$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/eFgZpxYdGzcCssLfQaC2NwMqNKY.roa File: eFgZpxYdGzcCssLfQaC2NwMqNKY.roa (raw, json) Hash identifier: I0QPIBv2NR3pQ1iNVAMCO3pO0GixGP7o1bOjj2jc4RQ= Subject key identifier: 78:58:19:A7:16:1D:1B:37:02:B2:C2:DF:41:A0:B6:37:03:2A:34:A6 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 80 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/eFgZpxYdGzcCssLfQaC2NwMqNKY.roa Signing time: Sat 30 Nov 2024 01:32:14 +0000 ROA not before: Sat 30 Nov 2024 01:32:14 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2514 IP address blocks: 160.248.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Nov 30 01:32:14 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=785819A7161D1B3702B2C2DF41A0B637032A34A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:ed:60:b1:22:22:6a:93:ea:a6:9f:47:60: 19:12:ab:fe:9a:47:6c:11:36:ff:45:5f:64:5c:db: 29:6e:a0:48:c3:71:ba:da:51:cb:fd:12:d1:bd:f5: 5e:89:81:2e:04:6a:0a:17:36:cf:93:9c:c3:d6:d2: bd:33:bf:61:a6:61:a3:43:5e:cb:42:79:f0:ce:54: 66:0f:33:0c:3d:0a:75:cd:22:b4:7b:68:90:83:32: d1:f4:2d:2c:1b:36:5b:39:57:b2:49:09:55:d5:57: b3:6c:b5:e5:ab:20:a9:c8:a7:22:83:6e:c2:8d:df: 75:5b:45:eb:25:78:9c:3d:01:fd:4c:db:51:37:0a: 41:27:ff:da:9d:53:08:7f:d5:aa:58:ba:75:57:15: 78:ad:9b:eb:e9:8f:0b:8c:43:29:5f:50:7d:83:95: b9:cc:ed:f4:6f:72:b8:9b:1a:4a:b7:a0:b0:8a:a4: eb:8c:2d:62:7c:94:69:b8:ec:c3:2a:98:c6:8c:3e: 26:7f:4e:22:96:3e:c0:23:0a:76:dc:d0:a1:80:a7: 92:a3:c2:61:9c:d8:a9:0a:9a:90:87:11:d1:19:26: 9d:1c:70:4e:ac:88:ba:7f:c5:5a:71:10:3a:6d:10: 7f:13:5a:0d:00:78:71:c7:b8:9e:b3:7c:ed:bd:07: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:58:19:A7:16:1D:1B:37:02:B2:C2:DF:41:A0:B6:37:03:2A:34:A6 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/eFgZpxYdGzcCssLfQaC2NwMqNKY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.248.92.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:09:96:44:7e:2e:06:6f:c9:13:b9:d1:14:2f:62:38:91:9b: 10:61:20:96:14:94:6d:b3:2a:7f:62:b6:fa:ee:e4:f7:87:41: 05:3a:7c:a2:c2:44:a5:0f:5f:5a:8e:2e:03:3e:1a:38:3f:26: 63:7d:bd:68:8f:bf:ce:67:e3:60:3f:ae:38:17:e7:9f:9b:40: 6d:ec:cf:e6:26:59:05:f2:17:5a:e9:52:6f:9e:58:57:b7:d5: be:89:8c:d2:08:e8:53:c3:06:3c:1c:db:9f:a0:2d:7e:0a:a0: 14:f7:d9:c2:0d:2f:33:c9:1b:e1:d2:30:8a:2d:c7:b2:ba:1f: 12:d3:66:32:b3:fd:0b:36:25:42:ec:a5:c2:03:da:35:6a:fa: eb:91:14:8f:48:8b:af:c1:0f:e5:8a:86:9a:0c:a4:b5:3e:d6: c5:04:6f:ba:c3:ba:2b:fa:e8:79:f9:42:fc:76:60:a0:9d:92: d9:3c:6c:ee:61:24:4b:4b:f0:34:11:02:1f:60:4d:be:bb:80: d9:38:c8:f4:db:d0:2c:8b:98:49:97:15:6c:c6:1f:b3:73:d8: 57:14:98:12:97:08:4a:74:8c:8c:86:29:b4:0c:99:41:f8:01: 17:dc:c7:d4:31:34:11:ad:8e:b4:ea:b1:f2:fc:08:de:8f:10: 9a:08:2e:4b -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNDExMzAw MTMyMTRaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc4NTgxOUE3MTYxRDFC MzcwMkIyQzJERjQxQTBCNjM3MDMyQTM0QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbDu1gsSIiapPqpp9HYBkSq/6aR2wRNv9FX2Rc2yluoEjDcbra Ucv9EtG99V6JgS4EagoXNs+TnMPW0r0zv2GmYaNDXstCefDOVGYPMww9CnXNIrR7 aJCDMtH0LSwbNls5V7JJCVXVV7NsteWrIKnIpyKDbsKN33VbResleJw9Af1M21E3 CkEn/9qdUwh/1apYunVXFXitm+vpjwuMQylfUH2DlbnM7fRvcribGkq3oLCKpOuM LWJ8lGm47MMqmMaMPiZ/TiKWPsAjCnbc0KGAp5KjwmGc2KkKmpCHEdEZJp0ccE6s iLp/xVpxEDptEH8TWg0AeHHHuJ6zfO29Bzi7AgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUeFgZpxYdGzcCssLfQaC2NwMqNKYwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yOS9lRmdacHhZZEd6Y0Nzc0xmUWFDMk53TXFOS1kucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCoPhcMA0GCSqGSIb3DQEBCwUAA4IBAQAOCZZEfi4Gb8kTudEUL2I4kZsQYSCW FJRtsyp/Yrb67uT3h0EFOnyiwkSlD19aji4DPho4PyZjfb1oj7/OZ+NgP644F+ef m0Bt7M/mJlkF8hda6VJvnlhXt9W+iYzSCOhTwwY8HNufoC1+CqAU99nCDS8zyRvh 0jCKLceyuh8S02Yys/0LNiVC7KXCA9o1avrrkRSPSIuvwQ/lioaaDKS1PtbFBG+6 w7or+uh5+UL8dmCgnZLZPGzuYSRLS/A0EQIfYE2+u4DZOMj029Asi5hJlxVsxh+z c9hXFJgSlwhKdIyMhim0DJlB+AEX3MfUMTQRrY606rHy/AjejxCaCC5L -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:38 2025 by rpki-client