$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/I0VAB9SKUOy4C8utECMPKyUR7LE.roa File: I0VAB9SKUOy4C8utECMPKyUR7LE.roa (raw, json) Hash identifier: 4Tx9pPPebOxiLr6ZCIfX6GV9Y02xCWzTHNiitIfy6sY= Subject key identifier: 23:45:40:07:D4:8A:50:EC:B8:0B:CB:AD:10:23:0F:2B:25:11:EC:B1 Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892 Certificate serial: 86 Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/I0VAB9SKUOy4C8utECMPKyUR7LE.roa Signing time: Tue 30 Apr 2024 01:28:26 +0000 ROA not before: Tue 30 Apr 2024 01:28:26 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 7521 IP address blocks: 210.173.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892 Validity Not Before: Apr 30 01:28:26 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=23454007D48A50ECB80BCBAD10230F2B2511ECB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:69:b8:dd:7f:52:4c:09:1d:2b:ec:b7:35: 7a:3f:92:25:3d:1f:9b:b9:15:d8:9d:fc:ec:cd:92: 35:5e:a7:57:29:a0:40:d8:17:70:b9:4c:0c:f2:e3: 36:e6:fa:ed:64:27:c1:6d:18:47:7e:f7:34:55:1d: 15:cf:3d:49:cc:b9:62:f1:d8:32:28:4b:5c:5c:27: 63:53:63:b5:f7:99:a5:b7:c3:e9:f4:61:15:87:59: 2e:5b:bc:65:6d:13:d9:eb:80:3b:d6:6a:15:18:5b: aa:0a:20:60:5c:79:00:a9:65:6d:64:31:ae:d8:ae: ef:0a:5a:57:27:88:85:b1:35:15:3a:e0:8f:b0:f7: bb:03:4e:18:a2:3d:4b:db:da:9c:ce:72:49:13:db: b3:e2:ee:58:0d:c2:b7:8c:a6:e7:4c:7e:c2:6a:4f: 26:a6:e0:3d:92:ad:a1:79:94:00:e6:46:f7:4f:69: cd:8e:4b:5d:32:73:79:2f:2a:8b:40:5b:ae:f1:aa: 4d:e2:23:7e:ac:bd:7a:2a:71:69:6f:d5:a9:44:d1: 8a:fd:82:6d:b0:93:ff:3b:12:4a:cb:5c:1e:78:44: 58:cd:55:65:e8:46:d7:78:1e:60:e8:74:a4:25:c1: 13:97:7a:5f:03:68:02:60:55:c6:31:ed:a8:39:64: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:45:40:07:D4:8A:50:EC:B8:0B:CB:AD:10:23:0F:2B:25:11:EC:B1 X509v3 Authority Key Identifier: keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/I0VAB9SKUOy4C8utECMPKyUR7LE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.173.170.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:94:18:9c:d2:80:dd:92:5f:7b:28:59:e6:a1:e1:dd:46:e4: 83:2b:fa:cb:9c:28:79:22:af:b7:5b:c0:f4:bb:47:5e:db:7f: 07:15:82:57:da:77:89:81:f4:7c:f1:b9:fa:c6:87:4e:5e:17: 81:70:99:f9:b5:59:ac:e7:a7:69:13:e0:1b:f1:d3:28:df:df: 24:2c:06:c1:01:32:29:66:7e:d9:7d:7f:95:51:d4:9c:32:dc: 5e:84:37:e1:50:66:80:96:a6:4f:f1:c7:47:7a:28:92:80:4c: 60:f0:f0:9d:35:60:27:59:9a:d9:b1:a7:84:f8:8b:2d:98:b4: 38:47:91:50:cd:49:2c:65:ee:7b:d9:36:4b:ac:45:25:1d:e8: 08:a9:7a:49:08:83:86:db:e2:bf:77:0e:1c:9e:6f:5e:f5:b1: b3:95:93:9f:5f:af:bf:bf:48:cb:3f:69:2b:87:a7:b1:12:a2: bd:31:3d:c7:66:4f:04:68:66:86:97:a5:18:b4:b1:86:e3:e6: 35:52:3a:80:57:9e:92:c4:8d:19:46:21:9b:2e:82:52:c4:9a: c0:19:08:22:1d:fb:7a:24:b9:20:fa:88:a8:79:2a:27:ee:a6: 95:0b:d4:7b:a1:81:e8:4f:f0:1d:db:98:ff:ef:1b:dd:ac:2e: 13:ef:86:dd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjcw MThCNERGRTU0QkQ2NDRFMDAwNjQxQTIzNEI0NzFEQjIwQjg5MjAeFw0yNDA0MzAw MTI4MjZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIzNDU0MDA3RDQ4QTUw RUNCODBCQ0JBRDEwMjMwRjJCMjUxMUVDQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsVWm43X9STAkdK+y3NXo/kiU9H5u5Fdid/OzNkjVep1cpoEDY F3C5TAzy4zbm+u1kJ8FtGEd+9zRVHRXPPUnMuWLx2DIoS1xcJ2NTY7X3maW3w+n0 YRWHWS5bvGVtE9nrgDvWahUYW6oKIGBceQCpZW1kMa7Yru8KWlcniIWxNRU64I+w 97sDThiiPUvb2pzOckkT27Pi7lgNwreMpudMfsJqTyam4D2SraF5lADmRvdPac2O S10yc3kvKotAW67xqk3iI36svXoqcWlv1alE0Yr9gm2wk/87EkrLXB54RFjNVWXo Rtd4HmDodKQlwROXel8DaAJgVcYx7ag5ZL3nAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUI0VAB9SKUOy4C8utECMPKyUR7LEwHwYDVR0jBBgwFoAUZwGLTf5UvWROAAZB ojS0cdsguJIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwNy9ad0dMVGY1VXZXUk9BQVpCb2pTMGNkc2d1SkkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ad0dMVGY1VXZXUk9BQVpCb2pTMGNk c2d1SkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjA3L0kwVkFCOVNLVU95NEM4dXRFQ01QS3lVUjdMRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADSraowDQYJKoZIhvcNAQELBQADggEBAByUGJzSgN2SX3soWeah4d1G5IMr +sucKHkir7dbwPS7R17bfwcVglfad4mB9HzxufrGh05eF4Fwmfm1Waznp2kT4Bvx 0yjf3yQsBsEBMilmftl9f5VR1Jwy3F6EN+FQZoCWpk/xx0d6KJKATGDw8J01YCdZ mtmxp4T4iy2YtDhHkVDNSSxl7nvZNkusRSUd6AipekkIg4bb4r93Dhyeb171sbOV k59fr7+/SMs/aSuHp7ESor0xPcdmTwRoZoaXpRi0sYbj5jVSOoBXnpLEjRlGIZsu glLEmsAZCCId+3okuSD6iKh5KifuppUL1HuhgehP8B3bmP/vG92sLhPvht0= -----END CERTIFICATE-----Generated at Sun Feb 16 22:07:52 2025 by rpki-client