$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/vMinRXeljRGpnnP74AeBEd9uO4s.roa File: vMinRXeljRGpnnP74AeBEd9uO4s.roa (raw, json) Hash identifier: LsL2LeRpWJfFihnHM0b9simGupJDArlx5vXqyfLLnpk= Subject key identifier: BC:C8:A7:45:77:A5:8D:11:A9:9E:73:FB:E0:07:81:11:DF:6E:3B:8B Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892 Certificate serial: 91 Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/vMinRXeljRGpnnP74AeBEd9uO4s.roa Signing time: Wed 31 Jul 2024 01:30:45 +0000 ROA not before: Wed 31 Jul 2024 01:30:45 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 131079 IP address blocks: 210.173.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892 Validity Not Before: Jul 31 01:30:45 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=BCC8A74577A58D11A99E73FBE0078111DF6E3B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:e3:bc:be:8b:ef:39:42:da:eb:6f:0e:f0: ee:e3:78:d1:a4:ed:01:44:de:8d:bb:a8:37:77:4a: c6:fb:71:d4:6d:a0:3c:13:6c:09:7c:49:88:0b:41: 40:00:f7:13:ba:25:19:8b:8f:4e:a6:88:5c:3d:74: 18:bb:5e:98:ab:9e:47:8b:3b:46:76:d8:49:fd:83: 70:7c:ac:de:d2:cb:77:31:a2:8d:20:ec:91:e5:d4: 43:4c:a0:0c:04:d1:39:14:12:0d:f3:25:02:e2:2e: de:4e:9e:3d:8e:24:36:70:29:4f:f6:a9:e2:a1:bd: e3:82:28:6f:9b:7d:a8:42:3f:58:08:7d:6c:83:f9: c4:dc:ef:ff:ca:b7:03:53:ff:c9:48:7d:40:cb:f6: 4b:70:9e:f0:ef:5a:bb:4d:f0:26:44:60:72:16:a3: 0f:c8:fd:b5:fd:1a:ce:31:04:c3:ad:c0:35:70:21: ca:d7:06:d0:85:6d:6e:f6:16:54:d7:a6:0e:01:de: 01:b0:89:dc:54:b5:66:bc:8f:7d:79:13:1a:bb:a1: a4:ac:fc:ef:20:0d:d8:77:5e:5b:28:b4:d7:90:89: 4e:db:cd:f9:87:27:18:2f:36:4f:9e:04:0c:5a:b7: 53:88:1a:2d:11:74:6f:a8:92:eb:b6:88:2d:d2:9f: 31:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C8:A7:45:77:A5:8D:11:A9:9E:73:FB:E0:07:81:11:DF:6E:3B:8B X509v3 Authority Key Identifier: keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/vMinRXeljRGpnnP74AeBEd9uO4s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.173.191.0/24 Signature Algorithm: sha256WithRSAEncryption a0:41:d4:45:7a:fa:ab:97:86:0f:4a:7f:3f:39:3b:76:91:c6: df:6e:75:6e:40:03:72:b2:ff:91:20:12:d6:f8:7e:8d:b9:93: 02:00:64:88:bc:23:1c:74:fa:8f:84:31:f3:47:1f:5f:c6:d8: b9:bb:7f:19:5b:92:f6:4a:05:74:e1:12:68:6d:20:14:4a:c2: 99:8a:58:07:5b:ca:bd:a1:cd:40:6b:b9:ee:e5:d0:c7:d6:ad: 84:91:05:7e:18:e9:29:f7:17:d6:ad:29:ef:d8:12:c0:8c:1f: 7e:e5:35:a5:b3:f4:b8:a0:54:28:f3:56:ad:88:8d:95:f1:82: 1e:25:e7:90:82:ef:3e:e7:b1:89:d5:5d:30:1c:bb:6a:d5:47: 2d:c0:2b:15:f7:98:dc:a1:66:4a:a2:9e:90:94:ec:cc:7b:47: 0e:57:0d:a3:5b:09:0f:e3:36:06:b0:92:53:10:e0:ee:41:01: 7d:64:6a:09:1f:d9:d2:ea:71:1b:3d:d0:dd:bc:81:7b:b7:73: f7:fb:6a:9d:a1:c7:64:2d:ef:4d:24:5e:22:44:9e:ea:6c:ab: f4:7a:2c:53:d3:b7:d2:f3:ae:68:9b:f9:8e:90:ec:66:da:8d: ec:d4:aa:9a:5a:ab:2f:98:c8:4f:83:b8:ba:28:0c:ae:54:41: d4:08:3c:73 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjcw MThCNERGRTU0QkQ2NDRFMDAwNjQxQTIzNEI0NzFEQjIwQjg5MjAeFw0yNDA3MzEw MTMwNDVaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDQzhBNzQ1NzdBNThE MTFBOTlFNzNGQkUwMDc4MTExREY2RTNCOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxmOO8vovvOULa628O8O7jeNGk7QFE3o27qDd3Ssb7cdRtoDwT bAl8SYgLQUAA9xO6JRmLj06miFw9dBi7XpirnkeLO0Z22En9g3B8rN7Sy3cxoo0g 7JHl1ENMoAwE0TkUEg3zJQLiLt5Onj2OJDZwKU/2qeKhveOCKG+bfahCP1gIfWyD +cTc7//KtwNT/8lIfUDL9ktwnvDvWrtN8CZEYHIWow/I/bX9Gs4xBMOtwDVwIcrX BtCFbW72FlTXpg4B3gGwidxUtWa8j315Exq7oaSs/O8gDdh3XlsotNeQiU7bzfmH JxgvNk+eBAxat1OIGi0RdG+okuu2iC3SnzGTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUvMinRXeljRGpnnP74AeBEd9uO4swHwYDVR0jBBgwFoAUZwGLTf5UvWROAAZB ojS0cdsguJIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwNy9ad0dMVGY1VXZXUk9BQVpCb2pTMGNkc2d1SkkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ad0dMVGY1VXZXUk9BQVpCb2pTMGNk c2d1SkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjA3L3ZNaW5SWGVsalJHcG5uUDc0QWVCRWQ5dU80cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADSrb8wDQYJKoZIhvcNAQELBQADggEBAKBB1EV6+quXhg9Kfz85O3aRxt9u dW5AA3Ky/5EgEtb4fo25kwIAZIi8Ixx0+o+EMfNHH1/G2Lm7fxlbkvZKBXThEmht IBRKwpmKWAdbyr2hzUBrue7l0MfWrYSRBX4Y6Sn3F9atKe/YEsCMH37lNaWz9Lig VCjzVq2IjZXxgh4l55CC7z7nsYnVXTAcu2rVRy3AKxX3mNyhZkqinpCU7Mx7Rw5X DaNbCQ/jNgawklMQ4O5BAX1kagkf2dLqcRs90N28gXu3c/f7ap2hx2Qt700kXiJE nupsq/R6LFPTt9Lzrmib+Y6Q7GbajezUqppaqy+YyE+DuLooDK5UQdQIPHM= -----END CERTIFICATE-----Generated at Sun Feb 16 22:34:35 2025 by rpki-client