$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20260/0KRvGIQiYbUtQ43u_SUinbwurI4.roa File: 0KRvGIQiYbUtQ43u_SUinbwurI4.roa (raw, json) Hash identifier: W+hTn5KGrP7tpQSvlCyuK4GAasZPOC1DtY9nHwDdtPA= Subject key identifier: D0:A4:6F:18:84:22:61:B5:2D:43:8D:EE:FD:25:22:9D:BC:2E:AC:8E Certificate issuer: /CN=DB70B12B416AE2434641E5ACD256FB224B4C5B9B Certificate serial: 02 Authority key identifier: DB:70:B1:2B:41:6A:E2:43:46:41:E5:AC:D2:56:FB:22:4B:4C:5B:9B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/23CxK0Fq4kNGQeWs0lb7IktMW5s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/0KRvGIQiYbUtQ43u_SUinbwurI4.roa Signing time: Sat 25 May 2024 16:50:46 +0000 ROA not before: Sat 25 May 2024 16:50:46 +0000 ROA not after: Sun 25 May 2025 16:38:10 +0000 asID: 55911 IP address blocks: 157.66.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/23CxK0Fq4kNGQeWs0lb7IktMW5s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB70B12B416AE2434641E5ACD256FB224B4C5B9B Validity Not Before: May 25 16:50:46 2024 GMT Not After : May 25 16:38:10 2025 GMT Subject: CN=D0A46F18842261B52D438DEEFD25229DBC2EAC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:85:b1:7e:39:4c:ab:8f:94:c9:d4:84:fe: b7:d0:00:f2:45:f6:fd:ec:bb:95:97:e0:ba:b9:f6: c2:4c:df:3d:72:00:ff:b4:e1:e3:d2:9e:cf:79:0d: f2:39:32:e7:c7:fa:ce:e0:51:93:1b:2c:b9:e2:2b: 2d:09:5e:1e:1c:3c:e4:44:75:9d:17:9f:54:77:2a: aa:45:a3:80:33:c6:a6:a8:a2:d1:df:e9:d8:bb:64: 51:5e:31:bc:67:42:f4:3c:d7:89:cc:44:d5:ff:af: 30:fa:d7:64:2d:27:16:f8:cb:80:5f:5f:77:35:6e: 59:bd:90:d6:6d:dd:13:91:e7:ff:5f:2f:31:31:43: 1c:7f:f2:86:e8:83:21:6f:20:90:f1:05:9b:88:7e: e8:da:14:f6:ac:56:8c:c3:e9:1d:d0:7c:1a:55:24: e1:bf:0b:5d:72:e1:d5:d4:d4:41:55:74:5f:e3:d5: 1d:2e:c4:7a:96:c1:15:53:49:b5:87:6a:eb:d7:83: c3:84:f3:23:da:40:ad:2f:00:41:fd:2a:39:f2:fa: 8c:12:4f:d1:b5:1b:e1:37:73:86:b0:1f:77:aa:9a: 29:85:8e:61:88:04:66:c7:b6:8d:6a:f6:e6:6f:9e: cc:f8:8f:77:85:0e:a7:79:73:89:21:26:e0:c5:c6: 05:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A4:6F:18:84:22:61:B5:2D:43:8D:EE:FD:25:22:9D:BC:2E:AC:8E X509v3 Authority Key Identifier: keyid:DB:70:B1:2B:41:6A:E2:43:46:41:E5:AC:D2:56:FB:22:4B:4C:5B:9B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/23CxK0Fq4kNGQeWs0lb7IktMW5s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/0KRvGIQiYbUtQ43u_SUinbwurI4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.180.0/23 