$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/4mgLOFRQtsSkzDeyVVuZJlJBfGs.roa File: 4mgLOFRQtsSkzDeyVVuZJlJBfGs.roa (raw, json) Hash identifier: mXCVGD2lWW7KNZhNlxQtPmzsxHCx1wouCs/3w1liIJs= Subject key identifier: E2:68:0B:38:54:50:B6:C4:A4:CC:37:B2:55:5B:99:26:52:41:7C:6B Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 45 Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/4mgLOFRQtsSkzDeyVVuZJlJBfGs.roa Signing time: Sat 31 Aug 2024 01:31:29 +0000 ROA not before: Sat 31 Aug 2024 01:31:29 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 10000 IP address blocks: 114.134.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Aug 31 01:31:29 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=E2680B385450B6C4A4CC37B2555B992652417C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f6:bc:98:da:ba:95:cf:18:8f:22:d9:c1:2f: af:52:70:f7:2c:f4:22:12:33:b0:09:eb:08:f9:ed: 2c:10:6c:f6:65:73:68:5f:31:a8:ae:02:5b:b5:71: 3e:c0:a0:3c:16:a0:2f:b1:0d:c8:a1:b9:d1:b6:f5: 24:e4:81:40:f7:08:ae:29:cc:96:62:a9:34:33:99: b9:f0:cb:22:af:5a:c9:72:ef:2d:6e:5f:9f:bc:9a: d8:83:8b:38:4a:41:07:92:da:2b:e5:50:05:be:0f: f5:0d:25:f0:a0:f8:87:99:98:bf:bb:e7:e9:91:58: ad:93:42:d6:db:d2:87:a6:49:dc:af:e7:21:63:b1: f1:a4:d5:8b:50:31:43:fe:51:60:7f:40:be:60:b6: da:78:00:35:cb:20:4f:35:67:af:2e:18:c5:c9:05: 25:e5:f4:cb:7e:60:7f:61:bb:a1:5e:6b:c4:5b:43: c7:00:c6:c4:f2:1a:ea:23:5e:2a:53:dc:11:2d:cd: d7:30:3b:56:2e:10:5a:46:6e:e3:76:59:85:48:3d: 0c:ef:50:aa:38:8b:cd:bb:80:6d:69:6e:b7:23:fb: f9:bf:f5:c0:54:10:fe:58:e4:89:9e:17:d5:55:44: 75:ed:61:8d:7a:91:53:eb:b6:39:d6:8a:dc:04:39: ea:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:68:0B:38:54:50:B6:C4:A4:CC:37:B2:55:5B:99:26:52:41:7C:6B X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/4mgLOFRQtsSkzDeyVVuZJlJBfGs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.134.96.0/20 Signature Algorithm: sha256WithRSAEncryption bb:33:8e:ef:1c:9c:02:2e:01:e2:90:2b:77:01:e4:e2:29:d8: 7c:b0:e3:c2:1d:51:49:72:7c:f5:fb:5d:1c:d8:ac:f2:2e:0b: 28:3b:69:60:06:ba:2a:2e:3e:7b:9d:22:d6:55:2a:a9:bc:32: 81:95:53:cb:7f:87:51:d6:fe:b8:be:28:15:9f:e3:e2:34:b9: 34:65:64:97:fb:a7:32:8f:d1:59:da:6f:49:d7:b1:0c:6d:4c: 42:7b:fd:0e:dd:6e:53:e6:78:a7:9c:4a:12:b9:80:b1:9f:0b: bc:9b:f5:13:ad:98:f2:bd:0b:06:26:95:6c:b3:23:7b:f4:24: a6:d0:4d:0e:6e:b2:eb:a6:53:46:94:e0:32:ed:1c:d3:f0:56: 87:c7:e9:fa:cb:ff:33:4b:c2:76:82:cb:bf:6b:c5:64:4a:2f: f9:2b:ae:ae:ab:f9:16:9b:79:1f:e3:b2:66:42:fe:0d:f8:5b: 0d:62:8c:23:fa:71:a7:3c:9d:98:ca:97:66:f2:8a:b9:24:5c: 7e:88:87:8c:3c:dd:e1:06:10:8a:cc:69:a6:58:f4:b0:64:4a: 87:87:74:0a:23:05:12:48:d3:8c:4f:00:97:77:14:5c:66:61: b7:23:dc:6b:4a:29:da:e2:1e:9f:b8:16:fb:1c:09:79:03:e0: 61:41:1e:80 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3 NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI0MDgzMTAx MzEyOVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRTI2ODBCMzg1NDUwQjZD NEE0Q0MzN0IyNTU1Qjk5MjY1MjQxN0M2QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOH2vJjaupXPGI8i2cEvr1Jw9yz0IhIzsAnrCPntLBBs9mVzaF8x qK4CW7VxPsCgPBagL7ENyKG50bb1JOSBQPcIrinMlmKpNDOZufDLIq9ayXLvLW5f n7ya2IOLOEpBB5LaK+VQBb4P9Q0l8KD4h5mYv7vn6ZFYrZNC1tvSh6ZJ3K/nIWOx 8aTVi1AxQ/5RYH9AvmC22ngANcsgTzVnry4YxckFJeX0y35gf2G7oV5rxFtDxwDG xPIa6iNeKlPcES3N1zA7Vi4QWkZu43ZZhUg9DO9QqjiLzbuAbWlutyP7+b/1wFQQ /ljkiZ4X1VVEde1hjXqRU+u2OdaK3AQ56vMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTiaAs4VFC2xKTMN7JVW5kmUkF8azAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos 4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5 c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NTQvNG1nTE9GUlF0c1NrekRleVZWdVpKbEpCZkdzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHKGYDANBgkqhkiG9w0BAQsFAAOCAQEAuzOO7xycAi4B4pArdwHk4inYfLDj wh1RSXJ89ftdHNis8i4LKDtpYAa6Ki4+e50i1lUqqbwygZVTy3+HUdb+uL4oFZ/j 4jS5NGVkl/unMo/RWdpvSdexDG1MQnv9Dt1uU+Z4p5xKErmAsZ8LvJv1E62Y8r0L BiaVbLMje/QkptBNDm6y66ZTRpTgMu0c0/BWh8fp+sv/M0vCdoLLv2vFZEov+Suu rqv5Fpt5H+OyZkL+DfhbDWKMI/pxpzydmMqXZvKKuSRcfoiHjDzd4QYQisxpplj0 sGRKh4d0CiMFEkjTjE8Al3cUXGZhtyPca0op2uIen7gW+xwJeQPgYUEegA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:18:50 2025 by rpki-client