$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/aO3vGvLMxfZa7F9q5vT5QvQ1rV8.roa File: aO3vGvLMxfZa7F9q5vT5QvQ1rV8.roa (raw, json) Hash identifier: vO1+l5ND8w4At1/1Ap7w0bkbfnIijOBSd16lGaCVGh4= Subject key identifier: 68:ED:EF:1A:F2:CC:C5:F6:5A:EC:5F:6A:E6:F4:F9:42:F4:35:AD:5F Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18 Certificate serial: 41 Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aO3vGvLMxfZa7F9q5vT5QvQ1rV8.roa Signing time: Wed 31 Jul 2024 01:08:58 +0000 ROA not before: Wed 31 Jul 2024 01:08:58 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 2514 IP address blocks: 202.229.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 20:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18 Validity Not Before: Jul 31 01:08:58 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=68EDEF1AF2CCC5F65AEC5F6AE6F4F942F435AD5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:ac:97:61:e7:23:d3:ba:28:f0:d4:33:12: 93:d1:12:54:2a:f0:ac:29:c1:c4:31:1c:d7:c6:40: 1e:4a:d0:d6:19:7c:b6:7e:1d:ca:b8:eb:62:96:28: 60:9c:04:d1:60:77:30:c2:02:15:a3:4c:1d:bc:a2: 67:1b:61:92:5a:a7:50:83:57:93:83:1c:99:ff:1f: 3f:d8:15:b9:71:25:ea:39:07:ee:b2:cd:61:65:0c: f8:ac:a0:53:aa:59:53:f0:cd:15:af:f1:d1:3c:6c: ef:3c:07:cb:6b:62:f3:5a:7d:b5:2f:5a:31:13:8f: bd:89:ce:f8:2a:04:f4:10:c4:eb:92:c9:a8:62:2c: a7:2e:9b:d8:16:8b:9b:d4:70:d2:3f:ed:5b:dc:63: 70:49:7b:d9:24:83:de:aa:90:19:15:c3:b5:e7:e7: 69:de:31:f4:f6:6b:a2:b4:79:73:c1:c8:14:1e:a5: db:4d:31:b4:90:82:bf:94:ed:46:ac:d5:7a:e5:07: d3:7b:b6:ec:90:3d:50:ce:3d:59:55:e3:9d:63:1c: a5:0c:fa:a4:10:57:66:85:56:7a:be:d9:4d:c5:cc: 6d:a9:9c:e6:e6:b2:73:c3:f4:a9:a6:24:27:72:93: d0:34:8d:b9:9f:b3:b3:4e:b5:7c:7a:7b:a4:64:d2: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:ED:EF:1A:F2:CC:C5:F6:5A:EC:5F:6A:E6:F4:F9:42:F4:35:AD:5F X509v3 Authority Key Identifier: keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aO3vGvLMxfZa7F9q5vT5QvQ1rV8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.229.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1d:a5:fb:bc:d2:fe:95:9e:8d:9a:1f:0a:23:cc:aa:5b:17:16: 0a:ad:7c:86:75:11:59:c1:2b:ac:a3:84:88:71:ed:c3:84:59: a8:d1:33:32:ec:12:5c:2d:da:cb:06:57:c2:fa:da:73:af:11: 52:3e:f3:3f:24:90:77:99:e5:0e:36:46:9f:95:49:da:f3:cb: 4c:a1:13:fa:90:b0:7a:6a:0e:94:aa:1a:27:2e:29:60:0b:f6: 91:3b:d0:cd:87:0d:62:f2:d8:10:60:5b:da:a4:fe:ab:c1:52: 13:00:dd:75:cb:fe:56:36:d6:5f:dd:3e:d0:d8:35:b5:36:21: 43:90:87:6e:50:70:95:2f:55:b0:21:fe:c4:85:66:39:da:52: ae:47:91:be:0b:30:51:ef:9b:3a:d8:2e:65:29:01:3c:65:8c: f1:a2:ff:98:d9:73:cc:af:17:96:56:3f:4e:63:d5:5a:90:1e: 72:2b:e4:8d:6f:3f:ef:80:93:86:84:ac:bc:9e:8e:c2:2b:ca: 08:c7:94:5f:05:89:6a:c3:d2:c0:c6:6c:e8:b3:93:52:e8:98: 7e:23:1d:83:b2:e5:3d:60:51:f9:a4:b9:7e:a0:2c:32:b8:1a: 5d:c4:65:d1:b2:c6:6e:ff:81:63:a1:ff:c0:76:15:ce:64:99: 49:cd:f7:5b -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkZB NjYyMTk0RkNGMUVCOTgzQUI0NENDOTEzMDA0MTgwNzcwRDE4MB4XDTI0MDczMTAx MDg1OFoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoNjhFREVGMUFGMkNDQzVG NjVBRUM1RjZBRTZGNEY5NDJGNDM1QUQ1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALHKrJdh5yPTuijw1DMSk9ESVCrwrCnBxDEc18ZAHkrQ1hl8tn4d yrjrYpYoYJwE0WB3MMICFaNMHbyiZxthklqnUINXk4Mcmf8fP9gVuXEl6jkH7rLN YWUM+KygU6pZU/DNFa/x0Txs7zwHy2ti81p9tS9aMROPvYnO+CoE9BDE65LJqGIs py6b2BaLm9Rw0j/tW9xjcEl72SSD3qqQGRXDtefnad4x9PZrorR5c8HIFB6l200x tJCCv5TtRqzVeuUH03u27JA9UM49WVXjnWMcpQz6pBBXZoVWer7ZTcXMbamc5uay c8P0qaYkJ3KT0DSNuZ+zs061fHp7pGTSxX0CAwEAAaOCAiEwggIdMB0GA1UdDgQW BBRo7e8a8szF9lrsX2rm9PlC9DWtXzAfBgNVHSMEGDAWgBQG+mYhlPzx65g6tEzJ EwBBgHcNGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIzRFJnLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIz RFJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L2FPM3ZHdkxNeGZaYTdGOXE1dlQ1UXZRMXJWOC5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwDK5TANBgkqhkiG9w0BAQsFAAOCAQEAHaX7vNL+lZ6Nmh8KI8yqWxcWCq18hnUR WcErrKOEiHHtw4RZqNEzMuwSXC3aywZXwvrac68RUj7zPySQd5nlDjZGn5VJ2vPL TKET+pCwemoOlKoaJy4pYAv2kTvQzYcNYvLYEGBb2qT+q8FSEwDddcv+VjbWX90+ 0Ng1tTYhQ5CHblBwlS9VsCH+xIVmOdpSrkeRvgswUe+bOtguZSkBPGWM8aL/mNlz zK8XllY/TmPVWpAecivkjW8/74CThoSsvJ6OwivKCMeUXwWJasPSwMZs6LOTUuiY fiMdg7LlPWBR+aS5fqAsMrgaXcRl0bLGbv+BY6H/wHYVzmSZSc33Ww== -----END CERTIFICATE-----Generated at Thu Mar 13 01:42:02 2025 by rpki-client