$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/fR5whITJwZS5y810geqBriD8uug.roa File: fR5whITJwZS5y810geqBriD8uug.roa (raw, json) Hash identifier: UzU9YLBFdgEuALbiW1stjomdWQj8INClvo4EnR+GrkE= Subject key identifier: 7D:1E:70:84:84:C9:C1:94:B9:CB:CD:74:81:EA:81:AE:20:FC:BA:E8 Certificate issuer: /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Certificate serial: 47 Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/fR5whITJwZS5y810geqBriD8uug.roa Signing time: Tue 14 May 2024 10:10:42 +0000 ROA not before: Tue 14 May 2024 10:10:42 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 7687 IP address blocks: 160.246.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Validity Not Before: May 14 10:10:42 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=7D1E708484C9C194B9CBCD7481EA81AE20FCBAE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:df:e5:ac:05:c2:40:43:a0:eb:1c:5b:df: cb:a0:09:27:81:00:0c:7d:ea:23:1d:a8:b8:2b:f1: 70:23:b3:43:f9:e6:2c:c1:06:43:ce:60:9b:53:6b: 8f:76:6a:fb:9b:36:b9:bd:7c:52:f6:f2:6a:6d:e9: 76:08:65:dd:fa:58:63:b5:97:af:30:2a:71:54:58: 41:d4:80:2a:7e:f2:14:9b:b6:7c:ae:f5:fb:e9:e9: 72:85:ed:7c:ac:a4:3f:fc:3a:f5:82:bc:0e:c9:01: d7:0a:b1:92:7e:9b:28:11:5b:7b:e6:1d:1c:13:06: c7:47:fe:68:cc:88:5a:5c:e0:df:66:b0:b2:d9:1d: 5f:bd:0b:68:0e:8c:29:45:34:26:c4:4d:9f:eb:2f: f7:de:9c:8f:c9:87:70:74:3f:8c:da:c6:12:7c:3a: 78:86:93:09:d7:d4:25:52:8f:44:13:31:df:09:30: 22:ea:25:3b:28:81:62:0b:c6:4b:7b:2f:f8:51:ad: a5:af:22:0b:37:bd:e9:83:e2:02:fe:91:9a:4c:d4: 97:3d:c4:07:0d:6e:e2:61:19:6e:d1:c7:8d:b9:d7: 55:9f:7d:6a:dc:01:b9:bc:6d:22:c0:16:93:e4:27: 43:63:f9:82:e3:d2:37:0a:f9:24:0f:d9:a9:d0:fc: 66:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1E:70:84:84:C9:C1:94:B9:CB:CD:74:81:EA:81:AE:20:FC:BA:E8 X509v3 Authority Key Identifier: keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/fR5whITJwZS5y810geqBriD8uug.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.246.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6e:a3:d0:2f:74:7f:83:d5:f7:2f:8a:05:a7:b4:25:a3:e1:5e: 71:66:8b:bd:17:18:1e:97:b9:06:ad:eb:ea:04:92:94:c1:37: ba:90:6c:e0:67:92:84:0a:6d:b8:b2:36:5b:63:60:0d:dd:f5: c9:92:47:8c:43:1b:69:92:fa:ff:fa:c8:2f:7e:30:7e:c5:07: 76:f6:a2:cb:e5:dd:17:ac:62:48:5b:a5:bf:c2:10:71:66:43: 7e:5d:22:fb:d7:c8:3f:5b:7a:13:2a:ef:88:70:ca:86:ef:7c: 27:8a:04:5c:53:13:e7:a3:9f:61:4a:23:79:6c:bb:5b:2e:86: cd:89:1c:28:d4:44:c2:f5:4a:da:a8:27:84:18:c1:0a:f8:79: ae:bb:e9:a6:e2:fb:f3:f5:0e:43:df:8f:6e:51:47:e3:a9:b6: bf:b1:4a:dd:d4:f5:4d:e4:a9:a4:2f:15:22:b4:8d:5b:53:0a: 3e:ad:6c:f0:8c:1b:e5:54:0b:99:8f:d1:5e:78:d9:f6:a3:da: 55:7c:36:72:9b:d1:ff:15:19:c5:e9:47:89:3b:7d:a2:b3:36: 21:a9:01:f1:81:e8:42:a4:7a:81:32:67:5a:0a:48:17:f4:d3: ba:97:7f:f8:b6:87:1f:36:e5:e3:1f:4a:47:f0:4f:81:0f:12: 1a:02:72:57 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEU1 M0M1MjQ0QjdGOUE3NkQ1RjlERjlGQkFGNjFFNTdCMkVBOTNCMB4XDTI0MDUxNDEw MTA0MloXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoN0QxRTcwODQ4NEM5QzE5 NEI5Q0JDRDc0ODFFQTgxQUUyMEZDQkFFODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALC03+WsBcJAQ6DrHFvfy6AJJ4EADH3qIx2ouCvxcCOzQ/nmLMEG Q85gm1Nrj3Zq+5s2ub18Uvbyam3pdghl3fpYY7WXrzAqcVRYQdSAKn7yFJu2fK71 ++npcoXtfKykP/w69YK8DskB1wqxkn6bKBFbe+YdHBMGx0f+aMyIWlzg32awstkd X70LaA6MKUU0JsRNn+sv996cj8mHcHQ/jNrGEnw6eIaTCdfUJVKPRBMx3wkwIuol OyiBYgvGS3sv+FGtpa8iCze96YPiAv6RmkzUlz3EBw1u4mEZbtHHjbnXVZ99atwB ubxtIsAWk+QnQ2P5guPSNwr5JA/ZqdD8ZskCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBR9HnCEhMnBlLnLzXSB6oGuIPy66DAfBgNVHSMEGDAWgBS45TxSRLf5p21fnfn7 r2Hley6pOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91T1U4VWtTMy1hZHRYNTM1LTY5aDVY c3VxVHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ5MC9mUjV3aElUSndaUzV5ODEwZ2VxQnJpRDh1dWcucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQHoPaAMA0GCSqGSIb3DQEBCwUAA4IBAQBuo9AvdH+D1fcvigWntCWj4V5x Zou9Fxgel7kGrevqBJKUwTe6kGzgZ5KECm24sjZbY2AN3fXJkkeMQxtpkvr/+sgv fjB+xQd29qLL5d0XrGJIW6W/whBxZkN+XSL718g/W3oTKu+IcMqG73wnigRcUxPn o59hSiN5bLtbLobNiRwo1ETC9UraqCeEGMEK+Hmuu+mm4vvz9Q5D349uUUfjqba/ sUrd1PVN5KmkLxUitI1bUwo+rWzwjBvlVAuZj9FeeNn2o9pVfDZym9H/FRnF6UeJ O32iszYhqQHxgehCpHqBMmdaCkgX9NO6l3/4tocfNuXjH0pH8E+BDxIaAnJX -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:50 2025 by rpki-client