$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/pP1L5gutv6i2Oj4QgFPxltkvZqQ.roa File: pP1L5gutv6i2Oj4QgFPxltkvZqQ.roa (raw, json) Hash identifier: yUMcgNz9opiXq+QzvzXCXSp3D3GbqfQNdJXcfiHEmLM= Subject key identifier: A4:FD:4B:E6:0B:AD:BF:A8:B6:3A:3E:10:80:53:F1:96:D9:2F:66:A4 Certificate issuer: /CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773 Certificate serial: 02 Authority key identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/pP1L5gutv6i2Oj4QgFPxltkvZqQ.roa Signing time: Tue 29 Oct 2024 02:58:30 +0000 ROA not before: Tue 29 Oct 2024 02:58:30 +0000 ROA not after: Wed 29 Oct 2025 02:46:37 +0000 asID: 4694 IP address blocks: 154.33.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773 Validity Not Before: Oct 29 02:58:30 2024 GMT Not After : Oct 29 02:46:37 2025 GMT Subject: CN=A4FD4BE60BADBFA8B63A3E108053F196D92F66A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:f9:28:3d:ba:d0:65:b9:6f:3c:c1:53:78: 29:21:ba:ad:0f:28:8a:cc:a6:10:ac:d1:7e:1e:7c: 67:58:e8:e1:46:97:45:d4:e2:9d:d8:3c:4e:d8:f3: 33:c0:4b:35:38:ac:11:6f:1c:8d:61:fb:3a:d1:af: 6c:e1:a0:2d:7d:42:f0:c7:f5:28:a9:3c:a5:bd:a8: e6:b0:4b:83:2f:f4:f4:6b:c2:c4:24:2d:93:10:a5: 33:f4:f2:2f:58:31:5a:94:42:58:8b:ce:f6:cf:95: 93:51:89:b4:56:3b:4f:33:30:06:63:39:87:48:ff: 25:13:ef:7c:9c:f8:cd:cd:7c:44:53:f5:d1:c9:02: 63:79:2f:ef:08:8c:2d:0a:06:6c:79:6c:21:08:ef: d0:b3:41:89:91:51:9f:17:23:a3:78:08:c0:c1:f3: 49:08:ca:8b:7b:07:6e:8c:d8:a9:1f:74:29:bf:60: cf:b2:72:ba:32:dd:3c:ee:8a:f1:2a:1f:16:4c:40: c8:ac:3f:61:c3:a2:e0:b5:6c:96:b5:44:cf:c4:bc: 91:cc:82:49:a9:97:3b:3c:87:07:26:67:fc:28:63: 53:f4:d0:e1:cb:61:83:76:81:de:72:ec:39:3f:2c: 1d:d8:80:45:05:3f:3c:29:92:be:2a:68:5d:d9:3a: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FD:4B:E6:0B:AD:BF:A8:B6:3A:3E:10:80:53:F1:96:D9:2F:66:A4 X509v3 Authority Key Identifier: keyid:85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/pP1L5gutv6i2Oj4QgFPxltkvZqQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.33.0.0/16 Signature Algorithm: sha256WithRSAEncryption 48:0f:12:30:e4:76:b0:a9:b7:cd:89:32:1b:67:40:2c:1e:ce: 57:62:72:df:62:d6:65:d8:3f:c6:fb:ce:4e:36:ce:73:fb:92: b5:20:0f:e0:a8:53:9a:d6:71:b1:f7:88:fe:52:50:1a:2a:51: 50:43:3d:00:a0:57:d5:90:99:ad:0f:d4:23:bc:ca:d7:67:3c: 4a:da:88:74:e1:5f:66:d0:4c:c2:37:29:90:4f:ee:4b:3a:55: d6:c8:f2:2a:ea:08:be:d7:ff:6b:65:3e:3b:6f:31:e3:7c:b6: cb:57:12:c3:35:f4:3f:c8:c9:2a:7a:ff:80:f7:27:5b:fd:6f: 34:84:2d:14:3b:c5:ae:0e:e8:33:92:c6:51:0e:17:f4:94:4c: 62:60:0b:f1:72:b8:97:ad:6c:11:1a:d6:9e:52:4b:8b:20:d7: c7:2e:a8:eb:14:72:3d:e9:49:8f:e9:d8:ac:98:5c:b0:79:08: ca:bc:fe:fd:13:b5:4b:50:af:88:a2:5d:03:d1:e9:16:d8:6d: 2f:f8:02:8b:b3:a6:f3:c2:5d:80:30:f8:75:c3:f2:be:53:34: 5b:fb:fb:c2:3a:b3:b0:cd:d8:4f:29:65:ee:40:a8:74:10:79: 40:ab:d4:3b:29:ec:23:12:aa:15:af:ef:61:b1:a1:55:93:49: 62:f2:6d:21 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUE2 QzM2OUMxQTlDN0E1MkMzRTM4MDU3MjdBNUZEMzExODVBNzczMB4XDTI0MTAyOTAy NTgzMFoXDTI1MTAyOTAyNDYzN1owMzExMC8GA1UEAxMoQTRGRDRCRTYwQkFEQkZB OEI2M0EzRTEwODA1M0YxOTZEOTJGNjZBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMmB+Sg9utBluW88wVN4KSG6rQ8oisymEKzRfh58Z1jo4UaXRdTi ndg8TtjzM8BLNTisEW8cjWH7OtGvbOGgLX1C8Mf1KKk8pb2o5rBLgy/09GvCxCQt kxClM/TyL1gxWpRCWIvO9s+Vk1GJtFY7TzMwBmM5h0j/JRPvfJz4zc18RFP10ckC Y3kv7wiMLQoGbHlsIQjv0LNBiZFRnxcjo3gIwMHzSQjKi3sHbozYqR90Kb9gz7Jy ujLdPO6K8SofFkxAyKw/YcOi4LVslrVEz8S8kcyCSamXOzyHByZn/ChjU/TQ4cth g3aB3nLsOT8sHdiARQU/PCmSvipoXdk64AkCAwEAAaOCAiUwggIhMB0GA1UdDgQW BBSk/UvmC62/qLY6PhCAU/GW2S9mpDAfBgNVHSMEGDAWgBSFpsNpwanHpSw+OAVy el/TEYWnczAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIwMy9oYWJEYWNHcHg2VXNQamdGY25wZjB4R0ZwM00uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oYWJEYWNHcHg2VXNQamdGY25wZjB4 R0ZwM00uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTIwMy9wUDFMNWd1dHY2aTJPajRRZ0ZQeGx0a3ZacVEucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAmiEwDQYJKoZIhvcNAQELBQADggEBAEgPEjDkdrCpt82JMhtnQCwezldi ct9i1mXYP8b7zk42znP7krUgD+CoU5rWcbH3iP5SUBoqUVBDPQCgV9WQma0P1CO8 ytdnPEraiHThX2bQTMI3KZBP7ks6VdbI8irqCL7X/2tlPjtvMeN8tstXEsM19D/I ySp6/4D3J1v9bzSELRQ7xa4O6DOSxlEOF/SUTGJgC/FyuJetbBEa1p5SS4sg18cu qOsUcj3pSY/p2KyYXLB5CMq8/v0TtUtQr4iiXQPR6RbYbS/4AouzpvPCXYAw+HXD 8r5TNFv7+8I6s7DN2E8pZe5AqHQQeUCr1Dsp7CMSqhWv72GxoVWTSWLybSE= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org