$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/EBhgR7yMeHHhRxahdxoLm4hHEkc.roa File: EBhgR7yMeHHhRxahdxoLm4hHEkc.roa (raw, json) Hash identifier: DWE1roArlt26EFCgkNmstu/MPWFPkiZAts4XRG5Y6sw= Subject key identifier: 10:18:60:47:BC:8C:78:71:E1:47:16:A1:77:1A:0B:9B:88:47:12:47 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 01D8 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/EBhgR7yMeHHhRxahdxoLm4hHEkc.roa Signing time: Fri 31 May 2024 01:30:55 +0000 ROA not before: Fri 31 May 2024 01:30:55 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 4713 IP address blocks: 211.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 31 01:30:55 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=10186047BC8C7871E14716A1771A0B9B88471247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1e:fa:cb:34:13:88:76:31:67:80:81:bc:e6: 33:3a:33:2a:b1:73:b3:07:af:1b:e9:38:fe:77:17: 51:7e:fe:3a:6f:da:ea:3a:29:4f:cd:70:6a:10:01: 6e:af:bd:d8:3f:a1:ee:e4:ee:16:1e:cb:87:43:45: 6c:3c:88:93:81:c0:ef:58:ee:85:21:cc:da:86:a6: 76:17:69:38:ba:2a:f1:99:3b:d4:77:df:f4:08:4f: 2f:61:4a:06:2f:22:1c:0a:e0:11:3b:1d:67:66:26: 3d:a1:45:41:ed:90:0f:19:f8:86:4e:b6:e5:97:54: 75:bc:ea:85:80:ce:97:45:b0:28:66:30:3c:52:87: ef:98:a7:3a:0f:63:29:86:1b:b1:47:4b:bb:49:50: 2c:ee:ef:34:24:fd:6c:7e:84:3c:48:e6:35:4c:3f: 8b:b0:77:59:50:a1:53:80:a4:bf:ed:14:8f:8a:d9: d3:f5:97:fe:ea:d0:e5:30:10:ae:25:ec:3a:f2:d7: 74:17:61:53:7f:f3:72:5f:ef:7e:fc:7a:02:76:e0: f8:b7:57:ce:9d:88:58:a0:b6:58:ee:9c:c2:0d:18: e9:bb:87:4d:83:34:2a:39:d8:40:09:91:98:7d:4f: fd:fa:de:88:31:8f:36:2c:8c:e4:45:05:14:2f:58: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:18:60:47:BC:8C:78:71:E1:47:16:A1:77:1A:0B:9B:88:47:12:47 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/EBhgR7yMeHHhRxahdxoLm4hHEkc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8d:c9:e0:3c:70:71:50:87:5b:bb:17:14:c8:4c:3b:7c:73:85: 8f:2a:3d:95:9d:34:08:19:59:f2:cc:ed:8a:8a:76:7d:88:0d: 31:aa:c5:ff:87:e0:68:9f:4a:1e:b7:ea:84:39:d8:79:7c:fb: 65:e3:6b:b2:58:0f:89:b9:82:c2:ad:dc:c6:d0:be:da:36:5c: fb:69:8b:7f:c1:60:b8:12:27:9b:b1:4b:83:bb:12:5c:a1:9e: 61:70:f2:8a:8a:10:7b:51:84:09:3c:ff:31:09:8a:61:ca:e6: bb:fa:9f:86:08:b5:cb:9f:34:33:55:50:48:17:45:3d:40:ce: 03:49:fc:2e:0c:aa:b9:2d:60:a7:a6:e7:20:49:10:04:ea:10: 71:d7:89:88:f0:69:e7:db:84:d1:d8:09:3f:91:26:77:58:c5: 3d:54:28:8b:f6:ef:d9:ed:b2:f2:89:c5:c6:00:b4:a1:87:ee: b2:f4:a7:8c:fb:53:f6:ae:dd:27:9d:f4:d2:91:7f:25:50:58: 0e:75:9a:a1:3c:d6:24:8e:0f:a8:d4:bd:d9:0c:d5:4c:e7:4a: 1d:8f:89:0f:ab:bc:f7:e2:74:90:e9:80:7a:d9:57:66:7d:0c: 5c:62:01:37:ce:5d:9e:9b:88:ef:89:45:2a:c3:37:96:51:d9: 23:07:ea:37 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDA1MzEw MTMwNTVaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDEwMTg2MDQ3QkM4Qzc4 NzFFMTQ3MTZBMTc3MUEwQjlCODg0NzEyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVHvrLNBOIdjFngIG85jM6Myqxc7MHrxvpOP53F1F+/jpv2uo6 KU/NcGoQAW6vvdg/oe7k7hYey4dDRWw8iJOBwO9Y7oUhzNqGpnYXaTi6KvGZO9R3 3/QITy9hSgYvIhwK4BE7HWdmJj2hRUHtkA8Z+IZOtuWXVHW86oWAzpdFsChmMDxS h++YpzoPYymGG7FHS7tJUCzu7zQk/Wx+hDxI5jVMP4uwd1lQoVOApL/tFI+K2dP1 l/7q0OUwEK4l7Dry13QXYVN/83Jf7378egJ24Pi3V86diFigtljunMINGOm7h02D NCo52EAJkZh9T/363ogxjzYsjORFBRQvWLW3AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUEBhgR7yMeHHhRxahdxoLm4hHEkcwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL0VCaGdSN3lNZUhIaFJ4YWhkeG9MbTRoSEVrYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDTgTANBgkqhkiG9w0BAQsFAAOCAQEAjcngPHBxUIdbuxcUyEw7fHOFjyo9 lZ00CBlZ8sztiop2fYgNMarF/4fgaJ9KHrfqhDnYeXz7ZeNrslgPibmCwq3cxtC+ 2jZc+2mLf8FguBInm7FLg7sSXKGeYXDyiooQe1GECTz/MQmKYcrmu/qfhgi1y580 M1VQSBdFPUDOA0n8LgyquS1gp6bnIEkQBOoQcdeJiPBp59uE0dgJP5Emd1jFPVQo i/bv2e2y8onFxgC0oYfusvSnjPtT9q7dJ5300pF/JVBYDnWaoTzWJI4PqNS92QzV TOdKHY+JD6u89+J0kOmAetlXZn0MXGIBN85dnpuI74lFKsM3llHZIwfqNw== -----END CERTIFICATE-----Generated at Sun Feb 16 22:30:25 2025 by rpki-client