$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/Kkz5Lzr_K_BVYypO61h4_QTc9Fg.roa File: Kkz5Lzr_K_BVYypO61h4_QTc9Fg.roa (raw, json) Hash identifier: x7lDtD2d742A+6rlrVTsT22y7MlHEnvvApODlMh6LrY= Subject key identifier: 2A:4C:F9:2F:3A:FF:2B:F0:55:63:2A:4E:EB:58:78:FD:04:DC:F4:58 Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697 Certificate serial: 51 Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/Kkz5Lzr_K_BVYypO61h4_QTc9Fg.roa Signing time: Fri 27 Sep 2024 00:00:23 +0000 ROA not before: Fri 27 Sep 2024 00:00:23 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 2907 IP address blocks: 210.156.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697 Validity Not Before: Sep 27 00:00:23 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=2A4CF92F3AFF2BF055632A4EEB5878FD04DCF458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:91:80:a9:f3:85:9d:81:61:7e:a7:fe:4a: c4:f8:4d:57:8c:db:38:f6:70:eb:28:d6:47:3a:88: b6:a6:90:51:06:cb:b3:a1:f2:3e:ab:fe:e5:ff:e6: a3:3b:8e:09:82:6b:69:5b:54:5f:44:6c:a6:94:8a: 89:4a:ab:52:b2:60:ea:69:ea:fd:8b:27:c7:1a:40: ff:9b:95:60:64:48:e4:c0:1b:3f:d3:e7:5e:f0:72: e5:10:8c:3d:df:a9:1a:52:7b:60:bf:00:2c:e8:2a: 05:fd:fa:ac:b2:8c:80:fc:48:df:9d:bd:b8:d2:64: ed:ee:53:9f:2b:34:18:c2:d2:4c:60:15:bf:98:fa: 6a:c1:4d:28:eb:2b:ef:d8:5b:6c:86:e2:21:ce:7f: 75:69:cd:25:9d:4a:35:53:c4:2d:b1:d0:c8:f1:d8: bb:46:01:67:99:43:11:ae:a1:5b:a7:79:a7:06:14: 0a:e7:2a:48:50:e0:e5:1d:f3:88:11:c8:00:24:71: 7b:11:ab:f4:57:bf:a5:c5:84:d3:de:fa:e9:7a:16: 17:2b:95:0d:4a:af:3f:e2:7c:d5:58:9c:c9:58:2d: c9:7f:87:79:8a:13:b9:a7:f8:21:37:67:eb:93:2a: 3a:ab:df:c6:2f:90:2c:8a:ba:d0:0f:d9:43:6e:3e: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4C:F9:2F:3A:FF:2B:F0:55:63:2A:4E:EB:58:78:FD:04:DC:F4:58 X509v3 Authority Key Identifier: keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/Kkz5Lzr_K_BVYypO61h4_QTc9Fg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.156.32.0/19 Signature Algorithm: sha256WithRSAEncryption 45:20:a8:68:64:57:36:db:af:2c:df:c6:4f:9e:93:e5:e4:eb: 8a:87:21:c8:d3:b0:f5:08:ce:b9:4d:15:e7:eb:e0:6e:6e:fc: 04:76:b1:67:fe:d1:2e:56:c7:5e:c2:b5:fc:66:17:b4:e4:40: 2a:ce:0d:0a:37:5f:9b:6d:5e:03:b8:5d:db:56:c2:c4:7c:9b: 5e:16:e9:d3:08:2e:65:0f:44:1d:04:44:d4:54:fd:aa:df:ad: 57:a7:f6:fe:e6:15:77:79:ee:64:8f:48:85:d4:99:4a:21:0b: a2:ae:75:d3:22:fa:bc:65:fa:0f:b3:43:c7:2e:67:a9:ec:78: 01:d0:5b:3c:d9:61:57:58:5d:f4:d8:ec:ce:ff:6c:18:b7:6b: f2:03:4b:a5:bd:71:0d:b3:cf:db:b5:66:97:77:80:f5:98:b9: 81:84:ac:39:53:f0:fd:f8:be:32:7d:8b:25:4b:85:41:17:47: ca:9d:6c:4f:33:6c:2f:6e:f4:b9:db:b8:7d:4e:86:c2:f9:b9: 85:25:1a:86:f3:f6:c3:6b:0c:e7:e4:f9:54:6a:b1:4b:c6:aa: cf:1f:f4:a9:eb:41:ae:13:cd:08:80:23:b5:12:01:e7:53:2e: 4a:b5:18:d1:16:84:6b:b1:77:78:94:15:dd:ef:4a:9d:b0:e1: 76:6b:9d:01 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTg5 RUVDQ0M2NzE4QzY1MjYzOENGNEU5MkM2MDAwM0M1NkZCNjk3MB4XDTI0MDkyNzAw MDAyM1oXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoMkE0Q0Y5MkYzQUZGMkJG MDU1NjMyQTRFRUI1ODc4RkQwNERDRjQ1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALyOkYCp84WdgWF+p/5KxPhNV4zbOPZw6yjWRzqItqaQUQbLs6Hy Pqv+5f/mozuOCYJraVtUX0RsppSKiUqrUrJg6mnq/YsnxxpA/5uVYGRI5MAbP9Pn XvBy5RCMPd+pGlJ7YL8ALOgqBf36rLKMgPxI3529uNJk7e5Tnys0GMLSTGAVv5j6 asFNKOsr79hbbIbiIc5/dWnNJZ1KNVPELbHQyPHYu0YBZ5lDEa6hW6d5pwYUCucq SFDg5R3ziBHIACRxexGr9Fe/pcWE09766XoWFyuVDUqvP+J81VicyVgtyX+HeYoT uaf4ITdn65MqOqvfxi+QLIq60A/ZQ24+oKsCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBQqTPkvOv8r8FVjKk7rWHj9BNz0WDAfBgNVHSMEGDAWgBQVie7MxnGMZSY4z06S xgADxW+2lzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2dHBjLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2 dHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEyL0trejVMenJfS19CVll5cE82MWg0X1FUYzlGZy5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAXSnCAwDQYJKoZIhvcNAQELBQADggEBAEUgqGhkVzbbryzfxk+ek+Xk64qHIcjT sPUIzrlNFefr4G5u/AR2sWf+0S5Wx17CtfxmF7TkQCrODQo3X5ttXgO4XdtWwsR8 m14W6dMILmUPRB0ERNRU/arfrVen9v7mFXd57mSPSIXUmUohC6KuddMi+rxl+g+z Q8cuZ6nseAHQWzzZYVdYXfTY7M7/bBi3a/IDS6W9cQ2zz9u1Zpd3gPWYuYGErDlT 8P34vjJ9iyVLhUEXR8qdbE8zbC9u9LnbuH1OhsL5uYUlGobz9sNrDOfk+VRqsUvG qs8f9KnrQa4TzQiAI7USAedTLkq1GNEWhGuxd3iUFd3vSp2w4XZrnQE= -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:40 2025 by rpki-client