$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/nMSrFptMjlqYxT3SKXRuLl-CkXk.roa File: nMSrFptMjlqYxT3SKXRuLl-CkXk.roa (raw, json) Hash identifier: yCikajqofrTz4KGl0uwFF+m5I5j4yBJTzkqCmMTvGjI= Subject key identifier: 9C:C4:AB:16:9B:4C:8E:5A:98:C5:3D:D2:29:74:6E:2E:5F:82:91:79 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 52 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/nMSrFptMjlqYxT3SKXRuLl-CkXk.roa Signing time: Wed 31 Jul 2024 01:04:54 +0000 ROA not before: Wed 31 Jul 2024 01:04:54 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 2514 IP address blocks: 157.65.32.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jul 31 01:04:54 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=9CC4AB169B4C8E5A98C53DD229746E2E5F829179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:6c:fa:33:d3:da:4a:a9:81:2c:d4:a7:d6: 06:10:92:3b:e0:05:c9:9c:4d:f6:91:1a:42:28:2d: b0:c3:f3:4a:d1:ad:15:f1:8e:d9:1d:8f:19:c7:1f: 99:3d:d0:34:3e:d1:16:df:6d:84:55:78:a4:06:16: 93:ad:e4:ce:ff:1e:57:a5:4a:d4:2e:42:1c:02:72: 37:cf:88:3b:87:cc:32:fb:9d:db:58:82:13:2c:86: f4:d9:60:3f:35:f9:3b:af:8a:d9:59:66:97:8e:81: ca:c9:f8:a7:d3:47:94:81:2d:12:92:b6:e0:6d:c1: c0:cf:b5:b2:ec:8d:9f:31:c2:27:5a:64:a7:e9:b1: f5:c4:c1:0d:00:3b:1f:50:d2:b8:87:ca:4b:08:e3: 6e:0a:74:ae:8c:57:bc:f0:db:8b:06:21:99:a1:f0: 9b:41:a1:86:38:18:b8:89:a3:30:e8:51:31:99:76: 1d:e2:66:65:b4:c7:b0:cc:01:42:16:34:3e:3e:65: c6:48:4e:22:8b:af:d7:49:a2:8e:3d:c2:cc:99:0c: 19:b6:fa:d7:5f:08:63:62:4a:a2:cb:4b:e6:3e:01: 7f:a3:d3:b0:bf:ec:99:3c:a7:5e:08:1c:91:58:ed: 84:8c:26:7d:ad:36:05:f7:7e:db:6b:86:8b:79:87: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C4:AB:16:9B:4C:8E:5A:98:C5:3D:D2:29:74:6E:2E:5F:82:91:79 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/nMSrFptMjlqYxT3SKXRuLl-CkXk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.65.32.0/19 Signature Algorithm: sha256WithRSAEncryption 0b:e7:dd:b3:ea:e8:00:ea:0b:a0:e6:0c:e8:69:2d:11:d7:cc: 69:af:ad:09:e3:85:b0:9a:8a:4a:05:57:91:55:2c:25:87:c2: 84:a7:d4:05:5d:4e:44:db:6a:e5:4c:11:bc:11:bd:e8:6a:08: 04:30:02:e4:ea:62:9e:79:b3:27:05:ee:aa:b6:11:7a:52:82: 68:f5:be:16:09:00:11:7a:6f:81:22:31:29:0a:35:59:10:4f: 67:d7:14:f5:54:a1:7f:11:c7:00:9a:a5:fb:79:3a:48:a8:d2: f0:41:ce:ba:40:f9:48:a4:ea:26:a6:ca:be:fd:ab:55:b8:5a: 11:99:8e:5a:d6:71:5e:8e:a3:02:d6:44:57:5d:25:46:af:c9: a8:37:48:fd:ac:e4:6a:7a:f6:53:63:8b:87:3d:0b:2c:3d:e5: a1:6b:16:a2:82:77:fd:30:d6:b7:c1:73:c8:55:eb:c4:39:7d: 16:8c:48:31:ec:0b:5e:2f:f1:32:a6:8f:9d:31:9e:60:1a:ba: 96:7d:c5:70:e9:be:31:eb:0a:b5:5a:c7:0b:4d:f8:f4:63:61: d6:2a:cd:e3:b3:74:dc:28:76:d2:6c:ef:8b:37:68:29:24:21: 15:7f:27:e1:ab:69:bc:b5:ed:46:6c:a0:a9:fa:b0:d1:1f:72: 36:99:40:23 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDczMTAx MDQ1NFoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoOUNDNEFCMTY5QjRDOEU1 QTk4QzUzREQyMjk3NDZFMkU1RjgyOTE3OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMMxbPoz09pKqYEs1KfWBhCSO+AFyZxN9pEaQigtsMPzStGtFfGO 2R2PGccfmT3QND7RFt9thFV4pAYWk63kzv8eV6VK1C5CHAJyN8+IO4fMMvud21iC EyyG9NlgPzX5O6+K2Vlml46Bysn4p9NHlIEtEpK24G3BwM+1suyNnzHCJ1pkp+mx 9cTBDQA7H1DSuIfKSwjjbgp0roxXvPDbiwYhmaHwm0GhhjgYuImjMOhRMZl2HeJm ZbTHsMwBQhY0Pj5lxkhOIouv10mijj3CzJkMGbb6118IY2JKostL5j4Bf6PTsL/s mTynXggckVjthIwmfa02Bfd+22uGi3mHTgcCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBScxKsWm0yOWpjFPdIpdG4uX4KReTAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L25NU3JGcHRNamxxWXhUM1NLWFJ1TGwtQ2tYay5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAWdQSAwDQYJKoZIhvcNAQELBQADggEBAAvn3bPq6ADqC6DmDOhpLRHXzGmvrQnj hbCaikoFV5FVLCWHwoSn1AVdTkTbauVMEbwRvehqCAQwAuTqYp55sycF7qq2EXpS gmj1vhYJABF6b4EiMSkKNVkQT2fXFPVUoX8RxwCapft5Okio0vBBzrpA+Uik6iam yr79q1W4WhGZjlrWcV6OowLWRFddJUavyag3SP2s5Gp69lNji4c9Cyw95aFrFqKC d/0w1rfBc8hV68Q5fRaMSDHsC14v8TKmj50xnmAaupZ9xXDpvjHrCrVaxwtN+PRj YdYqzeOzdNwodtJs74s3aCkkIRV/J+Graby17UZsoKn6sNEfcjaZQCM= -----END CERTIFICATE-----Generated at Sun Feb 16 22:05:49 2025 by rpki-client