$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/_O1GniIa9Sv6jEx8l2n-SZu-m9A.roa File: _O1GniIa9Sv6jEx8l2n-SZu-m9A.roa (raw, json) Hash identifier: 2pH7lB602EN4j0SDFwl5fVcd5IWbNlPs5sWwipuVQ6k= Subject key identifier: FC:ED:46:9E:22:1A:F5:2B:FA:8C:4C:7C:97:69:FE:49:9B:BE:9B:D0 Certificate issuer: /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E Certificate serial: 4F Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/_O1GniIa9Sv6jEx8l2n-SZu-m9A.roa Signing time: Sat 30 Nov 2024 01:30:37 +0000 ROA not before: Sat 30 Nov 2024 01:30:37 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 55391 IP address blocks: 130.62.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E Validity Not Before: Nov 30 01:30:37 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=FCED469E221AF52BFA8C4C7C9769FE499BBE9BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:67:78:aa:43:71:11:d2:f2:19:d3:e7:35: 80:5a:11:53:ad:3f:89:1a:b8:32:31:bc:d0:c8:ee: ad:9a:e1:ef:1c:71:cb:0f:f5:b6:6f:f8:e4:da:78: 7d:f5:94:2a:e2:2b:b8:94:79:62:95:2e:45:cc:d8: 07:4e:a8:f9:a4:36:b8:1c:4b:88:0c:29:93:67:6c: fe:31:c5:1c:61:01:4f:37:b2:8e:a4:44:91:7c:60: 09:16:eb:4f:09:5d:5e:16:7a:64:72:08:32:9b:89: 80:79:89:30:60:4c:5d:0b:20:38:a2:07:cf:49:f8: c2:da:48:0e:31:c0:48:11:f3:e9:32:f4:87:27:85: d8:a1:4f:cb:38:e4:2d:66:da:16:b7:af:d9:da:f3: 9d:19:d5:39:e6:ab:39:cb:30:54:ec:2c:1b:31:8a: 82:73:02:bf:8c:18:c9:e8:72:f3:8d:13:d2:e1:b2: 24:32:6d:d5:eb:1f:07:86:83:1d:3c:5d:42:7a:04: 9b:63:44:33:37:65:a3:2f:cc:cf:18:f5:c8:82:6d: cc:82:80:5c:76:b8:4c:fe:b1:4c:e3:83:39:44:9a: 98:64:ed:ba:3d:ab:6d:cf:4d:96:a6:c6:8f:f3:cc: bd:b5:8a:4c:e9:1e:20:28:dc:a7:bf:b7:f9:78:ca: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:ED:46:9E:22:1A:F5:2B:FA:8C:4C:7C:97:69:FE:49:9B:BE:9B:D0 X509v3 Authority Key Identifier: keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/_O1GniIa9Sv6jEx8l2n-SZu-m9A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 130.62.0.0/17 Signature Algorithm: sha256WithRSAEncryption 5a:5f:95:be:e2:99:e1:c2:61:a1:28:9c:e9:cb:fd:83:13:83: 05:38:b1:a1:3c:fd:95:42:7f:9e:26:ed:fb:6c:25:f8:7e:23: bf:b4:c4:b7:2f:67:f7:a3:f6:49:ca:ff:d9:4a:e1:27:1c:5d: 10:bb:e9:ca:83:f2:c4:ed:1d:b0:f4:bc:7e:4f:0c:96:1b:c0: 74:fb:02:d5:a6:5d:7a:65:12:6c:f3:dc:dc:06:f4:cf:e5:f4: f2:bc:fe:c5:50:a3:cf:b3:b6:8c:c8:8f:bf:b5:8c:95:4b:75: 30:7b:35:43:9c:b0:70:41:69:8c:d8:65:d8:41:29:d8:7f:a5: fb:ce:32:1e:f3:1e:cc:d0:2e:45:16:a0:75:2c:52:75:fd:96: bc:d4:b8:eb:31:f8:3b:f5:d6:3e:88:5e:15:04:6d:bf:24:7e: ba:d4:40:c9:f4:12:fe:38:7d:51:93:08:8e:ea:b4:6f:18:86: 65:f6:08:f3:2d:09:4b:6a:8a:ed:0f:24:81:5d:a3:e6:fc:40: bd:1c:3d:0c:03:bf:ab:e9:ad:d5:6b:24:8e:78:20:93:9b:69: 43:90:39:4c:c2:60:16:ca:e0:8f:66:74:4e:f3:c7:f6:89:3e: 86:cd:2d:ba:f3:18:a8:a1:10:a7:f6:49:5e:d1:64:e9:d2:dd: 9a:19:2f:6c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOUI0 RkRBRTk2MkY0OTYwNTg4QjFEMkJFNkExRUQ0MkYxMzcwOThFMB4XDTI0MTEzMDAx MzAzN1oXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoRkNFRDQ2OUUyMjFBRjUy QkZBOEM0QzdDOTc2OUZFNDk5QkJFOUJEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK64Z3iqQ3ER0vIZ0+c1gFoRU60/iRq4MjG80MjurZrh7xxxyw/1 tm/45Np4ffWUKuIruJR5YpUuRczYB06o+aQ2uBxLiAwpk2ds/jHFHGEBTzeyjqRE kXxgCRbrTwldXhZ6ZHIIMpuJgHmJMGBMXQsgOKIHz0n4wtpIDjHASBHz6TL0hyeF 2KFPyzjkLWbaFrev2drznRnVOearOcswVOwsGzGKgnMCv4wYyehy840T0uGyJDJt 1esfB4aDHTxdQnoEm2NEMzdloy/Mzxj1yIJtzIKAXHa4TP6xTOODOUSamGTtuj2r bc9NlqbGj/PMvbWKTOkeICjcp7+3+XjKcQUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBT87UaeIhr1K/qMTHyXaf5Jm76b0DAfBgNVHSMEGDAWgBQZtP2uli9JYFiLHSvm oe1C8TcJjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIyMDcvR2JUOXJwWXZTV0JZaXgwcjVxSHRRdkUzQ1k0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR2JUOXJwWXZTV0JZaXgwcjVxSHRR dkUzQ1k0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEyMjA3L19PMUduaUlhOVN2NmpFeDhsMm4tU1p1LW05QS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAeCPgAwDQYJKoZIhvcNAQELBQADggEBAFpflb7imeHCYaEonOnL/YMT gwU4saE8/ZVCf54m7ftsJfh+I7+0xLcvZ/ej9knK/9lK4SccXRC76cqD8sTtHbD0 vH5PDJYbwHT7AtWmXXplEmzz3NwG9M/l9PK8/sVQo8+ztozIj7+1jJVLdTB7NUOc sHBBaYzYZdhBKdh/pfvOMh7zHszQLkUWoHUsUnX9lrzUuOsx+Dv11j6IXhUEbb8k frrUQMn0Ev44fVGTCI7qtG8YhmX2CPMtCUtqiu0PJIFdo+b8QL0cPQwDv6vprdVr JI54IJObaUOQOUzCYBbK4I9mdE7zx/aJPobNLbrzGKihEKf2SV7RZOnS3ZoZL2w= -----END CERTIFICATE-----Generated at Sat Apr 5 23:07:50 2025 by rpki-client