$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/tAFZ4qjlookEu8P0q4x9CBBQEAw.roa File: tAFZ4qjlookEu8P0q4x9CBBQEAw.roa (raw, json) Hash identifier: mB0zZV150OlUCassPlA7OTdcXnB+tEAEeasmhBAte9A= Subject key identifier: B4:01:59:E2:A8:E5:A2:89:04:BB:C3:F4:AB:8C:7D:08:10:50:10:0C Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Certificate serial: A8 Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/tAFZ4qjlookEu8P0q4x9CBBQEAw.roa Signing time: Sat 30 Nov 2024 01:31:23 +0000 ROA not before: Sat 30 Nov 2024 01:31:23 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 9351 IP address blocks: 210.236.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Validity Not Before: Nov 30 01:31:23 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=B40159E2A8E5A28904BBC3F4AB8C7D081050100C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2a:f3:4a:b9:8b:42:6c:e2:9c:df:88:a5:41: 39:59:9f:e9:8b:aa:09:00:e7:21:87:39:f5:be:97: b9:39:ab:94:f8:d4:31:96:77:ae:9f:df:66:ee:55: 29:70:85:5a:9d:51:6e:82:cc:d1:44:97:bf:de:7e: 8c:06:9d:47:0d:fd:44:d1:1b:52:be:94:89:64:a9: c7:15:58:a3:de:54:73:b0:62:7e:96:5b:2f:53:cb: 70:2c:27:0a:3e:9f:42:18:0d:8b:f9:15:1c:1a:89: f8:74:58:1a:0d:00:98:6e:7c:a4:09:10:aa:dc:37: 67:a1:5b:ea:f9:9b:37:36:9f:76:fb:df:00:33:1c: 8f:6b:59:b6:4a:38:0e:d5:3c:89:3f:00:1e:a7:96: 8d:00:c6:aa:2d:13:31:8f:28:0e:e2:28:a8:85:82: 42:d1:d8:3d:d8:72:99:d7:bc:cc:60:a6:30:40:87: c4:80:d9:e4:99:56:7d:31:de:90:f6:db:46:f1:05: d6:00:4e:2b:f5:c3:a4:37:5a:a2:18:c3:92:81:39: 3d:26:67:dd:db:ae:3d:b1:c9:68:8c:4c:a4:1c:fe: 0c:4a:19:91:2b:68:66:71:89:9f:90:b6:4e:4b:62: 5f:03:2c:f0:34:77:e4:dd:12:7f:a0:25:a3:63:f8: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:01:59:E2:A8:E5:A2:89:04:BB:C3:F4:AB:8C:7D:08:10:50:10:0C X509v3 Authority Key Identifier: keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/tAFZ4qjlookEu8P0q4x9CBBQEAw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.236.160.0/19 Signature Algorithm: sha256WithRSAEncryption 8f:19:30:2b:aa:9d:28:58:0a:79:71:3c:5a:08:a5:fc:7b:5e: 53:64:b1:15:3b:bd:54:f7:30:9c:79:4b:94:ab:64:eb:04:91: de:52:7e:e6:9b:03:0a:ba:2f:28:50:97:c7:c8:7a:4a:49:a7: b5:b6:5d:da:cf:f8:25:17:58:c4:8b:41:80:8c:ac:da:1b:3b: 92:7b:e7:ad:74:97:fe:1e:ea:25:a6:87:7c:db:bd:b1:40:f3: fa:2b:03:b6:4d:44:3f:91:7c:1a:0f:78:b8:26:a4:1e:69:e0: b6:85:cd:f7:e8:4f:1b:74:84:db:b9:ac:4b:62:18:30:67:34: f7:59:b1:87:e6:d3:62:c4:a6:72:ac:fc:13:3d:06:d3:ce:80: 2d:77:ba:36:18:56:7b:d9:93:05:60:41:7e:f7:8e:d8:1e:d4: 65:5e:9d:2a:be:95:fb:8b:26:a0:3e:e7:21:f8:e2:41:10:9c: 40:9a:1c:b2:5b:19:d0:fe:2d:03:2b:29:fd:0e:e3:17:2b:e6: 56:99:6a:bb:f4:6d:23:6d:39:c0:07:b7:89:a0:ca:41:8b:7f: 66:df:26:e8:5d:fc:28:06:27:72:cc:89:58:54:0b:99:58:75: 80:fc:dd:ab:cd:0b:ef:4b:db:23:57:39:e8:b1:af:63:0b:c2: d5:d2:ad:3d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNDExMzAw MTMxMjNaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI0MDE1OUUyQThFNUEy ODkwNEJCQzNGNEFCOEM3RDA4MTA1MDEwMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKKvNKuYtCbOKc34ilQTlZn+mLqgkA5yGHOfW+l7k5q5T41DGW d66f32buVSlwhVqdUW6CzNFEl7/efowGnUcN/UTRG1K+lIlkqccVWKPeVHOwYn6W Wy9Ty3AsJwo+n0IYDYv5FRwaifh0WBoNAJhufKQJEKrcN2ehW+r5mzc2n3b73wAz HI9rWbZKOA7VPIk/AB6nlo0AxqotEzGPKA7iKKiFgkLR2D3YcpnXvMxgpjBAh8SA 2eSZVn0x3pD220bxBdYATiv1w6Q3WqIYw5KBOT0mZ93brj2xyWiMTKQc/gxKGZEr aGZxiZ+Qtk5LYl8DLPA0d+TdEn+gJaNj+HE1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUtAFZ4qjlookEu8P0q4x9CBBQEAwwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM0L3RBRlo0cWpsb29rRXU4UDBxNHg5Q0JCUUVBdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXS7KAwDQYJKoZIhvcNAQELBQADggEBAI8ZMCuqnShYCnlxPFoIpfx7XlNk sRU7vVT3MJx5S5SrZOsEkd5SfuabAwq6LyhQl8fIekpJp7W2XdrP+CUXWMSLQYCM rNobO5J75610l/4e6iWmh3zbvbFA8/orA7ZNRD+RfBoPeLgmpB5p4LaFzffoTxt0 hNu5rEtiGDBnNPdZsYfm02LEpnKs/BM9BtPOgC13ujYYVnvZkwVgQX73jtge1GVe nSq+lfuLJqA+5yH44kEQnECaHLJbGdD+LQMrKf0O4xcr5laZarv0bSNtOcAHt4mg ykGLf2bfJuhd/CgGJ3LMiVhUC5lYdYD83avNC+9L2yNXOeixr2MLwtXSrT0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:47:28 2025 by rpki-client