$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nx0EHWCduSvlODq9FqZ8G2aLAxw.roa File: nx0EHWCduSvlODq9FqZ8G2aLAxw.roa (raw, json) Hash identifier: Ri35NgLnfR/kFQMRkWfJI68VmUr4bW8FAMzGwStYdeY= Subject key identifier: 9F:1D:04:1D:60:9D:B9:2B:E5:38:3A:BD:16:A6:7C:1B:66:8B:03:1C Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 01F9 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nx0EHWCduSvlODq9FqZ8G2aLAxw.roa Signing time: Sat 31 Aug 2024 01:29:05 +0000 ROA not before: Sat 31 Aug 2024 01:29:06 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 9371 IP address blocks: 133.167.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Aug 31 01:29:06 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=9F1D041D609DB92BE5383ABD16A67C1B668B031C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dc:f1:a8:68:10:4a:e1:3d:ca:66:9e:03:a9: c2:62:21:4a:35:e0:a6:2a:6a:34:29:88:2c:41:6c: d4:f5:12:28:03:eb:43:fa:60:32:42:62:5e:a1:fa: e1:db:21:eb:40:5a:01:19:06:d2:b6:c6:df:dc:db: d9:1b:44:3b:1c:ea:80:0b:18:1f:5d:55:62:1f:bc: 93:9c:51:a5:4c:23:a9:d3:05:28:23:67:51:59:55: aa:3f:08:0f:82:61:fe:15:14:ce:fc:0f:70:f2:94: 65:16:cc:22:74:5b:33:ff:07:9a:4d:45:24:ac:bd: ad:b7:ea:bc:fd:9a:06:f1:ea:6b:fd:30:69:6a:26: e8:aa:ba:d5:ad:a0:e6:02:2e:c7:7d:49:da:f9:31: ff:24:0f:c2:71:97:66:4d:ac:49:44:f2:91:41:97: ca:fb:82:1d:36:ce:88:20:28:64:1d:ed:b3:c9:48: 08:57:93:2f:21:6f:b2:54:37:92:d1:80:bf:df:79: ee:6d:91:41:41:d0:83:9b:63:0d:2d:28:4f:fd:46: f0:d8:be:3e:54:ec:4e:cb:84:9e:2e:02:b7:8d:10: 27:96:6a:34:c5:12:c9:59:08:ff:cd:1c:c9:53:04: b3:3f:1b:b9:40:a8:03:42:52:73:a2:ef:6c:89:0d: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1D:04:1D:60:9D:B9:2B:E5:38:3A:BD:16:A6:7C:1B:66:8B:03:1C X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nx0EHWCduSvlODq9FqZ8G2aLAxw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.167.0.0/16 Signature Algorithm: sha256WithRSAEncryption ce:01:30:c7:58:0e:45:83:f1:d7:c5:88:9a:23:df:4e:5e:44: d1:12:f1:7f:6c:67:c5:4c:8e:91:fd:40:15:50:44:df:75:e8: 95:71:95:c1:6e:b5:2f:62:60:4d:e6:1a:1b:fa:f3:05:fd:6f: bc:43:0b:51:93:2b:e1:28:6b:fa:af:45:cb:21:54:fa:0b:98: e4:8d:7f:97:61:fa:c6:a8:31:35:d7:6d:f6:29:83:17:28:e5: da:d5:b8:39:21:69:30:64:f7:53:ae:1e:8d:89:8e:c7:69:dd: f9:57:1e:b3:95:63:90:db:ee:8f:22:b1:77:25:46:89:c1:cf: cc:54:b7:e0:29:db:1a:44:e5:01:ce:27:26:cc:3f:76:b0:07: a3:7b:4c:6b:4b:b4:97:b1:53:19:8e:a8:93:50:fb:17:4f:cd: 36:12:aa:ef:af:85:43:57:a9:0c:18:cd:60:6f:b7:2c:86:89: 3e:81:35:b0:b6:c3:0b:7e:24:0c:28:eb:87:d0:3e:e6:0c:1a: 6e:cd:9c:e2:d0:bf:79:20:24:56:31:6c:34:b3:0f:d7:45:ea: 56:52:25:bc:a3:39:01:16:94:9e:4e:79:43:7a:7b:eb:41:03: f4:80:17:ef:3f:93:16:85:fa:a1:dd:d4:43:b8:3d:f2:35:05: 95:56:55:8d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA4MzEw MTI5MDZaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlGMUQwNDFENjA5REI5 MkJFNTM4M0FCRDE2QTY3QzFCNjY4QjAzMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN3PGoaBBK4T3KZp4DqcJiIUo14KYqajQpiCxBbNT1EigD60P6 YDJCYl6h+uHbIetAWgEZBtK2xt/c29kbRDsc6oALGB9dVWIfvJOcUaVMI6nTBSgj Z1FZVao/CA+CYf4VFM78D3DylGUWzCJ0WzP/B5pNRSSsva236rz9mgbx6mv9MGlq JuiqutWtoOYCLsd9Sdr5Mf8kD8Jxl2ZNrElE8pFBl8r7gh02zoggKGQd7bPJSAhX ky8hb7JUN5LRgL/fee5tkUFB0IObYw0tKE/9RvDYvj5U7E7LhJ4uAreNECeWajTF EslZCP/NHMlTBLM/G7lAqANCUnOi72yJDSBrAgMBAAGjggInMIICIzAdBgNVHQ4E FgQUnx0EHWCduSvlODq9FqZ8G2aLAxwwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9ueDBFSFdDZHVTdmxPRHE5RnFaOEcyYUxBeHcu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAhacwDQYJKoZIhvcNAQELBQADggEBAM4BMMdYDkWD8dfFiJoj305e RNES8X9sZ8VMjpH9QBVQRN916JVxlcFutS9iYE3mGhv68wX9b7xDC1GTK+Eoa/qv RcshVPoLmOSNf5dh+saoMTXXbfYpgxco5drVuDkhaTBk91OuHo2Jjsdp3flXHrOV Y5Db7o8isXclRonBz8xUt+Ap2xpE5QHOJybMP3awB6N7TGtLtJexUxmOqJNQ+xdP zTYSqu+vhUNXqQwYzWBvtyyGiT6BNbC2wwt+JAwo64fQPuYMGm7NnOLQv3kgJFYx bDSzD9dF6lZSJbyjOQEWlJ5OeUN6e+tBA/SAF+8/kxaF+qHd1EO4PfI1BZVWVY0= -----END CERTIFICATE-----Generated at Sun Feb 16 22:29:04 2025 by rpki-client