$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/1_RJPczUgrOg7pbplwgpSyuyWaQ.roa File: 1_RJPczUgrOg7pbplwgpSyuyWaQ.roa (raw, json) Hash identifier: 12y+IQXRJiHAuOzZ2v6f9jiyshmkwML4aNTEbbqAIz0= Subject key identifier: D7:F4:49:3D:CC:D4:82:B3:A0:EE:96:E9:97:08:29:4B:2B:B2:59:A4 Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Certificate serial: 35 Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/1_RJPczUgrOg7pbplwgpSyuyWaQ.roa Signing time: Sat 30 Nov 2024 01:29:34 +0000 ROA not before: Sat 30 Nov 2024 01:29:34 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 131923 IP address blocks: 133.88.92.0/23 maxlen: 25 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Validity Not Before: Nov 30 01:29:34 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=D7F4493DCCD482B3A0EE96E99708294B2BB259A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:41:fb:5e:05:41:0d:e1:63:47:f9:13:3a: 0f:f4:4e:83:af:c6:ec:bd:a1:e5:4a:43:64:90:d5: 2e:a5:13:1b:e6:be:eb:8b:64:cc:0e:a4:bd:e3:a1: f5:f7:44:f8:75:81:f7:55:bd:7f:1c:2a:04:ee:78: 7b:d4:b4:c4:62:7b:6b:0b:70:21:ca:24:54:52:dc: f7:ab:71:a8:04:d7:76:95:81:12:aa:ea:f1:b6:0e: 56:e2:bc:31:d4:6b:e6:b7:ef:66:40:db:36:70:38: 14:1c:21:78:2e:4a:30:14:4d:32:e2:f0:58:04:4a: a0:a7:42:3e:0f:ac:a6:1e:6d:3f:5a:1d:e6:76:3a: 61:42:50:e8:ed:eb:9c:44:b5:fc:75:17:91:03:c6: 93:37:b6:85:fd:71:e3:ff:49:f9:7a:36:14:03:ef: 24:6c:53:9c:a6:d7:37:f8:56:8a:c2:82:fc:08:f1: 89:56:55:3b:11:2d:9e:88:f2:b8:e4:55:e7:9f:aa: 61:97:61:3e:c1:a4:23:8e:07:f9:1f:20:aa:a4:a6: df:ce:b1:d5:89:76:2a:58:fd:2e:78:8a:c9:c9:82: c3:80:c9:1f:0b:bf:7a:ec:dc:a5:e7:f3:c4:57:7f: a9:d1:b5:ee:9a:44:60:f5:b0:2a:f9:c1:fe:60:cf: 33:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F4:49:3D:CC:D4:82:B3:A0:EE:96:E9:97:08:29:4B:2B:B2:59:A4 X509v3 Authority Key Identifier: keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/1_RJPczUgrOg7pbplwgpSyuyWaQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.92.0/23 Signature Algorithm: sha256WithRSAEncryption 20:d7:48:c5:c2:4f:a1:c9:4a:d2:14:ac:69:a3:f5:f1:3e:de: 56:a3:d6:8f:04:04:72:d2:40:85:9b:4d:17:d5:b1:44:d4:ce: b6:11:18:b6:28:0c:75:3e:40:f1:55:a9:34:e5:ed:53:af:40: 71:bd:8b:4e:04:f7:98:fc:5f:b4:79:6c:5b:91:5c:26:d3:64: 32:e0:1e:e4:c7:21:09:ed:49:cd:0d:be:b2:86:83:15:ea:e0: b0:ed:f6:81:7a:cd:92:ef:4a:6e:84:b6:8a:f1:b1:4f:45:11: 8d:d1:0d:2b:20:33:84:b2:83:fd:fc:85:8d:a0:b7:e2:dd:28: cc:1d:9d:d0:4e:51:d9:da:a6:c6:ee:31:74:ab:4f:af:64:87: 88:e8:a4:d3:e0:94:f5:ed:5a:51:3a:3b:8e:cb:a5:dc:d6:f7: c6:b7:52:42:b2:8f:18:91:96:49:c8:ec:4f:9e:9b:1f:93:ce: d1:c9:79:5b:7b:ee:08:11:30:bc:ee:81:22:73:a3:d3:77:e8: dd:df:0c:95:a1:84:23:b3:7a:8d:a9:f1:fb:25:99:04:2f:50: 4d:79:e6:b2:c2:ee:5d:8b:d6:3a:6f:10:91:45:6d:0d:e9:4c: ca:90:8b:a8:6f:94:62:d6:ff:e3:ef:46:a2:4b:30:7e:7c:07: a8:69:1e:62 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI0MTEzMDAx MjkzNFoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoRDdGNDQ5M0RDQ0Q0ODJC M0EwRUU5NkU5OTcwODI5NEIyQkIyNTlBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKUNQfteBUEN4WNH+RM6D/ROg6/G7L2h5UpDZJDVLqUTG+a+64tk zA6kveOh9fdE+HWB91W9fxwqBO54e9S0xGJ7awtwIcokVFLc96txqATXdpWBEqrq 8bYOVuK8MdRr5rfvZkDbNnA4FBwheC5KMBRNMuLwWARKoKdCPg+sph5tP1od5nY6 YUJQ6O3rnES1/HUXkQPGkze2hf1x4/9J+Xo2FAPvJGxTnKbXN/hWisKC/AjxiVZV OxEtnojyuORV55+qYZdhPsGkI44H+R8gqqSm386x1Yl2Klj9LniKycmCw4DJHwu/ euzcpefzxFd/qdG17ppEYPWwKvnB/mDPM1sCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTX9Ek9zNSCs6DulumXCClLK7JZpDAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG 8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5 UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDM0LzFfUkpQY3pVZ3JPZzdwYnBsd2dwU3l1eVdhUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGFWFwwDQYJKoZIhvcNAQELBQADggEBACDXSMXCT6HJStIUrGmj9fE+ 3laj1o8EBHLSQIWbTRfVsUTUzrYRGLYoDHU+QPFVqTTl7VOvQHG9i04E95j8X7R5 bFuRXCbTZDLgHuTHIQntSc0NvrKGgxXq4LDt9oF6zZLvSm6EtorxsU9FEY3RDSsg M4Syg/38hY2gt+LdKMwdndBOUdnapsbuMXSrT69kh4jopNPglPXtWlE6O47LpdzW 98a3UkKyjxiRlknI7E+emx+TztHJeVt77ggRMLzugSJzo9N36N3fDJWhhCOzeo2p 8fslmQQvUE155rLC7l2L1jpvEJFFbQ3pTMqQi6hvlGLW/+PvRqJLMH58B6hpHmI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:34:17 2025 by rpki-client