$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/8UFYffDjKxClLWcJR16pt9dZqZg.roa File: 8UFYffDjKxClLWcJR16pt9dZqZg.roa (raw, json) Hash identifier: H2zS+0uBqv8G0V3/iM1B+v9OKY0Hd8KO/eW6OT2h17k= Subject key identifier: F1:41:58:7D:F0:E3:2B:10:A5:2D:67:09:47:5E:A9:B7:D7:59:A9:98 Certificate issuer: /CN=EE749AEDB27453827DBA8325F42984FA79C3CF76 Certificate serial: 13 Authority key identifier: EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/8UFYffDjKxClLWcJR16pt9dZqZg.roa Signing time: Tue 17 Sep 2024 01:08:56 +0000 ROA not before: Tue 17 Sep 2024 01:08:56 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 63772 IP address blocks: 172.86.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE749AEDB27453827DBA8325F42984FA79C3CF76 Validity Not Before: Sep 17 01:08:56 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=F141587DF0E32B10A52D6709475EA9B7D759A998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:70:b8:f3:04:a5:37:fa:9c:3e:9d:34:92:ec: eb:c0:86:1e:0b:a2:09:e4:72:79:eb:62:3b:8a:22: 43:96:41:87:ad:8d:fa:65:5d:9a:b0:f2:61:ea:0d: 9c:22:98:60:1e:01:08:4e:77:18:58:ef:74:bc:12: 0a:97:58:30:ba:77:fb:9f:bc:6f:0f:d6:d9:65:ea: d4:58:64:c3:1e:33:60:31:29:24:02:b1:08:b1:01: 99:f1:c8:5e:c6:61:a8:93:a8:a3:c1:2e:ab:70:f4: 35:b8:68:ec:d6:77:b4:82:ea:d0:f8:30:9a:56:9b: 6c:1b:14:86:b3:c5:ec:54:bc:ee:63:20:20:bd:23: 48:31:c4:24:b2:0a:f5:0f:3c:a6:b5:65:95:1a:b7: 75:10:c5:9e:00:9f:fe:14:26:c4:b3:f1:2e:29:f6: c7:3d:28:f2:b4:10:3c:09:04:7b:6f:aa:a0:a3:df: 9f:d6:03:78:b7:bb:02:f8:fe:77:4a:b2:6a:5f:38: 70:0b:a0:8c:83:bb:6f:e4:9b:dc:51:4f:8e:34:65: 7e:94:b1:e3:ab:f4:25:6b:95:89:79:cc:00:ea:07: ad:5b:7d:bb:4a:0a:dd:b2:81:87:d3:58:6d:e1:8a: 08:00:49:49:92:4d:be:a5:14:dc:d8:e2:27:ef:f1: 8b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:41:58:7D:F0:E3:2B:10:A5:2D:67:09:47:5E:A9:B7:D7:59:A9:98 X509v3 Authority Key Identifier: keyid:EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/8UFYffDjKxClLWcJR16pt9dZqZg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 172.86.208.0/20 Signature Algorithm: sha256WithRSAEncryption 88:ce:eb:1d:99:ae:89:72:53:d5:a8:2a:8d:4f:3b:c1:24:a2: c6:36:35:07:dd:f3:e2:f8:6e:88:e1:36:06:5d:7c:5f:0a:87: b7:07:90:66:b8:f6:0c:82:da:b8:ec:06:a9:2e:76:ba:5b:70: 0a:21:03:f8:ed:16:04:e4:72:4c:9c:c6:6c:1f:8a:ef:d2:d3: 8a:f4:78:19:69:6f:8c:8c:d5:e2:ac:cd:fc:59:79:9e:39:3b: c1:c5:63:25:6a:ce:64:db:97:9e:3b:85:a0:ea:b6:3e:7d:04: 17:19:88:be:3e:e9:7f:d9:b6:24:f5:2a:80:72:28:2b:52:14: 36:cd:9f:14:93:4d:6d:72:4f:ea:d2:d1:ea:9b:7f:93:35:ab: 91:fd:35:45:ed:18:5c:07:e0:cf:35:94:b5:7a:40:78:41:08: df:f6:ea:37:d5:3d:db:44:39:64:8b:95:8e:6f:71:a4:3b:a0: d3:12:73:b8:c9:e5:4c:56:6b:11:d7:1a:8d:98:3d:bd:4e:8b: 51:8d:05:57:a6:87:7c:44:4e:2f:72:77:96:df:e7:66:d1:ac: 56:17:ce:0f:ae:43:30:bc:d8:f1:2b:63:87:fe:ff:8a:c5:83: 11:53:00:16:06:9c:f2:16:6b:35:eb:1a:c5:43:de:4d:cf:0e: 64:15:9f:4a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTc0 OUFFREIyNzQ1MzgyN0RCQTgzMjVGNDI5ODRGQTc5QzNDRjc2MB4XDTI0MDkxNzAx MDg1NloXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoRjE0MTU4N0RGMEUzMkIx MEE1MkQ2NzA5NDc1RUE5QjdENzU5QTk5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJpwuPMEpTf6nD6dNJLs68CGHguiCeRyeetiO4oiQ5ZBh62N+mVd mrDyYeoNnCKYYB4BCE53GFjvdLwSCpdYMLp3+5+8bw/W2WXq1Fhkwx4zYDEpJAKx CLEBmfHIXsZhqJOoo8Euq3D0Nbho7NZ3tILq0PgwmlabbBsUhrPF7FS87mMgIL0j SDHEJLIK9Q88prVllRq3dRDFngCf/hQmxLPxLin2xz0o8rQQPAkEe2+qoKPfn9YD eLe7Avj+d0qyal84cAugjIO7b+Sb3FFPjjRlfpSx46v0JWuViXnMAOoHrVt9u0oK 3bKBh9NYbeGKCABJSZJNvqUU3NjiJ+/xizkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTxQVh98OMrEKUtZwlHXqm311mpmDAfBgNVHSMEGDAWgBTudJrtsnRTgn26gyX0 KYT6ecPPdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNDQvN25TYTdiSjBVNEo5dW9NbDlDbUUtbm5EejNZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN25TYTdiSjBVNEo5dW9NbDlDbUUt bm5EejNZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDQ0LzhVRllmZkRqS3hDbExXY0pSMTZwdDlkWnFaZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBASsVtAwDQYJKoZIhvcNAQELBQADggEBAIjO6x2ZrolyU9WoKo1PO8Ek osY2NQfd8+L4bojhNgZdfF8Kh7cHkGa49gyC2rjsBqkudrpbcAohA/jtFgTkckyc xmwfiu/S04r0eBlpb4yM1eKszfxZeZ45O8HFYyVqzmTbl547haDqtj59BBcZiL4+ 6X/ZtiT1KoByKCtSFDbNnxSTTW1yT+rS0eqbf5M1q5H9NUXtGFwH4M81lLV6QHhB CN/26jfVPdtEOWSLlY5vcaQ7oNMSc7jJ5UxWaxHXGo2YPb1Oi1GNBVemh3xETi9y d5bf52bRrFYXzg+uQzC82PErY4f+/4rFgxFTABYGnPIWazXrGsVD3k3PDmQVn0o= -----END CERTIFICATE-----Generated at Sun Feb 16 22:08:42 2025 by rpki-client