$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/vfctB5whQImy9HVaVclKNARRbKU.roa File: vfctB5whQImy9HVaVclKNARRbKU.roa (raw, json) Hash identifier: xVj9qGlATOpjFWQBm2mmOkTpR0AOtv/rCmSI7o/z16I= Subject key identifier: BD:F7:2D:07:9C:21:40:89:B2:F4:75:5A:55:C9:4A:34:04:51:6C:A5 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 69 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/vfctB5whQImy9HVaVclKNARRbKU.roa Signing time: Sat 30 Nov 2024 01:32:04 +0000 ROA not before: Sat 30 Nov 2024 01:32:04 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2514 IP address blocks: 157.120.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Nov 30 01:32:04 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=BDF72D079C214089B2F4755A55C94A3404516CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e6:3e:94:c1:26:c9:a0:c7:96:d7:29:c2:65: c3:7f:3d:70:f0:63:00:0e:4f:df:35:52:67:78:e0: 35:ca:04:4d:d9:48:ce:c1:26:c0:83:66:28:fd:57: 9a:b0:da:67:1f:4a:f7:08:fe:95:c0:95:cc:ba:90: 85:6f:0d:00:eb:8a:83:bb:b3:19:9d:b6:00:10:5b: 48:fd:5e:3d:be:6a:c8:b1:fe:bc:b6:92:10:9a:eb: 9d:ea:2c:84:be:d3:a6:6c:2a:13:3d:9c:a9:ab:52: 01:dc:16:03:54:cb:34:dd:e6:5b:a9:68:e2:c2:24: c6:81:ec:98:24:53:88:3a:6e:1b:f3:4e:1e:1e:95: bd:a8:8a:b5:19:4a:71:18:75:b0:c4:6f:27:05:f2: c4:27:7d:ae:d3:0d:24:0c:64:5f:88:89:f0:b2:19: 44:77:4a:de:0a:b6:ce:18:24:80:94:5f:6b:4e:95: cb:e2:76:3a:8b:d7:61:a6:e0:1a:f8:73:cd:58:9f: fa:33:99:43:37:60:0d:9f:fe:b3:17:e3:14:22:67: f7:52:88:05:f7:a7:0a:c4:3c:0b:da:9f:a2:dc:91: 36:e0:db:a8:2e:9c:7e:fd:f0:1c:b0:b1:cf:55:c8: 61:bc:be:36:a6:34:c7:26:d7:5c:12:10:44:1a:b4: cf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F7:2D:07:9C:21:40:89:B2:F4:75:5A:55:C9:4A:34:04:51:6C:A5 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/vfctB5whQImy9HVaVclKNARRbKU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.120.0.0/18 Signature Algorithm: sha256WithRSAEncryption 50:ee:71:b7:84:cf:9d:86:8a:f0:a7:95:09:39:46:94:89:b5: 3f:11:f7:77:17:58:5a:93:11:2e:4f:c8:f1:03:fb:cc:31:0a: a5:cd:84:19:3b:43:51:ef:86:1e:67:3c:5b:ae:0a:ec:ae:9c: a9:99:37:06:95:84:82:d8:b5:4a:3f:3c:16:7a:69:b9:b1:b1: b2:05:f8:f5:7f:2b:27:4d:07:d7:a3:d8:60:54:38:d7:11:04: 4c:b5:c9:78:bb:09:76:1d:7a:34:48:6f:cb:e5:c4:67:d2:30: 1d:7a:10:14:38:95:56:90:3f:72:ed:7e:45:a0:8c:4e:45:ce: 88:b2:38:a6:a8:42:04:20:63:ed:7f:e9:63:fa:9c:8a:fb:ba: 06:1c:3e:60:9e:f8:2c:a2:83:ca:29:be:7b:54:4b:f8:f0:74: be:1d:ee:e7:79:6a:39:f5:34:16:c4:68:bf:5a:b6:b5:2f:f4: 8e:0c:a0:3f:62:91:14:60:3d:ca:eb:6e:66:19:16:fe:83:61: e6:87:5e:85:b9:15:2a:93:0b:b8:8b:fa:5c:57:d9:8f:c7:44: 76:b5:2f:a4:9c:d9:7d:cb:62:61:ac:bf:a1:19:1e:d8:9a:60: 76:ab:59:f1:5e:15:fd:4f:45:bf:73:71:4e:a5:de:19:c7:ca: 7e:29:9a:7c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MTEzMDAx MzIwNFoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQkRGNzJEMDc5QzIxNDA4 OUIyRjQ3NTVBNTVDOTRBMzQwNDUxNkNBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMPmPpTBJsmgx5bXKcJlw389cPBjAA5P3zVSZ3jgNcoETdlIzsEm wINmKP1XmrDaZx9K9wj+lcCVzLqQhW8NAOuKg7uzGZ22ABBbSP1ePb5qyLH+vLaS EJrrneoshL7TpmwqEz2cqatSAdwWA1TLNN3mW6lo4sIkxoHsmCRTiDpuG/NOHh6V vaiKtRlKcRh1sMRvJwXyxCd9rtMNJAxkX4iJ8LIZRHdK3gq2zhgkgJRfa06Vy+J2 OovXYabgGvhzzVif+jOZQzdgDZ/+sxfjFCJn91KIBfenCsQ8C9qfotyRNuDbqC6c fv3wHLCxz1XIYby+NqY0xybXXBIQRBq0z68CAwEAAaOCAiIwggIeMB0GA1UdDgQW BBS99y0HnCFAibL0dVpVyUo0BFFspTAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L3ZmY3RCNXdoUUlteTlIVmFWY2xLTkFSUmJLVS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAadeAAwDQYJKoZIhvcNAQELBQADggEBAFDucbeEz52GivCnlQk5RpSJtT8R93cX WFqTES5PyPED+8wxCqXNhBk7Q1Hvhh5nPFuuCuyunKmZNwaVhILYtUo/PBZ6abmx sbIF+PV/KydNB9ej2GBUONcRBEy1yXi7CXYdejRIb8vlxGfSMB16EBQ4lVaQP3Lt fkWgjE5FzoiyOKaoQgQgY+1/6WP6nIr7ugYcPmCe+Cyig8opvntUS/jwdL4d7ud5 ajn1NBbEaL9atrUv9I4MoD9ikRRgPcrrbmYZFv6DYeaHXoW5FSqTC7iL+lxX2Y/H RHa1L6Sc2X3LYmGsv6EZHtiaYHarWfFeFf1PRb9zcU6l3hnHyn4pmnw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:36:07 2025 by rpki-client