Signature Algorithm: sha256WithRSAEncryption 07:9f:24:d4:7b:a6:b6:93:59:0a:3b:02:8b:1a:db:a5:ee:fb: 75:5d:0e:95:13:53:26:47:04:55:aa:b8:ec:53:46:f1:4d:9b: ee:2e:a4:1f:94:3f:5e:8b:9e:25:54:44:03:95:8f:23:e7:85: bc:b8:32:bb:f2:f3:c9:85:9e:cc:98:b4:8c:5e:50:be:29:d7: d9:9a:43:35:77:6b:11:68:c8:6f:06:b8:e8:37:39:b2:f9:f3: e2:4c:42:1f:0d:9a:01:ab:7c:46:05:71:55:e9:4b:84:81:90: ee:92:25:f4:7b:2b:45:ad:11:48:a2:42:cf:80:37:da:86:42: 97:89:cc:41:85:9c:7b:45:9d:3f:4a:55:dc:32:d8:68:2e:f6: a3:e0:cb:18:7b:54:80:e8:05:8c:91:0e:ca:1c:e0:5d:d6:f2: ae:3c:85:cb:81:82:1a:84:d3:8c:c1:8e:06:28:84:b6:89:28: e2:3e:ca:18:03:e3:45:d2:cb:83:82:db:82:e1:f6:91:bb:09: 14:2e:24:06:cb:35:e7:e8:9a:ec:36:99:ac:90:b9:5e:58:77: dd:d3:fe:39:b2:0d:65:b6:6c:c3:33:ef:55:af:6a:09:14:40: fa:92:46:17:df:e0:aa:73:d9:6d:02:37:d6:20:d9:e7:49:84: a4:78:29:e1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQjcw QjEyQjQxNkFFMjQzNDY0MUU1QUNEMjU2RkIyMjRCNEM1QjlCMB4XDTI0MDUyNTE2 NTA0NloXDTI1MDUyNTE2MzgxMFowMzExMC8GA1UEAxMoRDBBNDZGMTg4NDIyNjFC NTJENDM4REVFRkQyNTIyOURCQzJFQUM4RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALhMhbF+OUyrj5TJ1IT+t9AA8kX2/ey7lZfgurn2wkzfPXIA/7Th 49Kez3kN8jky58f6zuBRkxssueIrLQleHhw85ER1nRefVHcqqkWjgDPGpqii0d/p 2LtkUV4xvGdC9DzXicxE1f+vMPrXZC0nFvjLgF9fdzVuWb2Q1m3dE5Hn/18vMTFD HH/yhuiDIW8gkPEFm4h+6NoU9qxWjMPpHdB8GlUk4b8LXXLh1dTUQVV0X+PVHS7E epbBFVNJtYdq69eDw4TzI9pArS8AQf0qOfL6jBJP0bUb4TdzhrAfd6qaKYWOYYgE Zse2jWr25m+ezPiPd4UOp3lziSEm4MXGBbUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTQpG8YhCJhtS1Dje79JSKdvC6sjjAfBgNVHSMEGDAWgBTbcLErQWriQ0ZB5azS VvsiS0xbmzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNjAvMjNDeEswRnE0a05HUWVXczBsYjdJa3RNVzVzLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjNDeEswRnE0a05HUWVXczBsYjdJ a3RNVzVzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjYwLzBLUnZHSVFpWWJVdFE0M3VfU1VpbmJ3dXJJNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGdQrQwDQYJKoZIhvcNAQELBQADggEBAAefJNR7praTWQo7Aosa26Xu +3VdDpUTUyZHBFWquOxTRvFNm+4upB+UP16LniVURAOVjyPnhby4Mrvy88mFnsyY tIxeUL4p19maQzV3axFoyG8GuOg3ObL58+JMQh8NmgGrfEYFcVXpS4SBkO6SJfR7 K0WtEUiiQs+AN9qGQpeJzEGFnHtFnT9KVdwy2Ggu9qPgyxh7VIDoBYyRDsoc4F3W 8q48hcuBghqE04zBjgYohLaJKOI+yhgD40XSy4OC24Lh9pG7CRQuJAbLNefomuw2 mayQuV5Yd93T/jmyDWW2bMMz71WvagkUQPqSRhff4Kpz2W0CN9Yg2edJhKR4KeE= -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:33 2025 by rpki-client