$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/t4sHlOwNbda0OxyMUCurp6U7_IU.roa File: t4sHlOwNbda0OxyMUCurp6U7_IU.roa (raw, json) Hash identifier: Ss90qaJIatRbTakuLp1TT/fEm535RfsXlc7yjALVcRg= Subject key identifier: B7:8B:07:94:EC:0D:6D:D6:B4:3B:1C:8C:50:2B:AB:A7:A5:3B:FC:85 Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Certificate serial: 41 Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/t4sHlOwNbda0OxyMUCurp6U7_IU.roa Signing time: Wed 28 Aug 2024 05:24:37 +0000 ROA not before: Wed 28 Aug 2024 05:24:37 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 15830 IP address blocks: 203.140.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Validity Not Before: Aug 28 05:24:37 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=B78B0794EC0D6DD6B43B1C8C502BABA7A53BFC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:c5:25:f1:07:5f:13:99:3c:16:25:09:60: 47:b7:e9:f9:8b:ee:08:df:2e:08:78:66:4a:44:b2: 0e:e9:46:b8:74:11:5c:74:d9:3f:87:4a:aa:72:28: 16:ee:47:be:f6:c4:36:27:c6:69:58:80:39:97:15: f2:ec:55:c0:b1:d3:40:3e:c6:0d:ea:74:e2:51:b8: 0f:75:13:0b:96:04:bb:83:9f:db:26:9f:08:72:ba: 08:2e:16:e8:c9:08:c9:c0:e3:ba:36:f6:75:c9:e4: e7:b7:18:34:65:38:ba:d1:a4:a4:ca:ac:71:81:91: 76:72:69:e7:98:77:b7:12:54:98:5e:e8:3b:63:e1: 3b:f5:bf:cb:03:d2:6c:17:c7:25:a6:28:f1:31:eb: 77:de:9b:ea:51:81:bf:8a:86:cb:6d:65:6e:b7:ed: 11:3d:75:15:2c:75:16:c4:bc:28:6b:44:9c:74:a2: df:5d:3c:3a:21:e5:7a:a3:e0:84:2f:84:e4:65:82: 94:ab:32:ce:52:b8:25:27:2d:32:76:6f:e7:ff:36: 01:b1:bf:a7:e1:14:71:ac:f3:3e:97:99:a9:86:e3: 79:b3:3c:07:be:1c:b8:56:8a:77:94:ba:a9:03:d6: fc:a3:1c:e2:64:cb:97:68:a7:c4:ff:3b:6b:7b:98: c9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8B:07:94:EC:0D:6D:D6:B4:3B:1C:8C:50:2B:AB:A7:A5:3B:FC:85 X509v3 Authority Key Identifier: keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/t4sHlOwNbda0OxyMUCurp6U7_IU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.140.224.0/20 Signature Algorithm: sha256WithRSAEncryption 79:5f:2d:9c:e5:ee:e5:fe:18:9b:17:7c:c3:df:23:27:df:25: 44:61:01:af:fe:6c:be:4b:e7:22:cd:c7:40:3d:2f:8c:37:9e: 98:f6:fa:96:8a:9c:0f:47:1e:43:05:8f:5c:98:b2:f6:84:6d: d6:f8:09:b9:32:ae:88:e1:54:4d:81:2a:9d:1f:54:7e:14:8d: a0:5c:fe:88:56:8d:83:8b:30:7b:52:59:05:6d:12:35:cf:1a: b9:5f:33:99:0f:32:b8:31:9f:9f:bf:6d:fe:47:93:6a:79:93: 68:41:15:56:b9:d3:07:07:2c:6f:9b:e2:79:7b:88:1c:20:b7: f0:31:90:29:f8:90:af:00:8e:63:42:19:f7:87:96:8f:23:56: eb:96:86:5e:95:da:a7:63:ce:8b:b3:24:95:76:8d:92:1d:56: f8:7e:e9:de:f6:bc:21:f0:71:f8:e2:7d:d5:2a:67:9c:89:1c: 1e:8a:95:bc:0c:a2:1f:80:b3:1c:c9:a0:f2:d1:9e:ab:ea:9b: 86:4b:90:5e:98:82:cf:90:79:10:65:1c:36:ad:e8:8a:7f:c5: 23:70:08:2e:67:23:ad:fe:6d:23:00:ac:f8:b6:6c:ba:b1:c1: a7:ad:61:7a:03:7d:23:6c:db:37:90:02:a7:83:58:2f:51:b4: 6f:1c:c0:38 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTI0MDgyODA1 MjQzN1oXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQjc4QjA3OTRFQzBENkRE NkI0M0IxQzhDNTAyQkFCQTdBNTNCRkM4NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMfRxSXxB18TmTwWJQlgR7fp+YvuCN8uCHhmSkSyDulGuHQRXHTZ P4dKqnIoFu5HvvbENifGaViAOZcV8uxVwLHTQD7GDep04lG4D3UTC5YEu4Of2yaf CHK6CC4W6MkIycDjujb2dcnk57cYNGU4utGkpMqscYGRdnJp55h3txJUmF7oO2Ph O/W/ywPSbBfHJaYo8THrd96b6lGBv4qGy21lbrftET11FSx1FsS8KGtEnHSi3108 OiHleqPghC+E5GWClKsyzlK4JSctMnZv5/82AbG/p+EUcazzPpeZqYbjebM8B74c uFaKd5S6qQPW/KMc4mTLl2inxP87a3uYybsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBS3iweU7A1t1rQ7HIxQK6unpTv8hTAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIxMDQyL3Q0c0hsT3dOYmRhME94eU1VQ3VycDZVN19JVS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBATLjOAwDQYJKoZIhvcNAQELBQADggEBAHlfLZzl7uX+GJsXfMPfIyff JURhAa/+bL5L5yLNx0A9L4w3npj2+paKnA9HHkMFj1yYsvaEbdb4CbkyrojhVE2B Kp0fVH4UjaBc/ohWjYOLMHtSWQVtEjXPGrlfM5kPMrgxn5+/bf5Hk2p5k2hBFVa5 0wcHLG+b4nl7iBwgt/AxkCn4kK8AjmNCGfeHlo8jVuuWhl6V2qdjzouzJJV2jZId Vvh+6d72vCHwcfjifdUqZ5yJHB6KlbwMoh+AsxzJoPLRnqvqm4ZLkF6Ygs+QeRBl HDat6Ip/xSNwCC5nI63+bSMArPi2bLqxwaetYXoDfSNs2zeQAqeDWC9RtG8cwDg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:01 2025 by rpki-client