$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/I1kIB6I7ndxi2BAzvECnVPo8tds.roa File: I1kIB6I7ndxi2BAzvECnVPo8tds.roa (raw, json) Hash identifier: LQ359ePlRbeuo8inod1EZIL5n2/h7IGV74QNyVHUQKA= Subject key identifier: 23:59:08:07:A2:3B:9D:DC:62:D8:10:33:BC:40:A7:54:FA:3C:B5:DB Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 030B Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/I1kIB6I7ndxi2BAzvECnVPo8tds.roa Signing time: Mon 21 Oct 2024 01:08:38 +0000 ROA not before: Mon 21 Oct 2024 01:08:38 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 122.145.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 21 01:08:38 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=23590807A23B9DDC62D81033BC40A754FA3CB5DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:09:01:c6:2b:18:ea:8a:a2:35:9e:f5:2d:c1: ff:6e:78:79:09:4f:29:8a:85:e1:96:b5:1c:9a:af: 3b:d8:ea:76:3e:55:59:9b:aa:f7:b1:89:b9:fe:98: 73:12:5c:50:b3:30:9a:87:c6:56:fd:4c:e2:76:90: 42:06:4c:5e:55:f3:27:89:fa:e2:ca:e2:4a:e6:8d: 29:be:b5:af:2e:ce:d1:39:ec:ba:02:0e:85:20:d8: 35:f7:d3:7e:14:1c:bd:f0:1d:d8:e3:be:33:b5:8e: 75:8f:8d:22:dd:0a:9b:8b:40:cd:54:eb:60:56:33: e5:97:e5:e2:58:0d:6a:a4:5d:fc:46:a4:3a:80:a1: 35:53:aa:79:13:14:1f:9e:29:65:97:4a:c9:37:8c: 3c:99:aa:a9:9f:78:51:4f:e3:8b:87:67:45:95:9a: 51:b6:bc:fb:44:b4:ba:d4:a6:4d:c2:54:39:f8:3c: 7d:4a:53:11:fe:13:53:02:5e:f5:1c:81:65:53:cb: 97:1a:7e:bd:40:0a:36:ba:61:6c:aa:6b:8d:cf:37: e7:58:9d:9f:0a:7c:b3:c7:0e:0e:44:0c:80:7b:e3: 11:47:0f:7d:74:b5:74:58:db:87:73:ad:f3:ab:0c: 2e:a4:29:41:2a:46:6a:8f:0c:98:15:d3:b6:6b:61: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:08:07:A2:3B:9D:DC:62:D8:10:33:BC:40:A7:54:FA:3C:B5:DB X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/I1kIB6I7ndxi2BAzvECnVPo8tds.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.145.0.0/19 Signature Algorithm: sha256WithRSAEncryption 0b:2d:0f:57:bd:3e:8a:a3:94:1f:20:42:d1:f9:ac:33:e8:ca: 80:ac:57:bd:5e:ef:a4:47:28:9f:a7:b5:6c:47:e9:d4:e7:bc: cb:05:18:82:92:0b:3d:8d:da:96:32:0d:48:b0:e9:b1:2c:25: 30:d6:3c:11:fb:91:78:4a:f7:40:fa:6b:f7:ac:92:0a:5f:64: a0:97:ad:39:e9:cc:ab:5c:28:50:87:1c:a2:0d:db:3d:1a:4b: 3c:31:ad:be:bf:0d:44:2b:81:98:40:b6:0a:fb:96:7f:5b:44: 02:29:24:b9:6b:59:1f:1f:3c:2c:b1:b2:c6:81:3c:cf:14:57: 5b:ad:15:18:ff:9c:79:95:ac:88:74:f7:e5:39:bb:53:cd:2a: 99:7e:4c:74:3b:f7:87:f0:49:d5:72:81:3f:98:02:0e:63:b8: f8:74:ba:d0:76:d3:a4:b6:2e:bc:79:a2:f3:1f:31:60:78:e6: d5:f2:0a:85:20:4a:0a:61:39:59:13:63:4a:42:28:34:24:50: e3:37:77:db:7f:90:6c:ff:7f:42:32:ff:ff:19:c7:3d:13:6b: 31:b6:02:3e:8a:97:32:08:25:04:31:2f:16:f6:3e:64:c2:c1: 76:a8:06:d8:50:24:a1:e0:df:93:4f:b2:d5:6f:fa:c6:e1:48: b6:c6:f1:bd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAwswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjEw MTA4MzhaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIzNTkwODA3QTIzQjlE REM2MkQ4MTAzM0JDNDBBNzU0RkEzQ0I1REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWCQHGKxjqiqI1nvUtwf9ueHkJTymKheGWtRyarzvY6nY+VVmb qvexibn+mHMSXFCzMJqHxlb9TOJ2kEIGTF5V8yeJ+uLK4krmjSm+ta8uztE57LoC DoUg2DX3034UHL3wHdjjvjO1jnWPjSLdCpuLQM1U62BWM+WX5eJYDWqkXfxGpDqA oTVTqnkTFB+eKWWXSsk3jDyZqqmfeFFP44uHZ0WVmlG2vPtEtLrUpk3CVDn4PH1K UxH+E1MCXvUcgWVTy5cafr1ACja6YWyqa43PN+dYnZ8KfLPHDg5EDIB74xFHD310 tXRY24dzrfOrDC6kKUEqRmqPDJgV07ZrYUilAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUI1kIB6I7ndxi2BAzvECnVPo8tdswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0kxa0lCNkk3bmR4aTJCQXp2RUNuVlBvOHRkcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAV6kQAwDQYJKoZIhvcNAQELBQADggEBAAstD1e9PoqjlB8gQtH5rDPoyoCs V71e76RHKJ+ntWxH6dTnvMsFGIKSCz2N2pYyDUiw6bEsJTDWPBH7kXhK90D6a/es kgpfZKCXrTnpzKtcKFCHHKIN2z0aSzwxrb6/DUQrgZhAtgr7ln9bRAIpJLlrWR8f PCyxssaBPM8UV1utFRj/nHmVrIh09+U5u1PNKpl+THQ794fwSdVygT+YAg5juPh0 utB206S2Lrx5ovMfMWB45tXyCoUgSgphOVkTY0pCKDQkUOM3d9t/kGz/f0Iy//8Z xz0TazG2Aj6KlzIIJQQxLxb2PmTCwXaoBthQJKHg35NPstVv+sbhSLbG8b0= -----END CERTIFICATE-----Generated at Sun Feb 16 22:06:10 2025 by rpki-client