$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/X2FHZOwq_1okPzw-r3XBQBt49is.roa File: X2FHZOwq_1okPzw-r3XBQBt49is.roa (raw, json) Hash identifier: w2EwM/qVjbVYF0VRil14lNDiA3F+EiP1OWVTCT8C45I= Subject key identifier: 5F:61:47:64:EC:2A:FF:5A:24:3F:3C:3E:AF:75:C1:40:1B:78:F6:2B Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: E0 Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/X2FHZOwq_1okPzw-r3XBQBt49is.roa Signing time: Fri 31 May 2024 01:31:23 +0000 ROA not before: Fri 31 May 2024 01:31:23 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 9370 IP address blocks: 153.121.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: May 31 01:31:23 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=5F614764EC2AFF5A243F3C3EAF75C1401B78F62B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:ba:72:0c:39:64:84:c0:50:2b:c6:45:8b: 6b:d5:66:48:aa:3f:85:71:91:86:16:47:3e:31:d9: 64:f7:e0:0e:ba:a8:4b:40:46:77:f4:83:9c:b3:35: 7c:cb:c2:1f:fa:e9:6d:ef:d1:4f:45:ea:26:93:7d: 8f:3c:70:d8:72:83:a9:9c:a1:f7:c4:4a:9d:18:f0: 0b:45:a0:03:a7:9f:35:a9:f3:ab:5e:75:25:67:93: 43:ce:26:09:a4:73:1b:45:38:f2:c1:6f:ed:23:b1: 36:25:f0:0b:30:69:fe:21:b7:cc:c6:f1:b5:a0:8f: 88:82:ed:0b:ea:a9:db:ad:03:a3:d8:66:a3:ec:3a: b4:3a:fe:7f:f6:7d:33:aa:f0:2d:1e:3b:96:a8:68: 8c:7a:79:74:be:2a:f8:35:b6:e6:6e:05:af:72:96: 42:f7:ab:22:b5:cf:db:d1:bf:4e:f2:16:b7:2b:31: 5a:91:ee:cf:6e:f5:e7:a8:8a:60:f6:2b:6e:7c:42: 4c:29:96:5e:96:a7:f6:9b:de:23:46:e8:3d:aa:fe: 5e:0f:62:21:fc:fd:d4:fa:5d:8b:29:ae:94:dc:8c: d1:ba:5a:e2:64:bc:75:08:9d:2a:75:66:59:77:76: 10:a9:3d:00:09:50:d2:df:39:34:71:5c:7b:52:65: d8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:61:47:64:EC:2A:FF:5A:24:3F:3C:3E:AF:75:C1:40:1B:78:F6:2B X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/X2FHZOwq_1okPzw-r3XBQBt49is.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.121.0.0/19 Signature Algorithm: sha256WithRSAEncryption 5d:2e:02:00:62:df:80:36:66:dc:10:00:67:de:a2:d3:6a:1d: be:fb:bf:71:5c:73:b4:57:8d:98:72:b2:8d:f9:42:83:57:29: 83:3b:50:54:be:cf:4e:6a:e7:8e:48:74:87:9d:69:05:0a:62: 8c:9c:03:38:e6:f3:08:fe:17:02:13:f4:9f:86:45:9d:c3:bf: e5:79:69:4d:1f:95:6e:d8:b5:4d:70:7e:52:f3:6b:74:d3:a0: f4:70:e4:40:94:d6:1a:b8:d0:39:1e:f0:d6:33:6a:88:25:c9: 59:0d:bb:d9:73:9d:47:15:41:cc:ec:9e:14:9d:98:83:e0:56: b7:70:17:5e:1a:6b:ca:07:a4:6c:54:ec:5d:16:6c:37:8c:a7: 08:9f:c2:25:8d:e9:d5:da:83:e7:84:fb:c7:0e:1f:d2:07:09: b5:84:2a:4e:66:13:cc:b1:5b:fd:ff:78:b8:27:8e:b9:2a:fd: b0:8e:73:bd:2d:e9:01:79:8c:da:ee:41:66:ef:3b:00:ae:fd: 42:87:d4:1c:63:ec:7b:99:b1:bf:ad:ce:91:9f:cb:26:38:74: 5d:5e:0a:77:5f:b5:0a:1b:4e:0b:1b:42:ed:03:cf:f2:c9:a7: 66:88:ef:7f:9a:4c:03:4b:a8:05:60:c4:e3:a1:16:ed:34:88: aa:6c:55:52 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNDA1MzEw MTMxMjNaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVGNjE0NzY0RUMyQUZG NUEyNDNGM0MzRUFGNzVDMTQwMUI3OEY2MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5pbpyDDlkhMBQK8ZFi2vVZkiqP4VxkYYWRz4x2WT34A66qEtA Rnf0g5yzNXzLwh/66W3v0U9F6iaTfY88cNhyg6mcoffESp0Y8AtFoAOnnzWp86te dSVnk0POJgmkcxtFOPLBb+0jsTYl8Aswaf4ht8zG8bWgj4iC7QvqqdutA6PYZqPs OrQ6/n/2fTOq8C0eO5aoaIx6eXS+Kvg1tuZuBa9ylkL3qyK1z9vRv07yFrcrMVqR 7s9u9eeoimD2K258Qkwpll6Wp/ab3iNG6D2q/l4PYiH8/dT6XYsprpTcjNG6WuJk vHUInSp1Zll3dhCpPQAJUNLfOTRxXHtSZdiHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUX2FHZOwq/1okPzw+r3XBQBt49iswHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ3L1gyRkhaT3dxXzFva1B6dy1yM1hCUUJ0NDlpcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWZeQAwDQYJKoZIhvcNAQELBQADggEBAF0uAgBi34A2ZtwQAGfeotNqHb77 v3Fcc7RXjZhyso35QoNXKYM7UFS+z05q545IdIedaQUKYoycAzjm8wj+FwIT9J+G RZ3Dv+V5aU0flW7YtU1wflLza3TToPRw5ECU1hq40Dke8NYzaoglyVkNu9lznUcV QczsnhSdmIPgVrdwF14aa8oHpGxU7F0WbDeMpwifwiWN6dXag+eE+8cOH9IHCbWE Kk5mE8yxW/3/eLgnjrkq/bCOc70t6QF5jNruQWbvOwCu/UKH1Bxj7HuZsb+tzpGf yyY4dF1eCndftQobTgsbQu0Dz/LJp2aI73+aTANLqAVgxOOhFu00iKpsVVI= -----END CERTIFICATE-----Generated at Sun Feb 16 22:18:58 2025 by rpki-client