$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/7G87BrSwOGFcxu5cfpa4UlOdYD4.roa File: 7G87BrSwOGFcxu5cfpa4UlOdYD4.roa (raw, json) Hash identifier: DYt6sAfO20oSIVE2KPdM13DooGOMHmtpbaEVP71ArBw= Subject key identifier: EC:6F:3B:06:B4:B0:38:61:5C:C6:EE:5C:7E:96:B8:52:53:9D:60:3E Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 82 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/7G87BrSwOGFcxu5cfpa4UlOdYD4.roa Signing time: Sat 30 Nov 2024 01:32:15 +0000 ROA not before: Sat 30 Nov 2024 01:32:15 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2514 IP address blocks: 160.248.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Nov 30 01:32:15 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=EC6F3B06B4B038615CC6EE5C7E96B852539D603E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:0b:d6:65:8a:f7:56:52:ae:dd:8d:ef:de: 82:fa:5d:be:30:2b:f2:e6:ab:85:c2:33:aa:16:1e: 95:7f:a7:df:d2:92:a4:a1:15:4e:61:fa:7e:bc:7d: ae:9f:06:28:09:4e:20:17:53:69:06:2b:70:84:80: 63:4c:0c:e8:f4:ab:c6:99:8e:04:f9:5d:db:7c:18: 55:d7:d7:be:84:49:88:29:70:cb:14:01:65:d2:c4: a5:ac:4e:f0:4f:48:aa:3f:65:43:b8:e1:a0:47:0a: c8:87:ad:cc:45:eb:60:e0:5c:36:fe:83:50:5f:fb: 85:22:12:ba:cb:0c:49:e3:60:a3:a6:55:b8:67:78: 53:74:98:ac:9f:24:66:c2:ab:5c:5a:ba:8d:d8:d1: fd:18:b2:9e:10:d5:97:78:53:cd:a4:91:64:21:f5: cf:ce:8a:2a:02:3b:56:88:bb:c5:42:00:e8:99:19: 5b:bc:b8:1c:46:5d:a0:1d:d8:08:f9:43:66:d5:c5: 7c:e2:41:9c:e5:f9:e5:03:2f:53:c5:bc:a1:db:c7: 4a:ac:76:55:10:11:42:36:4f:26:27:a3:09:d3:c6: 4d:df:c7:c3:3f:88:4b:45:e8:87:26:2d:68:10:14: 7e:26:26:31:c6:b5:1b:85:cc:e1:3a:7e:3c:65:c0: fd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6F:3B:06:B4:B0:38:61:5C:C6:EE:5C:7E:96:B8:52:53:9D:60:3E X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/7G87BrSwOGFcxu5cfpa4UlOdYD4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.248.128.0/19 Signature Algorithm: sha256WithRSAEncryption 4c:b1:86:d9:74:a2:92:2b:1c:40:13:17:56:23:72:a1:c4:4d: b5:b2:86:eb:84:c4:37:f8:63:08:02:04:c3:84:f0:33:fe:58: 32:1d:63:25:91:e6:1a:c0:11:0c:d1:fe:41:b1:c3:fd:53:01: b9:9c:34:a7:d0:38:f2:84:89:a3:e3:6b:08:97:00:ca:41:29: 1f:07:07:9d:21:42:75:76:7e:ba:ab:85:94:c1:b1:33:8f:31: 3a:99:88:26:85:8d:ea:5c:5e:9e:60:60:19:d5:e4:0c:67:56: 43:db:bc:96:4d:3f:88:a3:97:ba:8d:d4:5b:19:d5:e0:50:f2: 58:25:6d:57:ce:a1:6d:0f:61:d4:44:9a:88:cd:1f:68:09:03: 2d:09:9a:2e:3b:27:9c:9a:ee:a2:50:bc:46:3a:41:09:56:1a: 40:76:6d:6b:c9:67:6f:53:ff:12:e4:c9:1c:e7:fa:14:c3:e0: b9:25:55:3a:42:79:b2:15:21:05:2c:c5:91:6f:5c:58:ff:70: 3b:3e:66:df:f1:95:2b:5f:0a:60:c7:97:bc:8b:14:2d:67:cf: 66:0a:bc:2e:2b:ef:bd:af:d5:c0:84:b6:f4:1f:41:f4:c7:57: ea:f7:ea:38:67:79:e1:ce:52:80:65:97:5a:dc:d9:23:fc:b4: 82:d0:08:e5 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNDExMzAw MTMyMTVaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVDNkYzQjA2QjRCMDM4 NjE1Q0M2RUU1QzdFOTZCODUyNTM5RDYwM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWZAvWZYr3VlKu3Y3v3oL6Xb4wK/Lmq4XCM6oWHpV/p9/SkqSh FU5h+n68fa6fBigJTiAXU2kGK3CEgGNMDOj0q8aZjgT5Xdt8GFXX176ESYgpcMsU AWXSxKWsTvBPSKo/ZUO44aBHCsiHrcxF62DgXDb+g1Bf+4UiErrLDEnjYKOmVbhn eFN0mKyfJGbCq1xauo3Y0f0Ysp4Q1Zd4U82kkWQh9c/OiioCO1aIu8VCAOiZGVu8 uBxGXaAd2Aj5Q2bVxXziQZzl+eUDL1PFvKHbx0qsdlUQEUI2TyYnownTxk3fx8M/ iEtF6IcmLWgQFH4mJjHGtRuFzOE6fjxlwP0LAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQU7G87BrSwOGFcxu5cfpa4UlOdYD4wHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yOS83Rzg3QnJTd09HRmN4dTVjZnBhNFVsT2RZRDQucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFoPiAMA0GCSqGSIb3DQEBCwUAA4IBAQBMsYbZdKKSKxxAExdWI3KhxE21sobr hMQ3+GMIAgTDhPAz/lgyHWMlkeYawBEM0f5BscP9UwG5nDSn0DjyhImj42sIlwDK QSkfBwedIUJ1dn66q4WUwbEzjzE6mYgmhY3qXF6eYGAZ1eQMZ1ZD27yWTT+Io5e6 jdRbGdXgUPJYJW1XzqFtD2HURJqIzR9oCQMtCZouOyecmu6iULxGOkEJVhpAdm1r yWdvU/8S5Mkc5/oUw+C5JVU6QnmyFSEFLMWRb1xY/3A7Pmbf8ZUrXwpgx5e8ixQt Z89mCrwuK++9r9XAhLb0H0H0x1fq9+o4Z3nhzlKAZZda3Nkj/LSC0Ajl -----END CERTIFICATE-----Generated at Wed Feb 19 22:45:52 2025 by rpki-client