$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Ofy7r6cBZhaiNi0g8uE4ZQ0ZbRA.roa File: Ofy7r6cBZhaiNi0g8uE4ZQ0ZbRA.roa (raw, json) Hash identifier: eqr9YYG0lLPTFxDUxt2Z5rN3FIsDBwH0w04BJVuTHlw= Subject key identifier: 39:FC:BB:AF:A7:01:66:16:A2:36:2D:20:F2:E1:38:65:0D:19:6D:10 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 78 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Ofy7r6cBZhaiNi0g8uE4ZQ0ZbRA.roa Signing time: Fri 15 Nov 2024 15:36:32 +0000 ROA not before: Fri 15 Nov 2024 15:36:32 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 140224 IP address blocks: 117.103.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 15 15:36:32 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=39FCBBAFA7016616A2362D20F2E138650D196D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:33:f7:31:65:8f:1d:8b:a4:1b:9a:c3:b4:65: fd:60:24:8e:32:0f:c8:bf:9b:85:28:eb:32:24:ed: 09:fd:73:0c:38:30:43:c4:57:44:04:20:ab:04:a1: bc:ae:1e:29:5a:c2:7e:07:e4:84:86:c3:7f:7b:a5: 35:fb:7d:fc:9b:14:4d:90:d3:7a:2e:ee:a0:c8:46: 82:4f:f8:e0:d5:a3:82:5a:6d:52:c7:fe:28:33:20: 45:e7:ba:27:31:23:8a:e6:e2:8b:b9:3a:28:67:f3: d7:2a:1d:ce:e6:aa:e2:01:38:41:8e:a5:f6:89:1e: 64:89:53:bb:26:c0:7a:9c:cb:94:e9:e8:9e:eb:0c: 7c:c8:09:16:e4:d6:63:81:2b:07:73:3e:b0:4b:ee: 68:e1:72:c8:fb:b9:4f:e4:15:61:91:00:e0:d9:9e: 5e:89:f8:bd:d9:81:40:00:e6:28:8a:7e:4c:14:0c: 82:23:19:92:53:15:9e:89:6b:22:10:c9:77:a1:95: ac:f5:6d:20:0c:19:d0:c5:a1:7f:9b:a0:fa:76:d9: 07:30:e0:b9:69:f9:7e:74:20:71:aa:8b:7b:ae:10: 51:90:b2:69:21:e0:b1:2f:8a:3f:05:1a:dd:5a:6b: 4b:5b:bb:4d:78:bd:29:85:0a:33:50:96:c4:93:5d: 4d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FC:BB:AF:A7:01:66:16:A2:36:2D:20:F2:E1:38:65:0D:19:6D:10 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Ofy7r6cBZhaiNi0g8uE4ZQ0ZbRA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.103.190.0/24 Signature Algorithm: sha256WithRSAEncryption 98:2c:91:05:12:0f:c9:80:b5:41:21:c9:2e:ac:8c:12:22:41: ac:ce:e2:db:1f:74:88:09:d7:50:18:4a:5c:c4:ec:47:bb:5d: c5:c9:db:ce:e3:f5:1a:c2:53:0d:1a:a2:88:c1:cb:0a:55:fb: 5d:9a:17:4e:79:9b:75:c9:99:a0:86:56:e5:af:3c:dd:02:47: 77:7e:5d:15:d0:c8:af:8b:2d:c6:69:47:80:a5:40:b2:24:e5: 53:97:8d:a1:c1:be:c8:1c:2a:52:8c:f0:0c:f5:22:e1:34:1c: 94:00:2f:67:e8:9a:50:5d:2a:85:c1:32:7d:68:f8:0d:20:53: c1:1c:56:50:44:5e:4e:63:ae:d9:ae:3a:07:28:b5:eb:8a:95: 6d:32:cb:c4:bb:30:51:6a:bf:bd:c5:a6:cf:15:ce:f8:56:a3: 20:aa:89:21:03:bb:b7:f2:75:cf:19:0d:88:bd:ab:c4:c2:7a: 0f:60:3e:d0:fa:ef:04:fd:a4:83:1c:99:d3:45:ca:c8:27:15: 7e:6f:c3:f2:08:23:b2:d0:f1:42:a4:0a:70:38:1c:b8:db:a7: a8:ea:b9:cc:27:07:dc:c1:dd:92:43:f8:17:5f:32:f9:b1:f5: 1f:20:08:ba:33:01:ad:1c:d8:95:25:ac:a3:6c:ec:7d:b3:1e: 48:95:f0:18 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDQ2 RERGODhBNDZFNEVDMkQ5QTlCQUI1RkYxMzA1RkQwNTdGMTM4MB4XDTI0MTExNTE1 MzYzMloXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoMzlGQ0JCQUZBNzAxNjYx NkEyMzYyRDIwRjJFMTM4NjUwRDE5NkQxMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOEz9zFljx2LpBuaw7Rl/WAkjjIPyL+bhSjrMiTtCf1zDDgwQ8RX RAQgqwShvK4eKVrCfgfkhIbDf3ulNft9/JsUTZDTei7uoMhGgk/44NWjglptUsf+ KDMgRee6JzEjiubii7k6KGfz1yodzuaq4gE4QY6l9okeZIlTuybAepzLlOnonusM fMgJFuTWY4ErB3M+sEvuaOFyyPu5T+QVYZEA4NmeXon4vdmBQADmKIp+TBQMgiMZ klMVnolrIhDJd6GVrPVtIAwZ0MWhf5ug+nbZBzDguWn5fnQgcaqLe64QUZCyaSHg sS+KPwUa3VprS1u7TXi9KYUKM1CWxJNdTVUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQ5/LuvpwFmFqI2LSDy4ThlDRltEDAfBgNVHSMEGDAWgBSNRt34ikbk7C2am6tf 8TBf0FfxODAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMjgvalViZC1JcEc1T3d0bXB1clhfRXdYOUJYOFRnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalViZC1JcEc1T3d0bXB1clhfRXdY OUJYOFRnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTI4L09meTdyNmNCWmhhaU5pMGc4dUU0WlEwWmJSQS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAB1Z74wDQYJKoZIhvcNAQELBQADggEBAJgskQUSD8mAtUEhyS6sjBIi QazO4tsfdIgJ11AYSlzE7Ee7XcXJ287j9RrCUw0aoojBywpV+12aF055m3XJmaCG VuWvPN0CR3d+XRXQyK+LLcZpR4ClQLIk5VOXjaHBvsgcKlKM8Az1IuE0HJQAL2fo mlBdKoXBMn1o+A0gU8EcVlBEXk5jrtmuOgcoteuKlW0yy8S7MFFqv73Fps8VzvhW oyCqiSEDu7fydc8ZDYi9q8TCeg9gPtD67wT9pIMcmdNFysgnFX5vw/III7LQ8UKk CnA4HLjbp6jqucwnB9zB3ZJD+BdfMvmx9R8gCLozAa0c2JUlrKNs7H2zHkiV8Bg= -----END CERTIFICATE-----Generated at Fri Nov 22 06:35:25 2024 by rpki-client on console-ams.rpki-client.org