$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/9BpIcIvEotW5aJTKFAdz4M5kYCc.roa File: 9BpIcIvEotW5aJTKFAdz4M5kYCc.roa (raw, json) Hash identifier: Cl/JVb/d1j3VcjeAZbIdxpK4WvVJfBbKMRHjp6kQki4= Subject key identifier: F4:1A:48:70:8B:C4:A2:D5:B9:68:94:CA:14:07:73:E0:CE:64:60:27 Certificate issuer: /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Certificate serial: 40 Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/9BpIcIvEotW5aJTKFAdz4M5kYCc.roa Signing time: Sat 31 Aug 2024 01:30:16 +0000 ROA not before: Sat 31 Aug 2024 01:30:16 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 7670 IP address blocks: 202.25.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Validity Not Before: Aug 31 01:30:16 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=F41A48708BC4A2D5B96894CA140773E0CE646027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d2:6f:b5:a6:ec:20:bc:30:cd:53:35:1a:57: e7:7b:be:20:40:7b:ed:f2:94:2d:f4:f3:a0:69:37: 2a:c6:9d:00:38:ca:d8:ce:b4:d1:ef:11:6c:8d:fc: bc:5f:90:76:b4:c3:35:45:e6:ff:7f:c6:32:d4:ae: a4:44:54:b0:14:d0:b6:79:0d:4e:58:0b:5a:fb:a2: c8:20:f3:46:fa:c6:05:06:13:c4:59:9f:9f:4e:87: 30:11:0a:4c:bf:57:c1:e9:2b:6b:c9:3d:61:1d:46: ef:f7:7b:39:27:05:db:48:43:f4:a1:19:44:60:86: 07:cd:a9:fc:11:4b:4f:a8:b1:e8:28:78:5c:22:a7: 94:10:7a:79:a9:eb:ce:ab:e1:02:a7:44:5a:9c:b9: 8b:c0:6a:94:d6:5c:74:1e:ee:0a:79:c2:4d:63:83: 05:f5:aa:28:3e:0c:b7:6e:62:bc:50:b3:de:9c:d5: 99:11:22:35:86:89:a9:05:81:bb:82:ae:4a:a8:68: 16:6e:81:13:29:71:3c:e9:bc:9f:d2:e1:6e:3a:d1: 82:53:94:8b:a3:08:da:23:f9:71:0c:c5:93:4b:c4: 24:d1:1f:00:91:29:25:79:ce:a1:fa:bf:96:2c:f4: 6f:f1:59:e0:2f:71:e6:7e:39:56:d5:13:fc:4f:60: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1A:48:70:8B:C4:A2:D5:B9:68:94:CA:14:07:73:E0:CE:64:60:27 X509v3 Authority Key Identifier: keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/9BpIcIvEotW5aJTKFAdz4M5kYCc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.25.192.0/20 Signature Algorithm: sha256WithRSAEncryption 33:81:5a:36:a0:d5:73:c1:7f:86:ed:b0:b0:87:d2:8d:22:ca: c9:65:27:33:c0:77:45:78:43:cb:f2:75:af:1e:36:11:ae:85: a3:00:e1:b7:9f:98:bc:ef:48:43:79:9f:4e:3b:b1:52:38:68: 3b:e2:80:ff:00:df:ca:f0:11:91:b1:4c:28:83:bf:53:06:28: 8f:6d:ed:fa:39:4a:6c:48:4c:ee:44:fd:d1:8f:31:75:74:29: 56:27:aa:5f:a0:b6:0f:57:c7:6d:f4:3e:a9:99:ee:ed:f7:18: 13:69:f2:c4:ae:d7:29:eb:09:51:fd:10:00:50:c7:63:27:90: 60:ed:9f:58:c7:c2:dd:84:f0:6f:1e:59:a1:ba:63:de:e0:a1: 21:ee:18:04:33:71:eb:89:85:0d:d8:b8:26:32:2c:c0:2c:cd: c2:33:27:6b:33:e4:f7:18:35:88:0c:89:3c:d1:a2:c3:04:b7: 3b:80:9a:5c:a2:bc:63:12:68:1d:60:3d:3e:87:1e:ee:f2:dd: 82:18:6a:ee:8a:0d:04:0c:ea:ec:a9:17:12:36:b1:33:87:55: dd:13:f8:9d:37:4d:78:00:a4:cb:bf:f3:ff:58:83:ae:93:5f: 4d:1b:a9:31:ed:e2:95:6f:f5:85:16:a2:f6:4c:ad:b0:bc:fd: da:2a:71:8e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzg4 Njc4RTY0RDI5MTg0QzIzREFBQURCNTk0QkZEOUJBRTI0MDVDMB4XDTI0MDgzMTAx MzAxNloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRjQxQTQ4NzA4QkM0QTJE NUI5Njg5NENBMTQwNzczRTBDRTY0NjAyNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOjSb7Wm7CC8MM1TNRpX53u+IEB77fKULfTzoGk3KsadADjK2M60 0e8RbI38vF+QdrTDNUXm/3/GMtSupERUsBTQtnkNTlgLWvuiyCDzRvrGBQYTxFmf n06HMBEKTL9Xwekra8k9YR1G7/d7OScF20hD9KEZRGCGB82p/BFLT6ix6Ch4XCKn lBB6eanrzqvhAqdEWpy5i8BqlNZcdB7uCnnCTWODBfWqKD4Mt25ivFCz3pzVmREi NYaJqQWBu4KuSqhoFm6BEylxPOm8n9LhbjrRglOUi6MI2iP5cQzFk0vEJNEfAJEp JXnOofq/liz0b/FZ4C9x5n45VtUT/E9gBvcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBT0Gkhwi8Si1blolMoUB3PgzmRgJzAfBgNVHSMEGDAWgBTXiGeOZNKRhMI9qq21 lL/ZuuJAXDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMzLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJyaVFGdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJy aVFGdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzMvOUJwSWNJdkVvdFc1YUpUS0ZBZHo0TTVrWUNjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMoZwDANBgkqhkiG9w0BAQsFAAOCAQEAM4FaNqDVc8F/hu2wsIfSjSLKyWUn M8B3RXhDy/J1rx42Ea6FowDht5+YvO9IQ3mfTjuxUjhoO+KA/wDfyvARkbFMKIO/ UwYoj23t+jlKbEhM7kT90Y8xdXQpVieqX6C2D1fHbfQ+qZnu7fcYE2nyxK7XKesJ Uf0QAFDHYyeQYO2fWMfC3YTwbx5Zobpj3uChIe4YBDNx64mFDdi4JjIswCzNwjMn azPk9xg1iAyJPNGiwwS3O4CaXKK8YxJoHWA9Poce7vLdghhq7ooNBAzq7KkXEjax M4dV3RP4nTdNeACky7/z/1iDrpNfTRupMe3ilW/1hRai9kytsLz92ipxjg== -----END CERTIFICATE-----Generated at Sun Feb 16 22:07:32 2025 by rpki-client