$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/vNHXPCFCI9ubOlO6hQ3u4_kIvgk.roa File: vNHXPCFCI9ubOlO6hQ3u4_kIvgk.roa (raw, json) Hash identifier: ggA4vEd7n3nR4hx0ir7a2KG2wkeL1TlETfuiLdsgesI= Subject key identifier: BC:D1:D7:3C:21:42:23:DB:9B:3A:53:BA:85:0D:EE:E3:F9:08:BE:09 Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Certificate serial: 74 Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/vNHXPCFCI9ubOlO6hQ3u4_kIvgk.roa Signing time: Sat 30 Nov 2024 01:31:49 +0000 ROA not before: Sat 30 Nov 2024 01:31:49 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 17676 IP address blocks: 210.143.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Validity Not Before: Nov 30 01:31:49 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=BCD1D73C214223DB9B3A53BA850DEEE3F908BE09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:11:8a:c6:73:02:30:61:98:7a:bc:a6:e3: 88:46:27:b3:f5:b9:7b:12:07:26:74:ad:e7:8f:ed: 67:3d:b9:96:1f:30:82:9e:8c:b0:af:2b:e7:7d:75: 74:b8:29:f8:4c:a6:b7:aa:7c:bd:fe:9e:c9:2b:b2: 82:ab:df:c8:7b:a4:9a:be:6a:f7:e8:71:e9:80:1c: 5c:10:2b:05:39:81:9c:e8:21:99:de:6b:9f:b7:ce: 85:25:9c:14:8d:12:0f:61:72:eb:a1:81:fa:50:a3: cd:c5:27:c3:fe:ae:0f:33:35:09:ee:13:5e:10:04: 3e:90:26:6c:80:cb:26:cb:06:33:a5:53:b1:85:6a: c6:cb:77:0e:d3:02:ed:02:41:38:42:ea:4f:c0:4e: ae:c5:c9:68:73:6f:8c:91:90:70:b9:d9:2e:35:80: a5:39:30:f5:fc:8f:cd:a0:a9:9b:d4:93:db:7a:d7: 46:45:0a:49:75:a6:6b:91:45:b3:2d:20:2c:e9:83: b5:ca:d9:d5:d1:ec:fc:1e:3d:35:b8:84:cc:a2:45: ce:23:75:95:2c:b8:dd:61:d4:d2:5c:a9:a2:ce:5b: 57:c8:4a:82:64:22:fb:20:a4:92:f7:63:e1:6d:ab: 6b:5c:b4:d8:e4:03:bb:65:0c:39:0f:47:67:c3:c3: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D1:D7:3C:21:42:23:DB:9B:3A:53:BA:85:0D:EE:E3:F9:08:BE:09 X509v3 Authority Key Identifier: keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/vNHXPCFCI9ubOlO6hQ3u4_kIvgk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.143.128.0/20 Signature Algorithm: sha256WithRSAEncryption d2:33:d2:90:b6:bb:08:90:eb:b7:21:3b:67:48:be:f7:10:04: 7b:91:08:4e:39:28:38:09:83:a7:82:f6:af:34:c3:65:7b:8a: 43:0e:1e:1e:2b:b4:84:18:f9:6f:4d:f9:35:01:8a:c9:9f:7b: f9:c4:49:85:84:b7:c7:32:87:be:80:87:01:15:be:88:bc:34: 0f:d3:54:f0:cc:ac:7d:2e:f9:d9:01:19:be:7e:07:ac:53:fb: 06:fa:6d:54:f4:92:3c:b7:e7:fe:3f:a3:09:69:94:92:2c:81: 37:f6:47:70:fc:49:df:e5:42:1e:a3:b1:1e:46:d3:d2:29:2a: 14:b8:1b:d9:86:33:e5:a6:05:27:ab:ec:66:52:a1:dd:98:3c: 42:71:24:2e:0c:01:62:19:9e:66:fc:b9:da:24:60:7f:b4:47: 98:75:3b:50:a5:11:22:55:7b:21:20:b0:e7:9f:ac:81:2c:95: f6:5d:7e:cf:c7:29:48:68:86:86:f9:63:42:78:b7:63:52:11: 3a:45:bf:50:5d:7a:1f:25:ee:f3:48:25:60:17:6e:42:1b:7c: f9:b3:94:6b:09:af:7f:ac:c4:dc:44:3c:6c:f9:de:6a:eb:3e: 7f:b6:47:c6:b7:98:7c:99:e0:df:fb:e8:cb:90:b7:83:c5:76: c6:69:6c:23 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTI0MTEzMDAx MzE0OVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQkNEMUQ3M0MyMTQyMjNE QjlCM0E1M0JBODUwREVFRTNGOTA4QkUwOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMDqEYrGcwIwYZh6vKbjiEYns/W5exIHJnSt54/tZz25lh8wgp6M sK8r5311dLgp+Eymt6p8vf6eySuygqvfyHukmr5q9+hx6YAcXBArBTmBnOghmd5r n7fOhSWcFI0SD2Fy66GB+lCjzcUnw/6uDzM1Ce4TXhAEPpAmbIDLJssGM6VTsYVq xst3DtMC7QJBOELqT8BOrsXJaHNvjJGQcLnZLjWApTkw9fyPzaCpm9ST23rXRkUK SXWma5FFsy0gLOmDtcrZ1dHs/B49NbiEzKJFziN1lSy43WHU0lypos5bV8hKgmQi +yCkkvdj4W2ra1y02OQDu2UMOQ9HZ8PD2ysCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS80dc8IUIj25s6U7qFDe7j+Qi+CTAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3 LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDAvdk5IWFBDRkNJOXViT2xPNmhRM3U0X2tJdmdrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNKPgDANBgkqhkiG9w0BAQsFAAOCAQEA0jPSkLa7CJDrtyE7Z0i+9xAEe5EI TjkoOAmDp4L2rzTDZXuKQw4eHiu0hBj5b035NQGKyZ97+cRJhYS3xzKHvoCHARW+ iLw0D9NU8MysfS752QEZvn4HrFP7BvptVPSSPLfn/j+jCWmUkiyBN/ZHcPxJ3+VC HqOxHkbT0ikqFLgb2YYz5aYFJ6vsZlKh3Zg8QnEkLgwBYhmeZvy52iRgf7RHmHU7 UKURIlV7ISCw55+sgSyV9l1+z8cpSGiGhvljQni3Y1IROkW/UF16HyXu80glYBdu Qht8+bOUawmvf6zE3EQ8bPneaus+f7ZHxreYfJng3/voy5C3g8V2xmlsIw== -----END CERTIFICATE-----Generated at Sat Apr 5 17:41:53 2025 by rpki-client