$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/gAabhg3YJg6SNAEPqGqLNV8OK30.roa File: gAabhg3YJg6SNAEPqGqLNV8OK30.roa (raw, json) Hash identifier: jnrSOj4XTkxPmxuNk/c0JvIC2tuFkM8yOmAteh4jc8A= Subject key identifier: 80:06:9B:86:0D:D8:26:0E:92:34:01:0F:A8:6A:8B:35:5F:0E:2B:7D Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 65 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gAabhg3YJg6SNAEPqGqLNV8OK30.roa Signing time: Sat 30 Nov 2024 01:32:01 +0000 ROA not before: Sat 30 Nov 2024 01:32:01 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2514 IP address blocks: 140.227.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Nov 30 01:32:01 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=80069B860DD8260E9234010FA86A8B355F0E2B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:55:62:d3:d6:be:6d:08:bd:c5:e9:11:a2: 3b:23:d1:73:b2:ba:d1:75:64:43:c5:15:b1:c4:5b: e4:42:c1:b4:69:cc:35:1c:54:ea:d0:4a:6b:e1:50: cf:b5:ac:55:3a:bc:c9:e3:ba:d6:b7:37:ef:46:c8: 49:9a:30:77:30:c1:36:73:1d:2d:b4:f6:78:4f:cf: 21:e0:fd:5f:4d:0c:eb:fe:80:84:a7:f3:ee:4f:be: 0f:cf:99:6d:25:b1:e4:50:29:2e:7e:c3:eb:65:44: 35:0d:0f:32:25:71:61:cf:c5:3d:7d:01:54:c0:1d: 21:26:26:f9:87:93:09:b2:22:c2:43:41:7d:76:a8: 43:d6:c8:03:2f:4c:82:2a:75:35:c0:d1:9d:f6:81: b2:f9:64:35:4c:e7:f5:07:86:02:a0:41:f6:5f:c7: 0b:ea:ee:5a:f6:64:bd:08:e3:50:a2:5a:b9:ce:02: ec:56:c5:52:9a:af:0e:c8:dc:e9:30:31:ad:ea:c9: 85:2b:a1:b0:fc:1b:2a:bb:d3:43:40:de:7b:06:36: 62:23:5c:9d:21:26:47:87:bb:2f:22:b6:47:52:46: 52:35:e2:b7:0c:6b:d6:da:a8:7b:b1:41:db:9a:5a: e4:0a:2b:0c:24:39:d8:59:3f:cf:07:fb:54:ae:e6: b0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:06:9B:86:0D:D8:26:0E:92:34:01:0F:A8:6A:8B:35:5F:0E:2B:7D X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gAabhg3YJg6SNAEPqGqLNV8OK30.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.227.0.0/16 Signature Algorithm: sha256WithRSAEncryption 84:2d:24:62:46:d2:2d:22:56:dd:75:ee:8d:94:20:1b:cf:25: a1:ac:d5:06:7d:1c:d8:72:ec:5b:dc:c6:8b:2b:f9:b1:28:93: 68:d2:90:1d:36:97:f5:fb:5a:a5:d7:0e:b8:3a:25:99:44:df: 4f:c3:8e:30:46:b3:8d:5c:a1:4d:1c:9a:d6:01:73:46:f2:ea: af:40:ad:f5:66:50:b1:34:4c:22:8b:1d:a3:27:b0:14:67:ea: 38:82:33:68:c8:f8:81:0e:21:1c:a8:a4:83:70:69:c3:2d:12: ea:06:60:2d:88:ec:c2:3e:e9:d0:27:54:1d:63:0d:b4:b5:b6: 7c:a4:3b:b9:2f:93:89:75:1f:22:b1:38:ad:34:92:bd:f6:1d: 7c:b5:57:49:9d:02:8a:f4:56:6c:aa:b4:9c:bc:c8:0d:09:b1: 6d:b9:39:30:fa:28:2c:d0:4c:b1:dd:22:dd:ba:bb:28:89:50: d1:f2:8e:23:65:ae:1a:f6:26:2b:1e:5e:6d:cc:74:32:b9:f7: 1e:be:c1:b8:8c:25:69:70:b7:9e:d7:9f:24:15:e1:93:1e:b1: 15:26:3d:ca:19:de:57:1e:a6:6f:db:b3:36:a2:d0:d6:62:c7: aa:06:4b:33:f6:89:c4:a8:8d:34:f6:a5:2b:8f:6a:86:3f:e7: 81:28:e9:1e -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MTEzMDAx MzIwMVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoODAwNjlCODYwREQ4MjYw RTkyMzQwMTBGQTg2QThCMzU1RjBFMkI3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMrYVWLT1r5tCL3F6RGiOyPRc7K60XVkQ8UVscRb5ELBtGnMNRxU 6tBKa+FQz7WsVTq8yeO61rc370bISZowdzDBNnMdLbT2eE/PIeD9X00M6/6AhKfz 7k++D8+ZbSWx5FApLn7D62VENQ0PMiVxYc/FPX0BVMAdISYm+YeTCbIiwkNBfXao Q9bIAy9Mgip1NcDRnfaBsvlkNUzn9QeGAqBB9l/HC+ruWvZkvQjjUKJauc4C7FbF UpqvDsjc6TAxrerJhSuhsPwbKrvTQ0DeewY2YiNcnSEmR4e7LyK2R1JGUjXitwxr 1tqoe7FB25pa5AorDCQ52Fk/zwf7VK7msFcCAwEAAaOCAiEwggIdMB0GA1UdDgQW BBSABpuGDdgmDpI0AQ+oaos1Xw4rfTAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L2dBYWJoZzNZSmc2U05BRVBxR3FMTlY4T0szMC5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwCM4zANBgkqhkiG9w0BAQsFAAOCAQEAhC0kYkbSLSJW3XXujZQgG88loazVBn0c 2HLsW9zGiyv5sSiTaNKQHTaX9ftapdcOuDolmUTfT8OOMEazjVyhTRya1gFzRvLq r0Ct9WZQsTRMIosdoyewFGfqOIIzaMj4gQ4hHKikg3Bpwy0S6gZgLYjswj7p0CdU HWMNtLW2fKQ7uS+TiXUfIrE4rTSSvfYdfLVXSZ0CivRWbKq0nLzIDQmxbbk5MPoo LNBMsd0i3bq7KIlQ0fKOI2WuGvYmKx5ebcx0Mrn3Hr7BuIwlaXC3ntefJBXhkx6x FSY9yhneVx6mb9uzNqLQ1mLHqgZLM/aJxKiNNPalK49qhj/ngSjpHg== -----END CERTIFICATE-----Generated at Wed Feb 19 22:40:37 2025 by rpki-client