$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/NnKyw5OTpwe1qHeU5j-bAS3nvV8.roa File: NnKyw5OTpwe1qHeU5j-bAS3nvV8.roa (raw, json) Hash identifier: OXVmUFlcncBzeufBoP34EEeIOC8pU3uQjYzPZ2OcaIU= Subject key identifier: 36:72:B2:C3:93:93:A7:07:B5:A8:77:94:E6:3F:9B:01:2D:E7:BD:5F Certificate issuer: /CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10 Certificate serial: 1F Authority key identifier: 49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/NnKyw5OTpwe1qHeU5j-bAS3nvV8.roa Signing time: Sat 31 Aug 2024 01:30:36 +0000 ROA not before: Sat 31 Aug 2024 01:30:36 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 19905 IP address blocks: 133.250.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10 Validity Not Before: Aug 31 01:30:36 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=3672B2C39393A707B5A87794E63F9B012DE7BD5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:15:d5:7b:ac:e4:58:68:98:3d:fc:7f:b4: cd:0c:ba:0a:41:46:9d:7f:99:ca:c7:9c:2c:cc:0e: 43:e1:23:88:98:fb:2c:04:a7:34:0b:f6:c7:a5:87: 51:da:22:e9:36:02:2c:dc:f6:a9:c5:d4:4b:42:27: 33:50:d1:0c:f1:6c:bf:99:e1:61:ff:ea:ea:7f:18: de:50:cf:34:0c:86:31:32:bb:53:a0:47:da:0c:40: de:53:30:68:5f:ad:69:83:d3:d8:4f:0c:12:12:71: c2:3b:26:2e:1a:42:58:85:da:a5:3e:c8:93:e8:6e: 1b:d0:4d:75:61:df:f4:b7:e1:54:2f:93:6f:06:73: 57:69:77:e2:6e:0e:36:12:af:d3:e1:0c:9f:b8:bc: 25:16:43:1b:ff:49:b7:b6:40:7a:16:c1:f3:6b:1b: 8b:97:28:c9:1d:9a:f8:15:34:41:20:63:4d:90:80: 22:06:10:e1:cf:9f:c5:04:a4:63:b9:9f:4d:51:74: c7:d6:97:06:7a:c4:5b:49:e1:f3:cf:5a:f8:f0:cc: 6c:ed:7f:7c:49:72:91:32:1d:25:84:ef:cf:9e:4c: 16:4a:48:b8:b3:ba:63:5e:9b:6d:10:96:aa:ac:57: b1:f8:6f:03:59:d3:a6:92:41:10:0a:92:7d:fc:d9: eb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:72:B2:C3:93:93:A7:07:B5:A8:77:94:E6:3F:9B:01:2D:E7:BD:5F X509v3 Authority Key Identifier: keyid:49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/NnKyw5OTpwe1qHeU5j-bAS3nvV8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.250.128.0/17 Signature Algorithm: sha256WithRSAEncryption 86:35:38:c3:df:ed:ba:ca:e8:b5:32:11:c4:7d:28:8a:0d:7f: 5a:2d:0d:4c:75:fd:7b:a3:ab:5f:e3:1a:0c:07:ff:09:72:67: c2:d5:22:26:52:5a:b7:27:7e:4c:fc:65:40:b9:19:11:dc:55: 56:3b:59:c1:f2:1f:6b:89:3b:9c:1b:ba:f0:36:7e:3c:96:bc: 2e:b7:06:78:f0:f2:7d:18:58:18:5f:b4:96:2c:b0:2c:a9:49: 4e:92:fb:f0:db:be:cf:c9:ca:f5:23:d8:be:5c:51:07:a5:7a: 13:6c:c8:62:00:30:56:4c:95:a0:91:7e:dc:40:d1:00:44:04: 75:6a:af:cc:d6:a3:16:d9:1b:49:fb:4c:3d:3f:1a:1e:e7:23: f2:f0:96:4a:be:45:13:48:bb:c8:41:6a:8a:a9:2c:8f:40:2d: 97:16:b5:b8:1b:f6:04:25:94:ef:de:9d:4b:cf:7b:b0:70:c4: 97:51:b6:be:62:56:c9:8c:54:bc:54:cd:cd:7e:41:8e:60:bc: 1e:af:d1:75:de:6e:75:52:17:b2:83:6e:e0:9f:be:ad:4d:e8: 6b:e7:0f:37:df:db:72:f0:c6:5c:c5:6a:5b:ab:b0:4c:67:0e: 27:3e:01:c5:cb:7a:7e:91:cc:e3:42:5c:04:f7:ba:ec:02:70: ad:cd:36:97 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0OUQ3 QUFBNDcwNTdCQzUwQUJERDQxMEE4RkEzOUFCREExMDAzRTEwMB4XDTI0MDgzMTAx MzAzNloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMzY3MkIyQzM5MzkzQTcw N0I1QTg3Nzk0RTYzRjlCMDEyREU3QkQ1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMAjFdV7rORYaJg9/H+0zQy6CkFGnX+ZysecLMwOQ+EjiJj7LASn NAv2x6WHUdoi6TYCLNz2qcXUS0InM1DRDPFsv5nhYf/q6n8Y3lDPNAyGMTK7U6BH 2gxA3lMwaF+taYPT2E8MEhJxwjsmLhpCWIXapT7Ik+huG9BNdWHf9LfhVC+TbwZz V2l34m4ONhKv0+EMn7i8JRZDG/9Jt7ZAehbB82sbi5coyR2a+BU0QSBjTZCAIgYQ 4c+fxQSkY7mfTVF0x9aXBnrEW0nh889a+PDMbO1/fElykTIdJYTvz55MFkpIuLO6 Y16bbRCWqqxXsfhvA1nTppJBEAqSffzZ60sCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQ2crLDk5OnB7Wod5TmP5sBLee9XzAfBgNVHSMEGDAWgBRJ16qkcFe8UKvdQQqP o5q9oQA+EDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM3MC9TZGVxcEhCWHZGQ3IzVUVLajZPYXZhRUFQaEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9TZGVxcEhCWHZGQ3IzVUVLajZPYXZh RUFQaEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM3MC9Obkt5dzVPVHB3ZTFxSGVVNWotYkFTM252Vjgucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQHhfqAMA0GCSqGSIb3DQEBCwUAA4IBAQCGNTjD3+26yui1MhHEfSiKDX9a LQ1Mdf17o6tf4xoMB/8JcmfC1SImUlq3J35M/GVAuRkR3FVWO1nB8h9riTucG7rw Nn48lrwutwZ48PJ9GFgYX7SWLLAsqUlOkvvw277Pycr1I9i+XFEHpXoTbMhiADBW TJWgkX7cQNEARAR1aq/M1qMW2RtJ+0w9Pxoe5yPy8JZKvkUTSLvIQWqKqSyPQC2X FrW4G/YEJZTv3p1Lz3uwcMSXUba+YlbJjFS8VM3NfkGOYLwer9F13m51Uheyg27g n76tTehr5w8339ty8MZcxWpbq7BMZw4nPgHFy3p+kczjQlwE97rsAnCtzTaX -----END CERTIFICATE-----Generated at Sat Apr 5 17:38:03 2025 by rpki-client