$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/LIRJoQQFMFUcUpD1qzK_WA9DcgY.roa File: LIRJoQQFMFUcUpD1qzK_WA9DcgY.roa (raw, json) Hash identifier: 2BEmp5FPzmptST8GEi9Zl7u2i2Aeve6K08HN+kyAtSs= Subject key identifier: 2C:84:49:A1:04:05:30:55:1C:52:90:F5:AB:32:BF:58:0F:43:72:06 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 58 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/LIRJoQQFMFUcUpD1qzK_WA9DcgY.roa Signing time: Wed 31 Jul 2024 01:08:57 +0000 ROA not before: Wed 31 Jul 2024 01:08:57 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.192.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jul 31 01:08:57 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=2C8449A1040530551C5290F5AB32BF580F437206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:a5:35:23:e9:96:5f:f8:2e:e4:5e:1d:48: 10:2b:4e:cd:47:a5:e7:03:8b:80:88:c0:1d:6c:fc: a9:69:67:3b:2b:61:cc:13:97:3d:30:49:63:c0:66: a3:0d:63:5f:6d:5a:81:34:77:cb:71:cd:5f:96:a8: 01:0b:99:9e:55:39:62:af:da:a6:48:31:30:9a:88: 64:f7:38:15:ea:53:be:f1:84:62:f4:44:62:06:86: 67:4f:3f:cb:17:f1:0f:8c:ec:a3:b7:2d:ff:56:94: a5:e9:45:0f:b9:02:72:a5:79:9a:63:29:17:6a:1f: bf:74:22:f5:69:ef:19:f2:4c:48:4d:13:d6:57:d0: a2:c4:94:8b:a8:5c:77:d8:5a:c2:04:a1:2b:96:4d: 89:a7:07:77:79:a6:0a:81:1b:af:69:9b:22:b6:ba: d9:5b:3d:ab:53:ea:16:8d:2d:03:b9:bd:35:1d:a1: 3b:ff:2c:56:e6:37:c0:17:5b:b7:8d:37:b7:7d:7f: b6:7e:fb:65:2a:90:00:37:c3:9e:24:90:cf:c4:a1: 9b:25:b3:3c:f1:71:e2:6e:16:dd:52:63:04:73:d6: e3:0c:d7:0f:41:c9:3b:70:ee:9a:74:10:c3:ce:f9: 44:07:9a:2e:6e:77:23:93:b3:c2:ab:91:a7:12:5b: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:84:49:A1:04:05:30:55:1C:52:90:F5:AB:32:BF:58:0F:43:72:06 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/LIRJoQQFMFUcUpD1qzK_WA9DcgY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.248.192.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:26:3b:40:0d:88:d8:3b:a4:90:f6:ed:97:05:10:06:92:0a: 78:43:5a:b3:eb:74:90:47:15:74:69:3c:21:f8:ab:0d:96:2d: 23:03:8f:25:f1:a5:3c:23:5d:0e:0d:99:90:08:53:24:c8:ee: 2c:b7:83:3c:18:60:4f:a4:c7:20:7b:7d:ce:5c:d9:3c:fe:43: a1:24:47:72:9b:c3:da:ce:50:6f:c5:22:1a:69:fc:dd:b0:7f: d5:5f:ba:d4:ae:bc:36:9f:d8:5b:ee:be:e1:73:66:2f:41:03: af:03:2c:d6:17:24:1a:e1:16:7b:a7:49:a4:ce:69:c8:41:26: b8:82:3a:e3:f7:45:e6:58:75:c5:b2:7d:1f:09:04:fd:3b:f5: 0d:1a:f0:9c:44:3b:a2:d6:3c:2d:20:56:e3:6e:48:cb:66:2d: 07:09:25:0d:bf:5b:47:1c:12:0a:7d:28:9f:3a:ca:50:45:ed: 90:8c:06:4e:cc:12:3a:22:9b:8a:f3:c0:eb:1e:ac:58:ec:8d: 3a:55:a4:2b:4b:42:60:48:88:98:3d:e1:da:b0:95:25:9c:cf: 1e:d6:7d:46:a1:84:ea:ac:c6:0c:71:17:51:9e:61:21:ea:bf: 72:18:e1:f3:ff:55:83:48:78:f4:ca:fe:75:7f:1d:21:69:aa: 6c:46:2d:fc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDczMTAx MDg1N1oXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMkM4NDQ5QTEwNDA1MzA1 NTFDNTI5MEY1QUIzMkJGNTgwRjQzNzIwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMQTpTUj6ZZf+C7kXh1IECtOzUel5wOLgIjAHWz8qWlnOythzBOX PTBJY8Bmow1jX21agTR3y3HNX5aoAQuZnlU5Yq/apkgxMJqIZPc4FepTvvGEYvRE YgaGZ08/yxfxD4zso7ct/1aUpelFD7kCcqV5mmMpF2ofv3Qi9WnvGfJMSE0T1lfQ osSUi6hcd9hawgShK5ZNiacHd3mmCoEbr2mbIra62Vs9q1PqFo0tA7m9NR2hO/8s VuY3wBdbt403t31/tn77ZSqQADfDniSQz8ShmyWzPPFx4m4W3VJjBHPW4wzXD0HJ O3DumnQQw875RAeaLm53I5OzwquRpxJbLbkCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBQshEmhBAUwVRxSkPWrMr9YD0NyBjAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L0xJUkpvUVFGTUZVY1VwRDFxektfV0E5RGNnWS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAOg+MAwDQYJKoZIhvcNAQELBQADggEBAE4mO0ANiNg7pJD27ZcFEAaSCnhDWrPr dJBHFXRpPCH4qw2WLSMDjyXxpTwjXQ4NmZAIUyTI7iy3gzwYYE+kxyB7fc5c2Tz+ Q6EkR3Kbw9rOUG/FIhpp/N2wf9VfutSuvDaf2FvuvuFzZi9BA68DLNYXJBrhFnun SaTOachBJriCOuP3ReZYdcWyfR8JBP079Q0a8JxEO6LWPC0gVuNuSMtmLQcJJQ2/ W0ccEgp9KJ86ylBF7ZCMBk7MEjoim4rzwOserFjsjTpVpCtLQmBIiJg94dqwlSWc zx7WfUahhOqsxgxxF1GeYSHqv3IY4fP/VYNIePTK/nV/HSFpqmxGLfw= -----END CERTIFICATE-----Generated at Sun Feb 16 22:14:44 2025 by rpki-client