$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/n4gXPdC_x25MB8-sbY8oDrH6VuQ.roa File: n4gXPdC_x25MB8-sbY8oDrH6VuQ.roa (raw, json) Hash identifier: 0ReadINilU42qJIf8asXP0eBdGOha3eaPf6R58HbIWA= Subject key identifier: 9F:88:17:3D:D0:BF:C7:6E:4C:07:CF:AC:6D:8F:28:0E:B1:FA:56:E4 Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Certificate serial: 74 Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/n4gXPdC_x25MB8-sbY8oDrH6VuQ.roa Signing time: Tue 12 Nov 2024 01:24:55 +0000 ROA not before: Tue 12 Nov 2024 01:24:55 +0000 ROA not after: Fri 07 Nov 2025 10:27:51 +0000 asID: 131898 IP address blocks: 219.100.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Validity Not Before: Nov 12 01:24:55 2024 GMT Not After : Nov 7 10:27:51 2025 GMT Subject: CN=9F88173DD0BFC76E4C07CFAC6D8F280EB1FA56E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:6b:7e:f1:d2:c3:03:b5:8d:bd:1a:9e:73: 97:c9:b7:4e:3b:1a:79:b8:ee:8c:61:64:8c:4c:7f: c3:b7:bc:b9:10:05:b1:a1:7b:ef:03:4f:64:b5:2d: a2:95:07:61:63:14:6c:65:88:74:dd:1a:f0:26:a3: 2f:60:c1:4f:b1:25:56:ed:ad:38:c5:dd:36:24:67: 1a:71:34:b0:4a:f8:d5:bc:5b:5c:d9:be:fb:8c:df: 4a:17:d1:48:6e:e4:9e:cb:cf:0e:41:8d:7e:2c:10: 32:a5:c5:73:50:49:b2:05:e8:af:3a:9b:95:2f:95: 18:52:e7:29:bb:23:86:c4:42:d9:85:a8:c7:fa:14: b1:72:34:3b:ce:53:6a:d8:a8:03:9f:de:75:64:72: d7:0b:86:59:65:ac:18:53:35:ff:19:72:92:e0:58: 5f:23:3c:63:49:c8:ca:aa:c0:a1:6d:b4:8c:56:a4: 28:12:b2:47:a5:42:29:03:04:1d:af:b3:9f:40:07: f5:37:50:31:c3:d6:67:1a:87:81:f7:35:d8:c4:bf: a4:39:fc:24:cd:f1:9d:e2:6a:dd:2b:a0:09:e6:2a: 92:02:e2:d1:9c:b6:b8:90:2b:24:24:14:cd:42:90: 0b:ae:39:df:7c:74:f5:03:14:6f:36:b8:f4:c1:aa: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:88:17:3D:D0:BF:C7:6E:4C:07:CF:AC:6D:8F:28:0E:B1:FA:56:E4 X509v3 Authority Key Identifier: keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/n4gXPdC_x25MB8-sbY8oDrH6VuQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.145.0/24 Signature Algorithm: sha256WithRSAEncryption 55:93:ce:1a:28:b5:71:43:9a:c6:d8:c5:53:7b:7b:e6:76:41: 51:fa:94:27:0f:65:21:87:71:71:46:d6:57:94:2d:bb:8a:24: 8f:6b:52:c5:07:9a:4e:fe:b4:32:da:79:ee:4b:a0:df:11:b3: fe:07:3d:d4:45:64:03:73:03:0d:d5:f0:19:5a:cb:73:55:6c: 59:85:59:58:cd:8c:a6:5d:b5:20:57:5b:4d:3e:49:9c:1c:11: 9d:57:ce:fe:3d:5f:6f:1a:6f:d5:47:bb:db:bf:65:be:37:9e: e1:6b:96:e8:42:26:16:df:44:eb:6c:86:34:4a:c5:a9:38:54: 16:cf:8f:8e:99:62:24:f5:2f:b8:2c:6c:c6:67:ef:5c:b7:8e: da:40:70:3c:3d:7b:97:3e:66:5e:7d:a2:af:d1:d5:55:40:a3: 9c:79:0d:e3:04:33:38:3d:d2:4b:12:d5:59:ba:f2:24:af:40: 4e:f1:21:f6:f2:1c:5f:a2:b8:cd:f7:67:f9:77:1e:18:aa:c2: 9a:d1:fd:9f:37:e7:30:eb:fa:99:bf:48:65:86:08:74:2f:5e: c6:23:fc:87:2a:35:04:48:9f:6c:29:40:b0:d9:8d:15:b9:bd: 9a:8e:6d:8f:a2:33:e2:8a:5c:aa:3b:75:ef:0f:5f:ec:2b:b3: 47:b4:f0:25 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTI0MTExMjAx MjQ1NVoXDTI1MTEwNzEwMjc1MVowMzExMC8GA1UEAxMoOUY4ODE3M0REMEJGQzc2 RTRDMDdDRkFDNkQ4RjI4MEVCMUZBNTZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKwSa37x0sMDtY29Gp5zl8m3TjsaebjujGFkjEx/w7e8uRAFsaF7 7wNPZLUtopUHYWMUbGWIdN0a8CajL2DBT7ElVu2tOMXdNiRnGnE0sEr41bxbXNm+ +4zfShfRSG7knsvPDkGNfiwQMqXFc1BJsgXorzqblS+VGFLnKbsjhsRC2YWox/oU sXI0O85TatioA5/edWRy1wuGWWWsGFM1/xlykuBYXyM8Y0nIyqrAoW20jFakKBKy R6VCKQMEHa+zn0AH9TdQMcPWZxqHgfc12MS/pDn8JM3xneJq3SugCeYqkgLi0Zy2 uJArJCQUzUKQC64533x09QMUbza49MGqdokCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSfiBc90L/HbkwHz6xtjygOsfpW5DAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTE2L240Z1hQZENfeDI1TUI4LXNiWThvRHJINlZ1US5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADbZJEwDQYJKoZIhvcNAQELBQADggEBAFWTzhootXFDmsbYxVN7e+Z2 QVH6lCcPZSGHcXFG1leULbuKJI9rUsUHmk7+tDLaee5LoN8Rs/4HPdRFZANzAw3V 8Blay3NVbFmFWVjNjKZdtSBXW00+SZwcEZ1Xzv49X28ab9VHu9u/Zb43nuFrluhC JhbfROtshjRKxak4VBbPj46ZYiT1L7gsbMZn71y3jtpAcDw9e5c+Zl59oq/R1VVA o5x5DeMEMzg90ksS1Vm68iSvQE7xIfbyHF+iuM33Z/l3HhiqwprR/Z835zDr+pm/ SGWGCHQvXsYj/IcqNQRIn2wpQLDZjRW5vZqObY+iM+KKXKo7de8PX+wrs0e08CU= -----END CERTIFICATE-----Generated at Sun Feb 16 22:20:05 2025 by rpki-client