$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/7duYqowsfQhCbHUDk83YoIMl0xM.roa File: 7duYqowsfQhCbHUDk83YoIMl0xM.roa (raw, json) Hash identifier: XD5YoNx9bI+y+RjZ6qKUhPHFcvsVmi5bzATfYZ/IX7w= Subject key identifier: ED:DB:98:AA:8C:2C:7D:08:42:6C:75:03:93:CD:D8:A0:83:25:D3:13 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 9F Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/7duYqowsfQhCbHUDk83YoIMl0xM.roa Signing time: Wed 04 Dec 2024 19:26:56 +0000 ROA not before: Wed 04 Dec 2024 19:26:56 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2914 IP address blocks: 61.213.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 4 19:26:56 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=EDDB98AA8C2C7D08426C750393CDD8A08325D313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:2b:c6:41:e0:fa:c9:0d:5d:00:42:97:b7: f7:07:00:04:c8:49:80:c9:0e:e6:4c:06:f7:3a:1d: ba:df:7e:a2:de:af:44:ba:b8:96:12:77:c3:d8:04: 18:98:6c:d4:da:5f:29:83:b6:f9:f7:26:ab:c2:68: 19:60:9b:93:67:77:23:b8:a0:9b:85:c1:05:7a:cb: d3:89:2f:61:db:b2:7a:48:4a:2c:c7:cf:10:62:e7: a1:fe:4a:d9:10:59:67:f1:fa:d4:7e:70:be:2e:60: 10:4d:ed:a4:c9:e2:81:a7:72:a4:15:5c:a2:ca:c9: d6:6d:ce:22:c6:05:84:63:9f:2c:39:03:39:1c:1f: c9:4f:0f:2a:17:f1:f3:fb:f0:67:05:2a:f4:5f:cf: 3e:d1:2e:95:51:d1:c3:31:04:64:22:54:21:04:b8: d8:93:ab:13:ca:67:1b:90:09:b1:1e:21:e8:4b:7c: 38:cf:cb:07:20:3e:9e:6d:49:48:a7:ec:60:2b:f4: 58:11:22:a0:fb:0f:fb:59:15:fd:56:f1:6d:bb:ff: 1d:b4:20:04:ab:d7:7c:08:e9:73:23:17:01:19:a2: 41:f0:dc:7a:37:fc:5a:36:96:79:e0:37:f4:42:6c: 18:53:9f:fb:d2:bd:b0:67:53:69:f7:d1:4c:08:10: b5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DB:98:AA:8C:2C:7D:08:42:6C:75:03:93:CD:D8:A0:83:25:D3:13 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/7duYqowsfQhCbHUDk83YoIMl0xM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.213.144.0/20 Signature Algorithm: sha256WithRSAEncryption 15:ea:ac:78:75:d8:42:83:49:e1:d8:f3:d0:bb:82:29:9f:e9: 6f:6b:3f:cd:38:0b:83:94:63:b1:77:f6:af:0e:b9:a5:33:43: 31:d8:11:c4:65:8c:ac:82:2b:7e:eb:c5:1d:6b:a2:58:29:1a: 5d:48:20:65:68:2f:5b:18:c6:11:1b:4b:bf:78:1b:78:d8:2d: 3b:5c:63:45:3a:b2:95:0d:e8:70:0a:6b:ba:43:ca:8f:39:c2: e9:94:4d:c8:f6:da:29:1b:45:29:75:58:bc:e5:36:7c:72:34: 4e:5e:94:1e:bd:c8:80:c4:ab:53:bd:21:03:15:56:3e:90:f8: 6c:9c:83:79:d5:37:4c:c4:5b:f9:8e:8e:62:4b:d3:11:b2:ed: de:e4:2e:2b:15:cf:bc:c2:17:a0:36:80:88:18:6b:a2:42:da: 9c:45:35:a6:e4:b3:79:97:d5:0b:fc:c1:ee:da:9e:bb:6d:09: 5b:b3:84:5d:c5:c3:9d:ab:e5:a8:42:54:dd:6d:7b:33:b4:65: f3:b1:38:7a:22:3f:84:34:53:43:4d:53:bf:27:ea:fe:2b:84: b8:f4:92:ce:e1:f3:d6:72:a9:31:85:d3:e1:6f:cb:7d:ef:a2: 65:54:68:ed:88:60:87:03:6b:f9:75:3c:43:b6:ed:4e:50:81: 88:0a:bf:bf -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDQx OTI2NTZaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVEREI5OEFBOEMyQzdE MDg0MjZDNzUwMzkzQ0REOEEwODMyNUQzMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC43SvGQeD6yQ1dAEKXt/cHAATISYDJDuZMBvc6HbrffqLer0S6 uJYSd8PYBBiYbNTaXymDtvn3JqvCaBlgm5NndyO4oJuFwQV6y9OJL2HbsnpISizH zxBi56H+StkQWWfx+tR+cL4uYBBN7aTJ4oGncqQVXKLKydZtziLGBYRjnyw5Azkc H8lPDyoX8fP78GcFKvRfzz7RLpVR0cMxBGQiVCEEuNiTqxPKZxuQCbEeIehLfDjP ywcgPp5tSUin7GAr9FgRIqD7D/tZFf1W8W27/x20IASr13wI6XMjFwEZokHw3Ho3 /Fo2lnngN/RCbBhTn/vSvbBnU2n30UwIELULAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU7duYqowsfQhCbHUDk83YoIMl0xMwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC83ZHVZcW93c2ZRaENiSFVEazgzWW9JTWwweE0u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEPdWQMA0GCSqGSIb3DQEBCwUAA4IBAQAV6qx4ddhCg0nh2PPQu4Ip n+lvaz/NOAuDlGOxd/avDrmlM0Mx2BHEZYysgit+68Uda6JYKRpdSCBlaC9bGMYR G0u/eBt42C07XGNFOrKVDehwCmu6Q8qPOcLplE3I9topG0UpdVi85TZ8cjROXpQe vciAxKtTvSEDFVY+kPhsnIN51TdMxFv5jo5iS9MRsu3e5C4rFc+8whegNoCIGGui QtqcRTWm5LN5l9UL/MHu2p67bQlbs4RdxcOdq+WoQlTdbXsztGXzsTh6Ij+ENFND TVO/J+r+K4S49JLO4fPWcqkxhdPhb8t976JlVGjtiGCHA2v5dTxDtu1OUIGICr+/ -----END CERTIFICATE-----Generated at Sat Apr 5 17:13:34 2025 by rpki-client