$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/lRa-2ncuW0zm5mSMtjgsWgr_zOg.roa File: lRa-2ncuW0zm5mSMtjgsWgr_zOg.roa (raw, json) Hash identifier: CHLQzh5yNzBwwHryhF74708zBgk2osGRgTULI6lMHKo= Subject key identifier: 95:16:BE:DA:77:2E:5B:4C:E6:E6:64:8C:B6:38:2C:5A:0A:FF:CC:E8 Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697 Certificate serial: 4E Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/lRa-2ncuW0zm5mSMtjgsWgr_zOg.roa Signing time: Fri 27 Sep 2024 00:00:22 +0000 ROA not before: Fri 27 Sep 2024 00:00:22 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 2907 IP address blocks: 210.137.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697 Validity Not Before: Sep 27 00:00:22 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=9516BEDA772E5B4CE6E6648CB6382C5A0AFFCCE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:52:2f:25:79:31:d0:4b:8d:6a:27:ff:7e: 9d:67:d3:e6:56:01:e5:00:e5:86:be:1f:d9:9f:3c: 57:a5:fe:e1:11:2d:6b:ae:4e:db:f6:7b:f5:3f:93: 81:ad:0c:30:88:5c:c7:56:a5:03:3a:bc:14:f4:69: bd:dd:01:e8:42:83:db:7e:59:50:63:c5:5f:62:d0: 43:00:12:e6:a8:1a:2f:1b:fd:d0:17:1c:5c:b2:a8: c9:55:89:42:b7:d4:45:b9:8e:8a:32:f3:a4:12:70: 7f:5c:07:8f:16:b5:b1:79:a7:07:f3:a6:83:92:8b: 24:7e:ad:7d:bc:da:7d:96:a9:57:6b:28:de:d5:f9: 1d:53:36:37:28:86:9b:ea:ce:32:16:c6:f4:e7:e2: 8b:d0:9c:ed:cf:e7:65:f6:33:a4:0a:57:50:e4:e2: 02:e3:43:b9:36:c2:81:f9:91:54:f9:9c:55:fe:09: 50:c3:d8:62:f0:5e:ee:76:1d:aa:cc:8d:5e:3b:2b: 1d:6e:f0:7b:5b:f4:ed:72:57:f9:3d:75:c3:f0:3c: 65:17:c7:8f:88:22:de:9b:55:83:3d:ac:df:83:69: 1d:b8:8b:5d:f8:63:8c:5a:77:de:35:8f:3b:c8:22: c5:3c:8f:db:f4:fc:51:aa:bd:ed:c5:15:3b:80:a7: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:16:BE:DA:77:2E:5B:4C:E6:E6:64:8C:B6:38:2C:5A:0A:FF:CC:E8 X509v3 Authority Key Identifier: keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/lRa-2ncuW0zm5mSMtjgsWgr_zOg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8b:37:a6:32:ec:16:ed:d3:9e:3e:7a:bb:59:e5:97:b5:a9:03: 45:01:38:8a:17:fe:f7:10:53:65:07:ab:3e:68:2d:3f:18:f5: 41:e9:24:21:e3:fe:e8:eb:1f:e6:9a:66:23:f4:50:e9:0b:9b: 31:fc:fd:fd:f3:34:15:8e:f4:7c:da:bf:40:9c:29:df:7d:96: 8e:aa:fb:6b:67:43:a8:27:6e:1a:8b:78:a6:9c:2d:56:23:2b: 29:74:a9:d6:6d:7c:3c:39:82:a3:4f:a9:81:a4:3f:ea:06:14: b9:d9:ba:cf:19:b2:be:92:26:e3:0a:56:d5:15:d6:65:bd:86: e6:cd:94:6c:f0:8b:36:26:17:f4:58:63:4c:bd:fe:05:90:3b: 77:ba:20:b9:4e:e7:b2:12:3f:e5:d7:cf:01:54:d8:bf:4d:04: ba:e6:82:36:2c:50:c5:24:e6:b1:70:7d:68:f3:dc:07:a0:c4: 4e:d0:5b:60:c4:41:44:58:87:89:58:96:ca:e3:55:e8:b5:9c: 5e:2b:e1:d0:ef:8e:a3:a4:d8:80:b5:3c:77:2e:a1:36:89:44: 0e:ec:d4:47:fb:13:c4:c9:aa:33:b4:97:39:34:86:41:40:03: 2e:96:e3:95:07:23:a5:c5:2e:be:c2:15:f7:0b:31:04:4b:cc: 65:38:fc:78 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTg5 RUVDQ0M2NzE4QzY1MjYzOENGNEU5MkM2MDAwM0M1NkZCNjk3MB4XDTI0MDkyNzAw MDAyMloXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoOTUxNkJFREE3NzJFNUI0 Q0U2RTY2NDhDQjYzODJDNUEwQUZGQ0NFODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMs+Ui8leTHQS41qJ/9+nWfT5lYB5QDlhr4f2Z88V6X+4REta65O 2/Z79T+Tga0MMIhcx1alAzq8FPRpvd0B6EKD235ZUGPFX2LQQwAS5qgaLxv90Bcc XLKoyVWJQrfURbmOijLzpBJwf1wHjxa1sXmnB/Omg5KLJH6tfbzafZapV2so3tX5 HVM2NyiGm+rOMhbG9Ofii9Cc7c/nZfYzpApXUOTiAuNDuTbCgfmRVPmcVf4JUMPY YvBe7nYdqsyNXjsrHW7we1v07XJX+T11w/A8ZRfHj4gi3ptVgz2s34NpHbiLXfhj jFp33jWPO8gixTyP2/T8Uaq97cUVO4CnLi8CAwEAAaOCAiEwggIdMB0GA1UdDgQW BBSVFr7ady5bTObmZIy2OCxaCv/M6DAfBgNVHSMEGDAWgBQVie7MxnGMZSY4z06S xgADxW+2lzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2dHBjLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2 dHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEyL2xSYS0ybmN1VzB6bTVtU010amdzV2dyX3pPZy5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwDSiTANBgkqhkiG9w0BAQsFAAOCAQEAizemMuwW7dOePnq7WeWXtakDRQE4ihf+ 9xBTZQerPmgtPxj1QekkIeP+6Osf5ppmI/RQ6QubMfz9/fM0FY70fNq/QJwp332W jqr7a2dDqCduGot4ppwtViMrKXSp1m18PDmCo0+pgaQ/6gYUudm6zxmyvpIm4wpW 1RXWZb2G5s2UbPCLNiYX9FhjTL3+BZA7d7oguU7nshI/5dfPAVTYv00EuuaCNixQ xSTmsXB9aPPcB6DETtBbYMRBRFiHiViWyuNV6LWcXivh0O+Oo6TYgLU8dy6hNolE DuzUR/sTxMmqM7SXOTSGQUADLpbjlQcjpcUuvsIV9wsxBEvMZTj8eA== -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:26 2024 by rpki-client on console-ams.rpki-client.org