$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CIQ8JaSW0h1cE8-83Ip_c8ENPBg.roa File: CIQ8JaSW0h1cE8-83Ip_c8ENPBg.roa (raw, json) Hash identifier: X4ENs7b55o603PTsKZ3t95ZnIO4QVRV7Dz9CSmeLCkc= Subject key identifier: 08:84:3C:25:A4:96:D2:1D:5C:13:CF:BC:DC:8A:7F:73:C1:0D:3C:18 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 030C Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CIQ8JaSW0h1cE8-83Ip_c8ENPBg.roa Signing time: Mon 21 Oct 2024 01:08:38 +0000 ROA not before: Mon 21 Oct 2024 01:08:38 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 122.145.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 780 (0x30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 21 01:08:38 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=08843C25A496D21D5C13CFBCDC8A7F73C10D3C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b9:32:4e:ab:0c:af:28:e1:ff:25:f1:0a:7c: 2b:8b:62:a7:5a:1a:b1:ce:ad:eb:66:24:40:fe:c4: d5:45:fc:63:86:2b:33:0b:67:d1:0c:21:2f:3a:1e: 17:b4:e8:42:2c:0c:5f:2f:b4:b9:ec:d6:d3:28:dc: 50:10:fc:2c:7a:71:b9:e7:32:6b:f7:9f:d0:86:1a: d5:b2:d6:16:cc:ce:50:c2:cb:2b:8c:06:ff:95:44: c6:18:91:18:8f:23:4f:30:8c:79:15:3d:1b:b1:3b: 6a:d5:2c:c2:e2:91:e6:ad:66:64:9d:c1:3e:28:3e: 83:85:aa:d3:ad:b9:7d:88:2f:81:a5:a0:64:2b:73: 1c:28:e4:a9:ac:24:5c:4c:ff:0f:c8:00:d6:27:9a: c7:33:b3:97:b4:65:3a:61:f9:67:02:f3:d8:c0:54: 3c:a0:f3:60:35:11:66:0f:8f:7e:f7:87:e4:3f:56: ab:7e:03:82:34:f9:66:78:5b:2e:3b:ec:9e:7e:c8: 91:c6:4d:a2:d2:1e:55:80:32:00:82:e9:c0:91:54: 07:e6:78:b8:fe:cd:73:2a:c2:96:8c:6c:db:7e:06: 07:1c:64:28:a7:58:93:00:9b:6f:7f:0f:19:71:b6: 26:49:36:32:a9:78:f2:85:39:77:d9:e0:f1:df:94: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:84:3C:25:A4:96:D2:1D:5C:13:CF:BC:DC:8A:7F:73:C1:0D:3C:18 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CIQ8JaSW0h1cE8-83Ip_c8ENPBg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.145.32.0/22 Signature Algorithm: sha256WithRSAEncryption 63:51:6f:83:2f:cf:38:64:4d:cd:19:b8:65:f1:d6:97:4b:3b: 0d:45:3a:e7:67:36:19:28:59:98:95:6e:94:55:5f:db:e0:87: 75:8c:43:4b:e3:6d:ed:cd:1a:ad:70:40:2b:12:8a:bc:c5:9e: 4c:ba:7d:8a:10:38:b7:8a:9d:2c:19:11:75:24:ca:78:05:c2: e6:4a:f1:84:90:2c:01:72:19:19:ca:9d:ad:ad:4f:bf:ea:cf: b1:f3:91:d1:3e:f4:75:27:90:8e:14:fb:b9:03:2c:ad:c3:da: 2e:23:42:5c:77:f8:8e:e3:e1:7b:9d:c0:1e:e8:9a:e4:27:c9: 0e:a1:a2:99:cc:4d:7b:16:5a:8d:3a:2c:85:4e:e3:eb:4b:8b: 04:98:1a:d7:cd:8d:61:81:ea:ee:b0:2d:b8:41:e4:2e:29:5c: 0f:14:a7:ec:e5:cf:de:2c:b5:f9:0f:32:aa:af:2f:de:b5:5b: 91:20:dd:99:17:53:be:22:fc:0a:51:df:79:d2:81:b2:db:eb: 12:89:8d:e6:e3:d8:50:cb:e5:9b:5e:27:9d:2d:5c:44:d9:3f: 5d:48:0a:05:b7:ee:88:96:91:24:6c:de:e7:62:d6:b8:2c:c7: 89:ef:b2:fb:00:15:44:d4:c6:80:9f:89:c3:74:48:f0:7d:a8: 22:e9:5a:5f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjEw MTA4MzhaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4ODQzQzI1QTQ5NkQy MUQ1QzEzQ0ZCQ0RDOEE3RjczQzEwRDNDMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDquTJOqwyvKOH/JfEKfCuLYqdaGrHOretmJED+xNVF/GOGKzML Z9EMIS86Hhe06EIsDF8vtLns1tMo3FAQ/Cx6cbnnMmv3n9CGGtWy1hbMzlDCyyuM Bv+VRMYYkRiPI08wjHkVPRuxO2rVLMLikeatZmSdwT4oPoOFqtOtuX2IL4GloGQr cxwo5KmsJFxM/w/IANYnmsczs5e0ZTph+WcC89jAVDyg82A1EWYPj373h+Q/Vqt+ A4I0+WZ4Wy477J5+yJHGTaLSHlWAMgCC6cCRVAfmeLj+zXMqwpaMbNt+BgccZCin WJMAm29/DxlxtiZJNjKpePKFOXfZ4PHflPHXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCIQ8JaSW0h1cE8+83Ip/c8ENPBgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0NJUThKYVNXMGgxY0U4LTgzSXBfYzhFTlBCZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ6kSAwDQYJKoZIhvcNAQELBQADggEBAGNRb4MvzzhkTc0ZuGXx1pdLOw1F OudnNhkoWZiVbpRVX9vgh3WMQ0vjbe3NGq1wQCsSirzFnky6fYoQOLeKnSwZEXUk yngFwuZK8YSQLAFyGRnKna2tT7/qz7HzkdE+9HUnkI4U+7kDLK3D2i4jQlx3+I7j 4XudwB7omuQnyQ6hopnMTXsWWo06LIVO4+tLiwSYGtfNjWGB6u6wLbhB5C4pXA8U p+zlz94stfkPMqqvL961W5Eg3ZkXU74i/ApR33nSgbLb6xKJjebj2FDL5ZteJ50t XETZP11ICgW37oiWkSRs3udi1rgsx4nvsvsAFUTUxoCficN0SPB9qCLpWl8= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org