$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/yxm6ICSrKm8jxt9dhhCn7smYOV0.roa File: yxm6ICSrKm8jxt9dhhCn7smYOV0.roa (raw, json) Hash identifier: 7mTbRoSrIOhe9TR0lkYkEe+2TQBmTOex5YbNf5HcZfU= Subject key identifier: CB:19:BA:20:24:AB:2A:6F:23:C6:DF:5D:86:10:A7:EE:C9:98:39:5D Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 65 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/yxm6ICSrKm8jxt9dhhCn7smYOV0.roa Signing time: Wed 04 Sep 2024 06:29:23 +0000 ROA not before: Wed 04 Sep 2024 06:29:23 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 15830 IP address blocks: 180.148.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Sep 4 06:29:23 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=CB19BA2024AB2A6F23C6DF5D8610A7EEC998395D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:04:22:8a:78:9b:55:2a:82:84:11:4e:54: bc:2b:06:b6:e4:df:4c:bb:09:c2:cf:34:f9:a8:d3: e1:6c:33:e3:69:fa:db:50:79:ec:97:7b:db:b2:1d: ac:4c:b1:75:3b:b0:85:94:8e:0b:8f:d2:78:5c:17: 13:d3:e1:7f:d5:ba:84:ff:11:4d:0e:5f:3d:6d:d5: 33:f7:b3:b2:62:cc:13:ed:c1:c1:83:4e:f3:2d:a4: 20:84:92:a1:64:0c:20:24:e2:a2:b6:e5:95:16:0a: 71:b1:72:79:08:ca:b1:3a:e9:b9:f4:5f:5a:ce:9b: 7a:98:e8:d8:79:ec:c3:ef:99:b9:ba:f0:65:12:9b: a5:d3:24:3c:32:0a:a4:df:3f:ed:78:75:0e:30:f3: 31:73:14:0f:b5:28:a8:6b:25:0c:8d:bb:47:59:96: 77:11:33:9b:40:58:f6:e0:eb:e1:81:4c:7f:74:d8: a0:6e:de:65:0c:18:d7:c6:91:07:e6:df:90:61:d9: c0:ef:a0:ab:63:35:15:9b:ad:3a:2f:e8:0b:45:87: 0a:8a:78:ec:a4:07:ed:40:f5:c7:88:6e:41:50:18: 96:48:f7:a6:81:d0:f4:cc:18:9a:19:c4:f3:9f:35: c4:0a:80:44:0c:8b:6f:dc:43:e6:00:c5:08:57:86: ad:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:19:BA:20:24:AB:2A:6F:23:C6:DF:5D:86:10:A7:EE:C9:98:39:5D X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/yxm6ICSrKm8jxt9dhhCn7smYOV0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.148.160.0/20 Signature Algorithm: sha256WithRSAEncryption a8:f9:42:b9:b2:4d:31:b1:fd:0c:d4:05:6b:52:22:da:a7:74: 0b:ae:42:c2:93:79:b6:47:93:44:a8:fd:2d:3d:a6:f3:01:93: e3:9c:eb:e5:3d:f8:74:14:65:89:52:57:cc:83:9f:8c:1a:2f: de:d9:28:52:a7:04:7c:c7:41:c2:ab:51:56:44:ed:7d:b7:a3: b0:4e:9c:b1:6d:76:a7:c9:44:ab:ee:1e:5c:ab:5a:cf:04:26: 80:0f:80:d1:76:d7:46:83:ed:29:b1:b9:73:18:86:4e:94:3c: 31:21:4a:a5:65:71:1f:d1:84:ec:b5:bc:ce:e5:31:d3:25:7f: f3:f0:19:90:4d:1e:21:7c:e0:88:28:58:0c:a5:ba:38:8a:f4: d6:69:97:4b:3f:11:53:60:dc:26:ca:c4:32:d4:63:ac:cc:73: 36:eb:d1:43:a8:d9:7f:ef:f0:80:1e:2d:f1:9f:01:9d:7a:af: db:fb:43:f8:35:4d:ca:c6:2a:68:fd:8e:f9:e6:c4:14:f1:7f: 45:f1:b2:dc:7c:8b:72:57:50:18:1a:89:6e:b8:2f:32:77:64: 37:e2:e7:91:01:a0:d8:5b:7e:ff:91:ef:5e:66:b8:86:4b:73: e7:29:11:5a:08:0a:aa:21:a4:66:b1:f1:4b:a3:44:84:b0:9e: b5:62:f0:56 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTI0MDkwNDA2 MjkyM1oXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0IxOUJBMjAyNEFCMkE2 RjIzQzZERjVEODYxMEE3RUVDOTk4Mzk1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALYOBCKKeJtVKoKEEU5UvCsGtuTfTLsJws80+ajT4Wwz42n621B5 7Jd727IdrEyxdTuwhZSOC4/SeFwXE9Phf9W6hP8RTQ5fPW3VM/ezsmLME+3BwYNO 8y2kIISSoWQMICTiorbllRYKcbFyeQjKsTrpufRfWs6bepjo2Hnsw++ZubrwZRKb pdMkPDIKpN8/7Xh1DjDzMXMUD7UoqGslDI27R1mWdxEzm0BY9uDr4YFMf3TYoG7e ZQwY18aRB+bfkGHZwO+gq2M1FZutOi/oC0WHCop47KQH7UD1x4huQVAYlkj3poHQ 9MwYmhnE8581xAqARAyLb9xD5gDFCFeGrfsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTLGbogJKsqbyPG312GEKfuyZg5XTAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit 6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5 M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDQyL3l4bTZJQ1NyS204anh0OWRoaENuN3NtWU9WMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAS0lKAwDQYJKoZIhvcNAQELBQADggEBAKj5QrmyTTGx/QzUBWtSItqn dAuuQsKTebZHk0So/S09pvMBk+Oc6+U9+HQUZYlSV8yDn4waL97ZKFKnBHzHQcKr UVZE7X23o7BOnLFtdqfJRKvuHlyrWs8EJoAPgNF210aD7SmxuXMYhk6UPDEhSqVl cR/RhOy1vM7lMdMlf/PwGZBNHiF84IgoWAylujiK9NZpl0s/EVNg3CbKxDLUY6zM czbr0UOo2X/v8IAeLfGfAZ16r9v7Q/g1TcrGKmj9jvnmxBTxf0Xxstx8i3JXUBga iW64LzJ3ZDfi55EBoNhbfv+R715muIZLc+cpEVoICqohpGax8UujRISwnrVi8FY= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:09 2025 by rpki-client