$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/caqa5AfwdAjMlS23fvaoDCdXxZM.roa File: caqa5AfwdAjMlS23fvaoDCdXxZM.roa (raw, json) Hash identifier: Zr5c8Hu1vsbafwN9nXahZ1ejtQhJRc0Kxkp8WomruMU= Subject key identifier: 71:AA:9A:E4:07:F0:74:08:CC:95:2D:B7:7E:F6:A8:0C:27:57:C5:93 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02F1 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/caqa5AfwdAjMlS23fvaoDCdXxZM.roa Signing time: Fri 11 Oct 2024 01:16:52 +0000 ROA not before: Fri 11 Oct 2024 01:16:52 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 10013 IP address blocks: 59.156.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 11 01:16:52 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=71AA9AE407F07408CC952DB77EF6A80C2757C593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:64:78:01:42:f9:cc:70:c2:f7:95:ba:b6: 02:18:76:ff:11:f5:8f:82:ee:6c:a4:6f:94:9f:c5: bf:58:c8:45:00:3e:3a:62:66:6a:8c:7f:81:13:65: 8e:26:3b:3b:04:dd:14:65:85:46:4c:ef:f3:5c:7c: 12:c3:de:4a:a7:71:f0:20:f9:91:7f:25:be:c6:ca: f7:26:8a:98:71:2d:8e:9a:d2:81:96:5a:38:54:b7: 12:87:06:41:4e:c0:e6:59:08:0f:65:b2:c4:81:52: 64:5c:b5:4c:ce:cb:f8:d9:aa:a8:36:eb:ed:90:b0: cf:2b:e6:51:ef:8b:a3:16:e9:a4:82:c5:c1:da:59: a1:65:4d:5f:50:32:23:55:19:6a:35:a7:70:10:e6: f9:b3:8b:b5:16:cc:4e:3d:cf:d1:ff:c2:5a:be:5e: 5c:97:c6:5d:f4:d4:41:08:8b:0b:e0:6f:c6:76:21: 94:c4:b2:0a:4b:3e:d7:ec:0d:10:26:78:bc:85:b5: 82:60:2f:8a:f1:33:b6:65:38:2d:60:6d:a1:44:61: ce:5d:30:99:34:c3:74:77:e2:ad:53:ba:30:12:97: 90:85:4e:7b:59:19:19:ca:f9:b8:8a:68:d4:79:ac: 18:90:2b:d2:80:82:55:7b:01:87:81:2e:86:71:32: fb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:9A:E4:07:F0:74:08:CC:95:2D:B7:7E:F6:A8:0C:27:57:C5:93 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/caqa5AfwdAjMlS23fvaoDCdXxZM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.156.208.0/20 Signature Algorithm: sha256WithRSAEncryption 86:fb:c0:e8:1e:7d:c1:97:79:7d:94:94:d6:53:48:b1:99:ae: f7:af:2b:42:13:f7:ee:56:b4:69:fa:5b:2b:56:60:2d:b6:3c: 2a:98:5d:4a:69:b6:5a:8d:11:c0:c9:6c:fa:fe:53:c7:a3:52: 17:b9:6f:bf:65:3e:ce:c6:f0:bd:f5:c9:21:15:5b:aa:de:0e: 58:0a:91:77:eb:03:71:7c:f4:82:d5:3b:90:29:65:1d:d3:5d: da:66:e4:bf:8f:3a:ae:ac:8b:c6:28:29:80:50:a0:f6:1d:97: b3:3b:9b:52:82:f7:d6:6d:36:a4:88:4e:f1:d7:90:63:33:ca: 7d:3d:23:82:1e:67:da:8f:ec:84:11:0c:0e:3a:8d:64:57:f8: 22:9c:7c:e5:85:fc:9a:9f:23:18:d6:75:62:65:99:c1:5b:06: 42:0a:f8:67:c3:09:93:41:39:6c:82:8e:92:18:89:70:e4:c4: 1f:0b:e1:4f:3a:d1:03:8d:20:72:52:41:39:09:c8:ba:15:44: dd:3c:2f:cc:b7:4d:33:37:3f:a9:39:86:c9:e6:6e:b0:dc:aa: 82:53:b4:da:ac:78:1f:c6:07:b6:c7:1e:38:57:81:44:94:d1: 31:d4:53:f8:bc:5d:77:98:e6:6a:a5:fd:0e:4e:2f:36:9c:07: c1:29:72:1d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMTEw MTE2NTJaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDcxQUE5QUU0MDdGMDc0 MDhDQzk1MkRCNzdFRjZBODBDMjc1N0M1OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJsmR4AUL5zHDC95W6tgIYdv8R9Y+C7mykb5Sfxb9YyEUAPjpi ZmqMf4ETZY4mOzsE3RRlhUZM7/NcfBLD3kqncfAg+ZF/Jb7GyvcmiphxLY6a0oGW WjhUtxKHBkFOwOZZCA9lssSBUmRctUzOy/jZqqg26+2QsM8r5lHvi6MW6aSCxcHa WaFlTV9QMiNVGWo1p3AQ5vmzi7UWzE49z9H/wlq+XlyXxl301EEIiwvgb8Z2IZTE sgpLPtfsDRAmeLyFtYJgL4rxM7ZlOC1gbaFEYc5dMJk0w3R34q1TujASl5CFTntZ GRnK+biKaNR5rBiQK9KAglV7AYeBLoZxMvuHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcaqa5AfwdAjMlS23fvaoDCdXxZMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2NhcWE1QWZ3ZEFqTWxTMjNmdmFvRENkWHhaTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ7nNAwDQYJKoZIhvcNAQELBQADggEBAIb7wOgefcGXeX2UlNZTSLGZrvev K0IT9+5WtGn6WytWYC22PCqYXUpptlqNEcDJbPr+U8ejUhe5b79lPs7G8L31ySEV W6reDlgKkXfrA3F89ILVO5ApZR3TXdpm5L+POq6si8YoKYBQoPYdl7M7m1KC99Zt NqSITvHXkGMzyn09I4IeZ9qP7IQRDA46jWRX+CKcfOWF/JqfIxjWdWJlmcFbBkIK +GfDCZNBOWyCjpIYiXDkxB8L4U860QONIHJSQTkJyLoVRN08L8y3TTM3P6k5hsnm brDcqoJTtNqseB/GB7bHHjhXgUSU0THUU/i8XXeY5mql/Q5OLzacB8Epch0= -----END CERTIFICATE-----Generated at Sun Feb 16 22:03:56 2025 by rpki-client