$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/rAETEqliFhJ7gdsxF5rv293hfT4.roa File: rAETEqliFhJ7gdsxF5rv293hfT4.roa (raw, json) Hash identifier: e872fgxI6ZIg3GA1lS7iuseCksG5QOP8NKdvb04B/Rk= Subject key identifier: AC:01:13:12:A9:62:16:12:7B:81:DB:31:17:9A:EF:DB:DD:E1:7D:3E Certificate issuer: /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Certificate serial: 2B Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/rAETEqliFhJ7gdsxF5rv293hfT4.roa Signing time: Thu 31 Oct 2024 01:31:42 +0000 ROA not before: Thu 31 Oct 2024 01:31:42 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 37899 IP address blocks: 240b:252::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Validity Not Before: Oct 31 01:31:42 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=AC011312A96216127B81DB31179AEFDBDDE17D3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:1c:76:aa:f2:65:5c:e6:71:ca:96:3b:4a: b5:c1:6f:13:97:5f:ee:ca:fe:13:41:74:4c:cc:a3: 6d:60:bb:e9:29:fe:7f:36:3f:2f:63:ef:5e:0e:08: d2:7b:fd:11:7e:a8:70:99:4d:87:e5:1a:40:c2:05: 84:f8:70:94:a0:e0:ce:ca:04:f0:96:d6:d4:76:5e: 22:e7:c2:15:9b:29:5a:8e:89:10:f9:cf:2e:af:f9: e2:d2:dc:6b:5c:e6:22:7f:dd:dc:04:c4:95:1c:fd: c6:b8:4e:72:06:c1:79:a1:a6:71:25:be:2e:e4:1b: b1:0f:0a:d0:52:15:7e:a8:17:04:bc:e0:3b:af:88: a5:40:99:74:72:31:cb:ee:bb:bf:35:3f:c6:21:60: c9:17:dd:9f:0d:cc:43:2f:13:f2:f8:7f:b2:ce:98: ff:14:28:e8:fe:5a:e7:a8:9e:7e:00:6d:5d:01:a6: fa:64:fd:fb:6b:e7:d4:b3:c7:ea:bb:a8:9f:6f:ff: ec:7c:a5:18:89:5d:67:90:28:d8:eb:62:c5:69:60: de:a9:64:b1:3a:93:9d:5b:54:4c:76:48:34:cf:d4: 5c:0d:ec:eb:7c:ab:84:d3:41:2a:22:7e:e5:d7:50: dc:84:8e:9b:ba:3c:ee:e0:b6:2f:f9:12:4e:75:06: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:01:13:12:A9:62:16:12:7B:81:DB:31:17:9A:EF:DB:DD:E1:7D:3E X509v3 Authority Key Identifier: keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/rAETEqliFhJ7gdsxF5rv293hfT4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240b:252::/32 Signature Algorithm: sha256WithRSAEncryption b1:fa:59:36:1f:07:cc:97:1d:5e:0c:f9:af:85:3d:99:75:71: bd:72:50:c3:b1:4c:ba:08:e0:9c:2c:ce:8e:53:f2:3f:d2:d5: aa:90:bc:58:bb:fb:5a:d3:2d:de:d2:64:c6:90:88:65:50:64: ac:57:2d:80:97:44:4d:50:5f:f8:6e:65:ec:b0:ea:76:a1:bd: 41:78:79:d2:27:14:f4:84:d0:83:fb:8d:28:17:52:2c:77:36: 28:b1:d4:cb:fc:24:66:eb:13:a5:4c:77:a8:44:e5:91:e3:0d: d1:d5:0d:c6:e1:75:05:8c:c2:07:1f:eb:59:eb:21:43:82:d7: 07:d1:a4:92:1c:0f:46:79:21:cc:04:f5:b4:a6:2b:22:2f:ed: a1:49:e9:3c:09:f9:cb:b7:54:02:4a:7d:48:49:7a:2f:5c:44: 97:87:08:c4:f5:a3:61:be:e1:9c:90:20:ad:6e:3e:14:8b:09: 3a:f7:f7:b2:76:a6:43:46:25:62:a2:5c:bd:fa:06:55:74:87: f2:44:fc:bb:67:69:7b:e7:0d:6f:0c:00:d6:31:9d:d1:b4:98: 3a:56:8a:f0:28:40:73:b8:60:f9:38:b8:4e:27:77:74:43:c6: 26:90:fe:9b:a4:ae:88:77:d4:e9:05:6f:26:aa:b9:2d:a0:8d: 93:a3:58:d9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTI0MTAzMTAx MzE0MloXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQUMwMTEzMTJBOTYyMTYx MjdCODFEQjMxMTc5QUVGREJEREUxN0QzRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL/HHHaq8mVc5nHKljtKtcFvE5df7sr+E0F0TMyjbWC76Sn+fzY/ L2PvXg4I0nv9EX6ocJlNh+UaQMIFhPhwlKDgzsoE8JbW1HZeIufCFZspWo6JEPnP Lq/54tLca1zmIn/d3ATElRz9xrhOcgbBeaGmcSW+LuQbsQ8K0FIVfqgXBLzgO6+I pUCZdHIxy+67vzU/xiFgyRfdnw3MQy8T8vh/ss6Y/xQo6P5a56iefgBtXQGm+mT9 +2vn1LPH6ruon2//7HylGIldZ5Ao2OtixWlg3qlksTqTnVtUTHZINM/UXA3s63yr hNNBKiJ+5ddQ3ISOm7o87uC2L/kSTnUG0z0CAwEAAaOCAikwggIlMB0GA1UdDgQW BBSsARMSqWIWEnuB2zEXmu/b3eF9PjAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTc1L3JBRVRFcWxpRmhKN2dkc3hGNXJ2MjkzaGZUNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkCwJSMA0GCSqGSIb3DQEBCwUAA4IBAQCx+lk2HwfMlx1eDPmvhT2Z dXG9clDDsUy6COCcLM6OU/I/0tWqkLxYu/ta0y3e0mTGkIhlUGSsVy2Al0RNUF/4 bmXssOp2ob1BeHnSJxT0hNCD+40oF1IsdzYosdTL/CRm6xOlTHeoROWR4w3R1Q3G 4XUFjMIHH+tZ6yFDgtcH0aSSHA9GeSHMBPW0pisiL+2hSek8CfnLt1QCSn1ISXov XESXhwjE9aNhvuGckCCtbj4Uiwk69/eydqZDRiVioly9+gZVdIfyRPy7Z2l75w1v DADWMZ3RtJg6VorwKEBzuGD5OLhOJ3d0Q8YmkP6bpK6Id9TpBW8mqrktoI2To1jZ -----END CERTIFICATE-----Generated at Sun Feb 16 22:22:38 2025 by rpki-client