$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/IWEaDib74erm2XbaPR7vJOODhX0.roa File: IWEaDib74erm2XbaPR7vJOODhX0.roa (raw, json) Hash identifier: 1IwFXkgtqrcgFP5fFSvjt04xivmPiyFzNNAakuEIT4Y= Subject key identifier: 21:61:1A:0E:26:FB:E1:EA:E6:D9:76:DA:3D:1E:EF:24:E3:83:85:7D Certificate issuer: /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968 Certificate serial: 02 Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/IWEaDib74erm2XbaPR7vJOODhX0.roa Signing time: Thu 19 Dec 2024 13:06:40 +0000 ROA not before: Thu 19 Dec 2024 13:06:40 +0000 ROA not after: Fri 19 Dec 2025 12:59:01 +0000 asID: 17953 IP address blocks: 2404:7a00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 13:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968 Validity Not Before: Dec 19 13:06:40 2024 GMT Not After : Dec 19 12:59:01 2025 GMT Subject: CN=21611A0E26FBE1EAE6D976DA3D1EEF24E383857D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:73:5f:3f:d1:4a:99:6f:16:7c:05:15:0e:8b: a3:51:34:2a:13:65:30:fb:bc:d3:3b:54:97:f8:54: 07:65:90:a1:90:fa:2f:a8:a6:87:51:47:cd:06:46: f0:5a:77:09:4f:0b:ef:84:e6:f3:34:20:28:15:4d: ce:53:82:1f:ab:92:ce:4b:e8:b3:8c:a6:6c:2d:e0: a1:e3:d6:b1:90:3b:84:18:25:53:c8:dc:9f:bc:7a: 77:eb:1f:26:0a:e7:fb:fa:13:b7:89:b3:28:66:dd: 4b:37:c7:da:2e:2f:54:b1:47:f5:70:e6:c6:08:01: 7a:97:f5:11:46:2e:b0:15:cf:cf:91:8b:9a:d4:ec: 2e:21:92:57:ef:5a:6b:d1:13:01:2c:43:5e:9b:b0: f0:40:f4:ec:5e:d0:97:b7:9c:f0:d1:02:c9:8b:c1: 29:a4:f8:e6:8e:bd:e4:51:31:cc:27:fe:b8:a1:d3: e8:d3:f8:03:e3:99:c7:21:aa:16:3c:c6:02:dd:2a: 0b:40:78:df:d1:9e:63:d2:d9:51:13:e4:f8:86:40: 91:55:31:dc:63:37:35:bf:b5:c6:ca:ca:5e:8b:45: 95:db:a7:89:0d:56:19:96:6e:d4:55:7e:82:20:73: 4b:ad:bc:c8:d1:45:4c:5f:46:a9:6e:6a:55:d5:3c: 5b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:61:1A:0E:26:FB:E1:EA:E6:D9:76:DA:3D:1E:EF:24:E3:83:85:7D X509v3 Authority Key Identifier: keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/IWEaDib74erm2XbaPR7vJOODhX0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:7a00::/32 Signature Algorithm: sha256WithRSAEncryption 3e:b0:65:2c:04:49:a0:14:74:10:da:bc:2b:4a:73:4a:eb:9d: eb:73:55:81:02:16:a8:ec:0e:45:ef:a3:fb:54:53:d2:3a:c4: f9:87:4e:d2:e3:5e:d2:17:41:5e:5f:70:8a:88:80:f2:08:20: 0a:6f:82:5d:14:44:ad:20:7e:ba:04:fe:ef:a8:ae:f9:4d:e1: a8:12:ca:d7:51:c3:2b:b7:4a:58:c7:6c:dc:41:0f:79:9a:e1: b5:dc:2f:a6:71:f0:4e:38:d3:23:b9:59:49:ae:51:2e:0c:c4: 5e:39:9d:03:7d:9c:f2:c0:97:b1:ba:24:d0:e8:84:8a:f4:bc: 5c:86:f9:e4:73:06:d8:ce:f6:14:6b:71:66:5d:99:d8:53:12: 87:32:5b:5b:91:d7:d6:24:e2:7b:6f:00:59:dd:1d:28:45:f2: d1:00:a2:88:27:10:4b:d8:5d:9f:a8:9d:fe:94:c9:4d:c9:d2: a7:f1:88:82:e2:65:a3:ab:bb:4f:59:e0:33:03:ed:75:14:3c: c3:f9:04:1c:83:f1:60:de:e9:82:d3:a6:67:ac:60:c1:25:53: 8b:b4:f0:5e:ec:26:79:8e:90:8f:82:43:32:8d:0b:35:ed:55: 93:91:fe:68:e4:a3:9f:6d:d0:18:c6:ca:61:f7:8d:ba:70:22: 1a:09:2d:e3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMEVG MDE5NEE1MEQxQ0ZCMUM3Qjk5NEJFRkU0QkU3REE2QUMxOTY4MB4XDTI0MTIxOTEz MDY0MFoXDTI1MTIxOTEyNTkwMVowMzExMC8GA1UEAxMoMjE2MTFBMEUyNkZCRTFF QUU2RDk3NkRBM0QxRUVGMjRFMzgzODU3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN5zXz/RSplvFnwFFQ6Lo1E0KhNlMPu80ztUl/hUB2WQoZD6L6im h1FHzQZG8Fp3CU8L74Tm8zQgKBVNzlOCH6uSzkvos4ymbC3goePWsZA7hBglU8jc n7x6d+sfJgrn+/oTt4mzKGbdSzfH2i4vVLFH9XDmxggBepf1EUYusBXPz5GLmtTs LiGSV+9aa9ETASxDXpuw8ED07F7Ql7ec8NECyYvBKaT45o695FExzCf+uKHT6NP4 A+OZxyGqFjzGAt0qC0B439GeY9LZURPk+IZAkVUx3GM3Nb+1xsrKXotFlduniQ1W GZZu1FV+giBzS628yNFFTF9GqW5qVdU8W3MCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQhYRoOJvvh6ubZdto9Hu8k44OFfTAfBgNVHSMEGDAWgBSw7wGUpQ0c+xx7mUvv 5L59pqwZaDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNTkvc084QmxLVU5IUHNjZTVsTDctUy1mYWFzR1dnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvc084QmxLVU5IUHNjZTVsTDctUy1m YWFzR1dnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTU5L0lXRWFEaWI3NGVybTJYYmFQUjd2Sk9PRGhYMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkBHoAMA0GCSqGSIb3DQEBCwUAA4IBAQA+sGUsBEmgFHQQ2rwrSnNK 653rc1WBAhao7A5F76P7VFPSOsT5h07S417SF0FeX3CKiIDyCCAKb4JdFEStIH66 BP7vqK75TeGoEsrXUcMrt0pYx2zcQQ95muG13C+mcfBOONMjuVlJrlEuDMReOZ0D fZzywJexuiTQ6ISK9LxchvnkcwbYzvYUa3FmXZnYUxKHMltbkdfWJOJ7bwBZ3R0o RfLRAKKIJxBL2F2fqJ3+lMlNydKn8YiC4mWjq7tPWeAzA+11FDzD+QQcg/Fg3umC 06ZnrGDBJVOLtPBe7CZ5jpCPgkMyjQs17VWTkf5o5KOfbdAYxsph9426cCIaCS3j -----END CERTIFICATE-----Generated at Wed Feb 5 16:07:16 2025 by rpki-client