$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/964/Cbq_JCp8ozpOv8ivdxg3hRmFKis.roa File: Cbq_JCp8ozpOv8ivdxg3hRmFKis.roa (raw, json) Hash identifier: stYZ+H9Zs1sfHTfqa/WpzRVPpu0hVMTuwUILxvtA1aY= Subject key identifier: 09:BA:BF:24:2A:7C:A3:3A:4E:BF:C8:AF:77:18:37:85:19:85:2A:2B Certificate issuer: /CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D Certificate serial: 41 Authority key identifier: 66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Cbq_JCp8ozpOv8ivdxg3hRmFKis.roa Signing time: Mon 30 Sep 2024 01:30:41 +0000 ROA not before: Mon 30 Sep 2024 01:30:41 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 3491 IP address blocks: 203.170.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D Validity Not Before: Sep 30 01:30:41 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=09BABF242A7CA33A4EBFC8AF7718378519852A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:75:f8:cb:6c:99:54:79:ab:6b:91:88:90: e7:3b:f3:cb:0a:2e:17:f1:6d:77:97:94:be:ec:7e: 79:00:d2:c5:ca:0e:c0:97:ef:7f:f6:9e:a7:72:15: 2e:f9:97:67:99:61:e8:ad:4d:ad:1c:72:fc:19:04: f3:c3:3e:19:47:c7:f2:f6:dd:fc:5d:c2:fc:d6:4f: 76:70:aa:1b:c4:fe:fc:17:a1:e7:8e:b0:91:1d:db: 48:bf:74:bd:f9:f0:b1:fd:53:e3:75:5a:89:eb:81: 1e:ec:db:06:cd:fc:d1:9d:d0:42:20:b5:6a:e4:44: 05:47:72:a1:b0:9b:89:fc:56:09:dc:a9:ab:a0:00: 4a:d5:49:87:1d:71:2a:c4:31:2f:5c:74:e3:03:ea: a9:ee:b8:04:63:35:db:46:a2:96:97:43:4d:82:be: f3:5a:ba:95:35:e1:b1:4f:6f:63:f8:e8:cc:99:a0: 5b:82:5e:1b:33:0c:02:f1:eb:47:8c:16:e1:be:fe: f6:f1:d3:d1:f2:69:5a:fb:a8:21:01:6b:8b:2c:6d: 0b:e0:db:7d:5a:b5:cc:f3:b6:19:93:41:24:ee:92: 43:5e:5e:d1:4b:07:82:82:b7:46:32:06:62:88:0f: 93:d7:34:ff:91:f9:8f:b4:a4:78:a8:d8:ac:37:e6: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BA:BF:24:2A:7C:A3:3A:4E:BF:C8:AF:77:18:37:85:19:85:2A:2B X509v3 Authority Key Identifier: keyid:66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Cbq_JCp8ozpOv8ivdxg3hRmFKis.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.170.52.0/22 Signature Algorithm: sha256WithRSAEncryption a6:2f:39:a4:3d:83:63:a4:ce:90:a0:05:0c:17:28:4d:3e:7d: 09:a6:24:9a:e1:a4:6d:92:9c:98:a8:44:63:09:ba:42:96:58: 42:98:42:85:4c:dc:f3:37:e7:39:24:ca:35:82:91:aa:4d:5d: 9e:f5:c0:d1:0a:bb:7f:b6:5c:7b:76:f8:4e:de:09:a4:04:17: ce:1a:64:93:dc:50:77:fe:a6:e9:22:eb:10:7f:09:c6:0a:f8: 63:c2:d8:f6:4c:8f:94:24:5d:df:59:c2:6a:ff:b6:5f:9b:7a: 24:36:f4:22:f7:f7:77:49:87:41:23:8c:a4:b6:62:8f:a1:73: c3:14:3f:ef:f3:a9:0b:60:bd:c4:7a:19:b0:c8:ba:8a:48:d0: 5e:83:9a:6e:7a:0c:f6:52:fb:1b:e1:1d:55:92:54:52:be:c7: 76:82:9b:86:c1:bd:35:d7:0b:6a:9c:32:89:44:d0:2a:19:66: e3:87:5f:3a:20:16:bb:36:08:cd:c5:25:e7:02:6d:aa:d4:68: 54:30:79:b7:c9:03:03:97:5f:c1:d5:65:92:09:c9:76:eb:54: 22:b2:51:92:d1:8a:7f:12:70:84:83:c9:54:d5:9f:85:d7:57: 03:0f:14:dd:fd:fc:ee:ff:a8:f8:b8:18:00:9f:b8:e5:a3:aa: 2f:f3:f9:b0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Njc2 RjY5MTQwNjM1Q0Y0QUQyQTNBOUNGNUVGMjVCQUREMkRDNzJEMB4XDTI0MDkzMDAx MzA0MVoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoMDlCQUJGMjQyQTdDQTMz QTRFQkZDOEFGNzcxODM3ODUxOTg1MkEyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMUtdfjLbJlUeatrkYiQ5zvzywouF/Ftd5eUvux+eQDSxcoOwJfv f/aep3IVLvmXZ5lh6K1NrRxy/BkE88M+GUfH8vbd/F3C/NZPdnCqG8T+/Beh546w kR3bSL90vfnwsf1T43VaieuBHuzbBs380Z3QQiC1auREBUdyobCbifxWCdypq6AA StVJhx1xKsQxL1x04wPqqe64BGM120ailpdDTYK+81q6lTXhsU9vY/jozJmgW4Je GzMMAvHrR4wW4b7+9vHT0fJpWvuoIQFriyxtC+DbfVq1zPO2GZNBJO6SQ15e0UsH goK3RjIGYogPk9c0/5H5j7SkeKjYrDfmzKECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQJur8kKnyjOk6/yK93GDeFGYUqKzAfBgNVHSMEGDAWgBRmdvaRQGNc9K0qOpz1 7yW63S3HLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTY0L1puYjJrVUJqWFBTdEtqcWM5ZThsdXQwdHh5MC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1puYjJrVUJqWFBTdEtqcWM5ZThsdXQw dHh5MC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NjQvQ2JxX0pDcDhvenBPdjhpdmR4ZzNoUm1GS2lzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsuqNDANBgkqhkiG9w0BAQsFAAOCAQEApi85pD2DY6TOkKAFDBcoTT59CaYk muGkbZKcmKhEYwm6QpZYQphChUzc8zfnOSTKNYKRqk1dnvXA0Qq7f7Zce3b4Tt4J pAQXzhpkk9xQd/6m6SLrEH8Jxgr4Y8LY9kyPlCRd31nCav+2X5t6JDb0Ivf3d0mH QSOMpLZij6FzwxQ/7/OpC2C9xHoZsMi6ikjQXoOabnoM9lL7G+EdVZJUUr7HdoKb hsG9NdcLapwyiUTQKhlm44dfOiAWuzYIzcUl5wJtqtRoVDB5t8kDA5dfwdVlkgnJ dutUIrJRktGKfxJwhIPJVNWfhddXAw8U3f387v+o+LgYAJ+45aOqL/P5sA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:12:11 2025 by rpki-client