$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ItkZcH8JcuZCz1k1g4dvr4prYjM.roa File: ItkZcH8JcuZCz1k1g4dvr4prYjM.roa (raw, json) Hash identifier: CsNPv1Pj/aBT5VazDeNrB4hICXHo47Y6aoaw97nQSP4= Subject key identifier: 22:D9:19:70:7F:09:72:E6:42:CF:59:35:83:87:6F:AF:8A:6B:62:33 Certificate issuer: /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F Certificate serial: 51 Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ItkZcH8JcuZCz1k1g4dvr4prYjM.roa Signing time: Sun 30 Jun 2024 01:31:47 +0000 ROA not before: Sun 30 Jun 2024 01:31:47 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 24296 IP address blocks: 203.95.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F Validity Not Before: Jun 30 01:31:47 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=22D919707F0972E642CF593583876FAF8A6B6233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:be:b6:02:0d:e3:8d:06:cb:be:e4:bb:04: f0:4a:bb:03:8f:5e:2c:93:aa:21:1e:c4:18:40:cd: d1:2f:9a:62:d3:0c:95:0e:ef:16:37:27:4d:3f:4c: 7b:16:96:98:6d:53:df:98:ac:35:75:25:7b:0e:da: c2:4d:31:cc:e6:cc:ea:89:eb:16:4d:2f:bb:fe:22: 9d:a3:a0:94:26:bc:81:86:22:28:df:ff:9d:39:e1: 1d:f5:96:8a:8d:aa:d5:90:6c:a1:e4:71:29:83:55: 3c:05:bc:b0:2f:59:d8:e7:0f:37:b3:67:60:c9:38: 3c:2f:8c:fc:96:41:e5:13:12:7e:20:63:fe:69:65: 29:29:20:0a:29:9d:44:36:0e:bf:5c:f1:d8:4c:7a: 95:d4:7f:fe:c6:49:c9:ea:08:66:9a:b3:9b:ab:98: 4e:29:d5:eb:85:f0:e0:13:05:42:79:b8:10:33:17: e0:96:ea:5a:60:c5:b5:a7:67:82:65:76:d8:48:15: 45:6e:e2:45:aa:50:10:a5:bf:8d:d0:6d:35:11:61: 6a:fa:e3:01:c5:42:dc:71:3e:7f:3d:04:44:8e:02: 5b:04:e9:49:d3:84:47:08:3d:79:00:bf:3b:1f:11: ea:3f:3b:95:05:fd:e3:c2:d2:c1:10:c8:93:a0:f6: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D9:19:70:7F:09:72:E6:42:CF:59:35:83:87:6F:AF:8A:6B:62:33 X509v3 Authority Key Identifier: keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ItkZcH8JcuZCz1k1g4dvr4prYjM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.95.16.0/21 Signature Algorithm: sha256WithRSAEncryption 45:7f:17:a9:c3:aa:28:af:cd:1f:b0:eb:f0:4c:85:45:ec:09: 23:94:a6:63:50:c0:d1:8a:32:61:c5:81:d3:8a:1e:2b:bd:d1: 61:7b:17:32:33:23:7d:29:6f:f6:68:11:17:9c:d7:8f:25:dd: a7:12:3a:f1:0b:83:f3:7f:c9:db:5b:0e:0a:70:f4:13:6d:d0: 80:24:2a:39:e1:97:bc:0b:de:90:1a:86:d0:57:d6:64:5f:63: 31:36:f9:51:30:e5:cf:35:18:8a:48:35:b2:22:30:58:3d:b7: f4:b7:a0:11:4e:0f:57:13:1c:e8:be:8b:3d:ae:90:a6:0b:5e: b5:21:3b:55:83:24:41:ad:58:cd:e7:05:fb:06:e9:b6:5f:b4: 95:e6:60:09:48:16:1c:a0:23:45:1b:3e:d7:4a:d6:46:bb:32: 80:4d:99:46:6e:3c:55:e0:1b:d3:a1:bb:37:04:ae:55:9f:d4: bc:b6:a0:9a:a9:40:9b:b7:5f:a6:f6:f5:8e:e6:af:3a:02:79: 24:56:3f:a3:5c:26:ea:fe:7b:1e:2b:64:7e:61:64:64:29:2f: 53:dc:d6:14:08:d8:3c:52:7b:21:cb:d6:d8:e7:0d:5a:44:25: c1:71:af:16:83:e5:fe:96:0e:58:1f:9d:48:5e:e1:b7:af:f7: 35:07:ab:37 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MkY4 QUJCQTRBQjRGNjUwQjJDNjlCQThDNkNBNUVEMjJERkUzNTRGMB4XDTI0MDYzMDAx MzE0N1oXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoMjJEOTE5NzA3RjA5NzJF NjQyQ0Y1OTM1ODM4NzZGQUY4QTZCNjIzMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL+IvrYCDeONBsu+5LsE8Eq7A49eLJOqIR7EGEDN0S+aYtMMlQ7v FjcnTT9MexaWmG1T35isNXUlew7awk0xzObM6onrFk0vu/4inaOglCa8gYYiKN// nTnhHfWWio2q1ZBsoeRxKYNVPAW8sC9Z2OcPN7NnYMk4PC+M/JZB5RMSfiBj/mll KSkgCimdRDYOv1zx2Ex6ldR//sZJyeoIZpqzm6uYTinV64Xw4BMFQnm4EDMX4Jbq WmDFtadngmV22EgVRW7iRapQEKW/jdBtNRFhavrjAcVC3HE+fz0ERI4CWwTpSdOE Rwg9eQC/Ox8R6j87lQX948LSwRDIk6D2QfcCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQi2Rlwfwly5kLPWTWDh2+vimtiMzAfBgNVHSMEGDAWgBRy+Ku6SrT2ULLGm6jG yl7SLf41TzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjExMTYvY3ZpcnVrcTA5bEN5eHB1b3hzcGUwaTMtTlU4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY3ZpcnVrcTA5bEN5eHB1b3hzcGUw aTMtTlU4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIxMTE2L0l0a1pjSDhKY3VaQ3oxazFnNGR2cjRwcllqTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAPLXxAwDQYJKoZIhvcNAQELBQADggEBAEV/F6nDqiivzR+w6/BMhUXs CSOUpmNQwNGKMmHFgdOKHiu90WF7FzIzI30pb/ZoERec148l3acSOvELg/N/ydtb Dgpw9BNt0IAkKjnhl7wL3pAahtBX1mRfYzE2+VEw5c81GIpINbIiMFg9t/S3oBFO D1cTHOi+iz2ukKYLXrUhO1WDJEGtWM3nBfsG6bZftJXmYAlIFhygI0UbPtdK1ka7 MoBNmUZuPFXgG9OhuzcErlWf1Ly2oJqpQJu3X6b29Y7mrzoCeSRWP6NcJur+ex4r ZH5hZGQpL1Pc1hQI2DxSeyHL1tjnDVpEJcFxrxaD5f6WDlgfnUhe4bev9zUHqzc= -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:48 2025 by rpki-client