$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/ScCc6QjTkdl0woH4DMwgM211Cdc.roa File: ScCc6QjTkdl0woH4DMwgM211Cdc.roa (raw, json) Hash identifier: 0+z/Ef4Q22fTkMKqYorohz7p0JqR2uzuzHV6lAX8zyc= Subject key identifier: 49:C0:9C:E9:08:D3:91:D9:74:C2:81:F8:0C:CC:20:33:6D:75:09:D7 Certificate issuer: /CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Certificate serial: 11 Authority key identifier: 8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/ScCc6QjTkdl0woH4DMwgM211Cdc.roa Signing time: Sat 01 Jun 2024 06:45:15 +0000 ROA not before: Sat 01 Jun 2024 06:45:15 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 131965 IP address blocks: 157.112.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Validity Not Before: Jun 1 06:45:15 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=49C09CE908D391D974C281F80CCC20336D7509D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a2:1e:88:78:01:57:55:74:ea:82:2e:35:ec: b0:49:15:65:08:dd:81:b2:eb:49:b9:6b:1f:d6:f4: 78:18:77:5a:ac:c5:c6:a3:3f:10:a8:f5:d1:8d:12: 8d:1e:3d:f6:59:ac:ce:e9:ed:96:25:f8:44:51:6f: c1:1b:2b:d6:f0:43:cd:b3:f5:48:a6:26:b4:96:e4: 25:39:22:58:3c:1a:36:2c:8c:d4:60:c6:d9:6a:0a: 13:7e:35:40:7a:72:7f:8c:79:f6:ec:8b:ec:b6:7b: 6a:4a:a1:f2:96:2f:cb:56:a5:0b:ca:fd:28:cf:3a: ce:1d:cc:14:ce:4b:ab:10:80:1a:f1:05:8d:23:33: cd:12:96:98:4c:70:01:b7:ab:88:68:00:21:7f:1e: a3:d2:31:c8:3f:3c:72:26:64:1d:fa:ab:66:07:27: fa:1f:ba:4f:7a:06:76:50:15:8d:0c:5b:07:b2:43: f4:e2:81:8d:56:a8:38:4b:26:cf:8a:6a:33:da:b0: f9:b2:01:1d:b1:0f:e0:d4:df:d4:83:bf:74:64:09: 7c:fa:3b:7e:64:e4:10:53:15:79:44:81:12:9d:1f: bd:d8:2f:68:5b:46:05:96:7a:ce:c3:73:98:67:87: 2b:c0:22:52:5d:fb:e6:3f:f8:d1:f7:ac:f7:b2:87: bb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C0:9C:E9:08:D3:91:D9:74:C2:81:F8:0C:CC:20:33:6D:75:09:D7 X509v3 Authority Key Identifier: keyid:8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/ScCc6QjTkdl0woH4DMwgM211Cdc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.112.176.0/20 Signature Algorithm: sha256WithRSAEncryption 8a:50:c4:63:70:80:56:3a:41:d2:b6:29:a6:36:4b:70:29:d5: 18:e1:0a:11:2b:2a:13:a0:d0:49:a5:3a:b4:b6:90:25:85:86: a4:47:93:d9:db:ee:49:64:ce:d6:66:d3:c3:8e:3f:b5:0d:d7: 3a:a1:82:4e:1a:33:b7:4e:6c:a8:b3:f5:c7:62:af:ca:07:6d: 54:e5:b1:57:e7:78:4e:f9:71:8a:10:d9:2b:cb:72:97:82:09: c7:be:da:f4:e2:b7:60:01:06:05:a2:cb:8a:90:e4:a9:be:fe: d5:69:2a:ab:21:8f:73:8f:f6:bb:f3:cb:bd:a0:ed:22:ca:57: c2:ca:56:f7:3b:e3:ed:e0:b9:84:83:d2:21:b9:dd:08:1e:a0: 31:05:56:3d:ab:4f:b7:73:f6:1a:40:50:e9:a6:b4:50:99:77: d0:fd:39:f8:c7:73:47:1f:4f:9c:56:61:7a:cb:98:48:aa:f2: 9d:1e:97:e5:01:f3:f9:0a:6e:ac:b7:64:62:81:cd:39:6f:ef: ff:ea:00:db:e7:a6:b3:47:8e:38:86:96:8a:c3:33:42:dc:57: 1f:b0:af:e1:69:b0:5e:2b:7f:d9:15:0c:15:4a:87:30:af:3f: 01:c1:37:22:6d:a3:08:7e:a8:27:51:7a:5f:6a:b1:0b:03:36: 3e:b1:e7:2a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RTM2 REU3NkFFMUIyNTlEMTJGNTRFRUI5QzZCRkNGMERFNDUzQzA0MB4XDTI0MDYwMTA2 NDUxNVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoNDlDMDlDRTkwOEQzOTFE OTc0QzI4MUY4MENDQzIwMzM2RDc1MDlENzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO6iHoh4AVdVdOqCLjXssEkVZQjdgbLrSblrH9b0eBh3WqzFxqM/ EKj10Y0SjR499lmszuntliX4RFFvwRsr1vBDzbP1SKYmtJbkJTkiWDwaNiyM1GDG 2WoKE341QHpyf4x59uyL7LZ7akqh8pYvy1alC8r9KM86zh3MFM5LqxCAGvEFjSMz zRKWmExwAberiGgAIX8eo9IxyD88ciZkHfqrZgcn+h+6T3oGdlAVjQxbB7JD9OKB jVaoOEsmz4pqM9qw+bIBHbEP4NTf1IO/dGQJfPo7fmTkEFMVeUSBEp0fvdgvaFtG BZZ6zsNzmGeHK8AiUl375j/40fes97KHu3sCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRJwJzpCNOR2XTCgfgMzCAzbXUJ1zAfBgNVHSMEGDAWgBSONt52rhslnRL1Tuuc a/zw3kU8BDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41RlBBUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41 RlBBUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvU2NDYzZRalRrZGwwd29INERNd2dNMjExQ2RjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ1wsDANBgkqhkiG9w0BAQsFAAOCAQEAilDEY3CAVjpB0rYppjZLcCnVGOEK ESsqE6DQSaU6tLaQJYWGpEeT2dvuSWTO1mbTw44/tQ3XOqGCThozt05sqLP1x2Kv ygdtVOWxV+d4TvlxihDZK8tyl4IJx77a9OK3YAEGBaLLipDkqb7+1WkqqyGPc4/2 u/PLvaDtIspXwspW9zvj7eC5hIPSIbndCB6gMQVWPatPt3P2GkBQ6aa0UJl30P05 +MdzRx9PnFZhesuYSKrynR6X5QHz+QpurLdkYoHNOW/v/+oA2+ems0eOOIaWisMz QtxXH7Cv4WmwXit/2RUMFUqHMK8/AcE3Im2jCH6oJ1F6X2qxCwM2PrHnKg== -----END CERTIFICATE-----Generated at Sun Feb 16 22:26:08 2025 by rpki-client