$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/RPCxhNmaf_etOKU2i_d8m3SoMWc.roa File: RPCxhNmaf_etOKU2i_d8m3SoMWc.roa (raw, json) Hash identifier: 0h6AgCVhsAwmCm7gQpUqs3zwykTdKBo/Rto2svLQ0YE= Subject key identifier: 44:F0:B1:84:D9:9A:7F:F7:AD:38:A5:36:8B:F7:7C:9B:74:A8:31:67 Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Certificate serial: 80 Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/RPCxhNmaf_etOKU2i_d8m3SoMWc.roa Signing time: Sat 31 Aug 2024 01:37:23 +0000 ROA not before: Sat 31 Aug 2024 01:37:23 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 4685 IP address blocks: 220.150.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Validity Not Before: Aug 31 01:37:23 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=44F0B184D99A7FF7AD38A5368BF77C9B74A83167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:f0:b9:a6:2b:cd:5f:62:8d:e6:47:06:51: b4:d3:20:94:e8:06:57:4c:22:3f:9a:5e:08:5a:36: 86:fb:95:f3:65:d8:b0:ae:2f:ea:a4:32:86:86:e0: af:64:ab:59:20:0c:59:a7:97:7e:d0:57:93:06:d4: ef:b4:4c:50:2c:f6:9b:db:ac:34:5b:aa:7b:89:3e: 4e:3d:12:68:90:64:66:76:a1:21:79:04:52:16:91: d0:2d:53:26:fa:1b:54:12:a5:ad:8b:ff:0b:69:41: f2:12:3a:df:d4:b1:a0:29:49:00:8e:c5:f7:ed:b0: e3:80:5f:19:96:a0:f8:ea:01:13:cc:88:dd:c3:63: 23:4b:c4:65:5d:8c:de:e4:f4:5c:8a:89:06:3a:fe: 31:34:0d:da:42:45:db:7c:cf:c2:05:48:f8:29:6a: f2:39:17:d2:51:e1:77:5f:92:5e:a3:1f:39:94:56: 1e:ed:93:af:74:77:3f:92:82:b9:de:8a:8a:40:e4: a8:8c:a1:36:71:a9:eb:b9:fc:b8:bc:91:e0:4c:35: 4e:6a:75:b3:57:40:07:2c:7e:d7:55:24:34:c0:7a: 4b:eb:97:72:46:56:39:ed:2b:64:b9:8f:12:2d:07: fe:a0:cf:8e:60:57:42:dc:d4:b7:84:fe:17:44:d8: 87:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F0:B1:84:D9:9A:7F:F7:AD:38:A5:36:8B:F7:7C:9B:74:A8:31:67 X509v3 Authority Key Identifier: keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/RPCxhNmaf_etOKU2i_d8m3SoMWc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.150.128.0/18 Signature Algorithm: sha256WithRSAEncryption 70:9a:41:0b:a5:25:9a:f3:11:77:5d:dd:ba:3a:db:14:33:a8: be:90:bb:90:6b:bf:fa:ab:82:5b:9e:dc:fa:01:ad:56:cb:05: 49:f9:78:48:29:e9:79:d3:d4:e7:48:85:b9:e8:6f:20:a3:2c: e7:54:22:56:95:6f:2d:0b:94:87:67:d9:97:12:e9:a1:28:8b: c8:43:a9:76:a6:18:59:8a:3f:c2:11:76:8d:32:c5:14:88:e2: 55:c3:fa:4a:6f:dd:d3:7e:11:6e:0e:a6:de:71:45:8c:94:e6: 5a:25:07:a0:be:a8:7f:5c:d6:c8:99:e5:ce:08:3b:86:7e:54: 7d:79:04:da:91:42:ba:48:6f:76:13:e0:22:d9:ef:63:59:97: 03:53:80:c8:78:08:db:12:23:e2:e3:b5:3b:40:df:86:00:5f: 1b:78:2c:64:c8:f2:b0:4f:69:fa:e0:92:5c:8b:8a:d9:5f:59: a5:99:29:34:14:ce:ae:52:b0:ed:3d:25:8e:1b:07:c9:a5:c6: 94:b9:10:92:01:28:69:89:eb:45:bb:fa:e2:1d:8a:0d:54:39: 58:c9:5a:f2:9b:03:4b:23:9d:4f:32:35:b7:b4:95:56:e1:17: bb:25:db:84:95:cd:da:a7:1f:96:74:76:8a:2d:a4:32:c4:a5: 33:64:27:55 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNDA4MzEw MTM3MjNaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ0RjBCMTg0RDk5QTdG RjdBRDM4QTUzNjhCRjc3QzlCNzRBODMxNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyxvC5pivNX2KN5kcGUbTTIJToBldMIj+aXghaNob7lfNl2LCu L+qkMoaG4K9kq1kgDFmnl37QV5MG1O+0TFAs9pvbrDRbqnuJPk49EmiQZGZ2oSF5 BFIWkdAtUyb6G1QSpa2L/wtpQfISOt/UsaApSQCOxfftsOOAXxmWoPjqARPMiN3D YyNLxGVdjN7k9FyKiQY6/jE0DdpCRdt8z8IFSPgpavI5F9JR4Xdfkl6jHzmUVh7t k690dz+SgrneiopA5KiMoTZxqeu5/Li8keBMNU5qdbNXQAcsftdVJDTAekvrl3JG VjntK2S5jxItB/6gz45gV0Lc1LeE/hdE2IclAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQURPCxhNmaf/etOKU2i/d8m3SoMWcwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51 FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MC9SUEN4aE5tYWZfZXRPS1UyaV9kOG0zU29NV2Mucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQG3JaAMA0GCSqGSIb3DQEBCwUAA4IBAQBwmkELpSWa8xF3Xd26OtsUM6i+kLuQ a7/6q4Jbntz6Aa1WywVJ+XhIKel509TnSIW56G8goyznVCJWlW8tC5SHZ9mXEumh KIvIQ6l2phhZij/CEXaNMsUUiOJVw/pKb93TfhFuDqbecUWMlOZaJQegvqh/XNbI meXOCDuGflR9eQTakUK6SG92E+Ai2e9jWZcDU4DIeAjbEiPi47U7QN+GAF8beCxk yPKwT2n64JJci4rZX1mlmSk0FM6uUrDtPSWOGwfJpcaUuRCSAShpietFu/riHYoN VDlYyVrymwNLI51PMjW3tJVW4Re7JduElc3apx+WdHaKLaQyxKUzZCdV -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:12 2025 by rpki-client