$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/Taj8sDzxitgd41gzD6WJbLJe-4g.roa File: Taj8sDzxitgd41gzD6WJbLJe-4g.roa (raw, json) Hash identifier: QFNiJQRFDBuKwWzq8iwehudekQXUb77F8CmsX5+0n8g= Subject key identifier: 4D:A8:FC:B0:3C:F1:8A:D8:1D:E3:58:33:0F:A5:89:6C:B2:5E:FB:88 Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 49 Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Taj8sDzxitgd41gzD6WJbLJe-4g.roa Signing time: Sat 31 Aug 2024 01:31:31 +0000 ROA not before: Sat 31 Aug 2024 01:31:31 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 10000 IP address blocks: 203.129.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Aug 31 01:31:31 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=4DA8FCB03CF18AD81DE358330FA5896CB25EFB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:15:00:96:09:4d:5a:06:89:af:03:b9:2e: 9e:d4:4a:bf:42:98:ef:65:2d:cb:9e:a3:a5:9f:67: df:89:e5:a4:f7:ef:13:9b:63:53:ee:8d:1e:70:bf: 08:45:98:ef:5b:6d:b2:57:fa:57:6b:f8:93:7c:ab: 8a:ba:d1:92:73:10:ec:f8:d6:49:f0:f6:98:fb:b9: 44:24:22:50:5a:7d:b1:d3:57:da:e5:9f:9c:e4:ae: c6:ed:64:79:71:b9:8b:d1:54:03:61:c4:0a:e7:18: 07:34:56:54:5e:64:44:0c:f1:c9:ad:c2:3d:bb:02: f2:9e:bc:07:07:2b:06:ba:45:2e:50:b4:b4:15:90: a2:21:48:2d:5e:dd:3a:22:ca:2e:78:9c:bd:29:83: 1a:bc:d9:d3:08:e7:94:38:88:d1:02:51:d6:ee:9f: 50:f5:08:d3:5a:69:5c:e1:b7:42:de:02:87:84:37: c1:ba:fa:38:5a:3c:62:a5:b0:66:cf:1b:c9:be:c8: 8a:99:c9:fb:ac:ce:87:29:45:f9:56:9e:82:0f:7a: bd:f8:82:45:2d:d8:2e:52:31:97:71:ff:7f:8b:b7: 2d:74:f8:f8:bb:47:98:9a:c0:62:1d:b6:5d:3e:61: 68:ca:f4:f0:b7:e3:9a:79:f9:f2:01:f2:2c:4d:64: 63:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A8:FC:B0:3C:F1:8A:D8:1D:E3:58:33:0F:A5:89:6C:B2:5E:FB:88 X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Taj8sDzxitgd41gzD6WJbLJe-4g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.129.96.0/20 Signature Algorithm: sha256WithRSAEncryption 24:fa:22:bb:08:f6:93:9d:cb:f9:93:a8:4d:4c:e5:d5:5d:a0: e4:d0:10:18:c9:2e:fe:2f:03:1e:4c:bb:12:bb:ed:a1:2d:31: d4:89:39:53:32:96:b8:3f:5a:a9:ff:ed:48:c3:36:cf:63:68: 1d:ee:b8:99:72:64:0a:b6:4e:34:e8:b1:48:41:92:f9:90:14: 59:93:c0:c0:16:d8:32:0c:8a:79:57:3c:26:79:28:39:eb:a4: 8e:2f:02:5f:b1:a5:51:41:31:15:96:ef:d9:31:95:4b:66:a9: 80:c5:b8:ce:52:95:c1:70:f5:e0:87:01:d8:a6:1d:56:bf:0f: a3:c7:45:ac:f2:fc:f1:cd:cf:29:de:03:65:8f:88:24:d5:b7: 86:9e:c3:2a:da:b5:4e:b3:ef:9d:7b:da:f4:23:73:b6:f8:45: 73:69:8b:72:a4:81:d5:2d:ef:01:d2:68:20:c7:08:02:de:07: 27:20:68:de:23:89:8a:31:6a:80:2f:26:2b:18:5a:1e:80:44: b0:16:d9:80:62:81:b6:46:6b:dd:00:5f:81:e2:96:9b:d6:a0: f3:04:b0:70:e1:b2:3c:70:c2:f9:f8:01:95:1c:fb:8b:d9:fb: 39:0b:1e:c8:39:a8:78:bb:7d:a5:90:89:55:e2:56:1b:04:0a: f5:ec:a4:67 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3 NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI0MDgzMTAx MzEzMVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNERBOEZDQjAzQ0YxOEFE ODFERTM1ODMzMEZBNTg5NkNCMjVFRkI4ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKktFQCWCU1aBomvA7kuntRKv0KY72Uty56jpZ9n34nlpPfvE5tj U+6NHnC/CEWY71ttslf6V2v4k3yrirrRknMQ7PjWSfD2mPu5RCQiUFp9sdNX2uWf nOSuxu1keXG5i9FUA2HECucYBzRWVF5kRAzxya3CPbsC8p68BwcrBrpFLlC0tBWQ oiFILV7dOiLKLnicvSmDGrzZ0wjnlDiI0QJR1u6fUPUI01ppXOG3Qt4Ch4Q3wbr6 OFo8YqWwZs8byb7IipnJ+6zOhylF+Vaegg96vfiCRS3YLlIxl3H/f4u3LXT4+LtH mJrAYh22XT5haMr08Lfjmnn58gHyLE1kY6cCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRNqPywPPGK2B3jWDMPpYlssl77iDAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos 4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5 c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NTQvVGFqOHNEenhpdGdkNDFnekQ2V0piTEplLTRnLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMuBYDANBgkqhkiG9w0BAQsFAAOCAQEAJPoiuwj2k53L+ZOoTUzl1V2g5NAQ GMku/i8DHky7ErvtoS0x1Ik5UzKWuD9aqf/tSMM2z2NoHe64mXJkCrZONOixSEGS +ZAUWZPAwBbYMgyKeVc8JnkoOeukji8CX7GlUUExFZbv2TGVS2apgMW4zlKVwXD1 4IcB2KYdVr8Po8dFrPL88c3PKd4DZY+IJNW3hp7DKtq1TrPvnXva9CNztvhFc2mL cqSB1S3vAdJoIMcIAt4HJyBo3iOJijFqgC8mKxhaHoBEsBbZgGKBtkZr3QBfgeKW m9ag8wSwcOGyPHDC+fgBlRz7i9n7OQseyDmoeLt9pZCJVeJWGwQK9eykZw== -----END CERTIFICATE-----Generated at Sun Feb 16 22:33:32 2025 by rpki-client