$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1188/haiMo8pDhtLVaM43CVl4ppNazLQ.roa File: haiMo8pDhtLVaM43CVl4ppNazLQ.roa (raw, json) Hash identifier: FZire+5G5U8slgvR8LYoPQcUCx0Jqo2OSD1Td2prTKI= Subject key identifier: 85:A8:8C:A3:CA:43:86:D2:D5:68:CE:37:09:59:78:A6:93:5A:CC:B4 Certificate issuer: /CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4 Certificate serial: 1D Authority key identifier: 81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/haiMo8pDhtLVaM43CVl4ppNazLQ.roa Signing time: Mon 30 Sep 2024 01:28:53 +0000 ROA not before: Mon 30 Sep 2024 01:28:53 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 0 IP address blocks: 133.252.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4 Validity Not Before: Sep 30 01:28:53 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=85A88CA3CA4386D2D568CE37095978A6935ACCB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:a9:70:f7:f9:23:28:c1:33:ec:8e:92:42: 9c:18:b4:f5:c9:5d:70:17:bc:f9:c3:fc:88:cd:20: de:9d:13:4c:78:ea:c5:0c:30:80:e1:fc:08:57:6d: 03:86:67:c3:f6:85:86:f5:dd:57:ff:7c:2d:c3:d8: df:d6:5f:5a:fd:8f:82:8d:31:16:8a:6e:3a:57:1b: d9:2b:b2:e4:af:b6:b3:e8:83:b0:72:f0:39:ad:b0: 96:91:71:ff:ca:5b:80:ae:f4:e7:e0:51:83:67:88: a2:ba:40:12:09:4e:f9:98:d9:86:ea:46:d9:a6:9b: 24:b4:e9:eb:bc:b8:2d:9a:87:a4:61:e1:ee:48:46: c1:9d:57:d1:8b:2a:bb:ad:af:15:1e:45:69:24:e5: 2b:7d:fa:00:d2:87:0b:9d:bc:55:b8:79:7a:5c:3a: a9:c0:b0:71:75:5e:ec:35:ea:bc:09:cd:ae:59:5d: df:76:56:30:af:85:02:4c:d6:cd:27:b8:3a:7e:ff: 28:8a:89:64:23:3a:4f:cf:15:3d:0b:86:e7:ae:a9: 5f:7a:ae:07:32:c1:2e:51:61:0e:a3:d1:f7:4a:01: 5e:a8:7f:3c:db:66:13:b9:81:37:25:64:5d:d6:1b: 0a:a1:3b:bb:82:56:30:12:23:d0:4e:de:d0:c8:43: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A8:8C:A3:CA:43:86:D2:D5:68:CE:37:09:59:78:A6:93:5A:CC:B4 X509v3 Authority Key Identifier: keyid:81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/haiMo8pDhtLVaM43CVl4ppNazLQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption c7:b8:2a:51:33:40:3e:0e:19:a4:c9:0a:40:6c:45:e9:90:0a: 2d:59:00:9d:8a:6e:da:56:c4:14:a9:91:24:2a:ee:bc:be:ec: 75:60:be:ac:a4:be:9f:b2:54:3c:2b:3d:bf:fd:f2:88:6f:05: 64:fb:ad:88:d1:58:1d:de:95:89:34:10:77:db:b3:1a:7c:c8: 1e:15:36:35:b5:57:58:0d:aa:cc:7f:b2:61:55:41:78:19:bd: eb:a3:c6:e9:3b:f7:05:53:12:c3:78:05:cb:29:9e:0d:f1:1a: b3:42:44:f8:ae:8e:31:ff:2d:22:98:50:cc:b5:d5:ff:5e:65: d4:56:60:b0:70:87:2b:7b:f0:76:37:b7:ba:bc:6c:ba:f8:1d: af:82:12:08:18:2d:10:f9:04:61:2f:80:d7:b8:80:55:0f:2f: 9c:81:e4:54:21:be:3b:da:c3:8d:be:d0:ec:fd:1d:a8:a3:89: 8a:1d:92:1f:5a:b8:25:39:46:2d:f4:17:4d:0c:1b:92:44:ee: 14:1b:f2:47:91:f4:4f:04:5b:ea:8a:b2:ba:02:52:c6:67:2c: 68:f7:cf:29:f6:c6:ec:14:24:94:91:14:05:83:37:da:6e:9c: dd:f7:70:1e:14:ab:7c:c9:ea:71:cd:e0:3b:d9:35:ce:95:f5: ab:3a:bf:a5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MTg4 QzAxQzhBRjRDNzg4NkZDMTk3NTA3NzlBRjU4RTVFMTMzM0U0MB4XDTI0MDkzMDAx Mjg1M1oXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoODVBODhDQTNDQTQzODZE MkQ1NjhDRTM3MDk1OTc4QTY5MzVBQ0NCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANnjqXD3+SMowTPsjpJCnBi09cldcBe8+cP8iM0g3p0TTHjqxQww gOH8CFdtA4Znw/aFhvXdV/98LcPY39ZfWv2Pgo0xFopuOlcb2Suy5K+2s+iDsHLw Oa2wlpFx/8pbgK705+BRg2eIorpAEglO+ZjZhupG2aabJLTp67y4LZqHpGHh7khG wZ1X0Ysqu62vFR5FaSTlK336ANKHC528Vbh5elw6qcCwcXVe7DXqvAnNrlld33ZW MK+FAkzWzSe4On7/KIqJZCM6T88VPQuG566pX3quBzLBLlFhDqPR90oBXqh/PNtm E7mBNyVkXdYbCqE7u4JWMBIj0E7e0MhDGCMCAwEAAaOCAiUwggIhMB0GA1UdDgQW BBSFqIyjykOG0tVozjcJWXimk1rMtDAfBgNVHSMEGDAWgBSBiMAcivTHiG/Bl1B3 mvWOXhMz5DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTE4OC9nWWpBSElyMHg0aHZ3WmRRZDVyMWpsNFRNLVEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9nWWpBSElyMHg0aHZ3WmRRZDVyMWps NFRNLVEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTE4OC9oYWlNbzhwRGh0TFZhTTQzQ1ZsNHBwTmF6TFEucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAhfwwDQYJKoZIhvcNAQELBQADggEBAMe4KlEzQD4OGaTJCkBsRemQCi1Z AJ2KbtpWxBSpkSQq7ry+7HVgvqykvp+yVDwrPb/98ohvBWT7rYjRWB3elYk0EHfb sxp8yB4VNjW1V1gNqsx/smFVQXgZveujxuk79wVTEsN4Bcspng3xGrNCRPiujjH/ LSKYUMy11f9eZdRWYLBwhyt78HY3t7q8bLr4Ha+CEggYLRD5BGEvgNe4gFUPL5yB 5FQhvjvaw42+0Oz9HaijiYodkh9auCU5Ri30F00MG5JE7hQb8keR9E8EW+qKsroC UsZnLGj3zyn2xuwUJJSRFAWDN9punN33cB4Uq3zJ6nHN4DvZNc6V9as6v6U= -----END CERTIFICATE-----Generated at Tue Oct 22 14:59:59 2024 by rpki-client on console-fra.rpki-client.org