$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/PVKfMFwAIo9zoKYtxMd1rpaCh68.roa File: PVKfMFwAIo9zoKYtxMd1rpaCh68.roa (raw, json) Hash identifier: 5wsWv2ChAN9HpXxBfJc04DQp+RHZFLH668NQjNl6VlU= Subject key identifier: 3D:52:9F:30:5C:00:22:8F:73:A0:A6:2D:C4:C7:75:AE:96:82:87:AF Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 6E Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/PVKfMFwAIo9zoKYtxMd1rpaCh68.roa Signing time: Sat 30 Nov 2024 01:32:06 +0000 ROA not before: Sat 30 Nov 2024 01:32:06 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2514 IP address blocks: 157.65.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Nov 30 01:32:06 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=3D529F305C00228F73A0A62DC4C775AE968287AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:09:b9:b5:99:8e:33:43:f8:90:bb:99:c7:b5: 6e:53:b0:95:97:eb:85:5c:44:ad:f2:71:bc:f9:3b: a7:49:bb:60:55:39:ca:21:65:0c:d1:20:34:1f:e1: cb:8f:55:af:99:86:a4:49:ac:29:57:64:d7:f9:a1: a6:c7:66:98:a2:1c:b3:e1:a2:69:75:ec:a9:2c:27: c7:9b:5b:ad:5b:79:0f:d8:7c:8a:e0:83:10:72:21: 03:25:93:c8:c4:b4:78:d9:f1:43:80:56:b1:cc:e1: 91:d3:f5:15:18:6a:30:41:e7:56:b0:51:c7:f1:a3: 19:1a:ce:88:ed:7c:91:15:79:a0:52:5a:ef:3b:29: e5:f8:d2:1e:99:22:05:db:b2:98:01:a5:e7:d0:cf: 56:03:bd:b8:b6:0e:41:c0:e3:6e:c5:e6:ae:fd:cf: 59:e3:6d:7c:c7:eb:3a:2a:8a:69:c9:78:b1:ab:66: be:83:de:ae:2b:e4:b4:71:a1:da:16:02:04:d1:77: c9:fb:ae:bf:ee:cf:21:c6:c1:c5:b2:38:00:d8:af: 79:15:5f:23:22:09:f0:85:8a:69:5f:53:76:6d:ed: b4:b9:b7:8a:a0:3c:d9:e4:b0:f3:cb:32:4c:07:df: 08:fd:01:e3:2c:01:ca:cc:75:1f:b0:7d:37:47:76: 1e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:52:9F:30:5C:00:22:8F:73:A0:A6:2D:C4:C7:75:AE:96:82:87:AF X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/PVKfMFwAIo9zoKYtxMd1rpaCh68.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.65.160.0/20 Signature Algorithm: sha256WithRSAEncryption 34:91:17:99:2c:2c:17:8a:24:ee:e6:75:2b:54:09:00:5f:7a: 67:aa:97:a2:fd:13:29:74:9e:67:41:1a:ca:c1:43:f9:f4:cf: b8:2e:4c:23:9f:dc:3d:c3:19:57:7c:61:0b:ba:f5:2f:a7:94: e6:bd:74:54:2d:4e:e6:f6:29:36:ff:d9:e3:ca:4b:20:02:7c: a2:ba:d1:7d:95:78:18:de:82:a1:bc:e8:1e:39:00:17:ca:1f: c7:73:1f:d4:34:20:ee:d3:31:54:86:4e:c5:f2:69:49:17:b4: d7:d7:27:74:ca:0a:43:94:c6:f4:01:51:ac:df:f7:f5:c6:c3: 4c:85:88:39:b5:89:a3:4d:a8:0e:0c:7c:9b:26:f3:31:12:bc: 9c:0c:b4:2e:29:93:95:db:e5:c6:0f:4a:1f:e5:4c:e4:02:ad: 9c:66:d4:58:a6:60:45:c1:8c:ad:f5:0e:fa:46:47:fe:23:cc: 00:d1:63:b4:f3:01:48:0c:e8:ad:6e:e0:2a:51:78:a2:0e:46: 4f:4e:22:ff:3a:7c:81:d3:ab:42:7f:6b:7d:e8:31:e8:b1:89: f1:b0:e8:b7:ab:df:59:53:cb:e7:37:c0:c9:76:9d:c8:47:3e: 69:14:27:b6:4a:db:5b:30:81:96:e2:88:84:45:0a:a8:82:53: 84:bf:4c:39 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MTEzMDAx MzIwNloXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoM0Q1MjlGMzA1QzAwMjI4 RjczQTBBNjJEQzRDNzc1QUU5NjgyODdBRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN4JubWZjjND+JC7mce1blOwlZfrhVxErfJxvPk7p0m7YFU5yiFl DNEgNB/hy49Vr5mGpEmsKVdk1/mhpsdmmKIcs+GiaXXsqSwnx5tbrVt5D9h8iuCD EHIhAyWTyMS0eNnxQ4BWsczhkdP1FRhqMEHnVrBRx/GjGRrOiO18kRV5oFJa7zsp 5fjSHpkiBduymAGl59DPVgO9uLYOQcDjbsXmrv3PWeNtfMfrOiqKacl4satmvoPe rivktHGh2hYCBNF3yfuuv+7PIcbBxbI4ANiveRVfIyIJ8IWKaV9Tdm3ttLm3iqA8 2eSw88syTAffCP0B4ywBysx1H7B9N0d2HhMCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBQ9Up8wXAAij3Ogpi3Ex3WuloKHrzAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L1BWS2ZNRndBSW85em9LWXR4TWQxcnBhQ2g2OC5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BASdQaAwDQYJKoZIhvcNAQELBQADggEBADSRF5ksLBeKJO7mdStUCQBfemeql6L9 Eyl0nmdBGsrBQ/n0z7guTCOf3D3DGVd8YQu69S+nlOa9dFQtTub2KTb/2ePKSyAC fKK60X2VeBjegqG86B45ABfKH8dzH9Q0IO7TMVSGTsXyaUkXtNfXJ3TKCkOUxvQB Uazf9/XGw0yFiDm1iaNNqA4MfJsm8zESvJwMtC4pk5Xb5cYPSh/lTOQCrZxm1Fim YEXBjK31DvpGR/4jzADRY7TzAUgM6K1u4CpReKIORk9OIv86fIHTq0J/a33oMeix ifGw6Ler31lTy+c3wMl2nchHPmkUJ7ZK21swgZbiiIRFCqiCU4S/TDk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:31 2025 by rpki-client