$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/i2htr4mXBX0KzMN_A2ptADFx1IA.roa File: i2htr4mXBX0KzMN_A2ptADFx1IA.roa (raw, json) Hash identifier: pTVqd/Apmna4wmbC1OzmuIIIToHSzvt/EemHsvSQD+g= Subject key identifier: 8B:68:6D:AF:89:97:05:7D:0A:CC:C3:7F:03:6A:6D:00:31:71:D4:80 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 22 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/i2htr4mXBX0KzMN_A2ptADFx1IA.roa Signing time: Wed 10 Jan 2024 01:07:01 +0000 ROA not before: Wed 10 Jan 2024 01:07:01 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 2514 IP address blocks: 157.65.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jan 10 01:07:01 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=8B686DAF8997057D0ACCC37F036A6D003171D480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:9b:d6:1d:f9:7d:1b:ed:bd:0b:83:1b:c6: 3b:bd:d3:d5:0a:c6:b8:64:05:fa:86:3a:44:4a:ae: 17:ed:c5:3b:69:44:96:2a:18:cf:17:c1:66:a3:b8: 06:64:7c:41:01:f4:71:40:e9:f1:5b:3a:19:40:40: 08:24:16:22:91:95:25:e8:4b:85:76:f2:6c:77:24: 52:a6:af:4b:8f:9a:cc:87:d8:9e:04:18:49:c3:cc: 47:7a:8a:da:2b:02:cd:1a:0a:57:4b:81:04:7b:4c: 4a:98:0c:a6:7b:fe:36:a8:49:32:88:16:09:42:16: ea:e8:3a:51:38:60:d6:7b:ff:78:ba:f4:6a:70:3e: 0e:19:0b:fb:3a:0f:17:f6:a3:cd:6b:af:48:ec:64: 08:a9:2d:d3:a2:ff:4e:13:a8:78:d2:16:c6:de:01: d1:55:73:fc:16:5e:95:2e:26:21:71:4e:00:b6:3d: ff:ca:db:84:af:c0:16:7a:45:a9:a6:d3:0e:e9:e7: c3:82:e3:90:f3:1f:b2:b2:34:b7:50:3f:e1:30:26: 4a:27:94:f6:f8:a7:2e:23:23:8e:94:4d:ce:4f:b7: 1d:e0:1c:6e:6f:91:82:e2:43:0b:bd:0c:c8:9c:65: 34:48:5d:58:77:4c:d4:b5:85:a4:ef:28:9b:a3:7d: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:68:6D:AF:89:97:05:7D:0A:CC:C3:7F:03:6A:6D:00:31:71:D4:80 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/i2htr4mXBX0KzMN_A2ptADFx1IA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.65.224.0/19 Signature Algorithm: sha256WithRSAEncryption 78:47:83:94:df:6f:74:f8:7b:51:02:44:48:1e:7f:be:9f:8c: d0:2d:26:cb:29:07:6e:8b:b9:77:4d:d7:a6:93:e3:8c:bf:a8: 40:98:d3:79:60:1e:98:c5:22:0c:0c:96:73:f7:67:ef:c8:37: f0:da:67:ac:73:94:c6:7e:84:34:a7:0c:3b:c1:5d:f0:61:d7: af:29:72:c4:0a:c3:3c:ad:cf:45:29:db:9a:63:74:9b:ee:0e: 20:18:00:47:c2:18:1f:da:66:66:f5:f2:f2:96:9d:61:4d:48: c0:2e:cb:d6:60:03:00:92:2f:30:20:25:ab:37:22:64:49:2e: 4a:9f:da:fd:1d:13:05:7b:de:cb:05:d1:80:21:d6:2e:7d:f0: 62:66:1a:15:8e:c1:d6:00:85:a0:55:52:94:74:92:67:33:b6: 5d:d9:05:89:e2:b3:6b:97:64:9b:7d:43:df:2b:1b:85:c2:0e: d7:50:6c:03:13:95:84:94:04:41:f8:59:30:67:91:09:6f:3d: 96:6e:32:04:19:58:40:61:02:08:7f:bf:ae:1a:c7:99:37:67: 95:47:39:3e:90:f5:76:a7:55:cb:1e:85:2c:d5:86:e3:85:1a: bf:3d:23:38:f0:d0:f6:67:a3:51:38:bf:4e:2c:76:b2:8e:ff: 8f:e0:bd:dd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAx MDcwMVoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoOEI2ODZEQUY4OTk3MDU3 RDBBQ0NDMzdGMDM2QTZEMDAzMTcxRDQ4MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALiEm9Yd+X0b7b0LgxvGO73T1QrGuGQF+oY6REquF+3FO2lElioY zxfBZqO4BmR8QQH0cUDp8Vs6GUBACCQWIpGVJehLhXbybHckUqavS4+azIfYngQY ScPMR3qK2isCzRoKV0uBBHtMSpgMpnv+NqhJMogWCUIW6ug6UThg1nv/eLr0anA+ DhkL+zoPF/ajzWuvSOxkCKkt06L/ThOoeNIWxt4B0VVz/BZelS4mIXFOALY9/8rb hK/AFnpFqabTDunnw4LjkPMfsrI0t1A/4TAmSieU9vinLiMjjpRNzk+3HeAcbm+R guJDC70MyJxlNEhdWHdM1LWFpO8om6N92HMCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBSLaG2viZcFfQrMw38Dam0AMXHUgDAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L2kyaHRyNG1YQlgwS3pNTl9BMnB0QURGeDFJQS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAWdQeAwDQYJKoZIhvcNAQELBQADggEBAHhHg5Tfb3T4e1ECREgef76fjNAtJssp B26LuXdN16aT44y/qECY03lgHpjFIgwMlnP3Z+/IN/DaZ6xzlMZ+hDSnDDvBXfBh 168pcsQKwzytz0Up25pjdJvuDiAYAEfCGB/aZmb18vKWnWFNSMAuy9ZgAwCSLzAg Jas3ImRJLkqf2v0dEwV73ssF0YAh1i598GJmGhWOwdYAhaBVUpR0kmcztl3ZBYni s2uXZJt9Q98rG4XCDtdQbAMTlYSUBEH4WTBnkQlvPZZuMgQZWEBhAgh/v64ax5k3 Z5VHOT6Q9XanVcsehSzVhuOFGr89Izjw0PZno1E4v04sdrKO/4/gvd0= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:32 2024 by rpki-client on console-ams.rpki-client.org