: sha256WithRSAEncryption 63:b9:97:0f:71:b6:31:26:67:8a:2e:c0:27:59:ef:e9:18:b1: 23:02:fc:a8:de:f8:a6:fa:77:3f:fc:d9:dc:a9:85:88:d3:76: ac:c3:83:c8:a4:c1:6d:b4:aa:eb:09:d2:c1:a5:c9:eb:f0:ef: 87:6a:15:3c:64:83:68:65:e9:8f:cb:6e:90:7f:c6:b1:64:0a: ba:c0:35:36:14:c7:fe:83:3f:f5:1a:49:62:a0:08:ae:21:87: 39:80:9a:89:ab:12:be:e5:40:da:ed:db:c0:85:64:b0:15:2f: d2:5a:ea:89:db:bf:7a:53:58:9e:5a:81:03:4a:2c:30:40:a6: 6c:8b:ca:d4:02:97:d6:43:10:7c:3f:5e:2e:75:a0:6f:e1:a7: 84:b0:63:7b:7c:c4:2a:e3:94:7f:e0:9c:7d:03:90:1c:2d:af: 5a:e2:54:35:0c:54:a4:f9:a8:33:d0:d1:34:d3:54:d5:56:fd: a4:e5:05:e3:91:af:23:36:46:9f:f6:58:0b:af:1d:f4:81:3a: 78:4c:ef:76:a9:6f:32:44:1b:79:79:8e:ef:a6:8d:75:61:71: 55:47:e3:9e:d7:f1:26:c8:65:86:c8:73:ab:6a:2d:ef:57:d0: 30:38:99:d2:1d:0d:ca:ba:92:ac:d5:e3:bc:c7:2e:5c:f0:ab: 8a:54:60:ff -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTI0MDcwMTA2 MTU0NFoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoOEIzNzg1NzJDNDM3NkUz NzVGRjczNTFEQTZEMjc5REE1QTgzM0U0QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALv+fGpiWjS1oY/it+tgMp9sVPltbKHoXBe7ZpWeA/k5phbWfAo/ EijZefXMvcQ6nDVs8Na5oISKnnjJhV0qqD9dkGQyWWHWn8tcXIcz1EXIO7b5fmdS HluiTbgvaZOkCCAXD/LSAoXltZQzuZf3T/MPgXm9dulrNf6Bq5w4UO/dPM+YK7yJ 78JnejeTAApvq2p4r/Q+ulvhZCw+xZxU2pngKnuQmkscSeS0AhWolhkHokwnHBsP oOyVDtcsQ1/asfE8kWldzG1BGDFOaxEA01jJp+vXDvRT/Yt4od1LKyU822xWCqWS d3WjhYsL1n9o+lRyfNwB9iV4JWwM8Tuwog0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBSLN4VyxDduN1/3NR2m0nnaWoM+SzAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTE2L2l6ZUZjc1EzYmpkZjl6VWRwdEo1MmxxRFBrcy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAPLaJAwDQYJKoZIhvcNAQELBQADggEBAGO5lw9xtjEmZ4ouwCdZ7+kY sSMC/Kje+Kb6dz/82dyphYjTdqzDg8ikwW20qusJ0sGlyevw74dqFTxkg2hl6Y/L bpB/xrFkCrrANTYUx/6DP/UaSWKgCK4hhzmAmomrEr7lQNrt28CFZLAVL9Ja6onb v3pTWJ5agQNKLDBApmyLytQCl9ZDEHw/Xi51oG/hp4SwY3t8xCrjlH/gnH0DkBwt r1riVDUMVKT5qDPQ0TTTVNVW/aTlBeORryM2Rp/2WAuvHfSBOnhM73apbzJEG3l5 ju+mjXVhcVVH457X8SbIZYbIc6tqLe9X0DA4mdIdDcq6kqzV47zHLlzwq4pUYP8= -----END CERTIFICATE-----Generated at Sun Feb 16 22:19:13 2025 by rpki-client