$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/HVohPS3S2eDheQ03a8VGcUbUro0.roa File: HVohPS3S2eDheQ03a8VGcUbUro0.roa (raw, json) Hash identifier: NUToOWN17vXy+8fwpLU3tN47M2TDv/DgtWZmacc9bWQ= Subject key identifier: 1D:5A:21:3D:2D:D2:D9:E0:E1:79:0D:37:6B:C5:46:71:46:D4:AE:8D Certificate issuer: /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Certificate serial: 5C Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/HVohPS3S2eDheQ03a8VGcUbUro0.roa Signing time: Sat 30 Nov 2024 01:28:16 +0000 ROA not before: Sat 30 Nov 2024 01:28:16 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 59125 IP address blocks: 218.223.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Validity Not Before: Nov 30 01:28:16 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=1D5A213D2DD2D9E0E1790D376BC5467146D4AE8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:19:c9:11:b7:2c:16:bd:74:4e:10:95:3f:89: ec:10:4a:2c:14:35:31:be:b1:e0:cd:87:8a:24:77: b3:9b:b8:62:22:bf:83:8f:4a:14:83:d9:df:32:b7: eb:b1:83:20:00:a4:95:2f:78:4f:8e:84:40:46:38: 1c:f9:57:64:61:44:16:18:62:fb:2e:45:41:cd:a0: ee:22:c8:88:c6:28:a1:d0:05:d9:95:d9:04:f3:4a: b4:7c:66:ea:87:6d:30:31:df:ba:f6:33:79:0e:2d: 3d:d3:b9:b0:dd:f5:6e:67:71:d2:ae:c4:2c:af:e7: cc:71:35:74:77:7f:00:2d:a0:26:65:a6:95:47:20: 7d:9b:67:a3:52:28:2e:fd:a4:f1:d3:39:12:29:03: 35:fa:8a:4f:17:fd:fd:60:0c:86:79:7f:6e:de:1e: 7f:8a:d3:54:67:40:73:e2:35:da:dc:10:ca:f6:8b: 0b:a6:35:a6:35:f1:a7:1c:d9:c7:a1:18:3e:ae:a0: 75:19:4f:48:b5:96:c7:f4:d4:1f:bf:40:82:4f:08: 88:40:c1:11:8c:05:a6:f4:a9:3b:60:21:c2:ec:4f: 93:62:7c:eb:12:ef:a2:36:15:86:d9:7e:8e:26:d9: a0:20:1b:f8:60:8e:b0:15:ea:76:73:74:05:69:c2: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5A:21:3D:2D:D2:D9:E0:E1:79:0D:37:6B:C5:46:71:46:D4:AE:8D X509v3 Authority Key Identifier: keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/HVohPS3S2eDheQ03a8VGcUbUro0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.223.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0e:73:27:4e:d7:78:c3:f0:03:44:da:cf:dc:3b:1d:5e:da:be: 0e:b0:5e:74:d8:ee:7e:d1:d1:b0:2c:ad:f6:17:83:d4:2c:4c: df:4f:5b:d5:b5:f7:93:e2:8e:21:87:be:be:4c:3c:ed:a6:1f: 81:1f:65:c2:41:91:da:af:7d:8d:fc:79:1f:c4:c5:41:94:92: e6:3d:5b:09:f1:82:a6:d3:2f:1b:a2:cc:27:42:11:49:d0:39: ca:27:1e:1a:9e:78:f1:e6:a0:33:70:01:fa:94:96:f3:c7:3d: 68:94:39:ec:c1:51:9d:56:8c:1d:68:e4:5b:28:1c:e8:5d:35: 58:b4:2a:51:f0:b9:5f:69:59:ae:b9:70:34:2d:39:d6:55:68: 83:3e:30:b7:f5:89:53:54:32:49:73:9d:fb:09:aa:98:1e:6d: e7:9a:56:74:de:88:8c:e9:6b:4c:6c:a6:be:6e:a7:7d:e3:8d: 8a:2e:b7:1f:6e:15:6e:fa:b6:c4:6a:79:1f:8f:f6:ee:e4:b7: b9:18:75:44:fb:71:d5:26:af:f4:41:81:02:3b:89:68:61:83: d0:43:d4:63:87:47:ad:42:0c:98:64:d8:94:97:25:69:3b:98: 6d:8e:5f:57:3f:ac:2a:f0:c8:83:c1:de:15:bf:8d:25:93:6c: 8c:37:92:16 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjIw QTA2QTIxMjA1ODIwQjI4RkQwNkNFMEE4NEYwM0ZDREFFQkM1MB4XDTI0MTEzMDAx MjgxNloXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoMUQ1QTIxM0QyREQyRDlF MEUxNzkwRDM3NkJDNTQ2NzE0NkQ0QUU4RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPEZyRG3LBa9dE4QlT+J7BBKLBQ1Mb6x4M2HiiR3s5u4YiK/g49K FIPZ3zK367GDIACklS94T46EQEY4HPlXZGFEFhhi+y5FQc2g7iLIiMYoodAF2ZXZ BPNKtHxm6odtMDHfuvYzeQ4tPdO5sN31bmdx0q7ELK/nzHE1dHd/AC2gJmWmlUcg fZtno1IoLv2k8dM5EikDNfqKTxf9/WAMhnl/bt4ef4rTVGdAc+I12twQyvaLC6Y1 pjXxpxzZx6EYPq6gdRlPSLWWx/TUH79Agk8IiEDBEYwFpvSpO2AhwuxPk2J86xLv ojYVhtl+jibZoCAb+GCOsBXqdnN0BWnCx/kCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQdWiE9LdLZ4OF5DTdrxUZxRtSujTAfBgNVHSMEGDAWgBQbIKBqISBYILKP0Gzg qE8D/NrrxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96YTY4VS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96 YTY4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvSFZvaFBTM1MyZURoZVEwM2E4VkdjVWJVcm8wLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBtrfgDANBgkqhkiG9w0BAQsFAAOCAQEADnMnTtd4w/ADRNrP3DsdXtq+DrBe dNjuftHRsCyt9heD1CxM309b1bX3k+KOIYe+vkw87aYfgR9lwkGR2q99jfx5H8TF QZSS5j1bCfGCptMvG6LMJ0IRSdA5yiceGp548eagM3AB+pSW88c9aJQ57MFRnVaM HWjkWygc6F01WLQqUfC5X2lZrrlwNC051lVogz4wt/WJU1QySXOd+wmqmB5t55pW dN6IjOlrTGymvm6nfeONii63H24Vbvq2xGp5H4/27uS3uRh1RPtx1Sav9EGBAjuJ aGGD0EPUY4dHrUIMmGTYlJclaTuYbY5fVz+sKvDIg8HeFb+NJZNsjDeSFg== -----END CERTIFICATE-----Generated at Sun Apr 6 01:46:42 2025 by rpki-client