$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/3cHP3xrE2kglq5YmAECa8ZJGnv0.roa File: 3cHP3xrE2kglq5YmAECa8ZJGnv0.roa (raw, json) Hash identifier: nnko0EQW0C9eceOnwGoMNlR/UzpzbWX+ffGYHAqUpxw= Subject key identifier: DD:C1:CF:DF:1A:C4:DA:48:25:AB:96:26:00:40:9A:F1:92:46:9E:FD Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0319 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3cHP3xrE2kglq5YmAECa8ZJGnv0.roa Signing time: Thu 24 Oct 2024 01:23:58 +0000 ROA not before: Thu 24 Oct 2024 01:23:58 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 180.131.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 793 (0x319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 24 01:23:58 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=DDC1CFDF1AC4DA4825AB962600409AF192469EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:f8:c0:a3:53:17:38:bc:6a:28:18:cf:2e: 68:f0:41:47:87:55:43:92:17:bf:65:52:81:be:33: c2:9a:dd:63:37:52:fd:44:98:d2:84:b2:80:02:48: 19:c3:b7:c0:37:7c:28:a3:96:86:7a:8a:31:a0:f3: 71:33:83:b2:2c:8b:b3:45:a6:26:f7:27:1b:cb:4b: 29:80:92:32:55:e8:e7:67:88:d9:8b:0a:0e:a5:91: 6b:35:38:b3:d2:dd:dd:ad:f0:cd:a5:80:49:c6:61: 3f:6a:5e:24:23:5e:2b:91:e9:4b:d4:a2:12:b9:76: b1:07:c9:8f:17:40:f7:9d:89:1d:d9:c2:36:a6:c6: d0:5b:55:14:fe:05:b1:4c:4b:7d:66:ed:43:bc:75: 02:14:22:cb:ca:33:b0:9d:7b:c9:4b:dc:bd:40:43: 6b:18:3a:1d:2f:55:ab:3b:a8:a6:0b:21:06:f3:9a: 28:e5:41:e7:dd:cc:49:d0:08:4f:4c:95:04:d2:42: 78:83:31:eb:4f:43:08:c3:34:a8:a5:e0:b1:78:98: bd:d7:af:2c:4c:83:f0:24:ed:d6:29:1f:fc:5d:24: 4c:98:0d:67:99:c0:44:d2:1b:14:a1:f9:39:49:d6: 3b:b0:3a:ee:77:f4:3e:f8:01:9c:35:b1:8b:c0:f5: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C1:CF:DF:1A:C4:DA:48:25:AB:96:26:00:40:9A:F1:92:46:9E:FD X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3cHP3xrE2kglq5YmAECa8ZJGnv0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.123.0/24 Signature Algorithm: sha256WithRSAEncryption 90:dc:11:8c:2d:32:d0:a8:6d:e3:1e:d6:a0:21:ee:fc:7d:8a: 68:71:a7:01:ab:03:b2:a0:c0:02:fe:7d:97:f9:e4:15:d6:e4: 76:b1:d3:4c:c5:53:b1:a4:03:62:c1:b8:13:c0:21:9d:7a:ec: 11:49:ad:77:5a:a9:13:2b:19:44:fe:df:72:f3:34:4a:1f:42: 71:5a:0b:22:ba:20:16:0c:96:2e:6e:ac:64:b8:32:16:c4:98: 45:22:67:08:ff:92:fb:73:4c:b4:e2:07:a6:b5:47:01:d7:6e: ce:a7:c4:ac:f8:b2:d1:fe:20:de:24:56:d4:25:ce:83:93:30: 0d:ab:21:6e:80:72:4e:3e:44:4d:68:49:0d:c3:9d:ba:28:9d: a4:1c:c1:61:4f:ab:bc:75:ec:85:0c:6f:17:34:9b:32:b1:37: a5:80:98:4c:5b:a2:f2:90:33:96:d9:c6:70:54:c6:dd:aa:e3: 7b:58:c0:47:e6:1b:c3:0a:e8:72:c0:91:ae:3d:46:be:fd:21: a1:12:e2:a1:d4:9d:cc:52:0c:b2:98:1f:b9:c8:84:44:f8:74: 17:83:d8:d9:5a:76:5d:d2:91:cb:57:7f:94:c8:c0:88:24:4d: 32:b5:f6:85:ad:2a:52:3d:4e:4b:cc:5a:90:b9:08:a3:70:9f: bc:28:af:a2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjQw MTIzNThaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEREQzFDRkRGMUFDNERB NDgyNUFCOTYyNjAwNDA5QUYxOTI0NjlFRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBu/jAo1MXOLxqKBjPLmjwQUeHVUOSF79lUoG+M8Ka3WM3Uv1E mNKEsoACSBnDt8A3fCijloZ6ijGg83Ezg7Isi7NFpib3JxvLSymAkjJV6OdniNmL Cg6lkWs1OLPS3d2t8M2lgEnGYT9qXiQjXiuR6UvUohK5drEHyY8XQPediR3Zwjam xtBbVRT+BbFMS31m7UO8dQIUIsvKM7Cde8lL3L1AQ2sYOh0vVas7qKYLIQbzmijl QefdzEnQCE9MlQTSQniDMetPQwjDNKil4LF4mL3XryxMg/Ak7dYpH/xdJEyYDWeZ wETSGxSh+TlJ1juwOu539D74AZw1sYvA9bEXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3cHP3xrE2kglq5YmAECa8ZJGnv0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzNjSFAzeHJFMmtnbHE1WW1BRUNhOFpKR252MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC0g3swDQYJKoZIhvcNAQELBQADggEBAJDcEYwtMtCobeMe1qAh7vx9imhx pwGrA7KgwAL+fZf55BXW5Hax00zFU7GkA2LBuBPAIZ167BFJrXdaqRMrGUT+33Lz NEofQnFaCyK6IBYMli5urGS4MhbEmEUiZwj/kvtzTLTiB6a1RwHXbs6nxKz4stH+ IN4kVtQlzoOTMA2rIW6Ack4+RE1oSQ3DnboonaQcwWFPq7x17IUMbxc0mzKxN6WA mExbovKQM5bZxnBUxt2q43tYwEfmG8MK6HLAka49Rr79IaES4qHUncxSDLKYH7nI hET4dBeD2Nladl3SkctXf5TIwIgkTTK19oWtKlI9TkvMWpC5CKNwn7wor6I= -----END CERTIFICATE-----Generated at Sun Feb 16 22:09:54 2025 by rpki-client