$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/ByaKLxi8ugDsCUlm9INow9uu6HQ.roa File: ByaKLxi8ugDsCUlm9INow9uu6HQ.roa (raw, json) Hash identifier: rFudOXdLmyC8QrHWkk8RlCXIH1HOn6lrmOeEaDYa5Ww= Subject key identifier: 07:26:8A:2F:18:BC:BA:00:EC:09:49:66:F4:83:68:C3:DB:AE:E8:74 Certificate issuer: /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4 Certificate serial: 3E Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/ByaKLxi8ugDsCUlm9INow9uu6HQ.roa Signing time: Sat 30 Nov 2024 01:31:14 +0000 ROA not before: Sat 30 Nov 2024 01:31:14 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 55396 IP address blocks: 192.50.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4 Validity Not Before: Nov 30 01:31:14 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=07268A2F18BCBA00EC094966F48368C3DBAEE874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b5:7e:84:fb:7e:5a:65:cf:3e:91:2d:af:b7: 2e:fd:09:6c:97:a2:1c:dc:22:d4:28:c1:2e:3f:33: 6a:67:f3:ce:1a:58:31:0c:7c:83:45:89:af:31:5c: 22:25:21:2d:05:c0:92:a5:35:a3:3e:fd:46:2d:52: 9a:49:9d:28:48:3c:5c:5c:22:06:54:5e:e8:cf:ff: 4f:0a:e9:56:5c:63:af:bd:d4:2c:ea:e1:8f:11:e8: a8:2d:d0:e0:de:01:8d:2a:6c:47:9c:a7:1c:85:08: e3:af:fe:20:c7:f7:57:28:12:32:ac:16:7e:1d:20: d6:ba:65:03:d2:3b:30:32:2f:f2:a3:60:e7:83:23: 7e:cd:89:82:15:29:a7:91:c6:44:45:b6:24:fd:66: c9:2e:37:60:c6:6e:fc:19:35:a8:ee:b8:ae:0b:4f: 7b:a9:82:58:a0:ef:05:9f:ae:15:82:26:77:05:5f: e0:85:54:e8:c7:16:cd:5b:6f:3e:24:18:bc:07:0d: 83:8d:6c:65:3f:ff:86:7e:e1:85:46:0f:81:5d:c0: 2d:c8:df:a0:39:32:5b:eb:2b:d1:56:a1:90:d6:66: 3a:9e:35:b2:d3:5f:7f:97:df:e5:91:fa:2e:b4:85: a9:0b:82:7d:d4:c8:5b:53:6f:ea:75:a9:c0:15:9e: 7e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:26:8A:2F:18:BC:BA:00:EC:09:49:66:F4:83:68:C3:DB:AE:E8:74 X509v3 Authority Key Identifier: keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/ByaKLxi8ugDsCUlm9INow9uu6HQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.50.151.0/24 Signature Algorithm: sha256WithRSAEncryption 68:39:92:55:6b:d1:32:a9:5a:fa:30:33:cc:a8:be:08:12:49: 3e:be:32:48:fa:66:87:fb:62:fc:1c:48:38:5d:81:25:86:dc: 2c:6a:b1:1e:6e:f1:95:a6:76:1f:d7:af:20:cb:cd:a0:58:1d: 98:2d:88:12:d8:88:9d:66:3d:d4:d0:38:11:63:bf:a3:97:8a: 10:f9:60:ad:a8:26:3d:b3:0f:bc:9e:54:b0:56:cd:c9:55:3d: 6f:0f:96:22:89:5b:8e:62:d0:16:7e:f4:89:c6:c0:92:83:26: 1e:d7:64:52:49:bb:3f:0d:62:f6:bc:b4:27:d3:45:fb:e5:bd: 2b:04:a9:67:8a:bc:c0:4f:6e:88:86:91:79:84:ce:7c:c4:41: 84:d4:bb:b5:f7:e5:52:db:77:b5:22:47:2b:8a:a0:f2:d9:55: 31:f5:40:08:8f:35:84:ff:e9:f5:ba:3b:b1:fe:6f:54:01:94: b8:0b:2d:4b:38:58:9d:67:dd:4f:2b:19:55:6e:5e:1f:4f:fb: e9:ea:41:b8:35:41:74:0a:02:11:94:d7:56:87:f4:b5:97:0c: de:7c:9c:37:2d:9a:7f:6f:7d:9f:56:88:22:3d:ec:ca:cc:ca: f4:47:c3:5a:13:f3:c6:e5:dc:a7:04:f4:37:00:55:92:cc:0f: ad:6e:3b:cf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMDcx MUYyREQ3NjY3Q0ZCMDg4MDRCRThGQTI4NEE0OUU2MTNFREM0MB4XDTI0MTEzMDAx MzExNFoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoMDcyNjhBMkYxOEJDQkEw MEVDMDk0OTY2RjQ4MzY4QzNEQkFFRTg3NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANW1foT7flplzz6RLa+3Lv0JbJeiHNwi1CjBLj8zamfzzhpYMQx8 g0WJrzFcIiUhLQXAkqU1oz79Ri1SmkmdKEg8XFwiBlRe6M//TwrpVlxjr73ULOrh jxHoqC3Q4N4BjSpsR5ynHIUI46/+IMf3VygSMqwWfh0g1rplA9I7MDIv8qNg54Mj fs2JghUpp5HGREW2JP1myS43YMZu/Bk1qO64rgtPe6mCWKDvBZ+uFYImdwVf4IVU 6McWzVtvPiQYvAcNg41sZT//hn7hhUYPgV3ALcjfoDkyW+sr0VahkNZmOp41stNf f5ff5ZH6LrSFqQuCfdTIW1Nv6nWpwBWefmcCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQHJoovGLy6AOwJSWb0g2jD267odDAfBgNVHSMEGDAWgBQAcR8t12Z8+wiAS+j6 KEpJ5hPtxDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM3MC9BSEVmTGRkbWZQc0lnRXZvLWloS1NlWVQ3Y1EuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9BSEVmTGRkbWZQc0lnRXZvLWloS1Nl WVQ3Y1EuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM3MC9CeWFLTHhpOHVnRHNDVWxtOUlOb3c5dXU2SFEucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwDKXMA0GCSqGSIb3DQEBCwUAA4IBAQBoOZJVa9EyqVr6MDPMqL4IEkk+ vjJI+maH+2L8HEg4XYElhtwsarEebvGVpnYf168gy82gWB2YLYgS2IidZj3U0DgR Y7+jl4oQ+WCtqCY9sw+8nlSwVs3JVT1vD5YiiVuOYtAWfvSJxsCSgyYe12RSSbs/ DWL2vLQn00X75b0rBKlnirzAT26IhpF5hM58xEGE1Lu19+VS23e1IkcriqDy2VUx 9UAIjzWE/+n1ujux/m9UAZS4Cy1LOFidZ91PKxlVbl4fT/vp6kG4NUF0CgIRlNdW h/S1lwzefJw3LZp/b32fVogiPezKzMr0R8NaE/PG5dynBPQ3AFWSzA+tbjvP -----END CERTIFICATE-----Generated at Wed Feb 19 22:44:02 2025 by rpki-client