$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/G8PGL6GGZ3aocSrFyDvwCScYhRs.roa File: G8PGL6GGZ3aocSrFyDvwCScYhRs.roa (raw, json) Hash identifier: Lyz2ZBbsFqAEZlJTXwdmVy2E8wI3SFqb1RRrpElm7RY= Subject key identifier: 1B:C3:C6:2F:A1:86:67:76:A8:71:2A:C5:C8:3B:F0:09:27:18:85:1B Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Certificate serial: 0F Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/G8PGL6GGZ3aocSrFyDvwCScYhRs.roa Signing time: Mon 21 Oct 2024 02:11:02 +0000 ROA not before: Mon 21 Oct 2024 02:11:02 +0000 ROA not after: Tue 21 Oct 2025 01:23:02 +0000 asID: 9354 IP address blocks: 202.157.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Validity Not Before: Oct 21 02:11:02 2024 GMT Not After : Oct 21 01:23:02 2025 GMT Subject: CN=1BC3C62FA1866776A8712AC5C83BF0092718851B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:da:47:d1:73:c0:f9:61:7b:fa:42:a8:d5:2c: 79:e1:91:6b:f7:2b:ad:25:d0:1e:99:a8:38:ab:81: ae:c6:84:fa:6c:1e:24:45:a8:af:78:af:1e:47:12: dd:6e:86:c7:29:05:08:b9:c2:83:6a:82:cc:8d:d2: 08:e2:af:87:18:70:e2:44:ba:c1:d9:5d:ec:b2:01: 31:79:38:01:44:06:da:e4:ce:77:35:dd:a4:ce:01: 1a:0e:7a:d4:78:bb:03:42:f6:f9:80:c3:61:ed:bd: 4e:6b:16:54:7a:56:78:1e:bb:2f:96:ac:75:84:d2: d4:da:8c:f7:ce:f1:0a:05:0f:69:2c:fa:92:ae:21: fe:ce:38:d5:fe:37:1d:5c:2f:0a:3e:c0:0f:12:51: 6e:33:0b:ff:12:95:0b:75:68:5a:82:f7:6e:89:a2: ac:fe:3b:01:a4:fd:e0:9d:98:ef:6d:d2:ed:35:8c: a1:86:ec:45:3b:80:8d:31:da:d4:19:26:ae:b3:79: fe:8d:12:68:5d:21:83:13:f5:2d:3e:89:7a:78:a3: a6:2b:a0:8a:eb:31:82:0b:46:fd:91:97:91:ab:32: 34:b4:b0:e8:84:c3:dd:89:5f:ab:1c:0c:f0:93:a2: f7:e7:ae:50:fe:c0:47:eb:0a:23:46:37:64:1e:67: f8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C3:C6:2F:A1:86:67:76:A8:71:2A:C5:C8:3B:F0:09:27:18:85:1B X509v3 Authority Key Identifier: keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/G8PGL6GGZ3aocSrFyDvwCScYhRs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.157.244.0/22 Signature Algorithm: sha256WithRSAEncryption 59:f4:3a:2f:de:78:bf:f7:11:af:d4:c3:4e:77:a2:12:da:12: 45:12:1b:84:62:8b:33:82:c0:a5:59:f3:c7:c0:44:ab:62:11: 39:df:fb:e8:fc:eb:ef:04:bd:51:68:5c:e1:d6:e3:78:ec:0c: ea:fe:db:a5:eb:5d:00:e0:0b:46:11:3b:44:0f:0d:55:78:20: dc:a1:3d:03:ae:1f:7e:52:de:7b:02:62:45:4b:61:9b:92:3c: 65:de:71:76:19:ce:5e:af:c2:0e:ca:b2:54:60:2e:08:04:f3: d5:95:fc:96:84:e5:b7:07:a8:cb:b3:f7:f7:1e:7f:6b:c9:05: 71:7e:2a:8d:55:c9:f9:8c:fc:a1:0f:0e:61:4c:ed:59:9f:b2: 97:6f:d4:6b:68:82:f3:fe:d8:7d:85:46:a8:1f:f6:30:06:8b: a8:30:1a:1b:af:31:ab:01:82:90:cc:87:05:ef:1d:78:40:ad: 31:d6:44:06:76:a4:95:93:92:f5:0f:5e:22:a4:3e:0a:b8:53: 7e:9d:ae:b4:6f:9f:f2:da:d9:6f:5e:82:25:45:ab:a3:d0:43: 01:df:09:4c:a3:fe:26:c2:ef:e9:de:71:9e:e7:b7:99:74:8b: 62:11:13:35:18:fa:e8:43:f6:fe:bb:3f:b9:74:8f:47:83:d5: 02:11:cb:2d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4 NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI0MTAyMTAy MTEwMloXDTI1MTAyMTAxMjMwMlowMzExMC8GA1UEAxMoMUJDM0M2MkZBMTg2Njc3 NkE4NzEyQUM1QzgzQkYwMDkyNzE4ODUxQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMPaR9FzwPlhe/pCqNUseeGRa/crrSXQHpmoOKuBrsaE+mweJEWo r3ivHkcS3W6GxykFCLnCg2qCzI3SCOKvhxhw4kS6wdld7LIBMXk4AUQG2uTOdzXd pM4BGg561Hi7A0L2+YDDYe29TmsWVHpWeB67L5asdYTS1NqM987xCgUPaSz6kq4h /s441f43HVwvCj7ADxJRbjML/xKVC3VoWoL3bomirP47AaT94J2Y723S7TWMoYbs RTuAjTHa1BkmrrN5/o0SaF0hgxP1LT6JenijpiugiusxggtG/ZGXkasyNLSw6ITD 3YlfqxwM8JOi9+euUP7AR+sKI0Y3ZB5n+PECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQbw8YvoYZndqhxKsXIO/AJJxiFGzAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80ODQvRzhQR0w2R0daM2FvY1NyRnlEdndDU2NZaFJzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsqd9DANBgkqhkiG9w0BAQsFAAOCAQEAWfQ6L954v/cRr9TDTneiEtoSRRIb hGKLM4LApVnzx8BEq2IROd/76Pzr7wS9UWhc4dbjeOwM6v7bpetdAOALRhE7RA8N VXgg3KE9A64fflLeewJiRUthm5I8Zd5xdhnOXq/CDsqyVGAuCATz1ZX8loTltweo y7P39x5/a8kFcX4qjVXJ+Yz8oQ8OYUztWZ+yl2/Ua2iC8/7YfYVGqB/2MAaLqDAa G68xqwGCkMyHBe8deECtMdZEBnaklZOS9Q9eIqQ+CrhTfp2utG+f8trZb16CJUWr o9BDAd8JTKP+JsLv6d5xnue3mXSLYhETNRj66EP2/rs/uXSPR4PVAhHLLQ== -----END CERTIFICATE-----Generated at Sat Apr 26 18:17:35 2025 by rpki-client