$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/zAnxaBqqOz2v0GvOru_-EhSvcdg.roa File: zAnxaBqqOz2v0GvOru_-EhSvcdg.roa (raw, json) Hash identifier: V0Zsm1Bhrp4WE4N30BwTJ2l7BFj38/b6TEiLYYo9gpQ= Subject key identifier: CC:09:F1:68:1A:AA:3B:3D:AF:D0:6B:CE:AE:EF:FE:12:14:AF:71:D8 Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11 Certificate serial: 48 Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/zAnxaBqqOz2v0GvOru_-EhSvcdg.roa Signing time: Fri 11 Oct 2024 08:23:55 +0000 ROA not before: Fri 11 Oct 2024 08:23:55 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 2515 IP address blocks: 202.1.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11 Validity Not Before: Oct 11 08:23:55 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=CC09F1681AAA3B3DAFD06BCEAEEFFE1214AF71D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:a7:0d:87:08:7d:44:bb:eb:8d:ff:0f:fb: 30:8a:b2:58:98:00:90:e6:4e:0a:a2:70:f8:a0:f8: e9:76:db:a8:7b:63:b1:8e:81:01:81:1d:10:54:d7: a2:3f:2f:57:3a:9f:4d:ad:67:c7:83:5e:05:db:04: 16:9d:50:54:9a:ec:f0:6a:77:30:e2:d0:93:7a:ad: 49:3c:71:90:77:6a:7f:94:6d:5f:5e:fe:dc:88:a0: d8:c1:29:ec:68:37:45:01:9a:2a:2d:35:69:c4:94: 1c:78:1a:04:22:35:f6:4b:cb:8c:2c:18:f9:ea:c7: 5c:0e:b3:18:7d:8b:e2:e9:39:e2:ca:60:c6:87:aa: 5c:e7:63:09:68:33:dc:2e:c9:a2:14:b0:4c:c4:a0: fd:b2:21:7c:cb:7b:cd:bf:58:df:16:22:ca:98:61: ea:ca:47:92:91:c1:06:d2:56:48:e1:fe:29:29:0a: 30:08:82:3f:a0:24:da:f8:a4:40:ac:3c:3f:d0:ad: 99:e1:81:77:5c:a7:ca:33:da:2d:40:72:d1:9e:d5: 61:0a:52:8f:03:fd:d3:10:d9:99:b0:89:d9:54:74: c7:46:41:bf:2f:f0:43:21:40:aa:84:3c:ab:71:e5: 91:39:c2:b6:28:7a:f9:57:98:26:e4:5f:1d:54:df: 2c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:09:F1:68:1A:AA:3B:3D:AF:D0:6B:CE:AE:EF:FE:12:14:AF:71:D8 X509v3 Authority Key Identifier: keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/zAnxaBqqOz2v0GvOru_-EhSvcdg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.1.213.0/24 Signature Algorithm: sha256WithRSAEncryption 93:b8:69:08:8a:17:a6:28:b9:5b:dc:3c:62:07:79:07:9a:a9: 68:85:65:ae:4c:27:55:93:cd:15:48:04:7c:7a:b8:d3:31:b1: dd:a3:0e:fc:f3:27:e5:bd:b6:71:db:90:b1:9f:ef:68:95:37: f2:4e:cf:27:a4:f2:f2:58:e8:5c:14:97:ab:c6:7b:ca:92:a7: e0:e7:21:d8:42:2a:d3:7f:4c:a1:aa:b5:0c:87:b2:b9:4b:db: ce:82:ba:8f:68:24:8e:30:2b:a8:ba:7b:79:72:de:f9:53:b4: 5d:b9:b6:37:9f:98:c5:fc:4f:8d:7e:0f:65:26:5e:85:72:bb: c5:4c:41:9e:b8:cf:2c:58:2b:77:1c:39:57:50:c5:9b:51:ec: 09:87:14:f4:ad:b7:94:0e:81:ea:37:8c:9e:7e:26:76:4f:4a: b2:d9:51:2e:f5:9b:74:35:96:22:b5:96:ba:4c:76:88:83:3c: 96:41:f7:9a:7e:f5:2a:e5:af:de:8a:5b:97:e7:7d:c9:00:cd: 67:6e:bd:02:15:77:d2:a1:ca:fd:7e:0b:5f:4f:5e:4c:cc:70: 53:c8:d5:fa:0d:bf:8b:86:46:1f:99:83:72:e3:b0:19:32:40: 45:d1:22:d1:9f:49:8f:d1:e6:dd:c0:1c:ed:73:bd:af:4b:6d: 85:76:c1:a1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1 RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTI0MTAxMTA4 MjM1NVoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoQ0MwOUYxNjgxQUFBM0Iz REFGRDA2QkNFQUVFRkZFMTIxNEFGNzFEODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALxzpw2HCH1Eu+uN/w/7MIqyWJgAkOZOCqJw+KD46XbbqHtjsY6B AYEdEFTXoj8vVzqfTa1nx4NeBdsEFp1QVJrs8Gp3MOLQk3qtSTxxkHdqf5RtX17+ 3Iig2MEp7Gg3RQGaKi01acSUHHgaBCI19kvLjCwY+erHXA6zGH2L4uk54spgxoeq XOdjCWgz3C7JohSwTMSg/bIhfMt7zb9Y3xYiyphh6spHkpHBBtJWSOH+KSkKMAiC P6Ak2vikQKw8P9CtmeGBd1ynyjPaLUBy0Z7VYQpSjwP90xDZmbCJ2VR0x0ZBvy/w QyFAqoQ8q3HlkTnCtih6+VeYJuRfHVTfLK8CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTMCfFoGqo7Pa/Qa86u7/4SFK9x2DAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA 9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTk5Ny96QW54YUJxcU96MnYwR3ZPcnVfLUVoU3ZjZGcucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAygHVMA0GCSqGSIb3DQEBCwUAA4IBAQCTuGkIihemKLlb3DxiB3kHmqlo hWWuTCdVk80VSAR8erjTMbHdow788yflvbZx25Cxn+9olTfyTs8npPLyWOhcFJer xnvKkqfg5yHYQirTf0yhqrUMh7K5S9vOgrqPaCSOMCuount5ct75U7RdubY3n5jF /E+Nfg9lJl6FcrvFTEGeuM8sWCt3HDlXUMWbUewJhxT0rbeUDoHqN4yefiZ2T0qy 2VEu9Zt0NZYitZa6THaIgzyWQfeafvUq5a/eiluX533JAM1nbr0CFXfSocr9fgtf T15MzHBTyNX6Db+LhkYfmYNy47AZMkBF0SLRn0mP0ebdwBztc72vS22FdsGh -----END CERTIFICATE-----Generated at Sun Feb 16 22:12:16 2025 by rpki-client