$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/94h600expFJo30AqIKkGYY8_b9c.roa File: 94h600expFJo30AqIKkGYY8_b9c.roa (raw, json) Hash identifier: Kcy5muR9LduBKE7FlVxYAIrlKfLtnmun7laxON8qZxU= Subject key identifier: F7:88:7A:D3:47:B1:A4:52:68:DF:40:2A:20:A9:06:61:8F:3F:6F:D7 Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Certificate serial: 41 Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/94h600expFJo30AqIKkGYY8_b9c.roa Signing time: Tue 31 Dec 2024 01:31:56 +0000 ROA not before: Tue 31 Dec 2024 01:31:56 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 9619 IP address blocks: 211.125.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Validity Not Before: Dec 31 01:31:56 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=F7887AD347B1A45268DF402A20A906618F3F6FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:c8:e4:76:a0:ca:3d:41:bd:a4:96:f4:36: 67:28:cf:c6:f9:20:3e:67:bd:69:e7:63:bc:a2:ed: 1c:cf:16:2d:ad:21:21:c3:5f:87:f2:ac:aa:d1:83: b0:31:fd:b4:05:b5:26:96:d1:a1:e9:bb:3f:0f:b9: b0:fe:31:23:0e:a6:c1:e3:bb:be:33:0f:a7:85:f2: a3:e3:84:28:09:d1:5d:a2:72:e1:8e:f1:bd:10:fc: 0f:fe:b7:60:d6:e5:e1:7a:d9:30:e2:5d:50:23:d4: 5e:45:62:48:f0:ff:59:93:53:e6:b5:16:97:48:ef: ac:5d:81:37:bb:e0:03:6e:86:9f:28:dc:cc:7b:93: 8e:36:61:04:7e:69:eb:f7:87:6a:ca:42:6d:6e:df: 87:3a:86:11:18:49:a0:29:cc:82:79:d2:04:da:7a: a5:f2:65:d9:18:23:1c:2a:f1:06:cf:3f:29:e1:1b: f4:25:f1:8c:0f:42:cb:2f:12:b7:cf:9d:c1:3c:ef: 00:ee:c3:fa:cf:f7:a0:43:6e:48:f0:cf:50:62:76: 99:fb:9e:f6:e2:f4:98:b9:33:23:0f:f4:22:01:37: 50:2c:bd:3a:0a:d7:ce:90:08:fa:a5:0e:9c:87:ca: ad:52:50:32:04:5b:b4:58:32:dd:d4:0d:d1:32:1b: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:88:7A:D3:47:B1:A4:52:68:DF:40:2A:20:A9:06:61:8F:3F:6F:D7 X509v3 Authority Key Identifier: keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/94h600expFJo30AqIKkGYY8_b9c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.125.132.0/24 Signature Algorithm: sha256WithRSAEncryption aa:ad:8b:fe:c4:59:a7:43:ef:44:75:59:ef:84:48:3d:43:91: 21:79:5f:f2:6e:40:9d:e3:ee:e1:ad:be:70:42:bc:b6:4c:68: 33:6f:a7:57:f6:d3:ab:20:53:03:fe:01:95:90:07:d1:8b:78: a6:d8:e6:7f:43:76:03:79:0d:67:5a:e1:cc:a8:ef:66:97:6f: 22:8b:2b:05:52:66:fe:c4:ff:32:9d:ee:8e:3e:7b:ff:e6:e1: 7a:9c:59:7c:3e:06:e8:0a:d1:7f:2d:c9:12:db:ee:49:27:7e: 0c:9c:84:39:19:10:4c:ba:a6:ca:c1:32:0c:7a:8e:3f:16:09: 41:8f:da:a8:85:46:25:3e:0e:f8:69:e4:e5:7a:12:c5:8b:c5: b8:22:15:93:98:ef:ef:3f:a7:3a:15:75:28:40:86:b1:60:de: 0b:46:d6:61:16:f9:00:e2:09:95:a9:7d:23:40:0a:a3:8f:db: d7:65:fc:f0:19:02:70:86:aa:02:2a:28:8c:12:55:90:cb:9b: 6d:74:30:39:6e:cb:e7:f0:2d:81:c5:3e:fe:98:ac:66:63:c5: 44:92:00:ab:4d:a3:0a:87:25:56:8b:7b:14:8c:0c:ae:44:9e: aa:e0:a8:c2:62:92:55:33:77:60:ae:21:16:09:85:8c:16:06: 49:29:11:dc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI0MTIzMTAx MzE1NloXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoRjc4ODdBRDM0N0IxQTQ1 MjY4REY0MDJBMjBBOTA2NjE4RjNGNkZENzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ4cyOR2oMo9Qb2klvQ2ZyjPxvkgPme9aedjvKLtHM8WLa0hIcNf h/KsqtGDsDH9tAW1JpbRoem7Pw+5sP4xIw6mweO7vjMPp4Xyo+OEKAnRXaJy4Y7x vRD8D/63YNbl4XrZMOJdUCPUXkViSPD/WZNT5rUWl0jvrF2BN7vgA26GnyjczHuT jjZhBH5p6/eHaspCbW7fhzqGERhJoCnMgnnSBNp6pfJl2RgjHCrxBs8/KeEb9CXx jA9Cyy8St8+dwTzvAO7D+s/3oENuSPDPUGJ2mfue9uL0mLkzIw/0IgE3UCy9OgrX zpAI+qUOnIfKrVJQMgRbtFgy3dQN0TIbc4cCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBT3iHrTR7GkUmjfQCogqQZhjz9v1zAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zOTUvOTRoNjAwZXhwRkpvMzBBcUlLa0dZWThfYjljLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANN9hDANBgkqhkiG9w0BAQsFAAOCAQEAqq2L/sRZp0PvRHVZ74RIPUORIXlf 8m5AnePu4a2+cEK8tkxoM2+nV/bTqyBTA/4BlZAH0Yt4ptjmf0N2A3kNZ1rhzKjv ZpdvIosrBVJm/sT/Mp3ujj57/+bhepxZfD4G6ArRfy3JEtvuSSd+DJyEORkQTLqm ysEyDHqOPxYJQY/aqIVGJT4O+Gnk5XoSxYvFuCIVk5jv7z+nOhV1KECGsWDeC0bW YRb5AOIJlal9I0AKo4/b12X88BkCcIaqAioojBJVkMubbXQwOW7L5/AtgcU+/pis ZmPFRJIAq02jCoclVot7FIwMrkSequCowmKSVTN3YK4hFgmFjBYGSSkR3A== -----END CERTIFICATE-----Generated at Wed Feb 19 22:33:10 2025 by rpki-client