$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/h_jKPxFGzFxdMTKGqgADNrpFLFY.roa File: h_jKPxFGzFxdMTKGqgADNrpFLFY.roa (raw, json) Hash identifier: py+tyDzACK9ub7FVfysH0e6yW69EJ2UrMSlH/Qjkjj8= Subject key identifier: 87:F8:CA:3F:11:46:CC:5C:5D:31:32:86:AA:00:03:36:BA:45:2C:56 Certificate issuer: /CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC Certificate serial: 33 Authority key identifier: 63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/h_jKPxFGzFxdMTKGqgADNrpFLFY.roa Signing time: Thu 31 Oct 2024 01:33:25 +0000 ROA not before: Thu 31 Oct 2024 01:33:25 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 9351 IP address blocks: 157.70.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC Validity Not Before: Oct 31 01:33:25 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=87F8CA3F1146CC5C5D313286AA000336BA452C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:97:21:e6:b5:08:fb:f9:49:72:26:df:4c:2e: 1f:2a:aa:d6:73:e1:93:d3:26:78:df:53:51:ba:07: 9f:14:6b:69:52:d8:d1:b1:80:92:f5:4a:45:44:b5: c4:8c:60:ff:c5:e2:b2:8e:86:d8:46:bc:45:91:7a: 95:22:87:92:44:40:bb:5b:3e:05:76:61:b1:c9:9c: 6c:b2:10:6e:24:6b:bb:68:91:0d:63:ce:1a:f0:30: 8a:b7:ff:6d:8e:10:6c:39:f9:30:84:0a:13:26:27: 3d:28:c5:aa:24:90:0e:dd:6a:09:42:7e:3b:a2:3a: ac:c1:d5:df:67:eb:6a:65:8c:4b:39:ce:d5:9e:3a: a4:6b:a8:bd:b9:a4:cf:e6:57:bd:ce:a3:ea:71:fa: 97:44:12:50:83:63:22:10:c9:19:ba:e2:8a:02:66: ea:5c:b2:83:14:47:69:c0:98:1f:e3:d2:9c:af:89: 6d:3e:16:33:ce:11:35:c1:04:38:a6:ed:3a:5a:3a: bf:a1:05:0e:18:1c:f6:90:b9:40:0a:b3:0e:3f:d5: f6:9f:1e:f8:ec:fe:a5:6b:99:40:59:dc:b6:fe:25: a3:44:17:5f:34:e9:0a:33:cd:e0:8c:52:3d:5e:57: 4b:84:a4:24:a9:55:68:66:be:d8:57:4b:3b:11:ae: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F8:CA:3F:11:46:CC:5C:5D:31:32:86:AA:00:03:36:BA:45:2C:56 X509v3 Authority Key Identifier: keyid:63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/h_jKPxFGzFxdMTKGqgADNrpFLFY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.70.160.0/19 Signature Algorithm: sha256WithRSAEncryption 91:80:ed:b0:03:95:9e:2d:8f:a5:14:f4:7b:9d:fa:7f:23:b4: 2d:1e:28:04:8b:fb:dd:77:ab:4d:72:6e:31:53:4d:72:43:29: 9c:06:98:9a:2d:e9:0c:ca:ed:34:30:09:3b:f4:a7:95:5c:0a: ed:eb:e8:f6:31:14:c0:55:bc:33:19:83:fc:83:6f:fc:55:cb: c7:94:87:81:cc:16:49:1b:2f:b9:6b:1d:b8:36:66:85:c6:b1: 65:fc:5f:66:18:6a:68:a7:4c:b2:c3:d9:33:57:35:46:87:97: 85:5d:1e:e9:07:65:e4:12:34:c7:36:98:e7:0b:c5:9c:bb:2a: 50:ce:6f:ee:26:13:8a:36:29:94:67:aa:15:42:b6:93:11:8f: 46:ab:f6:b1:69:f1:d0:0e:a3:57:32:7c:eb:5a:f6:f9:77:f1: 63:c3:9d:cc:62:4d:f3:7d:87:c8:75:8b:7f:f9:54:6a:53:ba: 58:29:57:b9:0e:13:b0:0f:e9:98:6d:b3:95:7d:1c:d8:29:03: 18:39:09:e0:d4:e3:29:28:6d:34:9b:d9:dd:b9:a6:05:23:84: 87:77:52:21:b8:06:ef:e6:b3:2e:9a:1d:9d:c0:c0:59:bc:65: 08:f3:5b:cf:ab:3e:8d:77:6b:0a:17:eb:a1:9d:ed:ad:f0:3d: 6d:1e:59:27 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MzdC MzY0RUQwNDU4NTI2RDY2OENFRjhDRUU2NUEwOUREQzJFNERDMB4XDTI0MTAzMTAx MzMyNVoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoODdGOENBM0YxMTQ2Q0M1 QzVEMzEzMjg2QUEwMDAzMzZCQTQ1MkM1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPaXIea1CPv5SXIm30wuHyqq1nPhk9MmeN9TUboHnxRraVLY0bGA kvVKRUS1xIxg/8Xiso6G2Ea8RZF6lSKHkkRAu1s+BXZhscmcbLIQbiRru2iRDWPO GvAwirf/bY4QbDn5MIQKEyYnPSjFqiSQDt1qCUJ+O6I6rMHV32framWMSznO1Z46 pGuovbmkz+ZXvc6j6nH6l0QSUINjIhDJGbriigJm6lyygxRHacCYH+PSnK+JbT4W M84RNcEEOKbtOlo6v6EFDhgc9pC5QAqzDj/V9p8e+Oz+pWuZQFnctv4lo0QXXzTp CjPN4IxSPV5XS4SkJKlVaGa+2FdLOxGuk7kCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSH+Mo/EUbMXF0xMoaqAAM2ukUsVjAfBgNVHSMEGDAWgBRjezZO0EWFJtZozvjO 5loJ3cLk3DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM0L1kzczJUdEJGaFNiV2FNNzR6dVphQ2QzQzVOdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1kzczJUdEJGaFNiV2FNNzR6dVphQ2Qz QzVOdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzQvaF9qS1B4Rkd6RnhkTVRLR3FnQUROcnBGTEZZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBZ1GoDANBgkqhkiG9w0BAQsFAAOCAQEAkYDtsAOVni2PpRT0e536fyO0LR4o BIv73XerTXJuMVNNckMpnAaYmi3pDMrtNDAJO/SnlVwK7evo9jEUwFW8MxmD/INv /FXLx5SHgcwWSRsvuWsduDZmhcaxZfxfZhhqaKdMssPZM1c1RoeXhV0e6Qdl5BI0 xzaY5wvFnLsqUM5v7iYTijYplGeqFUK2kxGPRqv2sWnx0A6jVzJ861r2+XfxY8Od zGJN832HyHWLf/lUalO6WClXuQ4TsA/pmG2zlX0c2CkDGDkJ4NTjKShtNJvZ3bmm BSOEh3dSIbgG7+azLpodncDAWbxlCPNbz6s+jXdrChfroZ3trfA9bR5ZJw== -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:28 2024 by rpki-client on console-ams.rpki-client.org