$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/GCCwT7cKhj6prVZ0p2tk6II__n4.roa File: GCCwT7cKhj6prVZ0p2tk6II__n4.roa (raw, json) Hash identifier: h3gU3F8+Cug0WI0jR6+RiZErX/181ydG5sb4f3kHX0A= Subject key identifier: 18:20:B0:4F:B7:0A:86:3E:A9:AD:56:74:A7:6B:64:E8:82:3F:FE:7E Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Certificate serial: 22 Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/GCCwT7cKhj6prVZ0p2tk6II__n4.roa Signing time: Sun 30 Jun 2024 01:32:38 +0000 ROA not before: Sun 30 Jun 2024 01:32:38 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 38628 IP address blocks: 219.100.100.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Validity Not Before: Jun 30 01:32:38 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=1820B04FB70A863EA9AD5674A76B64E8823FFE7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:35:e0:66:28:7b:ed:6e:4f:d3:e9:b5:fa:a2: a5:19:9c:fa:a3:0e:17:1e:02:2d:66:0d:61:a8:a5: d9:f8:9b:7c:52:78:24:92:01:b1:8a:84:96:44:7e: 67:4b:fe:12:d6:2b:4a:ed:d7:61:a1:13:7d:67:4f: ff:82:86:8c:cb:c3:c6:0d:a4:11:7a:30:b8:23:61: 9d:be:1b:09:76:78:4c:5d:0d:4b:01:e3:c5:9c:da: 07:27:fd:2f:02:fa:1e:78:76:ad:2a:a9:59:39:08: 9b:6a:55:8a:f5:9c:42:e0:67:80:90:dd:2f:b5:fa: dd:04:59:12:70:a9:18:c0:13:98:cc:33:f8:5e:35: f6:9c:ea:d9:60:6d:c1:12:ad:dc:37:9b:6a:e5:00: cf:a5:d4:05:42:49:9c:a6:f6:bc:b7:5a:08:1c:d1: 52:a0:ea:4d:b1:a7:82:ef:f9:d8:01:72:16:4d:26: 83:44:3b:59:33:af:a4:17:56:14:c0:16:35:b1:8c: f3:b7:3f:c1:b9:41:7b:79:ee:0f:7d:95:ab:a8:38: b4:62:fc:8b:fb:e3:c4:87:c4:d8:46:ee:a3:51:4a: 87:79:08:ad:62:d3:7d:3f:17:41:29:eb:64:8b:7d: 54:83:0e:d8:cb:2f:ea:7f:b7:2e:c7:dc:d3:de:7a: 28:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:20:B0:4F:B7:0A:86:3E:A9:AD:56:74:A7:6B:64:E8:82:3F:FE:7E X509v3 Authority Key Identifier: keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/GCCwT7cKhj6prVZ0p2tk6II__n4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.100.0/22 Signature Algorithm: sha256WithRSAEncryption 05:af:02:ee:91:ab:ab:88:6d:42:1a:14:5d:a6:76:7a:e0:56: 3b:f9:8b:93:50:ef:8e:3b:2b:a6:b3:f5:aa:d8:ea:d0:fe:59: 50:4a:51:dd:7f:a4:ba:e2:b5:06:93:cd:0c:04:8c:63:dc:3d: cc:1c:4a:f7:20:55:4d:42:74:c0:92:f9:2f:8c:1e:c8:ab:cb: 99:66:82:4f:30:c5:ac:14:16:12:36:d9:d4:f9:87:7c:fe:6c: e9:68:da:39:54:3d:cf:c6:b8:05:59:2b:22:a6:72:04:d8:21: 5f:c8:1e:c7:b7:22:11:df:fd:6c:cc:6c:6c:f2:fa:73:81:40: 36:de:83:77:ad:4d:cb:de:1a:bc:2e:2b:ae:dd:13:96:b4:f1: 62:21:0b:f4:df:3c:95:a2:8d:5e:20:2d:f5:8f:2e:ae:e1:74: 60:84:7a:a9:01:3d:39:38:04:d4:dd:e1:e1:5f:61:ed:a0:04: 9a:53:29:6a:70:59:71:66:6c:96:78:b8:87:52:a8:13:5b:b5: dc:50:d8:5d:75:d1:d1:f4:31:c3:3c:b5:23:b4:25:14:8e:a8: 1f:74:d2:b3:7c:6f:26:63:99:20:88:c0:f5:cb:45:79:85:07: eb:f0:03:ee:c6:c2:a2:b3:62:94:fd:b3:89:8b:50:e3:d9:b9: 7d:4e:84:5c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5 NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI0MDYzMDAx MzIzOFoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoMTgyMEIwNEZCNzBBODYz RUE5QUQ1Njc0QTc2QjY0RTg4MjNGRkU3RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOw14GYoe+1uT9PptfqipRmc+qMOFx4CLWYNYail2fibfFJ4JJIB sYqElkR+Z0v+EtYrSu3XYaETfWdP/4KGjMvDxg2kEXowuCNhnb4bCXZ4TF0NSwHj xZzaByf9LwL6Hnh2rSqpWTkIm2pVivWcQuBngJDdL7X63QRZEnCpGMATmMwz+F41 9pzq2WBtwRKt3DebauUAz6XUBUJJnKb2vLdaCBzRUqDqTbGngu/52AFyFk0mg0Q7 WTOvpBdWFMAWNbGM87c/wblBe3nuD32Vq6g4tGL8i/vjxIfE2Ebuo1FKh3kIrWLT fT8XQSnrZIt9VIMO2Msv6n+3Lsfc0956KK0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQYILBPtwqGPqmtVnSna2Togj/+fjAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ 0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NDgvR0NDd1Q3Y0toajZwclZaMHAydGs2SUlfX240LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAttkZDANBgkqhkiG9w0BAQsFAAOCAQEABa8C7pGrq4htQhoUXaZ2euBWO/mL k1DvjjsrprP1qtjq0P5ZUEpR3X+kuuK1BpPNDASMY9w9zBxK9yBVTUJ0wJL5L4we yKvLmWaCTzDFrBQWEjbZ1PmHfP5s6WjaOVQ9z8a4BVkrIqZyBNghX8gex7ciEd/9 bMxsbPL6c4FANt6Dd61Ny94avC4rrt0TlrTxYiEL9N88laKNXiAt9Y8uruF0YIR6 qQE9OTgE1N3h4V9h7aAEmlMpanBZcWZslni4h1KoE1u13FDYXXXR0fQxwzy1I7Ql FI6oH3TSs3xvJmOZIIjA9ctFeYUH6/AD7sbCorNilP2ziYtQ49m5fU6EXA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:10:21 2025 by rpki-client