$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/tVkXzCx120TubVLOQu-dA2COanw.roa File: tVkXzCx120TubVLOQu-dA2COanw.roa (raw, json) Hash identifier: I2nRkgGKDFngySdqdi5SE7ZbX/3ycgLYZUdJY36Kcf4= Subject key identifier: B5:59:17:CC:2C:75:DB:44:EE:6D:52:CE:42:EF:9D:03:60:8E:6A:7C Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Certificate serial: 08 Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/tVkXzCx120TubVLOQu-dA2COanw.roa Signing time: Mon 21 Oct 2024 02:03:07 +0000 ROA not before: Mon 21 Oct 2024 02:03:07 +0000 ROA not after: Tue 21 Oct 2025 01:23:02 +0000 asID: 9354 IP address blocks: 210.251.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Validity Not Before: Oct 21 02:03:07 2024 GMT Not After : Oct 21 01:23:02 2025 GMT Subject: CN=B55917CC2C75DB44EE6D52CE42EF9D03608E6A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:d0:c7:73:43:d2:30:c5:8e:09:16:ae:e7: 28:39:91:59:78:c5:8b:58:65:92:02:41:95:90:ae: 5f:89:40:07:cf:cc:1d:0d:1e:a1:2c:6a:a4:cf:3b: 9d:7e:77:8a:26:7e:43:d6:34:00:23:3d:93:01:67: bb:b4:6b:c9:b5:24:d8:67:af:b5:eb:f3:69:8b:f4: bc:c3:06:b0:5c:e0:24:c7:a6:f6:8d:de:f7:56:2b: ad:ed:0e:1b:93:92:de:61:a0:97:ca:0d:fc:c1:b3: 95:ee:52:1f:28:db:52:1f:50:5c:d7:ef:16:8f:f4: 2c:c3:50:f3:ec:5f:d3:3d:5e:6b:a5:d1:0d:5e:eb: 11:aa:7e:af:74:39:9c:ab:b8:66:3f:65:5f:34:90: 92:7a:9b:9b:b0:19:8a:9e:6c:ee:28:ba:aa:a1:2f: 25:72:a2:6d:d7:8d:2d:ee:01:55:64:af:76:1c:f3: 33:92:c4:28:fc:a3:7b:63:e8:78:97:7c:e4:7f:a3: a5:1b:0a:67:bc:b7:35:54:2c:ca:d3:44:41:d7:e7: 33:68:75:43:59:f6:1d:cb:5e:f9:72:50:61:28:0f: f6:a0:7f:8e:85:1c:1d:6d:69:41:59:6b:be:6b:54: 64:9c:57:70:4c:e0:00:cc:70:21:c0:07:d4:d1:18: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:59:17:CC:2C:75:DB:44:EE:6D:52:CE:42:EF:9D:03:60:8E:6A:7C X509v3 Authority Key Identifier: keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/tVkXzCx120TubVLOQu-dA2COanw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.251.208.0/20 Signature Algorithm: sha256WithRSAEncryption 09:81:db:b5:60:3d:46:34:46:c7:83:33:a3:96:c6:2d:50:bd: 6f:eb:8a:2d:73:8b:da:41:2f:19:d9:b2:8a:6c:f5:8d:58:35: 11:cc:a5:d0:cd:1a:fd:c4:99:40:ed:32:cc:68:a0:02:15:e4: a8:2b:98:64:dd:91:c8:d3:4c:d5:7f:71:86:35:95:a3:de:3f: c1:92:24:56:b9:6d:fd:02:09:f0:7c:3d:de:af:a0:6d:7a:ee: 6a:cc:51:6f:fe:84:11:af:ce:42:6c:83:91:db:4d:42:31:0e: ea:e5:c9:2f:ba:7b:5d:19:7a:80:0c:66:3e:7b:fb:6a:8c:69: e9:38:8e:e4:13:48:d4:85:fe:a4:d4:6c:1d:21:82:21:cb:6a: b2:e1:10:b2:91:f2:f5:a8:4b:1d:41:71:c6:bd:36:7c:2e:91: 40:dd:36:12:b4:37:1f:29:9b:a8:bd:6e:39:0f:de:8b:77:d6: 0e:aa:00:53:9b:1f:ea:bf:84:79:a8:32:8c:c5:17:36:e1:60: 73:b7:84:89:35:3f:19:fe:23:f1:f7:17:6b:b9:70:a6:9f:f9: 27:53:f5:88:db:0f:2d:e9:e2:df:a2:1f:75:c2:f0:b6:51:c5: 78:1d:39:41:7b:ae:5c:dd:6b:12:80:6f:d8:05:9f:a2:f6:5f: 9c:c3:dc:a2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4 NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI0MTAyMTAy MDMwN1oXDTI1MTAyMTAxMjMwMlowMzExMC8GA1UEAxMoQjU1OTE3Q0MyQzc1REI0 NEVFNkQ1MkNFNDJFRjlEMDM2MDhFNkE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALPY0MdzQ9IwxY4JFq7nKDmRWXjFi1hlkgJBlZCuX4lAB8/MHQ0e oSxqpM87nX53iiZ+Q9Y0ACM9kwFnu7RrybUk2GevtevzaYv0vMMGsFzgJMem9o3e 91Yrre0OG5OS3mGgl8oN/MGzle5SHyjbUh9QXNfvFo/0LMNQ8+xf0z1ea6XRDV7r Eap+r3Q5nKu4Zj9lXzSQknqbm7AZip5s7ii6qqEvJXKibdeNLe4BVWSvdhzzM5LE KPyje2PoeJd85H+jpRsKZ7y3NVQsytNEQdfnM2h1Q1n2Hcte+XJQYSgP9qB/joUc HW1pQVlrvmtUZJxXcEzgAMxwIcAH1NEYQtECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS1WRfMLHXbRO5tUs5C750DYI5qfDAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80ODQvdFZrWHpDeDEyMFR1YlZMT1F1LWRBMkNPYW53LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNL70DANBgkqhkiG9w0BAQsFAAOCAQEACYHbtWA9RjRGx4Mzo5bGLVC9b+uK LXOL2kEvGdmyimz1jVg1Ecyl0M0a/cSZQO0yzGigAhXkqCuYZN2RyNNM1X9xhjWV o94/wZIkVrlt/QIJ8Hw93q+gbXruasxRb/6EEa/OQmyDkdtNQjEO6uXJL7p7XRl6 gAxmPnv7aoxp6TiO5BNI1IX+pNRsHSGCIctqsuEQspHy9ahLHUFxxr02fC6RQN02 ErQ3HymbqL1uOQ/ei3fWDqoAU5sf6r+EeagyjMUXNuFgc7eEiTU/Gf4j8fcXa7lw pp/5J1P1iNsPLeni36IfdcLwtlHFeB05QXuuXN1rEoBv2AWfovZfnMPcog== -----END CERTIFICATE-----Generated at Sun Feb 16 22:15:57 2025 by rpki-client