$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/uHBFBtanXu01B3qWyUlvd0GQLAk.roa File: uHBFBtanXu01B3qWyUlvd0GQLAk.roa (raw, json) Hash identifier: H3EW8CUnmc9y0R9Wi2KAumlRAya39iiUmqycD8CvGF4= Subject key identifier: B8:70:45:06:D6:A7:5E:ED:35:07:7A:96:C9:49:6F:77:41:90:2C:09 Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC Certificate serial: 56 Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/uHBFBtanXu01B3qWyUlvd0GQLAk.roa Signing time: Sat 30 Nov 2024 01:29:28 +0000 ROA not before: Sat 30 Nov 2024 01:29:28 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2915 IP address blocks: 61.195.32.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC Validity Not Before: Nov 30 01:29:28 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=B8704506D6A75EED35077A96C9496F7741902C09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:69:dc:0a:7c:e7:bb:49:df:18:d7:d1:cc: 0d:44:c6:93:fb:87:ab:89:d1:cb:13:8f:38:da:87: f9:d0:f3:8a:61:c1:c6:cb:64:eb:9e:dc:c5:58:b6: e6:0d:df:50:47:8f:99:30:eb:6b:44:a4:08:08:02: 9b:18:f7:c7:b0:f3:c1:da:8c:aa:1c:f9:40:58:07: 25:5d:56:a8:37:04:c4:b3:22:df:bf:87:c8:45:b4: c5:f9:1e:8e:c3:ba:60:90:1f:de:8e:cf:41:84:31: 28:5b:61:b2:27:9d:82:35:9f:db:28:45:d8:cd:d9: 8b:f1:5f:aa:fe:02:43:be:26:6a:5b:37:59:be:dd: d3:cb:ce:ac:e3:a2:a4:f4:b7:d5:d3:45:9d:a5:59: 08:6b:20:7c:ba:3d:2e:e5:47:ac:79:47:e8:93:36: 0f:52:a5:96:bc:e4:aa:4c:e5:d7:d7:18:d9:e7:a8: c3:d2:d6:d6:a6:6d:69:28:37:d9:e6:5c:62:09:e3: 0b:f3:76:21:8b:aa:c8:75:10:1a:ff:8e:57:93:2c: 60:ab:35:16:fc:a1:5b:0b:ab:45:69:99:c8:a7:a4: a6:3a:7f:5f:17:90:63:42:f4:ae:cf:45:38:b3:80: 69:5b:71:7e:63:e1:5f:5b:63:ed:0d:46:7f:b8:f5: 0f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:70:45:06:D6:A7:5E:ED:35:07:7A:96:C9:49:6F:77:41:90:2C:09 X509v3 Authority Key Identifier: keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/uHBFBtanXu01B3qWyUlvd0GQLAk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.32.0/21 Signature Algorithm: sha256WithRSAEncryption 41:9a:d1:8f:85:65:2d:0f:a0:29:d7:38:e0:a0:6c:6f:c7:f2: 5a:b4:3a:05:3c:4c:89:26:52:c8:0c:e4:50:e5:44:3f:1c:9f: 5c:79:f8:1c:46:28:06:36:d8:e9:3b:a4:98:f7:d3:7d:8b:e8: f2:9a:63:9e:c5:94:a7:33:b5:06:0f:ce:f6:f8:4a:a0:fb:08: 0e:81:e3:3e:43:f4:4e:4f:e3:8e:f0:0e:8b:e9:e4:a5:c6:56: 8f:09:d5:dc:39:46:6d:fb:f1:33:bd:01:d2:44:06:e7:8d:ec: a4:92:2b:88:92:fa:c9:8d:54:88:f6:a5:2a:1a:51:10:25:8f: f0:b1:b8:9c:9c:1f:c6:2c:7f:93:21:aa:7a:f7:31:1c:bc:c5: c1:63:89:31:42:1b:82:0e:46:00:dd:73:77:b2:0d:5e:47:42: 1d:94:33:34:29:10:b7:ce:27:a0:c7:5a:94:1d:05:9a:2f:bc: 39:33:c1:49:e8:10:68:7d:d8:d9:c3:3e:2f:66:ee:63:bb:81: 04:bb:5f:79:b4:4c:ad:3b:03:99:5e:6d:d4:2d:7e:17:86:b5: 82:79:77:df:79:ed:bd:8f:fa:52:b0:54:37:59:8b:b0:0f:d0: 5f:54:25:6d:be:3a:2e:81:cd:3c:9c:b9:5b:58:64:bd:cc:f9: 3c:05:0d:2f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MUY3 NkZBMDc3MzVGNjg1OTkxRkM4ODJDODg1RTIxRUZCQjE2MUJDMB4XDTI0MTEzMDAx MjkyOFoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQjg3MDQ1MDZENkE3NUVF RDM1MDc3QTk2Qzk0OTZGNzc0MTkwMkMwOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMR0adwKfOe7Sd8Y19HMDUTGk/uHq4nRyxOPONqH+dDzimHBxstk 657cxVi25g3fUEePmTDra0SkCAgCmxj3x7DzwdqMqhz5QFgHJV1WqDcExLMi37+H yEW0xfkejsO6YJAf3o7PQYQxKFthsiedgjWf2yhF2M3Zi/Ffqv4CQ74mals3Wb7d 08vOrOOipPS31dNFnaVZCGsgfLo9LuVHrHlH6JM2D1Kllrzkqkzl19cY2eeow9LW 1qZtaSg32eZcYgnjC/N2IYuqyHUQGv+OV5MsYKs1FvyhWwurRWmZyKekpjp/XxeQ Y0L0rs9FOLOAaVtxfmPhX1tj7Q1Gf7j1D/UCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS4cEUG1qde7TUHepbJSW93QZAsCTAfBgNVHSMEGDAWgBRx92+gdzX2hZkfyILI heIe+7FhvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTk3L2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1eFlidy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1 eFlidy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81OTcvdUhCRkJ0YW5YdTAxQjNxV3lVbHZkMEdRTEFrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAz3DIDANBgkqhkiG9w0BAQsFAAOCAQEAQZrRj4VlLQ+gKdc44KBsb8fyWrQ6 BTxMiSZSyAzkUOVEPxyfXHn4HEYoBjbY6TukmPfTfYvo8ppjnsWUpzO1Bg/O9vhK oPsIDoHjPkP0Tk/jjvAOi+nkpcZWjwnV3DlGbfvxM70B0kQG543spJIriJL6yY1U iPalKhpRECWP8LG4nJwfxix/kyGqevcxHLzFwWOJMUIbgg5GAN1zd7INXkdCHZQz NCkQt84noMdalB0Fmi+8OTPBSegQaH3Y2cM+L2buY7uBBLtfebRMrTsDmV5t1C1+ F4a1gnl333ntvY/6UrBUN1mLsA/QX1Qlbb46LoHNPJy5W1hkvcz5PAUNLw== -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:44 2025 by rpki-client