$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/cC1ejUlEz8P9EpecqlGIkyU-P50.roa File: cC1ejUlEz8P9EpecqlGIkyU-P50.roa (raw, json) Hash identifier: qTLY5QXZjbjxwVqYsKZu5I685L6w99FaBv1U7z5lYWM= Subject key identifier: 70:2D:5E:8D:49:44:CF:C3:FD:12:97:9C:AA:51:88:93:25:3E:3F:9D Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 48 Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/cC1ejUlEz8P9EpecqlGIkyU-P50.roa Signing time: Sat 31 Aug 2024 01:31:30 +0000 ROA not before: Sat 31 Aug 2024 01:31:30 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 10000 IP address blocks: 202.228.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Aug 31 01:31:30 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=702D5E8D4944CFC3FD12979CAA518893253E3F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:d2:69:c7:22:c3:9c:98:40:4f:50:c2:89: 48:49:0c:34:34:15:90:bd:79:7f:62:92:90:10:ad: d7:bb:3e:e4:a2:ea:b6:60:51:0f:c1:0e:a9:1e:83: ca:7c:bd:e0:e4:b1:82:f0:c3:d5:72:19:ce:14:2b: 3a:0c:cb:7d:7e:48:02:8c:95:ae:9c:96:b7:12:61: 2f:8e:c7:f1:a2:7f:3b:bb:b9:ba:51:64:87:5f:84: ec:de:37:c5:30:ae:b6:d9:5f:d2:13:95:b7:f2:1f: 5d:22:af:51:cc:e3:96:d0:26:e1:5e:ff:3e:28:dd: 7b:0b:da:9d:8d:dc:ee:02:74:a8:cd:c5:6b:2d:46: f3:d4:de:b1:24:a4:2e:94:cf:8a:93:c7:b6:3c:bd: 7c:8a:cb:1c:e0:50:79:b3:69:1f:4a:76:09:73:8a: ec:9e:8f:45:5b:53:cf:4c:7b:b2:12:78:78:fd:a2: af:e3:69:7d:73:57:de:fc:d4:f5:19:db:67:e8:25: 86:cc:42:db:85:d9:45:81:45:ec:dc:ec:85:0e:c3: 54:23:68:98:aa:b9:42:61:27:7f:0f:3b:c5:1a:8b: 48:fb:0d:cb:16:b6:97:54:f3:99:4e:e2:5b:70:6c: bd:bb:19:73:86:8c:f1:57:0a:61:25:86:d8:17:73: 82:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2D:5E:8D:49:44:CF:C3:FD:12:97:9C:AA:51:88:93:25:3E:3F:9D X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/cC1ejUlEz8P9EpecqlGIkyU-P50.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.228.240.0/20 Signature Algorithm: sha256WithRSAEncryption 53:9c:1a:1d:55:ea:e2:ba:df:59:0a:e9:e1:bd:ab:e7:b6:f6: 48:f5:91:79:87:f0:3b:b7:1a:7b:da:4d:3c:f3:24:9b:5d:8f: 90:92:c9:47:ef:4b:20:7b:f3:26:8d:50:38:c9:8d:1f:f4:0a: a8:f6:d4:0e:01:fb:4e:2d:8b:26:99:04:1a:a5:08:96:d7:77: 1b:51:54:cd:c0:62:64:49:0c:42:39:b2:f6:6c:01:b9:7b:33: f4:7d:37:d7:6a:10:ee:1e:41:ce:7c:37:58:e5:5e:4a:6d:81: 61:10:c0:43:65:7b:98:91:44:05:61:b8:67:ad:ac:04:7e:b5: 68:ee:be:84:2b:d2:7c:d4:09:8b:13:38:dc:b9:f3:05:f8:a6: 60:c9:35:4e:2b:ad:91:73:91:db:83:0e:15:88:a7:2e:49:29: f3:f5:63:97:85:f5:8b:3b:1c:b7:ea:05:34:c4:e6:da:76:a8: 99:97:ab:f7:18:ec:95:07:0d:3b:a6:09:c4:f1:d2:df:b9:27: 67:a1:65:00:55:01:0d:3d:64:df:a9:95:2c:89:da:b5:e5:d3: d1:e5:4d:c1:81:75:fc:28:b7:7b:2f:46:77:ac:0c:b1:f1:fa: ea:5f:23:48:41:28:bb:3e:23:a1:95:68:4b:49:50:42:da:56: 91:fc:5a:9f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3 NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI0MDgzMTAx MzEzMFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNzAyRDVFOEQ0OTQ0Q0ZD M0ZEMTI5NzlDQUE1MTg4OTMyNTNFM0Y5RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM5J0mnHIsOcmEBPUMKJSEkMNDQVkL15f2KSkBCt17s+5KLqtmBR D8EOqR6Dyny94OSxgvDD1XIZzhQrOgzLfX5IAoyVrpyWtxJhL47H8aJ/O7u5ulFk h1+E7N43xTCuttlf0hOVt/IfXSKvUczjltAm4V7/PijdewvanY3c7gJ0qM3Fay1G 89TesSSkLpTPipPHtjy9fIrLHOBQebNpH0p2CXOK7J6PRVtTz0x7shJ4eP2ir+Np fXNX3vzU9RnbZ+glhsxC24XZRYFF7NzshQ7DVCNomKq5QmEnfw87xRqLSPsNyxa2 l1TzmU7iW3BsvbsZc4aM8VcKYSWG2BdzgusCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRwLV6NSUTPw/0Sl5yqUYiTJT4/nTAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos 4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5 c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NTQvY0MxZWpVbEV6OFA5RXBlY3FsR0lreVUtUDUwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMrk8DANBgkqhkiG9w0BAQsFAAOCAQEAU5waHVXq4rrfWQrp4b2r57b2SPWR eYfwO7cae9pNPPMkm12PkJLJR+9LIHvzJo1QOMmNH/QKqPbUDgH7Ti2LJpkEGqUI ltd3G1FUzcBiZEkMQjmy9mwBuXsz9H0312oQ7h5Bznw3WOVeSm2BYRDAQ2V7mJFE BWG4Z62sBH61aO6+hCvSfNQJixM43LnzBfimYMk1TiutkXOR24MOFYinLkkp8/Vj l4X1izsct+oFNMTm2naomZer9xjslQcNO6YJxPHS37knZ6FlAFUBDT1k36mVLIna teXT0eVNwYF1/Ci3ey9Gd6wMsfH66l8jSEEouz4joZVoS0lQQtpWkfxanw== -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:52 2025 by rpki-client