$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/kgzbScGSrjAxnapnYp9x5vASEis.roa File: kgzbScGSrjAxnapnYp9x5vASEis.roa (raw, json) Hash identifier: emKjC5EBTuzIE2meDwJtpsUz/YiH7OJN6uDyNoZKnWo= Subject key identifier: 92:0C:DB:49:C1:92:AE:30:31:9D:AA:67:62:9F:71:E6:F0:12:12:2B Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Certificate serial: 40 Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/kgzbScGSrjAxnapnYp9x5vASEis.roa Signing time: Tue 31 Dec 2024 01:31:56 +0000 ROA not before: Tue 31 Dec 2024 01:31:56 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 9619 IP address blocks: 211.125.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Validity Not Before: Dec 31 01:31:56 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=920CDB49C192AE30319DAA67629F71E6F012122B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e1:73:26:d9:0e:2e:fb:13:91:5b:54:18:33: 7d:ed:5f:72:73:fe:c8:1a:dc:69:af:70:e3:85:29: 44:1e:8c:5f:a1:71:b9:98:a2:52:93:a7:aa:11:59: d8:49:7f:41:29:5b:b7:57:47:f8:cf:52:49:66:b2: b4:19:2b:dc:7d:ef:6c:1c:fd:78:0a:ca:d5:53:98: a0:7c:eb:7e:ad:a9:a1:5c:87:d0:2e:a7:f3:f1:15: f9:fe:41:05:2b:db:05:a2:2c:0f:cd:b2:05:12:d8: 4f:86:57:e2:83:08:0c:ad:6f:9c:9f:3d:05:2b:48: 3e:6b:f1:98:ce:a2:e5:15:31:02:22:f2:c1:b5:a6: 53:8e:4a:18:3c:ec:65:9d:48:59:8a:c5:a0:e1:00: 9f:79:c8:d8:d9:ea:30:89:19:2e:26:2a:8d:ee:17: 1d:9a:af:35:cf:d7:90:f7:f2:c7:c7:81:30:09:9b: 3c:d4:af:af:18:d4:d8:42:36:e2:11:eb:d4:3a:d1: 06:d4:8a:cc:be:4c:5f:6d:d2:50:e0:00:f7:23:b4: 7d:d1:ae:6a:d8:63:f0:47:dd:c0:f1:3c:85:2d:8b: 03:4e:0f:ce:5f:c1:95:34:82:d9:91:84:31:fc:fe: a6:36:75:53:e1:ea:4a:4a:7f:69:4a:56:e8:a9:0c: e2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0C:DB:49:C1:92:AE:30:31:9D:AA:67:62:9F:71:E6:F0:12:12:2B X509v3 Authority Key Identifier: keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/kgzbScGSrjAxnapnYp9x5vASEis.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.125.131.0/24 Signature Algorithm: sha256WithRSAEncryption b9:ae:f4:06:74:52:f2:c2:1f:1b:f0:bd:c1:0e:8d:29:3b:4b: 79:e5:ec:11:59:b7:56:01:c3:2a:34:02:91:8c:60:79:81:8c: 9b:3c:ce:00:67:12:83:21:29:f5:93:c3:76:e5:04:db:56:c5: cb:6b:4f:b1:44:9e:1e:58:2c:23:86:cb:78:3a:b7:4b:8a:58: f7:a2:d3:7e:15:29:c6:fd:5f:24:61:1d:f7:f5:48:a5:c5:26: af:c5:2a:36:c9:74:b3:72:74:97:fb:e4:fe:85:e4:1a:75:d8: 81:74:fc:81:2b:87:72:57:77:ba:a8:d9:f9:8d:04:2b:47:fb: 6f:22:9f:4e:c7:76:5c:92:a3:0d:19:28:c2:8d:e4:c3:bc:41: 87:17:30:56:1a:71:44:24:bb:75:9d:d3:e7:ad:8e:e9:75:23: 2f:16:84:dd:1f:b0:43:ce:ed:6d:0b:a7:ef:45:d9:99:3e:fb: 1e:16:58:36:0d:a7:f9:33:e1:d4:a9:5e:19:87:d6:eb:bc:eb: af:1d:23:01:c8:fa:08:3f:5d:2d:9e:a4:21:5e:8a:ac:ad:3d: 07:be:ff:f7:06:f1:4b:7b:c3:93:65:72:b2:ac:15:bd:fd:fd: 7a:1c:3a:7d:48:44:c8:34:7e:ba:75:81:d4:db:a0:f5:a3:22: a5:d0:fa:49 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI0MTIzMTAx MzE1NloXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoOTIwQ0RCNDlDMTkyQUUz MDMxOURBQTY3NjI5RjcxRTZGMDEyMTIyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANbhcybZDi77E5FbVBgzfe1fcnP+yBrcaa9w44UpRB6MX6FxuZii UpOnqhFZ2El/QSlbt1dH+M9SSWaytBkr3H3vbBz9eArK1VOYoHzrfq2poVyH0C6n 8/EV+f5BBSvbBaIsD82yBRLYT4ZX4oMIDK1vnJ89BStIPmvxmM6i5RUxAiLywbWm U45KGDzsZZ1IWYrFoOEAn3nI2NnqMIkZLiYqje4XHZqvNc/XkPfyx8eBMAmbPNSv rxjU2EI24hHr1DrRBtSKzL5MX23SUOAA9yO0fdGuathj8EfdwPE8hS2LA04Pzl/B lTSC2ZGEMfz+pjZ1U+HqSkp/aUpW6KkM4kcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSSDNtJwZKuMDGdqmdin3Hm8BISKzAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zOTUva2d6YlNjR1NyakF4bmFwbllwOXg1dkFTRWlzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANN9gzANBgkqhkiG9w0BAQsFAAOCAQEAua70BnRS8sIfG/C9wQ6NKTtLeeXs EVm3VgHDKjQCkYxgeYGMmzzOAGcSgyEp9ZPDduUE21bFy2tPsUSeHlgsI4bLeDq3 S4pY96LTfhUpxv1fJGEd9/VIpcUmr8UqNsl0s3J0l/vk/oXkGnXYgXT8gSuHcld3 uqjZ+Y0EK0f7byKfTsd2XJKjDRkowo3kw7xBhxcwVhpxRCS7dZ3T562O6XUjLxaE 3R+wQ87tbQun70XZmT77HhZYNg2n+TPh1KleGYfW67zrrx0jAcj6CD9dLZ6kIV6K rK09B77/9wbxS3vDk2VysqwVvf39ehw6fUhEyDR+unWB1Nug9aMipdD6SQ== -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:22 2025 by rpki-client