$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/3foEuAurBT2tOIdRgPgeiVYRWU4.roa File: 3foEuAurBT2tOIdRgPgeiVYRWU4.roa (raw, json) Hash identifier: I5F56yX3rGY6TzeVnzIA+Gtb3gzXBUc1SsGtoBxeKmI= Subject key identifier: DD:FA:04:B8:0B:AB:05:3D:AD:38:87:51:80:F8:1E:89:56:11:59:4E Certificate issuer: /CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7 Certificate serial: 03 Authority key identifier: 14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/3foEuAurBT2tOIdRgPgeiVYRWU4.roa Signing time: Fri 27 Sep 2024 00:03:52 +0000 ROA not before: Fri 27 Sep 2024 00:03:52 +0000 ROA not after: Fri 26 Sep 2025 07:28:48 +0000 asID: 2907 IP address blocks: 150.100.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7 Validity Not Before: Sep 27 00:03:52 2024 GMT Not After : Sep 26 07:28:48 2025 GMT Subject: CN=DDFA04B80BAB053DAD38875180F81E895611594E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:dc:25:91:df:65:7e:f4:57:8f:a6:95:e3: 41:10:96:dc:7b:56:dc:83:47:31:cc:6e:ff:05:40: 5d:4f:49:ac:5e:39:26:2c:cc:2e:de:3f:e0:14:ab: dc:ab:37:b0:ef:26:14:a4:f0:a2:89:61:79:f9:f1: 39:48:9a:3a:5e:f2:57:fa:5a:7e:a5:e0:b7:66:8f: f8:a5:43:8d:9c:5a:af:b1:7e:95:12:cb:9e:c5:e7: 81:a1:28:b9:31:85:3a:34:ed:43:f8:e0:25:8f:9f: 0f:b5:0f:20:4d:2e:2d:a7:bb:4b:fd:c6:7e:b2:c0: 7b:f9:3d:66:d4:20:b8:d4:52:99:0e:07:09:0a:4e: 5d:79:74:a8:e9:44:fd:82:f7:d7:35:d3:6d:cb:00: 99:3b:bc:d9:23:d3:1c:c3:30:53:1f:52:cd:f1:7b: 92:54:ab:ee:9c:22:31:d6:86:57:36:54:2b:6f:40: fb:b5:9f:25:73:22:96:eb:86:9d:f5:46:5e:ab:69: 73:80:ea:7d:5d:ab:b2:d2:96:ae:0e:63:f9:92:8c: 6a:bb:8e:c7:0d:e4:51:39:b5:d6:31:dd:96:01:42: d7:f6:2c:13:30:56:d8:ff:ca:fb:72:2b:8c:59:96: 05:34:fd:33:1b:4e:3c:4c:e0:50:96:11:69:18:e8: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FA:04:B8:0B:AB:05:3D:AD:38:87:51:80:F8:1E:89:56:11:59:4E X509v3 Authority Key Identifier: keyid:14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/3foEuAurBT2tOIdRgPgeiVYRWU4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.100.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1d:75:d7:d2:27:a2:da:68:40:39:c6:a8:18:ed:3b:39:e0:cc: 8c:ea:bc:0a:9d:80:e7:f1:d9:d4:bb:c2:8b:f7:2d:54:96:1f: 60:1d:1d:99:96:a8:dc:56:0f:77:ba:3c:c7:9c:f8:57:0d:25: 14:d2:5d:1a:02:fb:02:dc:1d:ab:c7:e6:74:d9:5e:a5:34:c9: 7f:48:e5:5f:e4:97:12:3f:a6:d0:53:51:d0:53:0f:6c:1d:b9: b3:80:89:fa:76:1e:fb:ad:fc:24:28:0c:9c:78:56:18:fc:c9: bd:9a:e0:65:8d:b0:62:8a:bf:17:61:ff:92:2b:c8:50:05:d1: 45:b5:0c:3f:17:19:0b:72:37:5f:c3:e5:40:2c:39:8d:60:5a: e3:a5:ce:4c:e7:5a:25:df:7c:6f:2d:17:93:c3:be:d7:22:aa: 92:a6:fc:f1:30:5c:0e:13:63:ac:60:b4:df:62:ea:18:dc:7f: b7:19:d9:b6:82:3d:e6:5a:df:4e:66:f7:7d:15:6c:10:69:56: fa:c7:b3:ff:b3:a1:bd:e3:0b:c2:6f:c2:ec:71:3a:59:83:ac: da:12:17:01:82:09:3c:9a:e2:98:85:7b:d2:60:4e:99:53:0f: a2:04:65:16:2a:45:7e:3d:2a:52:c7:82:8c:40:a8:3b:3b:c5: 9d:08:ba:6b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNEVD REUzMzFEQjNFRDE0NTlEOUU0NzhENzMwMTcwRjRDNzBFOUI3MB4XDTI0MDkyNzAw MDM1MloXDTI1MDkyNjA3Mjg0OFowMzExMC8GA1UEAxMoRERGQTA0QjgwQkFCMDUz REFEMzg4NzUxODBGODFFODk1NjExNTk0RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALhC3CWR32V+9FePppXjQRCW3HtW3INHMcxu/wVAXU9JrF45JizM Lt4/4BSr3Ks3sO8mFKTwoolhefnxOUiaOl7yV/pafqXgt2aP+KVDjZxar7F+lRLL nsXngaEouTGFOjTtQ/jgJY+fD7UPIE0uLae7S/3GfrLAe/k9ZtQguNRSmQ4HCQpO XXl0qOlE/YL31zXTbcsAmTu82SPTHMMwUx9SzfF7klSr7pwiMdaGVzZUK29A+7Wf JXMiluuGnfVGXqtpc4DqfV2rstKWrg5j+ZKMaruOxw3kUTm11jHdlgFC1/YsEzBW 2P/K+3IrjFmWBTT9MxtOPEzgUJYRaRjoAacCAwEAAaOCAiUwggIhMB0GA1UdDgQW BBTd+gS4C6sFPa04h1GA+B6JVhFZTjAfBgNVHSMEGDAWgBQU7N4zHbPtFFnZ5HjX MBcPTHDptzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9GT3plTXgyejdSUloyZVI0MXpBWEQweHc2YmMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GT3plTXgyejdSUloyZVI0MXpBWEQw eHc2YmMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjE2Ni8zZm9FdUF1ckJUMnRPSWRSZ1BnZWlWWVJXVTQucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAlmQwDQYJKoZIhvcNAQELBQADggEBAB1119InotpoQDnGqBjtOzngzIzq vAqdgOfx2dS7wov3LVSWH2AdHZmWqNxWD3e6PMec+FcNJRTSXRoC+wLcHavH5nTZ XqU0yX9I5V/klxI/ptBTUdBTD2wdubOAifp2Hvut/CQoDJx4Vhj8yb2a4GWNsGKK vxdh/5IryFAF0UW1DD8XGQtyN1/D5UAsOY1gWuOlzkznWiXffG8tF5PDvtciqpKm /PEwXA4TY6xgtN9i6hjcf7cZ2baCPeZa305m930VbBBpVvrHs/+zob3jC8Jvwuxx OlmDrNoSFwGCCTya4piFe9JgTplTD6IEZRYqRX49KlLHgoxAqDs7xZ0Iums= -----END CERTIFICATE-----Generated at Sun Feb 16 22:15:42 2025 by rpki-client