$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/sDQMEi1zdsMTP_GcwpJIkqbHqTU.roa File: sDQMEi1zdsMTP_GcwpJIkqbHqTU.roa (raw, json) Hash identifier: O6PmXoUZmvfvyqTTUi6tojOMns3+XCpivIIHiJPQjfs= Subject key identifier: B0:34:0C:12:2D:73:76:C3:13:3F:F1:9C:C2:92:48:92:A6:C7:A9:35 Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Certificate serial: 30 Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/sDQMEi1zdsMTP_GcwpJIkqbHqTU.roa Signing time: Sat 30 Nov 2024 01:29:31 +0000 ROA not before: Sat 30 Nov 2024 01:29:31 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 131923 IP address blocks: 133.247.136.0/21 maxlen: 25 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Validity Not Before: Nov 30 01:29:31 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=B0340C122D7376C3133FF19CC2924892A6C7A935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:59:01:9e:a7:94:76:e9:b0:ad:4a:d6:ff: a6:fa:49:f5:78:25:d0:7e:19:22:6f:a7:ae:b6:85: 40:33:6f:f3:10:a9:86:a7:d3:f9:5f:c1:ee:13:3d: 4f:47:a4:3d:62:0b:73:d6:46:38:b0:10:9c:81:4c: 4e:59:49:d0:54:0a:40:e5:77:8b:bc:44:51:59:2f: fa:aa:d4:4c:2d:82:b8:1f:2e:99:45:b8:77:4a:b8: 72:e9:78:9b:64:b7:d2:ee:fb:53:dc:58:9c:e0:c8: 71:0a:df:7d:66:62:11:19:0d:c6:03:8a:7b:2f:53: 04:5b:c6:4d:64:99:e3:35:cf:7f:7a:cd:1c:b7:9f: 2b:2f:12:cf:63:36:35:47:50:3e:58:9f:d5:60:b2: ee:15:c6:47:9e:fb:09:b2:4d:ff:25:a1:cb:a1:4f: c1:62:62:8a:8a:19:32:22:99:80:ec:d4:c7:4c:cd: 74:fe:53:8d:e6:fd:7d:da:74:74:5b:d0:ca:02:9d: 27:11:92:d9:68:28:35:97:c0:86:d8:33:2d:06:b6: d9:d7:08:b1:94:a0:14:de:b6:c1:a0:ed:8c:c3:6d: d8:f8:8d:77:a3:53:86:ae:33:03:d1:7f:c2:3a:ae: e6:70:bf:8c:32:03:62:2f:cb:0b:b0:59:58:2e:b0: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:34:0C:12:2D:73:76:C3:13:3F:F1:9C:C2:92:48:92:A6:C7:A9:35 X509v3 Authority Key Identifier: keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/sDQMEi1zdsMTP_GcwpJIkqbHqTU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.247.136.0/21 Signature Algorithm: sha256WithRSAEncryption 41:7a:99:17:d2:28:14:2f:4e:1b:24:13:1d:20:3c:13:77:da: 38:fc:ab:92:8d:d7:b6:e3:49:ca:72:fd:cf:a5:80:1f:b2:3a: 39:47:e9:16:be:2c:13:c1:4e:9b:09:59:25:d3:cc:81:69:2a: 0a:3f:27:f1:59:90:d5:c6:d9:ce:b7:90:ea:e1:1a:0e:9a:cc: 90:8c:79:cd:9c:e3:90:15:02:8e:cd:38:47:9a:1a:02:92:7a: a4:9d:47:00:af:77:79:c4:a9:2e:c5:b3:ea:5d:78:9c:25:d6: 88:6c:05:8a:29:67:b7:dc:6a:84:98:90:3c:00:35:3c:64:28: b1:41:47:21:39:87:a2:15:22:4a:a6:fd:70:06:3a:f5:50:9a: 57:f2:10:c9:8c:be:ab:4f:5b:b4:03:18:16:4b:5a:92:3d:e4: ea:e4:38:8c:08:c2:11:f7:fa:06:ad:79:dc:9b:f9:d0:18:c9: 00:05:18:ca:82:78:ef:58:22:b9:b8:e5:e4:58:66:4a:4e:81: 65:39:16:8e:a8:fb:55:91:89:4a:fc:df:28:05:ae:97:ae:5c: 93:a6:d3:39:83:a0:50:6c:a6:ea:d2:24:0f:93:f5:a7:85:ca: 60:f7:9e:d0:92:28:86:9a:d0:82:65:b8:dd:cd:1d:a9:1b:3a: 1f:42:f2:74 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI0MTEzMDAx MjkzMVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQjAzNDBDMTIyRDczNzZD MzEzM0ZGMTlDQzI5MjQ4OTJBNkM3QTkzNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKslWQGep5R26bCtStb/pvpJ9Xgl0H4ZIm+nrraFQDNv8xCphqfT +V/B7hM9T0ekPWILc9ZGOLAQnIFMTllJ0FQKQOV3i7xEUVkv+qrUTC2CuB8umUW4 d0q4cul4m2S30u77U9xYnODIcQrffWZiERkNxgOKey9TBFvGTWSZ4zXPf3rNHLef Ky8Sz2M2NUdQPlif1WCy7hXGR577CbJN/yWhy6FPwWJiiooZMiKZgOzUx0zNdP5T jeb9fdp0dFvQygKdJxGS2WgoNZfAhtgzLQa22dcIsZSgFN62waDtjMNt2PiNd6NT hq4zA9F/wjqu5nC/jDIDYi/LC7BZWC6w7vUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSwNAwSLXN2wxM/8ZzCkkiSpsepNTAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG 8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5 UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDM0L3NEUU1FaTF6ZHNNVFBfR2N3cEpJa3FiSHFUVS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAOF94gwDQYJKoZIhvcNAQELBQADggEBAEF6mRfSKBQvThskEx0gPBN3 2jj8q5KN17bjScpy/c+lgB+yOjlH6Ra+LBPBTpsJWSXTzIFpKgo/J/FZkNXG2c63 kOrhGg6azJCMec2c45AVAo7NOEeaGgKSeqSdRwCvd3nEqS7Fs+pdeJwl1ohsBYop Z7fcaoSYkDwANTxkKLFBRyE5h6IVIkqm/XAGOvVQmlfyEMmMvqtPW7QDGBZLWpI9 5OrkOIwIwhH3+gatedyb+dAYyQAFGMqCeO9YIrm45eRYZkpOgWU5Fo6o+1WRiUr8 3ygFrpeuXJOm0zmDoFBspurSJA+T9aeFymD3ntCSKIaa0IJluN3NHakbOh9C8nQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:42:09 2025 by rpki-client