$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/BaWXQVeAKbPYI6D6I_utinrFrEc.roa File: BaWXQVeAKbPYI6D6I_utinrFrEc.roa (raw, json) Hash identifier: 9pFxmBlK752KZU+JZvJS1eJdI9uR3oQ8N/ufOubuPig= Subject key identifier: 05:A5:97:41:57:80:29:B3:D8:23:A0:FA:23:FB:AD:8A:7A:C5:AC:47 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 031F Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BaWXQVeAKbPYI6D6I_utinrFrEc.roa Signing time: Thu 24 Oct 2024 01:24:05 +0000 ROA not before: Thu 24 Oct 2024 01:24:05 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 183.181.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 799 (0x31f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 24 01:24:05 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=05A59741578029B3D823A0FA23FBAD8A7AC5AC47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:88:82:7c:58:6f:db:d2:88:df:20:e9:1c:e4: 2c:ec:46:eb:36:0c:f6:94:68:4a:43:8c:22:72:27: b5:83:b9:f3:5a:07:53:f4:6f:a9:b5:85:dc:19:ff: 4d:33:33:ec:db:98:99:35:6d:5e:2b:c0:69:f6:15: ec:61:bb:db:68:c1:1c:7b:fd:08:4c:bc:14:11:c2: fc:38:84:71:dc:75:57:55:02:ee:18:44:3e:10:7c: 6a:de:2e:09:0c:dd:83:5c:e8:0c:26:d0:67:64:53: 3d:09:fa:64:3a:c6:40:dd:bd:ea:d5:30:a7:04:04: bf:c1:bb:27:13:ad:0d:f5:71:5e:08:73:2a:9e:07: 44:ea:8f:7f:c8:25:e7:a3:33:f3:78:a9:e8:e6:a3: c9:93:c1:75:82:22:89:88:7b:a3:4a:6a:be:6f:b0: e0:97:90:0a:fd:13:a6:ff:ba:56:c4:8b:74:44:4b: cb:05:4a:74:11:bb:55:d4:c5:a3:7d:4a:e1:20:03: 5d:ad:fd:21:b5:1f:92:a4:bf:da:f5:2d:d7:bd:2f: 60:e0:2e:b6:05:24:2d:00:87:6c:a1:31:b8:c9:5f: df:9e:49:d9:3d:b3:08:7c:99:81:9d:a4:c3:e5:0a: 38:c5:9a:f3:d5:d2:6c:3b:f7:b4:a9:0c:72:19:f7: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A5:97:41:57:80:29:B3:D8:23:A0:FA:23:FB:AD:8A:7A:C5:AC:47 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BaWXQVeAKbPYI6D6I_utinrFrEc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.181.144.0/20 Signature Algorithm: sha256WithRSAEncryption 1f:89:fe:0f:bc:b1:1e:31:38:6b:9f:e6:51:da:4a:41:41:e3: 6a:6e:88:fe:a5:e3:16:0f:a0:2f:78:b4:5c:eb:93:7a:e8:40: e1:bd:97:0e:3b:44:ca:ed:41:bd:2c:ca:42:19:9e:19:53:42: c6:3d:ff:92:c5:81:6c:9c:71:0a:55:67:82:ea:a0:f8:8a:c4: 48:7e:be:3d:4f:e7:26:7c:d8:e0:74:9d:ea:e6:ec:8c:cd:6f: b1:a8:a8:7c:a8:47:37:fc:a3:1d:dd:00:54:21:2a:02:32:bd: 4d:15:87:bb:61:51:5d:67:69:20:c2:ca:92:a9:f6:8c:85:c3: fd:22:4e:df:ce:13:77:c1:fe:4a:cf:6f:e8:ef:4a:96:cc:a2: 5b:d4:bf:8d:2e:93:f3:a5:63:96:49:6b:53:dd:0a:ae:93:06: 37:1c:5f:d4:02:d7:84:79:27:50:30:bf:b2:ed:57:eb:9f:b7: 67:4c:20:28:b5:d7:eb:6e:bc:91:45:14:cb:24:12:24:b9:9b: 30:91:40:b9:a2:a3:07:e6:79:ea:42:dd:8e:bb:f2:b6:37:02: be:9e:2f:f7:85:12:2f:d1:b9:d1:25:e8:d2:64:fe:bd:2d:5b: e3:dc:90:6d:80:61:2b:aa:dc:7d:7a:be:08:57:1e:73:a9:69: f4:c7:62:03 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjQw MTI0MDVaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA1QTU5NzQxNTc4MDI5 QjNEODIzQTBGQTIzRkJBRDhBN0FDNUFDNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJiIJ8WG/b0ojfIOkc5CzsRus2DPaUaEpDjCJyJ7WDufNaB1P0 b6m1hdwZ/00zM+zbmJk1bV4rwGn2Fexhu9towRx7/QhMvBQRwvw4hHHcdVdVAu4Y RD4QfGreLgkM3YNc6Awm0GdkUz0J+mQ6xkDdverVMKcEBL/BuycTrQ31cV4Icyqe B0Tqj3/IJeejM/N4qejmo8mTwXWCIomIe6NKar5vsOCXkAr9E6b/ulbEi3RES8sF SnQRu1XUxaN9SuEgA12t/SG1H5Kkv9r1Lde9L2DgLrYFJC0Ah2yhMbjJX9+eSdk9 swh8mYGdpMPlCjjFmvPV0mw797SpDHIZ95r7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBaWXQVeAKbPYI6D6I/utinrFrEcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0JhV1hRVmVBS2JQWUk2RDZJX3V0aW5yRnJFYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAS3tZAwDQYJKoZIhvcNAQELBQADggEBAB+J/g+8sR4xOGuf5lHaSkFB42pu iP6l4xYPoC94tFzrk3roQOG9lw47RMrtQb0sykIZnhlTQsY9/5LFgWyccQpVZ4Lq oPiKxEh+vj1P5yZ82OB0nerm7IzNb7GoqHyoRzf8ox3dAFQhKgIyvU0Vh7thUV1n aSDCypKp9oyFw/0iTt/OE3fB/krPb+jvSpbMolvUv40uk/OlY5ZJa1PdCq6TBjcc X9QC14R5J1Awv7LtV+uft2dMICi11+tuvJFFFMskEiS5mzCRQLmiowfmeepC3Y67 8rY3Ar6eL/eFEi/RudEl6NJk/r0tW+PckG2AYSuq3H16vghXHnOpafTHYgM= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:13 2024 by rpki-client on console-fra.rpki-client.org