$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/_alshHXK4XlHFYU-5JDahf_Qcr4.roa File: _alshHXK4XlHFYU-5JDahf_Qcr4.roa (raw, json) Hash identifier: Q+zMAvOgdI04ltj1IKAackdqLy7iaraQxFFht+So/KQ= Subject key identifier: FD:A9:6C:84:75:CA:E1:79:47:15:85:3E:E4:90:DA:85:FF:D0:72:BE Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Certificate serial: 76 Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/_alshHXK4XlHFYU-5JDahf_Qcr4.roa Signing time: Sat 30 Nov 2024 01:31:49 +0000 ROA not before: Sat 30 Nov 2024 01:31:49 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 17676 IP address blocks: 126.144.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Validity Not Before: Nov 30 01:31:49 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=FDA96C8475CAE1794715853EE490DA85FFD072BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:db:a2:6d:db:c3:fc:c0:37:dc:56:3a:71: f6:65:c5:1d:24:3f:31:79:7a:3f:0f:c9:86:4d:f8: e9:02:18:22:ac:d4:f1:42:b5:66:1b:4c:53:23:57: d9:43:f1:43:69:42:fc:01:cd:89:69:0c:4b:cd:a2: 56:d9:63:e4:03:2f:fb:6a:e1:f9:46:0f:dd:7d:a0: 40:6a:e8:79:7a:93:32:af:6c:53:61:76:a1:3e:74: 11:06:f2:4f:8d:91:52:b8:3d:32:3c:80:5b:4c:bb: c3:bd:0f:1b:3a:e7:48:66:cf:b0:b4:e2:ab:18:2c: 5e:3e:fc:f8:a6:9f:bd:1f:0f:db:62:64:13:58:3a: 7d:9e:5a:2e:9a:f9:53:31:e7:82:4f:65:89:f3:23: 07:2a:a8:46:1e:a1:81:7a:3c:ec:fd:d8:0f:20:19: 8e:ad:48:4a:20:f3:65:9a:c1:18:8f:71:59:77:33: fe:03:78:04:7b:17:94:86:ae:f7:7a:e3:10:70:6d: 88:2c:14:c9:c2:78:17:57:74:1f:bb:89:53:4e:81: ae:44:51:5f:fc:22:8d:8d:c9:24:0d:e0:bf:7a:8f: 0d:8c:cd:4c:38:0b:e3:33:e6:74:57:65:ed:22:92: 8a:8e:61:04:e6:c3:42:18:90:6a:54:a9:f5:99:dd: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A9:6C:84:75:CA:E1:79:47:15:85:3E:E4:90:DA:85:FF:D0:72:BE X509v3 Authority Key Identifier: keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/_alshHXK4XlHFYU-5JDahf_Qcr4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 126.144.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6d:06:bc:cc:40:d5:f2:b6:14:c2:d7:83:15:cf:0a:3c:a0:35: 5c:c4:59:2d:7a:e8:ff:75:33:d6:20:30:8d:00:e7:b7:74:fa: 9e:59:a2:bf:19:fe:46:13:9d:a7:73:2c:0b:60:ff:08:18:44: 36:47:ef:d4:d4:e2:4d:d6:6c:7d:fb:cf:9a:2b:0b:47:2d:39: ef:fc:7e:f5:28:ce:75:32:57:4d:3c:0e:ef:ef:d6:4a:40:11: 54:5e:ac:88:c8:72:c5:06:ab:7b:82:d5:02:94:89:d3:76:cb: 7c:82:6b:cc:a8:bb:1e:5b:6e:19:47:f6:a9:90:88:67:9b:fc: 3f:d2:30:22:09:dd:f8:37:ec:10:7f:40:50:8c:13:0b:15:85: d9:b6:32:9c:65:2c:ac:e3:5d:91:07:31:33:f5:d0:9b:45:4f: 11:c3:fc:b1:55:e4:f3:1d:80:78:d6:dd:d4:da:c2:10:ad:1c: d9:2a:af:4f:38:83:45:92:06:b8:9a:1a:67:75:66:aa:8f:ef: 61:2b:a9:1f:9f:0b:33:68:8e:82:35:ac:34:3e:0a:69:c6:8c: 68:2e:dd:54:52:63:30:c3:c6:65:86:a3:cf:41:0f:6c:76:92: cf:19:49:29:29:86:38:02:ee:ca:c1:2c:a5:73:96:a1:dd:37: 83:4a:d1:99 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTI0MTEzMDAx MzE0OVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoRkRBOTZDODQ3NUNBRTE3 OTQ3MTU4NTNFRTQ5MERBODVGRkQwNzJCRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALB626Jt28P8wDfcVjpx9mXFHSQ/MXl6Pw/Jhk346QIYIqzU8UK1 ZhtMUyNX2UPxQ2lC/AHNiWkMS82iVtlj5AMv+2rh+UYP3X2gQGroeXqTMq9sU2F2 oT50EQbyT42RUrg9MjyAW0y7w70PGzrnSGbPsLTiqxgsXj78+KafvR8P22JkE1g6 fZ5aLpr5UzHngk9lifMjByqoRh6hgXo87P3YDyAZjq1ISiDzZZrBGI9xWXcz/gN4 BHsXlIau93rjEHBtiCwUycJ4F1d0H7uJU06BrkRRX/wijY3JJA3gv3qPDYzNTDgL 4zPmdFdl7SKSio5hBObDQhiQalSp9ZndAqECAwEAAaOCAiMwggIfMB0GA1UdDgQW BBT9qWyEdcrheUcVhT7kkNqF/9ByvjAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3 LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDAvX2Fsc2hIWEs0WGxIRllVLTVKRGFoZl9RY3I0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAH6QMA0GCSqGSIb3DQEBCwUAA4IBAQBtBrzMQNXythTC14MVzwo8oDVcxFkt euj/dTPWIDCNAOe3dPqeWaK/Gf5GE52ncywLYP8IGEQ2R+/U1OJN1mx9+8+aKwtH LTnv/H71KM51MldNPA7v79ZKQBFUXqyIyHLFBqt7gtUClInTdst8gmvMqLseW24Z R/apkIhnm/w/0jAiCd34N+wQf0BQjBMLFYXZtjKcZSys412RBzEz9dCbRU8Rw/yx VeTzHYB41t3U2sIQrRzZKq9POINFkga4mhpndWaqj+9hK6kfnwszaI6CNaw0Pgpp xoxoLt1UUmMww8ZlhqPPQQ9sdpLPGUkpKYY4Au7KwSylc5ah3TeDStGZ -----END CERTIFICATE-----Generated at Sat Apr 5 17:31:07 2025 by rpki-client