$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/fxiCPPX9X8zi1LuAkmV-qEU-wPE.roa File: fxiCPPX9X8zi1LuAkmV-qEU-wPE.roa (raw, json) Hash identifier: JHZXwaT00gsmTSYpiw0Ra5xKAcGguSIau1tw8Vhf5yo= Subject key identifier: 7F:18:82:3C:F5:FD:5F:CC:E2:D4:BB:80:92:65:7E:A8:45:3E:C0:F1 Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 24 Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/fxiCPPX9X8zi1LuAkmV-qEU-wPE.roa Signing time: Fri 18 Oct 2024 08:13:37 +0000 ROA not before: Fri 18 Oct 2024 08:13:37 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 23783 IP address blocks: 61.11.160.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Oct 18 08:13:37 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=7F18823CF5FD5FCCE2D4BB8092657EA8453EC0F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:0d:e8:e7:c1:22:79:a1:60:de:80:67:d3: ef:49:cd:e0:87:5c:80:44:3d:0f:2b:52:80:04:91: fb:2a:8f:61:60:c6:6c:82:e3:fa:5a:23:f8:6f:97: 7a:1d:17:8c:11:85:19:60:84:65:9d:ba:a7:ad:a8: a0:a5:a4:5e:11:83:eb:cf:dd:05:12:62:dd:ff:32: 88:a6:e1:55:15:3b:61:b4:ae:9c:36:49:b3:ce:2a: 12:13:7b:69:2a:f2:02:bc:8f:a3:b5:31:e6:66:86: 2b:2c:09:5d:a4:da:20:46:e5:fb:a1:3f:8e:fe:07: f9:9a:87:f4:dc:49:73:78:75:c8:46:da:58:e5:b8: f0:38:cc:23:2c:bb:a8:3b:be:bf:4f:37:76:92:d3: f2:c7:b6:0d:34:b5:38:12:8e:29:ef:88:9c:5c:62: c5:00:c6:7d:52:43:99:5d:32:28:0d:0b:36:a7:35: 46:02:bd:44:da:1f:e9:0c:59:88:06:cd:6c:99:f4: 04:df:3d:04:a4:04:aa:ad:71:a6:78:8c:de:42:0e: 90:9b:64:19:15:e8:d8:c9:97:51:e2:c4:4c:c6:4c: 17:aa:8c:d1:8e:fe:09:97:79:c7:50:b5:37:59:cd: a6:bc:fd:b8:1d:87:4d:80:84:ce:57:0c:b8:e1:81: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:18:82:3C:F5:FD:5F:CC:E2:D4:BB:80:92:65:7E:A8:45:3E:C0:F1 X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/fxiCPPX9X8zi1LuAkmV-qEU-wPE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.11.160.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:0d:33:49:1a:31:06:29:56:e6:cf:cc:92:cf:ce:12:59:a0: bf:53:aa:99:c3:a0:69:2f:09:29:87:b6:53:57:47:69:dd:e5: 42:f1:8a:d1:29:db:a6:d8:43:71:36:0e:0f:54:b7:4d:a3:03: c5:e4:ce:0c:80:5a:3e:8e:79:e5:0d:d8:38:47:94:34:8d:4b: 53:18:06:58:28:06:91:c5:c2:22:8a:f5:ed:c7:28:b5:b7:c6: ee:54:04:29:b3:2f:3a:87:c7:07:25:af:c1:04:c7:37:59:47: b6:90:a1:5e:94:f7:99:21:2f:d5:60:ac:86:2c:f0:8e:3c:50: 40:88:d5:96:97:35:6b:9d:ac:f3:f4:54:bc:35:69:8a:28:48: 67:03:bf:6b:81:b0:7a:4e:fc:70:d1:4c:d0:96:64:de:0f:33: f8:fa:57:81:7f:0d:fd:db:11:56:3d:4f:a9:b9:ee:32:92:2a: 47:96:ae:b7:d5:c4:d5:07:8c:2b:01:52:a4:b8:81:20:67:91: e7:ab:c8:eb:0e:70:20:d4:f7:db:fd:e1:3f:f3:99:29:91:ec: 19:aa:cf:6b:f3:03:45:8d:b0:16:3f:83:26:9a:17:a8:16:e9: 5b:37:37:c1:15:7f:67:01:5b:a2:d8:f2:37:47:42:38:d4:96: 6f:b1:44:9d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI0MTAxODA4 MTMzN1oXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoN0YxODgyM0NGNUZENUZD Q0UyRDRCQjgwOTI2NTdFQTg0NTNFQzBGMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALTyDejnwSJ5oWDegGfT70nN4IdcgEQ9DytSgASR+yqPYWDGbILj +loj+G+Xeh0XjBGFGWCEZZ26p62ooKWkXhGD68/dBRJi3f8yiKbhVRU7YbSunDZJ s84qEhN7aSryAryPo7Ux5maGKywJXaTaIEbl+6E/jv4H+ZqH9NxJc3h1yEbaWOW4 8DjMIyy7qDu+v083dpLT8se2DTS1OBKOKe+InFxixQDGfVJDmV0yKA0LNqc1RgK9 RNof6QxZiAbNbJn0BN89BKQEqq1xpniM3kIOkJtkGRXo2MmXUeLETMZMF6qM0Y7+ CZd5x1C1N1nNprz9uB2HTYCEzlcMuOGBP6ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR/GII89f1fzOLUu4CSZX6oRT7A8TAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvZnhpQ1BQWDlYOHppMUx1QWttVi1xRVUtd1BFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD0LoDANBgkqhkiG9w0BAQsFAAOCAQEAnw0zSRoxBilW5s/Mks/OElmgv1Oq mcOgaS8JKYe2U1dHad3lQvGK0SnbpthDcTYOD1S3TaMDxeTODIBaPo555Q3YOEeU NI1LUxgGWCgGkcXCIor17ccotbfG7lQEKbMvOofHByWvwQTHN1lHtpChXpT3mSEv 1WCshizwjjxQQIjVlpc1a52s8/RUvDVpiihIZwO/a4Gwek78cNFM0JZk3g8z+PpX gX8N/dsRVj1PqbnuMpIqR5aut9XE1QeMKwFSpLiBIGeR56vI6w5wINT32/3hP/OZ KZHsGarPa/MDRY2wFj+DJpoXqBbpWzc3wRV/ZwFbotjyN0dCONSWb7FEnQ== -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:26 2025 by rpki-client