$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/T_COIc0ePBPeEQv1OXiFVp5zwMk.roa File: T_COIc0ePBPeEQv1OXiFVp5zwMk.roa (raw, json) Hash identifier: GDnLblHPcHwAy18Nv2w9XurkQ6H5OYSqBxjPw3pe5EM= Subject key identifier: 4F:F0:8E:21:CD:1E:3C:13:DE:11:0B:F5:39:78:85:56:9E:73:C0:C9 Certificate issuer: /CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Certificate serial: 10 Authority key identifier: 8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/T_COIc0ePBPeEQv1OXiFVp5zwMk.roa Signing time: Sat 01 Jun 2024 06:45:15 +0000 ROA not before: Sat 01 Jun 2024 06:45:15 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 131965 IP address blocks: 157.112.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Validity Not Before: Jun 1 06:45:15 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=4FF08E21CD1E3C13DE110BF5397885569E73C0C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:99:b0:22:b4:17:7c:06:b3:64:a7:6a:59:f9: 3b:2b:20:15:8c:25:4b:42:27:0b:a5:50:ea:bd:8e: 3e:23:b9:75:41:93:53:c9:92:b7:1a:98:bd:71:15: 4b:72:03:c4:22:9d:d5:14:e2:b0:d8:35:57:10:8d: f4:57:a8:3c:1d:44:24:09:98:54:b3:fb:93:5d:7b: a0:cc:f7:cd:bf:90:4e:59:80:c3:dd:a3:ea:54:80: 26:cd:f0:91:70:ec:a9:34:74:6d:b4:4f:66:b3:ce: 32:48:59:18:34:89:bb:29:1a:b9:f6:34:a6:4f:6d: 38:64:17:6b:20:33:02:2b:61:1b:3a:30:aa:ff:a1: f4:ce:98:e0:4b:67:0e:d8:4b:39:0d:d5:24:6d:11: 37:bb:ab:92:5a:75:af:43:20:8b:91:27:d9:e2:da: 27:44:19:58:7e:95:c4:bf:7d:b2:08:75:c6:b2:4f: 78:f1:8c:7a:ad:1b:b3:65:2a:87:cf:5c:1b:9a:b4: 24:1c:d0:d3:59:39:2a:53:a9:22:ad:c5:3f:b3:7b: cf:c2:c1:d4:09:49:03:33:5a:15:1e:50:78:49:81: ff:1f:bc:02:cf:d0:54:1d:b4:9b:c9:ae:bb:a3:09: f3:e4:bc:b5:19:3f:f1:fa:d7:89:c7:ba:fa:43:d2: b2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F0:8E:21:CD:1E:3C:13:DE:11:0B:F5:39:78:85:56:9E:73:C0:C9 X509v3 Authority Key Identifier: keyid:8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/T_COIc0ePBPeEQv1OXiFVp5zwMk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.112.144.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:18:0c:1d:e0:11:3c:4a:a8:f1:6c:b4:58:3e:15:49:1d:5d: 54:8a:4c:ad:4e:38:4e:c3:75:00:ab:70:ab:a1:92:b2:e7:2f: b3:e0:b6:11:25:0b:0d:49:4b:9f:cc:12:2e:56:b9:97:43:f7: 1e:a9:c2:eb:10:47:46:60:84:f2:7e:26:d3:c8:07:12:f4:ac: 21:aa:7f:13:7f:c3:1a:48:33:da:12:8c:f1:af:c7:e1:b3:92: 41:19:d3:f9:57:f1:4e:b7:dc:d3:9d:b2:2d:d8:79:ad:c6:77: 0a:59:13:d5:97:de:c6:20:9a:0c:dd:f2:aa:5a:8c:f9:1d:d1: 39:6e:d8:27:7c:6e:8b:4d:44:04:5d:30:5d:ca:7f:8b:f7:9a: a0:cb:78:39:c4:71:8a:e6:fd:53:9e:aa:0a:d1:c4:5a:31:5f: 02:61:c9:41:ed:88:31:35:27:fb:2f:00:25:f2:72:e4:41:0f: 1f:03:45:94:56:fc:a7:4a:4d:24:c9:5e:dd:88:8c:11:18:4a: 51:71:d2:b3:ed:31:26:1c:4e:82:a6:47:41:ad:4f:b1:7f:0e: 77:3a:f2:1c:22:93:05:a3:61:ab:59:50:fa:18:5c:a1:0d:11: af:69:7f:b3:c1:24:b2:b8:9c:c0:81:04:b0:b7:07:ae:27:47: 69:8a:1b:4c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RTM2 REU3NkFFMUIyNTlEMTJGNTRFRUI5QzZCRkNGMERFNDUzQzA0MB4XDTI0MDYwMTA2 NDUxNVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoNEZGMDhFMjFDRDFFM0Mx M0RFMTEwQkY1Mzk3ODg1NTY5RTczQzBDOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOGZsCK0F3wGs2Snaln5OysgFYwlS0InC6VQ6r2OPiO5dUGTU8mS txqYvXEVS3IDxCKd1RTisNg1VxCN9FeoPB1EJAmYVLP7k117oMz3zb+QTlmAw92j 6lSAJs3wkXDsqTR0bbRPZrPOMkhZGDSJuykaufY0pk9tOGQXayAzAithGzowqv+h 9M6Y4EtnDthLOQ3VJG0RN7urklp1r0Mgi5En2eLaJ0QZWH6VxL99sgh1xrJPePGM eq0bs2Uqh89cG5q0JBzQ01k5KlOpIq3FP7N7z8LB1AlJAzNaFR5QeEmB/x+8As/Q VB20m8muu6MJ8+S8tRk/8frXice6+kPSskECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRP8I4hzR48E94RC/U5eIVWnnPAyTAfBgNVHSMEGDAWgBSONt52rhslnRL1Tuuc a/zw3kU8BDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41RlBBUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41 RlBBUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvVF9DT0ljMGVQQlBlRVF2MU9YaUZWcDV6d01rLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ1wkDANBgkqhkiG9w0BAQsFAAOCAQEADBgMHeARPEqo8Wy0WD4VSR1dVIpM rU44TsN1AKtwq6GSsucvs+C2ESULDUlLn8wSLla5l0P3HqnC6xBHRmCE8n4m08gH EvSsIap/E3/DGkgz2hKM8a/H4bOSQRnT+VfxTrfc052yLdh5rcZ3ClkT1ZfexiCa DN3yqlqM+R3ROW7YJ3xui01EBF0wXcp/i/eaoMt4OcRxiub9U56qCtHEWjFfAmHJ Qe2IMTUn+y8AJfJy5EEPHwNFlFb8p0pNJMle3YiMERhKUXHSs+0xJhxOgqZHQa1P sX8OdzryHCKTBaNhq1lQ+hhcoQ0Rr2l/s8EksricwIEEsLcHridHaYobTA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:17:50 2025 by rpki-client