$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/KOvjLiYGqj2_HGHMGveSJBS-oSU.roa File: KOvjLiYGqj2_HGHMGveSJBS-oSU.roa (raw, json) Hash identifier: 3JQQeoqSUP46DrcO+Md4r+Bsf/PXTr+Aw+nLXZcxj68= Subject key identifier: 28:EB:E3:2E:26:06:AA:3D:BF:1C:61:CC:1A:F7:92:24:14:BE:A1:25 Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Certificate serial: 36 Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/KOvjLiYGqj2_HGHMGveSJBS-oSU.roa Signing time: Sat 30 Nov 2024 01:29:35 +0000 ROA not before: Sat 30 Nov 2024 01:29:35 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 131923 IP address blocks: 133.88.94.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Validity Not Before: Nov 30 01:29:35 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=28EBE32E2606AA3DBF1C61CC1AF7922414BEA125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:46:6b:ec:d4:f5:86:9a:87:67:07:29:4e: 68:64:6b:dd:f3:b1:35:52:c8:de:72:4d:88:93:39: 03:6f:7b:e2:d4:68:2e:6b:7d:8f:eb:11:c7:ea:c2: 89:32:9f:b3:62:9a:aa:5c:f4:9c:71:10:f1:d3:f3: be:c1:c8:f1:05:95:f7:99:8a:a6:b4:31:89:c2:7e: e2:d1:51:2b:75:28:6f:d7:92:03:8e:e4:e8:f4:0f: 51:40:16:69:95:2e:b5:cc:f1:d6:1e:60:0a:09:3e: 4e:92:04:ca:20:62:71:7d:d6:2d:18:5a:22:ce:24: fa:93:2a:8a:8b:f2:51:e8:fd:bf:75:df:2e:68:a8: 9a:c1:41:95:1f:ff:b6:4e:e2:46:e2:e8:66:67:6d: 47:95:11:b6:21:1a:fd:f6:4c:9e:e7:66:91:9f:b0: 5f:4c:e6:56:18:f6:c7:1c:7e:a0:14:f5:b9:a0:f1: 61:15:79:04:3a:4c:67:d7:f7:d9:e2:70:07:44:95: 90:80:cf:78:fc:4f:7b:5e:c3:0e:62:86:7b:b9:5f: 3f:c2:75:80:af:be:05:6e:f1:10:89:b2:99:4d:93: 3c:de:f9:12:84:a9:5f:a1:5c:39:ab:48:84:27:a4: 7b:b6:b8:56:cb:4c:eb:f8:cf:f1:c0:90:e3:94:20: 61:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EB:E3:2E:26:06:AA:3D:BF:1C:61:CC:1A:F7:92:24:14:BE:A1:25 X509v3 Authority Key Identifier: keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/KOvjLiYGqj2_HGHMGveSJBS-oSU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.94.0/24 Signature Algorithm: sha256WithRSAEncryption a4:d3:59:c0:93:bc:f8:1f:fc:e5:85:be:c4:8e:f7:e6:e5:69: b5:5c:bd:59:61:59:b2:ef:3f:91:a7:93:66:bb:b1:38:e8:eb: 9f:e9:2e:85:97:74:89:be:0c:c1:e5:ba:3e:eb:f4:3c:0c:c3: d1:42:1d:e3:6e:41:8e:b5:4c:7c:a3:e5:48:f0:e3:b4:0e:ca: 38:56:3e:de:fa:ec:47:cb:bd:00:94:2e:db:40:55:94:f7:de: 56:d9:a0:49:bc:69:c2:11:8b:20:50:83:8d:63:e1:34:59:c8: 90:1c:af:59:96:bb:ee:2f:71:fa:32:d6:4d:6c:df:14:bc:93: 35:7c:fa:16:3d:7c:1f:ee:62:64:7a:3f:62:cf:1b:47:c7:58: b2:40:91:0f:bc:bf:c5:17:76:23:ee:4b:ac:54:aa:6b:81:c1: 97:48:f2:b2:24:78:99:40:24:b7:4e:ac:7e:18:6a:1e:cf:95: 66:c3:b6:86:63:49:ef:22:db:b2:6e:4b:3d:49:6a:ae:eb:7c: 6a:4f:ae:4e:ac:bd:18:b6:81:af:a0:5c:65:d5:11:5e:72:8f: a3:dd:2c:2a:81:6a:1a:7b:0c:f6:72:6f:2f:5c:88:cf:24:09: 5f:b7:a4:d1:86:e7:3c:b4:71:ae:ff:f6:3d:c4:06:08:bd:b1: 4c:20:6b:db -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI0MTEzMDAx MjkzNVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoMjhFQkUzMkUyNjA2QUEz REJGMUM2MUNDMUFGNzkyMjQxNEJFQTEyNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKUqRmvs1PWGmodnBylOaGRr3fOxNVLI3nJNiJM5A2974tRoLmt9 j+sRx+rCiTKfs2Kaqlz0nHEQ8dPzvsHI8QWV95mKprQxicJ+4tFRK3Uob9eSA47k 6PQPUUAWaZUutczx1h5gCgk+TpIEyiBicX3WLRhaIs4k+pMqiovyUej9v3XfLmio msFBlR//tk7iRuLoZmdtR5URtiEa/fZMnudmkZ+wX0zmVhj2xxx+oBT1uaDxYRV5 BDpMZ9f32eJwB0SVkIDPePxPe17DDmKGe7lfP8J1gK++BW7xEImymU2TPN75EoSp X6FcOatIhCeke7a4VstM6/jP8cCQ45QgYQsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQo6+MuJgaqPb8cYcwa95IkFL6hJTAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG 8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5 UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDM0L0tPdmpMaVlHcWoyX0hHSE1HdmVTSkJTLW9TVS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACFWF4wDQYJKoZIhvcNAQELBQADggEBAKTTWcCTvPgf/OWFvsSO9+bl abVcvVlhWbLvP5Gnk2a7sTjo65/pLoWXdIm+DMHluj7r9DwMw9FCHeNuQY61THyj 5Ujw47QOyjhWPt767EfLvQCULttAVZT33lbZoEm8acIRiyBQg41j4TRZyJAcr1mW u+4vcfoy1k1s3xS8kzV8+hY9fB/uYmR6P2LPG0fHWLJAkQ+8v8UXdiPuS6xUqmuB wZdI8rIkeJlAJLdOrH4Yah7PlWbDtoZjSe8i27JuSz1Jaq7rfGpPrk6svRi2ga+g XGXVEV5yj6PdLCqBahp7DPZyby9ciM8kCV+3pNGG5zy0ca7/9j3EBgi9sUwga9s= -----END CERTIFICATE-----Generated at Wed Feb 19 22:36:50 2025 by rpki-client