$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/hfwVVHK6pqe43mm99VQuCSJmkTM.roa File: hfwVVHK6pqe43mm99VQuCSJmkTM.roa (raw, json) Hash identifier: /gCLzQIRFYSYtCWOzYxIo0gIJtMMVBkqgtRGynNK5h4= Subject key identifier: 85:FC:15:54:72:BA:A6:A7:B8:DE:69:BD:F5:54:2E:09:22:66:91:33 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 031E Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hfwVVHK6pqe43mm99VQuCSJmkTM.roa Signing time: Thu 24 Oct 2024 01:24:04 +0000 ROA not before: Thu 24 Oct 2024 01:24:04 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 183.181.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 24 01:24:04 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=85FC155472BAA6A7B8DE69BDF5542E0922669133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:af:6d:6c:61:36:94:01:32:9d:a2:3e:8f:7c: 51:5b:f2:59:10:54:df:53:2d:d9:ba:9c:bd:b0:b5: 93:62:e6:5e:b9:d5:b7:0d:23:ee:ca:d1:15:ca:2b: 80:99:21:29:72:4c:44:9a:e2:2d:32:f2:52:17:69: 76:f7:b0:77:98:95:47:eb:1c:35:b2:2f:84:69:0d: 5f:14:02:ad:a6:fe:14:c6:0a:f6:85:81:c5:a4:f6: 87:31:b0:1c:bf:d4:e3:61:65:db:b6:fd:f4:6f:d5: b7:75:1b:c9:0c:9d:85:24:5f:03:77:f7:b4:9f:a1: ef:a9:c9:35:46:37:fe:8c:7a:6f:b4:86:74:24:31: bd:a9:4b:f2:6a:ab:0b:c2:59:7f:d5:34:fa:4a:8f: 1a:0c:b1:2b:0e:36:fd:67:41:36:c5:ac:c3:0a:55: b1:a6:2c:b8:06:d5:05:29:48:55:fe:52:d5:6b:bc: 4f:0b:50:a5:8c:85:21:83:f3:8f:1a:3f:bc:7e:7d: 59:59:f1:3f:7d:9c:a5:9c:a1:cb:4a:99:46:9b:62: 26:98:eb:ba:8b:47:5d:a2:c5:1a:67:c1:d5:4a:f7: 7d:54:57:f0:ea:94:d6:09:b0:af:d9:c4:67:46:e3: a0:c1:ba:46:7a:dc:c2:d9:07:d2:9e:f6:68:56:38: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FC:15:54:72:BA:A6:A7:B8:DE:69:BD:F5:54:2E:09:22:66:91:33 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hfwVVHK6pqe43mm99VQuCSJmkTM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.181.142.0/23 Signature Algorithm: sha256WithRSAEncryption 05:f0:9d:f2:af:7b:e7:09:c4:80:99:8e:76:fa:29:4a:07:46: f2:9e:e5:28:88:a3:d1:68:c9:ca:71:43:2b:cf:24:f3:dd:d1: 2e:c3:bb:61:4a:11:f0:20:fa:1b:00:46:95:cf:3d:59:51:76: ea:fa:df:49:9b:c7:71:7f:c4:1d:40:3a:3c:1c:e8:57:f7:29: aa:b1:15:50:00:65:59:e0:ac:31:d8:31:ea:cb:e2:0e:5b:e2: aa:73:ee:dd:ea:21:9e:01:51:f8:87:fd:29:f3:c4:63:a4:17: 41:27:0d:e9:e4:77:f4:8e:78:a3:aa:26:63:c3:6e:08:a1:01: f6:73:26:8a:38:b7:6a:58:7d:2a:69:fd:3c:c7:f5:fb:a2:11: ee:4d:2d:b0:5a:bd:a9:aa:95:82:c6:6f:a5:76:ac:8f:52:dc: 0b:38:5e:28:b8:71:b0:1c:04:f8:65:3f:63:4c:43:cb:bb:3f: cf:5a:3c:84:be:09:1d:d1:da:ff:c3:4f:8f:f8:83:b5:a8:bc: cd:bd:ef:e1:79:65:ae:b2:cf:24:83:1c:b4:6f:fe:5f:38:dc: 9c:9e:d6:6f:15:fe:46:d5:c5:79:40:2e:c9:0d:2c:87:36:c9: c2:2f:36:88:ad:09:b5:73:dc:80:42:33:b1:11:1e:cb:f0:3e: 37:2d:aa:f6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjQw MTI0MDRaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg1RkMxNTU0NzJCQUE2 QTdCOERFNjlCREY1NTQyRTA5MjI2NjkxMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbr21sYTaUATKdoj6PfFFb8lkQVN9TLdm6nL2wtZNi5l651bcN I+7K0RXKK4CZISlyTESa4i0y8lIXaXb3sHeYlUfrHDWyL4RpDV8UAq2m/hTGCvaF gcWk9ocxsBy/1ONhZdu2/fRv1bd1G8kMnYUkXwN397Sfoe+pyTVGN/6Mem+0hnQk Mb2pS/JqqwvCWX/VNPpKjxoMsSsONv1nQTbFrMMKVbGmLLgG1QUpSFX+UtVrvE8L UKWMhSGD848aP7x+fVlZ8T99nKWcoctKmUabYiaY67qLR12ixRpnwdVK931UV/Dq lNYJsK/ZxGdG46DBukZ63MLZB9Ke9mhWOKhfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhfwVVHK6pqe43mm99VQuCSJmkTMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2hmd1ZWSEs2cHFlNDNtbTk5VlF1Q1NKbWtUTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG3tY4wDQYJKoZIhvcNAQELBQADggEBAAXwnfKve+cJxICZjnb6KUoHRvKe 5SiIo9FoycpxQyvPJPPd0S7Du2FKEfAg+hsARpXPPVlRdur630mbx3F/xB1AOjwc 6Ff3KaqxFVAAZVngrDHYMerL4g5b4qpz7t3qIZ4BUfiH/SnzxGOkF0EnDenkd/SO eKOqJmPDbgihAfZzJoo4t2pYfSpp/TzH9fuiEe5NLbBavamqlYLGb6V2rI9S3As4 Xii4cbAcBPhlP2NMQ8u7P89aPIS+CR3R2v/DT4/4g7WovM297+F5Za6yzySDHLRv /l843Jye1m8V/kbVxXlALskNLIc2ycIvNoitCbVz3IBCM7ERHsvwPjctqvY= -----END CERTIFICATE-----Generated at Sun Feb 16 22:18:22 2025 by rpki-client