$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/g5xMfTlCv6yT6FmfsGO_OjhTuOE.roa File: g5xMfTlCv6yT6FmfsGO_OjhTuOE.roa (raw, json) Hash identifier: Iu3Os0J4wk8f3XlxlFnOJlAiwwKkxZbuiZxxIyoQ7BE= Subject key identifier: 83:9C:4C:7D:39:42:BF:AC:93:E8:59:9F:B0:63:BF:3A:38:53:B8:E1 Certificate issuer: /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Certificate serial: 31 Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/g5xMfTlCv6yT6FmfsGO_OjhTuOE.roa Signing time: Sat 30 Nov 2024 01:29:01 +0000 ROA not before: Sat 30 Nov 2024 01:29:01 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 17676 IP address blocks: 2403:9900::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Validity Not Before: Nov 30 01:29:01 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=839C4C7D3942BFAC93E8599FB063BF3A3853B8E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:37:cd:de:e3:f5:59:0b:49:a2:3f:e4:4f: 5a:d8:74:28:b9:d9:b9:70:61:3e:35:c3:ec:0a:e1: bb:98:4d:d2:9c:f7:9b:de:c8:e4:fc:23:2e:91:ea: cc:6d:46:74:70:3d:bc:ee:0b:d6:c5:52:e3:e4:22: 6d:e2:3e:81:e4:a6:a3:c6:8a:f6:bd:59:39:22:50: 8e:0f:21:43:43:4a:2b:d7:27:c0:89:f6:ae:9e:cc: b4:9b:e0:8c:a3:de:f1:a6:16:52:c0:8a:9a:23:51: 4b:b9:0a:cd:c4:28:b9:8b:51:9e:7f:7a:66:2b:f1: 3c:98:a6:f1:04:6d:d4:c5:3c:a0:f8:7d:b9:fd:e2: 3c:bd:02:f3:b6:56:7d:37:25:d4:57:ab:4d:7e:a7: 62:eb:ba:49:de:9f:d2:a6:70:1b:3d:a4:b3:9a:f2: 54:d1:bf:17:46:10:5d:62:9d:3d:40:73:8d:cb:17: e9:e6:e3:e2:02:15:16:38:b0:ff:ea:f9:41:ce:f1: ea:a1:dc:11:e5:ec:16:6f:ee:1b:a9:3d:42:ee:46: 48:53:a8:cd:81:76:02:7b:67:56:bb:1a:fc:16:48: 21:2b:3c:00:98:63:5a:c8:80:ee:67:12:e0:93:8f: 65:3d:b2:ae:32:39:ca:e5:5e:9a:6c:44:b0:84:8e: c6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9C:4C:7D:39:42:BF:AC:93:E8:59:9F:B0:63:BF:3A:38:53:B8:E1 X509v3 Authority Key Identifier: keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/g5xMfTlCv6yT6FmfsGO_OjhTuOE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:9900::/24 Signature Algorithm: sha256WithRSAEncryption 7c:4d:96:86:15:0f:38:5b:7b:78:4a:d0:11:35:bf:4b:85:67: 16:7b:d7:df:54:23:cb:69:67:8b:af:ae:1a:02:cb:0a:5a:c1: 54:6b:24:cd:6d:4f:44:4e:ae:30:8d:a3:81:6c:6a:0a:79:36: 9f:3e:c3:75:e3:bf:0a:87:06:d3:2a:e1:9f:96:b2:9c:4b:70: 43:b0:9b:c2:3c:5b:f0:9f:cd:1c:12:e6:16:10:6c:b9:80:8e: 17:7e:ba:4e:82:07:c4:2d:61:3e:f5:56:7e:74:52:25:6a:bb: dd:0a:9a:67:81:b6:e7:67:29:bb:dc:b2:de:f0:0d:81:c9:c2: 6a:36:44:13:c6:a4:b6:b4:98:43:56:69:b1:85:23:e5:c9:fc: 13:5c:68:58:48:ad:8f:25:d2:fd:c9:a1:c2:ef:30:75:15:c1: 8b:98:56:94:b6:9e:e7:bd:39:a8:5e:91:a1:09:84:1b:23:42: 35:3b:c5:fd:d0:6e:81:b9:04:6f:09:10:10:5d:36:5f:78:c3: 0a:de:89:9e:bf:fd:06:e8:ed:28:22:a6:a3:38:7d:3d:49:69: be:6a:25:7a:b0:03:58:3a:54:2a:2a:6f:27:2c:7c:7d:c6:e6: b6:c7:0a:2d:90:30:9f:bd:2e:14:d2:0c:a5:42:97:0c:9c:5f: 23:5f:f4:21 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0RB RUMyMEVERjRBMjAxMDQyM0REN0IwMDRFMTU3NEYxMTNBNzM1MB4XDTI0MTEzMDAx MjkwMVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoODM5QzRDN0QzOTQyQkZB QzkzRTg1OTlGQjA2M0JGM0EzODUzQjhFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL0DN83e4/VZC0miP+RPWth0KLnZuXBhPjXD7Arhu5hN0pz3m97I 5PwjLpHqzG1GdHA9vO4L1sVS4+QibeI+geSmo8aK9r1ZOSJQjg8hQ0NKK9cnwIn2 rp7MtJvgjKPe8aYWUsCKmiNRS7kKzcQouYtRnn96ZivxPJim8QRt1MU8oPh9uf3i PL0C87ZWfTcl1FerTX6nYuu6Sd6f0qZwGz2ks5ryVNG/F0YQXWKdPUBzjcsX6ebj 4gIVFjiw/+r5Qc7x6qHcEeXsFm/uG6k9Qu5GSFOozYF2AntnVrsa/BZIISs8AJhj WsiA7mcS4JOPZT2yrjI5yuVemmxEsISOxvECAwEAAaOCAigwggIkMB0GA1UdDgQW BBSDnEx9OUK/rJPoWZ+wY786OFO44TAfBgNVHSMEGDAWgBSH2uwg7fSiAQQj3XsA ThV08ROnNTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNDQvaDlyc0lPMzBvZ0VFSTkxN0FFNFZkUEVUcHpVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaDlyc0lPMzBvZ0VFSTkxN0FFNFZk UEVUcHpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTQ0L2c1eE1mVGxDdjZ5VDZGbWZzR09fT2poVHVPRS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgACMAYDBAAkA5kwDQYJKoZIhvcNAQELBQADggEBAHxNloYVDzhbe3hK0BE1v0uF ZxZ7199UI8tpZ4uvrhoCywpawVRrJM1tT0ROrjCNo4Fsagp5Np8+w3XjvwqHBtMq 4Z+WspxLcEOwm8I8W/CfzRwS5hYQbLmAjhd+uk6CB8QtYT71Vn50UiVqu90KmmeB tudnKbvcst7wDYHJwmo2RBPGpLa0mENWabGFI+XJ/BNcaFhIrY8l0v3JocLvMHUV wYuYVpS2nue9OahekaEJhBsjQjU7xf3QboG5BG8JEBBdNl94wwreiZ6//Qbo7Sgi pqM4fT1Jab5qJXqwA1g6VCoqbycsfH3G5rbHCi2QMJ+9LhTSDKVClwycXyNf9CE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:30:51 2025 by rpki-client