$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/-sMLrrZFQCqwm07rRb7eqM_CLLU.roa File: -sMLrrZFQCqwm07rRb7eqM_CLLU.roa (raw, json) Hash identifier: Ky99iFpAj10LyUJfVM2KKJOSRy5AFgozM4p1ywc/AdM= Subject key identifier: FA:C3:0B:AE:B6:45:40:2A:B0:9B:4E:EB:45:BE:DE:A8:CF:C2:2C:B5 Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Certificate serial: 44 Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/-sMLrrZFQCqwm07rRb7eqM_CLLU.roa Signing time: Tue 31 Dec 2024 01:31:58 +0000 ROA not before: Tue 31 Dec 2024 01:31:58 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 9619 IP address blocks: 211.125.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Validity Not Before: Dec 31 01:31:58 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=FAC30BAEB645402AB09B4EEB45BEDEA8CFC22CB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4d:31:3b:9a:4e:f4:12:59:e2:a7:e1:99:05: 9f:ac:32:e3:b3:ae:59:bc:fb:75:5a:67:92:63:49: c5:5b:01:66:e1:6b:53:71:4a:cb:eb:91:9d:2f:05: 34:d2:7b:31:e9:6f:6f:fe:e4:bd:1b:ac:c6:49:5d: 7e:c0:dc:77:7c:90:a5:15:19:4f:7c:2e:93:09:29: da:2b:07:d4:ac:0e:39:9b:77:17:2e:05:f2:a8:c7: 5a:69:2e:10:ad:21:0c:d0:85:af:4b:54:dd:b6:e9: e8:b6:60:9d:c8:63:ba:9a:cd:6f:cc:fd:0e:89:08: d8:0b:03:34:da:f1:bb:eb:f0:f4:e3:65:05:e9:35: 27:30:61:0c:e0:80:ff:96:84:05:f4:1f:dc:8e:55: ac:80:e2:3c:38:3d:27:65:de:08:93:de:00:29:ce: 61:2f:72:f1:8f:b8:35:0e:39:ac:80:1b:20:47:f9: 12:9a:6f:22:5a:81:25:91:a2:33:a5:e0:8c:cb:42: d3:f3:59:db:74:75:7c:ae:8a:03:32:c7:b8:e2:90: 4b:0e:6f:ce:f3:cd:a4:72:e3:42:f4:3f:44:9e:7f: 03:be:b6:56:7b:cf:51:fb:f7:3f:c8:67:34:d2:ec: af:e0:b5:bd:08:4a:f3:bd:1a:71:e4:e6:8b:df:ae: 9e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C3:0B:AE:B6:45:40:2A:B0:9B:4E:EB:45:BE:DE:A8:CF:C2:2C:B5 X509v3 Authority Key Identifier: keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/-sMLrrZFQCqwm07rRb7eqM_CLLU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.125.136.0/24 Signature Algorithm: sha256WithRSAEncryption 29:d9:36:fa:38:b0:c0:ce:58:d0:32:53:37:a5:ef:ae:b2:46: 93:45:24:da:f4:1c:47:23:21:19:7b:bc:d4:87:ce:e6:2f:1f: 75:2a:a1:46:d9:a4:6a:a3:7c:6b:e6:a9:ca:fe:41:87:4f:56: 4d:a5:0a:d0:23:d1:78:9d:6d:0a:9e:de:43:90:e5:70:c6:89: 17:cc:1c:e2:8e:17:ec:51:f3:5e:56:46:0d:96:2a:e1:b0:1f: 01:4e:2e:cb:ea:07:5e:2c:72:95:f5:c5:bd:f9:29:1c:12:67: f8:fc:c1:32:f4:55:47:4a:b2:74:0f:93:b2:42:f2:2e:38:bb: ff:df:41:63:16:4a:e8:aa:2c:1c:24:71:dd:ca:0f:de:2c:ba: 45:25:b8:dd:d1:6d:9c:c0:a0:0d:77:85:e7:b3:41:71:c4:e4: 6a:c8:6a:8a:56:9c:aa:dc:a0:d5:8f:a5:49:7f:3c:5a:d0:92: f4:db:70:4b:eb:91:5c:9e:9a:10:1f:e4:26:3a:80:20:93:da: 05:86:6f:7a:d1:5d:fc:95:fd:9b:fa:41:d4:d8:9e:cf:82:2a: b3:13:bc:3c:8b:17:85:63:78:93:7b:d2:d9:b3:e8:15:a4:fd: db:55:71:60:af:37:fa:4c:b5:f9:dd:1d:1c:0d:3d:d8:c7:f4: 80:bf:68:30 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI0MTIzMTAx MzE1OFoXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoRkFDMzBCQUVCNjQ1NDAy QUIwOUI0RUVCNDVCRURFQThDRkMyMkNCNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANBNMTuaTvQSWeKn4ZkFn6wy47OuWbz7dVpnkmNJxVsBZuFrU3FK y+uRnS8FNNJ7Melvb/7kvRusxkldfsDcd3yQpRUZT3wukwkp2isH1KwOOZt3Fy4F 8qjHWmkuEK0hDNCFr0tU3bbp6LZgnchjuprNb8z9DokI2AsDNNrxu+vw9ONlBek1 JzBhDOCA/5aEBfQf3I5VrIDiPDg9J2XeCJPeACnOYS9y8Y+4NQ45rIAbIEf5Eppv IlqBJZGiM6XgjMtC0/NZ23R1fK6KAzLHuOKQSw5vzvPNpHLjQvQ/RJ5/A762VnvP Ufv3P8hnNNLsr+C1vQhK870aceTmi9+unisCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBT6wwuutkVAKrCbTutFvt6oz8IstTAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zOTUvLXNNTHJyWkZRQ3F3bTA3clJiN2VxTV9DTExVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANN9iDANBgkqhkiG9w0BAQsFAAOCAQEAKdk2+jiwwM5Y0DJTN6XvrrJGk0Uk 2vQcRyMhGXu81IfO5i8fdSqhRtmkaqN8a+apyv5Bh09WTaUK0CPReJ1tCp7eQ5Dl cMaJF8wc4o4X7FHzXlZGDZYq4bAfAU4uy+oHXixylfXFvfkpHBJn+PzBMvRVR0qy dA+TskLyLji7/99BYxZK6KosHCRx3coP3iy6RSW43dFtnMCgDXeF57NBccTkashq ilacqtyg1Y+lSX88WtCS9NtwS+uRXJ6aEB/kJjqAIJPaBYZvetFd/JX9m/pB1Nie z4IqsxO8PIsXhWN4k3vS2bPoFaT921VxYK83+ky1+d0dHA092Mf0gL9oMA== -----END CERTIFICATE-----Generated at Wed Feb 19 22:44:56 2025 by rpki-client