$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/ChYQfJoAvNeZJqTjyEe47ymLtBc.roa File: ChYQfJoAvNeZJqTjyEe47ymLtBc.roa (raw, json) Hash identifier: Ifx8gT+ZKegTSrZp1iyttF9d78Jni/4HmAz5CaSMo9c= Subject key identifier: 0A:16:10:7C:9A:00:BC:D7:99:26:A4:E3:C8:47:B8:EF:29:8B:B4:17 Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Certificate serial: 3B Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/ChYQfJoAvNeZJqTjyEe47ymLtBc.roa Signing time: Tue 31 Dec 2024 01:31:53 +0000 ROA not before: Tue 31 Dec 2024 01:31:53 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 9619 IP address blocks: 211.125.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Validity Not Before: Dec 31 01:31:53 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=0A16107C9A00BCD79926A4E3C847B8EF298BB417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5d:0a:ed:aa:e5:75:04:9b:ad:83:58:d7:1d: 93:fd:b8:3e:48:28:7c:03:f6:09:2a:70:32:98:0a: 57:0f:26:b5:51:f0:f9:51:8b:04:51:5f:7f:14:1e: 4f:89:d0:19:55:74:f9:27:1f:ca:e6:40:bc:97:04: 5d:2f:76:dc:ff:d1:64:a2:3d:7e:04:83:86:cb:37: b8:11:60:4f:cb:d5:64:3c:3a:08:de:74:3d:84:eb: ec:16:b4:2f:d0:86:f0:e5:10:01:98:45:2c:21:95: 16:20:7e:28:08:8f:be:a3:62:53:fa:ae:2a:8c:15: e9:1e:a7:23:6c:2f:cf:36:22:a0:2d:d6:2f:61:b8: d2:ce:ad:1a:d0:d9:9a:7d:6d:fa:36:56:0a:2e:36: f4:5f:0a:30:1f:56:4f:0c:5e:d1:23:a9:15:b9:c5: cf:50:c2:ff:c7:af:46:15:45:37:3b:6e:7d:18:ef: c8:92:45:dd:a9:ec:98:a7:99:36:52:49:22:a4:a9: e0:c8:e6:af:45:c3:34:b1:fa:0f:e6:7d:06:a4:60: 13:a6:5b:ff:99:3a:a4:99:0d:5e:c5:a0:47:b5:1f: e8:b6:90:01:91:93:0b:84:93:1e:a7:36:d0:5d:4b: 8c:b8:a9:50:bb:48:34:f5:b2:a9:df:3e:24:2a:5d: 22:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:16:10:7C:9A:00:BC:D7:99:26:A4:E3:C8:47:B8:EF:29:8B:B4:17 X509v3 Authority Key Identifier: keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/ChYQfJoAvNeZJqTjyEe47ymLtBc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.125.141.0/24 Signature Algorithm: sha256WithRSAEncryption c8:ef:5c:af:d2:91:f3:9f:93:9b:88:5b:3a:71:8e:a2:d2:13: 79:80:d5:a3:0a:45:2c:2f:f0:a1:b3:fb:f1:f3:f8:47:99:25: 35:ea:61:58:c6:58:c9:49:a9:32:51:d5:e0:3e:56:58:c8:c3: 83:83:9b:e8:12:f8:69:a7:83:13:f0:aa:82:0b:3e:ab:a3:3a: 34:83:f8:3b:8f:ca:d6:2f:d0:e3:6a:8b:21:a9:2a:3d:a9:e4: ed:11:c8:fa:c1:2b:06:0a:8f:ca:fd:92:d9:d3:2d:bf:04:4f: f5:01:f3:db:6c:a5:2c:ed:95:54:7e:0a:6b:6e:03:c8:11:74: 37:51:1c:4a:56:ee:aa:f2:3a:9c:32:6c:2f:c0:2a:ff:2c:59: f9:60:0d:01:6c:e5:17:6b:be:c2:94:9a:c4:64:a5:20:98:52: 73:13:f0:14:de:9e:2e:4e:ad:c8:7a:85:2f:02:66:79:03:99: ca:8c:96:1f:60:6a:e0:e9:35:ec:2c:97:e1:48:3f:e6:d8:73: 5a:8c:50:e8:92:d3:9d:1c:cd:94:b6:d5:37:e7:c9:8c:d2:0d: 0e:cb:8d:44:6e:23:5a:29:9c:ae:b0:44:35:9f:48:39:29:e9: 89:6f:24:15:81:f6:e2:d9:66:d0:38:85:47:74:a9:47:6f:2f: f1:8b:bb:e9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI0MTIzMTAx MzE1M1oXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoMEExNjEwN0M5QTAwQkNE Nzk5MjZBNEUzQzg0N0I4RUYyOThCQjQxNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANpdCu2q5XUEm62DWNcdk/24PkgofAP2CSpwMpgKVw8mtVHw+VGL BFFffxQeT4nQGVV0+ScfyuZAvJcEXS923P/RZKI9fgSDhss3uBFgT8vVZDw6CN50 PYTr7Ba0L9CG8OUQAZhFLCGVFiB+KAiPvqNiU/quKowV6R6nI2wvzzYioC3WL2G4 0s6tGtDZmn1t+jZWCi429F8KMB9WTwxe0SOpFbnFz1DC/8evRhVFNztufRjvyJJF 3ansmKeZNlJJIqSp4Mjmr0XDNLH6D+Z9BqRgE6Zb/5k6pJkNXsWgR7Uf6LaQAZGT C4STHqc20F1LjLipULtINPWyqd8+JCpdIvkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQKFhB8mgC815kmpOPIR7jvKYu0FzAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zOTUvQ2hZUWZKb0F2TmVaSnFUanlFZTQ3eW1MdEJjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANN9jTANBgkqhkiG9w0BAQsFAAOCAQEAyO9cr9KR85+Tm4hbOnGOotITeYDV owpFLC/wobP78fP4R5klNephWMZYyUmpMlHV4D5WWMjDg4Ob6BL4aaeDE/Cqggs+ q6M6NIP4O4/K1i/Q42qLIakqPank7RHI+sErBgqPyv2S2dMtvwRP9QHz22ylLO2V VH4Ka24DyBF0N1EcSlbuqvI6nDJsL8Aq/yxZ+WANAWzlF2u+wpSaxGSlIJhScxPw FN6eLk6tyHqFLwJmeQOZyoyWH2Bq4Ok17CyX4Ug/5thzWoxQ6JLTnRzNlLbVN+fJ jNINDsuNRG4jWimcrrBENZ9IOSnpiW8kFYH24tlm0DiFR3SpR28v8Yu76Q== -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:09 2025 by rpki-client