$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/Q69FNV3We9vIcWvCZZIX8v6690A.roa File: Q69FNV3We9vIcWvCZZIX8v6690A.roa (raw, json) Hash identifier: kYttFZJ0FyoX/ge+cUx9NxIz0i8Fw6Bon44SaxEXEBU= Subject key identifier: 43:AF:45:35:5D:D6:7B:DB:C8:71:6B:C2:65:92:17:F2:FE:BA:F7:40 Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Certificate serial: 32 Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/Q69FNV3We9vIcWvCZZIX8v6690A.roa Signing time: Sat 30 Nov 2024 01:29:32 +0000 ROA not before: Sat 30 Nov 2024 01:29:32 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 131923 IP address blocks: 133.247.240.0/20 maxlen: 25 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Validity Not Before: Nov 30 01:29:32 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=43AF45355DD67BDBC8716BC2659217F2FEBAF740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:ff:b9:fa:fd:23:a3:ad:2f:15:c2:92:eb: 29:28:59:38:a1:15:21:67:ac:60:b8:44:7b:69:d7: 20:e3:1f:ce:11:59:be:90:73:44:9a:a7:b5:01:4e: 07:4a:36:0e:b9:e3:53:0a:98:63:a3:b2:92:40:9d: 13:39:21:9f:c7:22:2e:1c:23:e6:22:39:ac:4a:23: 65:ee:a0:84:32:3e:9b:a7:f3:0f:f5:96:3c:62:17: 4e:14:c5:03:7b:70:57:8b:c9:f1:9d:0f:89:9f:f8: 49:e2:a4:2b:d8:0a:54:f1:fe:23:22:a8:21:b9:4d: ac:b1:15:16:96:01:63:f6:8c:da:a0:c0:79:e4:01: d2:17:34:c7:f7:b4:dd:c6:93:f7:38:c3:66:6e:56: 19:8e:94:28:af:64:5e:ef:d7:fd:62:65:ff:7d:b0: e3:82:6d:2e:47:34:34:94:65:4b:03:ab:b5:24:e8: 6c:31:e6:61:bb:8f:8a:9c:ec:6a:46:ef:79:89:95: 39:a8:16:79:16:2c:39:88:da:49:ec:14:94:fd:ad: b4:86:42:52:01:a0:72:62:a6:bd:ea:e3:6b:7f:b8: 68:40:ad:59:0c:68:f4:73:15:4a:55:f6:b9:a4:48: 74:dc:3b:7d:b0:f3:70:96:0b:cf:ab:5b:a3:f0:84: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AF:45:35:5D:D6:7B:DB:C8:71:6B:C2:65:92:17:F2:FE:BA:F7:40 X509v3 Authority Key Identifier: keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/Q69FNV3We9vIcWvCZZIX8v6690A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.247.240.0/20 Signature Algorithm: sha256WithRSAEncryption 12:30:b4:aa:69:22:82:55:d6:9f:19:d2:8a:42:a0:1e:ff:60: 9d:b4:e3:69:d7:66:67:49:c0:1e:87:be:58:36:06:00:06:18: b2:db:3b:d1:33:4f:3d:19:ec:6f:f7:ec:d9:5a:c3:26:df:ee: 46:8a:ad:8f:dd:08:3e:51:68:0e:0d:69:0f:e3:45:b6:92:eb: 39:69:00:5b:e7:46:9e:9b:2a:b3:9a:d7:b1:9c:73:65:b8:f2: 58:b6:c0:fe:7b:40:cc:e1:8f:3d:41:2e:09:57:51:12:fa:44: 7f:74:35:97:3f:e0:77:a2:52:53:ea:e5:7a:9e:d3:2c:a5:dc: 61:54:e0:08:d4:99:1a:65:7d:6c:7a:63:ba:0b:4b:ce:12:b8: 08:eb:fd:d5:0f:59:de:37:a8:60:f0:fc:98:2c:ed:50:1b:7a: e8:90:5b:ce:c8:fd:47:46:a2:ca:f0:8a:b3:0e:a0:1e:e5:27: 2e:3e:cf:a3:11:ce:cb:2d:e0:72:f4:ee:40:b1:9f:88:c1:02: 4f:07:92:c2:33:ec:fc:ec:bb:7b:c0:a1:02:81:f2:ae:b4:fc: 20:f0:a6:e8:c9:bf:08:49:9f:e2:0e:33:4a:4e:29:1f:84:47: c6:d8:2d:ee:8b:65:35:51:20:58:f9:57:64:08:b6:90:72:f1: 07:88:2e:07 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI0MTEzMDAx MjkzMloXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoNDNBRjQ1MzU1REQ2N0JE QkM4NzE2QkMyNjU5MjE3RjJGRUJBRjc0MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALjP/7n6/SOjrS8VwpLrKShZOKEVIWesYLhEe2nXIOMfzhFZvpBz RJqntQFOB0o2DrnjUwqYY6OykkCdEzkhn8ciLhwj5iI5rEojZe6ghDI+m6fzD/WW PGIXThTFA3twV4vJ8Z0PiZ/4SeKkK9gKVPH+IyKoIblNrLEVFpYBY/aM2qDAeeQB 0hc0x/e03caT9zjDZm5WGY6UKK9kXu/X/WJl/32w44JtLkc0NJRlSwOrtSTobDHm YbuPipzsakbveYmVOagWeRYsOYjaSewUlP2ttIZCUgGgcmKmverja3+4aECtWQxo 9HMVSlX2uaRIdNw7fbDzcJYLz6tbo/CEHPkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBRDr0U1XdZ728hxa8Jlkhfy/rr3QDAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG 8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5 UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDM0L1E2OUZOVjNXZTl2SWNXdkNaWklYOHY2NjkwQS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBASF9/AwDQYJKoZIhvcNAQELBQADggEBABIwtKppIoJV1p8Z0opCoB7/ YJ2042nXZmdJwB6Hvlg2BgAGGLLbO9EzTz0Z7G/37Nlawybf7kaKrY/dCD5RaA4N aQ/jRbaS6zlpAFvnRp6bKrOa17Gcc2W48li2wP57QMzhjz1BLglXURL6RH90NZc/ 4HeiUlPq5Xqe0yyl3GFU4AjUmRplfWx6Y7oLS84SuAjr/dUPWd43qGDw/Jgs7VAb euiQW87I/UdGosrwirMOoB7lJy4+z6MRzsst4HL07kCxn4jBAk8HksIz7Pzsu3vA oQKB8q60/CDwpujJvwhJn+IOM0pOKR+ER8bYLe6LZTVRIFj5V2QItpBy8QeILgc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:45:19 2025 by rpki-client