$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/x4R9BN7zS6iOjQ-tGMMHornbkBI.roa File: x4R9BN7zS6iOjQ-tGMMHornbkBI.roa (raw, json) Hash identifier: wid4bFW3qa4KmdXMsIX+CnA/4qDgpalQwiwN6UVtwKM= Subject key identifier: C7:84:7D:04:DE:F3:4B:A8:8E:8D:0F:AD:18:C3:07:A2:B9:DB:90:12 Certificate issuer: /CN=1933DE3EF96450CA120C77A5EA826434DD149549 Certificate serial: 41 Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/x4R9BN7zS6iOjQ-tGMMHornbkBI.roa Signing time: Tue 31 Dec 2024 01:30:53 +0000 ROA not before: Tue 31 Dec 2024 01:30:53 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 17683 IP address blocks: 202.227.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549 Validity Not Before: Dec 31 01:30:53 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=C7847D04DEF34BA88E8D0FAD18C307A2B9DB9012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:e8:1c:86:d6:ae:87:f3:5a:f3:46:9a:89: 16:e8:3f:d4:21:a6:9f:66:54:17:76:50:f4:de:4d: 07:37:b6:07:6c:23:f5:74:b3:a5:9e:1b:48:dd:df: 11:9d:7f:88:1f:58:41:bc:ee:d3:46:c5:2d:48:88: 60:a6:8b:d4:3c:0d:ee:be:ca:1a:c2:84:a0:e8:8a: 80:65:b7:34:c2:28:b1:59:57:9a:54:fe:16:a8:4f: 1d:56:80:3f:33:62:cc:5d:43:d6:c6:c2:af:bc:73: d6:d0:a6:b7:17:b1:f5:53:d1:c3:7a:1e:c6:9e:85: 30:ea:c5:9e:95:4a:dd:c7:e2:19:84:73:36:a6:b3: 86:f2:61:62:b3:d8:a4:44:86:25:c0:45:f0:17:c1: 12:57:75:e1:ec:17:e2:e0:96:db:da:1c:2d:6f:9c: 12:89:91:0e:bb:6f:f8:43:f4:aa:38:6d:0b:e9:e6: b7:cb:42:cf:73:da:fb:a9:dc:f5:c9:c9:04:a5:f3: 52:c5:4b:30:9b:7f:d8:6d:90:bd:11:84:17:9e:64: 41:eb:69:82:c7:97:c6:81:87:2c:71:07:0c:2f:81: 0d:bd:a5:d6:2e:2f:d9:de:a0:0f:e1:c4:9c:6b:c3: be:59:ff:10:2b:34:06:88:7f:ea:e2:5b:cc:43:01: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:84:7D:04:DE:F3:4B:A8:8E:8D:0F:AD:18:C3:07:A2:B9:DB:90:12 X509v3 Authority Key Identifier: keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/x4R9BN7zS6iOjQ-tGMMHornbkBI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.227.96.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:49:e8:9c:87:02:e0:ea:83:93:74:9c:e8:bd:e5:77:e5:62: ef:55:d5:27:84:21:a8:17:5d:29:5e:f3:da:63:ef:9b:09:93: 59:6c:36:b8:53:55:2d:cd:97:42:50:48:64:66:48:44:23:24: 46:e1:77:0d:4a:b3:bc:00:d0:61:ae:40:70:1e:64:95:e2:31: f5:3e:d8:c8:99:3a:25:b6:0c:8c:f7:45:26:e6:d6:95:2d:d6: 9a:88:63:2f:c0:8a:3f:bf:b6:81:dc:c8:f8:9d:9e:c8:69:fd: 2e:d4:fd:20:73:2a:24:e8:98:dd:18:76:09:43:18:81:43:f9: 7e:b6:d2:0f:cf:cb:cb:be:b4:33:d4:98:41:69:ef:e9:70:cf: ff:35:fa:40:1f:df:23:cb:6c:51:4c:35:da:8a:56:00:2c:ff: 13:1b:59:a1:a6:85:ae:b5:17:1b:84:01:f1:79:0c:cb:51:bd: e6:74:8f:4c:0c:8d:da:04:f5:2a:37:ed:f9:78:58:a6:d7:de: 18:22:24:d8:5b:49:a2:af:9e:98:d4:25:1a:f1:47:7f:b5:14: 0a:1a:2e:d4:7e:2b:36:7d:b7:64:92:29:68:b1:e4:c3:52:f5: b4:6e:65:68:e5:15:22:b1:63:6d:1e:74:72:d6:a0:1b:d3:46: 9f:f2:75:08 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOTMz REUzRUY5NjQ1MENBMTIwQzc3QTVFQTgyNjQzNEREMTQ5NTQ5MB4XDTI0MTIzMTAx MzA1M1oXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoQzc4NDdEMDRERUYzNEJB ODhFOEQwRkFEMThDMzA3QTJCOURCOTAxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMGq6ByG1q6H81rzRpqJFug/1CGmn2ZUF3ZQ9N5NBze2B2wj9XSz pZ4bSN3fEZ1/iB9YQbzu00bFLUiIYKaL1DwN7r7KGsKEoOiKgGW3NMIosVlXmlT+ FqhPHVaAPzNizF1D1sbCr7xz1tCmtxex9VPRw3oexp6FMOrFnpVK3cfiGYRzNqaz hvJhYrPYpESGJcBF8BfBEld14ewX4uCW29ocLW+cEomRDrtv+EP0qjhtC+nmt8tC z3Pa+6nc9cnJBKXzUsVLMJt/2G2QvRGEF55kQetpgseXxoGHLHEHDC+BDb2l1i4v 2d6gD+HEnGvDvln/ECs0Boh/6uJbzEMBT+cCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTHhH0E3vNLqI6ND60YwweiuduQEjAfBgNVHSMEGDAWgBQZM94++WRQyhIMd6Xq gmQ03RSVSTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODc3L0dUUGVQdmxrVU1vU0RIZWw2b0prTk4wVWxVay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0dUUGVQdmxrVU1vU0RIZWw2b0prTk4w VWxVay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NzcveDRSOUJON3pTNmlPalEtdEdNTUhvcm5ia0JJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMrjYDANBgkqhkiG9w0BAQsFAAOCAQEAKknonIcC4OqDk3Sc6L3ld+Vi71XV J4QhqBddKV7z2mPvmwmTWWw2uFNVLc2XQlBIZGZIRCMkRuF3DUqzvADQYa5AcB5k leIx9T7YyJk6JbYMjPdFJubWlS3WmohjL8CKP7+2gdzI+J2eyGn9LtT9IHMqJOiY 3Rh2CUMYgUP5frbSD8/Ly760M9SYQWnv6XDP/zX6QB/fI8tsUUw12opWACz/ExtZ oaaFrrUXG4QB8XkMy1G95nSPTAyN2gT1Kjft+XhYptfeGCIk2FtJoq+emNQlGvFH f7UUChou1H4rNn23ZJIpaLHkw1L1tG5laOUVIrFjbR50ctagG9NGn/J1CA== -----END CERTIFICATE-----Generated at Wed Feb 19 22:42:20 2025 by rpki-client