$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FXXGOcTO4DFceFcwPfXV4ZO44yU.roa File: FXXGOcTO4DFceFcwPfXV4ZO44yU.roa (raw, json) Hash identifier: cjPiN+8tXOWu/IKCVSqjFMAEaOhz1YFlrxJQ+fsN6a0= Subject key identifier: 15:75:C6:39:C4:CE:E0:31:5C:78:57:30:3D:F5:D5:E1:93:B8:E3:25 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 70 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FXXGOcTO4DFceFcwPfXV4ZO44yU.roa Signing time: Thu 14 Nov 2024 16:02:12 +0000 ROA not before: Thu 14 Nov 2024 16:02:12 +0000 ROA not after: Fri 07 Nov 2025 10:27:51 +0000 asID: 142132 IP address blocks: 153.254.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 14 16:02:12 2024 GMT Not After : Nov 7 10:27:51 2025 GMT Subject: CN=1575C639C4CEE0315C7857303DF5D5E193B8E325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9d:85:d9:9a:00:47:1f:6a:33:15:25:ba:57: 7b:b0:2e:dd:67:ce:36:19:c9:de:0d:ce:eb:75:32: f4:e5:81:3e:34:dc:7c:9f:84:f4:c8:ec:0d:f8:98: fc:7d:3b:d9:ee:30:bb:4c:91:1a:50:84:f1:69:07: 4f:e5:14:07:c8:9a:0b:9f:e1:ea:38:25:99:0f:d2: 14:2f:36:c5:52:b7:55:2f:f9:d6:dd:25:bc:26:58: 9d:37:bf:37:ab:79:1a:62:73:00:65:57:90:2a:21: 2f:3e:74:79:2e:2e:fe:69:af:2c:71:d5:9b:7f:f6: f2:1d:f0:57:24:2b:64:02:72:43:6d:0f:0d:3a:3b: 74:cf:d7:12:39:2a:75:47:61:e0:90:9a:dd:be:15: 35:0b:f3:db:2d:a9:51:9d:3b:a9:fa:a3:54:d1:e9: b7:be:d5:ac:a4:9a:b0:a0:47:34:89:2b:34:c6:e6: 8e:5c:af:f6:f0:b4:af:26:cb:88:94:4c:94:61:d2: f9:a3:0c:be:b7:b8:68:7f:f9:ca:32:20:fe:93:d7: 80:e3:ab:d0:cf:50:27:fb:9e:8c:e8:ac:7f:05:9f: 57:fc:30:a3:7f:5c:be:2e:9b:5d:2e:7d:5e:e8:0c: 8b:b3:56:aa:0c:ac:d1:31:2d:e2:f9:45:c2:ec:ee: 5e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:75:C6:39:C4:CE:E0:31:5C:78:57:30:3D:F5:D5:E1:93:B8:E3:25 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FXXGOcTO4DFceFcwPfXV4ZO44yU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.254.119.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:e1:7b:9d:61:d7:6c:61:84:b3:9f:9e:17:36:44:40:6b:d2: 69:a6:b4:81:e6:dd:80:44:e1:c8:bc:61:9f:39:c7:02:b1:f1: 30:13:1a:4e:8e:bc:2c:98:3f:b3:1a:2d:76:22:df:4a:b3:4d: 21:d6:07:ea:6b:ff:4a:b2:de:40:91:a9:ae:bb:45:47:30:58: a7:ed:74:68:d3:38:2b:62:6d:26:45:0f:b3:e6:94:89:b3:da: 04:64:39:ae:a9:f1:57:47:99:3d:86:97:74:df:06:6f:16:9e: c6:4c:77:65:33:50:58:47:38:d7:30:3d:4f:7e:32:44:5b:16: b1:a8:fc:36:e5:ba:ee:dc:2c:45:52:b2:4e:c5:7c:33:c9:92: 3e:fc:b3:a2:19:91:30:a3:4e:5b:8f:ad:78:4b:cf:ee:79:61: 50:21:1e:c1:d9:55:74:9d:df:89:4d:8f:e7:c5:61:2e:59:5c: 17:b3:99:a6:4b:a0:85:21:26:75:85:7d:57:99:9b:87:0c:d2: 00:93:19:d1:c2:10:85:e2:0d:92:35:7e:31:c5:d5:12:4f:9e: 06:f1:86:fc:73:0a:29:f6:4b:11:a5:01:37:49:cd:24:05:e5: 82:7a:ad:ba:5c:37:b1:b4:df:7d:0b:39:6d:ee:da:f8:71:2b: c8:48:93:8e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDQ2 RERGODhBNDZFNEVDMkQ5QTlCQUI1RkYxMzA1RkQwNTdGMTM4MB4XDTI0MTExNDE2 MDIxMloXDTI1MTEwNzEwMjc1MVowMzExMC8GA1UEAxMoMTU3NUM2MzlDNENFRTAz MTVDNzg1NzMwM0RGNUQ1RTE5M0I4RTMyNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANudhdmaAEcfajMVJbpXe7Au3WfONhnJ3g3O63Uy9OWBPjTcfJ+E 9MjsDfiY/H072e4wu0yRGlCE8WkHT+UUB8iaC5/h6jglmQ/SFC82xVK3VS/51t0l vCZYnTe/N6t5GmJzAGVXkCohLz50eS4u/mmvLHHVm3/28h3wVyQrZAJyQ20PDTo7 dM/XEjkqdUdh4JCa3b4VNQvz2y2pUZ07qfqjVNHpt77VrKSasKBHNIkrNMbmjlyv 9vC0rybLiJRMlGHS+aMMvre4aH/5yjIg/pPXgOOr0M9QJ/uejOisfwWfV/wwo39c vi6bXS59XugMi7NWqgys0TEt4vlFwuzuXvsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQVdcY5xM7gMVx4VzA99dXhk7jjJTAfBgNVHSMEGDAWgBSNRt34ikbk7C2am6tf 8TBf0FfxODAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMjgvalViZC1JcEc1T3d0bXB1clhfRXdYOUJYOFRnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalViZC1JcEc1T3d0bXB1clhfRXdY OUJYOFRnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTI4L0ZYWEdPY1RPNERGY2VGY3dQZlhWNFpPNDR5VS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACZ/ncwDQYJKoZIhvcNAQELBQADggEBAEvhe51h12xhhLOfnhc2REBr 0mmmtIHm3YBE4ci8YZ85xwKx8TATGk6OvCyYP7MaLXYi30qzTSHWB+pr/0qy3kCR qa67RUcwWKftdGjTOCtibSZFD7PmlImz2gRkOa6p8VdHmT2Gl3TfBm8WnsZMd2Uz UFhHONcwPU9+MkRbFrGo/Dbluu7cLEVSsk7FfDPJkj78s6IZkTCjTluPrXhLz+55 YVAhHsHZVXSd34lNj+fFYS5ZXBezmaZLoIUhJnWFfVeZm4cM0gCTGdHCEIXiDZI1 fjHF1RJPngbxhvxzCin2SxGlATdJzSQF5YJ6rbpcN7G0330LOW3u2vhxK8hIk44= -----END CERTIFICATE-----Generated at Sun Feb 16 20:41:38 2025 by rpki-client