$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/65GNbRzvgHmu0A9kpewJlBol3w0.roa File: 65GNbRzvgHmu0A9kpewJlBol3w0.roa (raw, json) Hash identifier: Wbtd58J5aifMRiVE9uFuOQeVPdYOjaqSZ45XNoA1OlY= Subject key identifier: EB:91:8D:6D:1C:EF:80:79:AE:D0:0F:64:A5:EC:09:94:1A:25:DF:0D Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Certificate serial: 6C Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/65GNbRzvgHmu0A9kpewJlBol3w0.roa Signing time: Sat 30 Nov 2024 01:31:46 +0000 ROA not before: Sat 30 Nov 2024 01:31:46 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 17676 IP address blocks: 61.203.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Validity Not Before: Nov 30 01:31:46 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=EB918D6D1CEF8079AED00F64A5EC09941A25DF0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:06:60:2d:f8:56:7d:ba:cc:f8:87:1f:f0: 16:76:12:f1:99:62:8c:b5:a4:78:2d:2c:77:13:9e: e2:32:c8:b2:05:d4:43:68:56:bd:c9:fc:ab:08:5c: 88:37:c7:14:e6:a8:2e:be:13:bc:bc:32:83:67:8c: d8:79:d8:f6:7a:eb:53:f2:e8:53:6e:50:55:d1:bf: 47:c6:70:48:cc:22:9f:7c:59:15:98:d0:5d:b7:a6: 04:34:09:a0:5c:82:92:5c:82:88:d9:a8:59:47:fd: dd:08:aa:14:ab:d3:ef:16:a8:f7:07:46:06:e4:bf: e4:df:cf:cf:90:4b:1c:bb:82:4b:9b:45:9e:d3:67: 19:bd:e3:d0:f6:2a:0b:2b:a9:eb:a9:e1:85:cd:b7: b7:c2:44:37:5d:79:b7:57:5b:14:b8:71:28:ca:2b: 45:cf:1b:86:e1:52:b4:7f:6b:15:e5:9c:64:a6:ef: 15:a8:02:fc:44:1e:f1:73:d6:61:2c:e5:fa:70:96: b0:93:2e:18:38:6c:91:37:61:a3:6e:9e:67:58:e9: 22:f0:49:ef:65:60:77:75:60:86:eb:c4:9e:42:85: 7f:d2:13:b4:f9:bb:d1:67:18:f2:47:be:99:2f:6b: fc:d9:4b:5a:65:5d:56:03:25:7c:2c:39:7d:ac:22: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:91:8D:6D:1C:EF:80:79:AE:D0:0F:64:A5:EC:09:94:1A:25:DF:0D X509v3 Authority Key Identifier: keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/65GNbRzvgHmu0A9kpewJlBol3w0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.203.128.0/20 Signature Algorithm: sha256WithRSAEncryption 56:dd:eb:74:cf:56:f9:93:8e:f5:5c:67:72:8d:11:e7:b3:9d: 68:55:a7:6a:71:b9:9c:1e:65:1e:5d:48:16:8a:89:60:0b:a1: 8a:47:36:4b:c3:5d:8a:b8:82:83:71:80:12:08:de:5e:7d:4b: 35:35:1a:bc:b2:38:60:3a:94:c1:ba:57:0c:df:c3:c9:b3:5c: 6f:da:26:fc:40:5c:3e:ea:d1:bc:e3:e9:61:90:fe:4f:a2:80: b0:c2:82:f7:6d:81:49:de:6c:fb:89:38:02:64:bc:3a:12:99: 30:67:36:98:ac:ce:7f:7b:f4:c2:6b:19:0e:72:d8:33:ac:ea: 1d:70:fd:e2:0a:5a:49:e7:c1:ba:ad:70:2b:11:dd:1a:4e:e7: 02:03:5f:fc:da:f2:46:23:e4:92:ef:76:d5:0a:67:f7:af:74: 66:67:3a:56:fc:bb:60:c0:e2:d1:0a:43:d2:55:16:38:d6:3c: b4:93:f6:e5:60:b3:31:2e:ad:ba:29:61:66:13:3e:1a:0e:29: 18:23:ee:1e:ce:1c:1d:09:a8:58:78:1f:5e:05:df:a3:ee:fe: 45:72:68:f8:b5:b4:69:2e:80:24:5b:31:f3:f7:fc:5b:7c:64: 09:ee:c7:db:0f:c0:ae:96:fb:0a:b2:21:ec:d5:3c:4f:82:6c: a1:96:37:00 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTI0MTEzMDAx MzE0NloXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoRUI5MThENkQxQ0VGODA3 OUFFRDAwRjY0QTVFQzA5OTQxQTI1REYwRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKy6BmAt+FZ9usz4hx/wFnYS8ZlijLWkeC0sdxOe4jLIsgXUQ2hW vcn8qwhciDfHFOaoLr4TvLwyg2eM2HnY9nrrU/LoU25QVdG/R8ZwSMwin3xZFZjQ XbemBDQJoFyCklyCiNmoWUf93QiqFKvT7xao9wdGBuS/5N/Pz5BLHLuCS5tFntNn Gb3j0PYqCyup66nhhc23t8JEN115t1dbFLhxKMorRc8bhuFStH9rFeWcZKbvFagC /EQe8XPWYSzl+nCWsJMuGDhskTdho26eZ1jpIvBJ72Vgd3VghuvEnkKFf9ITtPm7 0WcY8ke+mS9r/NlLWmVdVgMlfCw5fawiS/sCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTrkY1tHO+Aea7QD2Sl7AmUGiXfDTAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3 LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDAvNjVHTmJSenZnSG11MEE5a3Bld0psQm9sM3cwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD3LgDANBgkqhkiG9w0BAQsFAAOCAQEAVt3rdM9W+ZOO9Vxnco0R57OdaFWn anG5nB5lHl1IFoqJYAuhikc2S8NdiriCg3GAEgjeXn1LNTUavLI4YDqUwbpXDN/D ybNcb9om/EBcPurRvOPpYZD+T6KAsMKC922BSd5s+4k4AmS8OhKZMGc2mKzOf3v0 wmsZDnLYM6zqHXD94gpaSefBuq1wKxHdGk7nAgNf/NryRiPkku921Qpn9690Zmc6 Vvy7YMDi0QpD0lUWONY8tJP25WCzMS6tuilhZhM+Gg4pGCPuHs4cHQmoWHgfXgXf o+7+RXJo+LW0aS6AJFsx8/f8W3xkCe7H2w/Arpb7CrIh7NU8T4JsoZY3AA== -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:15 2025 by rpki-client