$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/nadkSqVXkDDGGdv1wKxctGtBCJw.roa File: nadkSqVXkDDGGdv1wKxctGtBCJw.roa (raw, json) Hash identifier: pCY1qkHH5nPMFMbDcRAgPjE2+20W5cQH1IjuWWr93S4= Subject key identifier: 9D:A7:64:4A:A5:57:90:30:C6:19:DB:F5:C0:AC:5C:B4:6B:41:08:9C Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Certificate serial: 42 Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/nadkSqVXkDDGGdv1wKxctGtBCJw.roa Signing time: Tue 31 Dec 2024 01:31:57 +0000 ROA not before: Tue 31 Dec 2024 01:31:57 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 9619 IP address blocks: 211.125.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Validity Not Before: Dec 31 01:31:57 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=9DA7644AA5579030C619DBF5C0AC5CB46B41089C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:07:34:19:49:db:36:ab:20:3f:4e:ae:49: 4a:e9:10:29:c3:7f:c3:b2:00:6a:43:8a:0b:70:ef: 7d:80:bb:c8:14:5b:c5:fe:52:80:11:00:95:ab:00: 84:8e:4d:ba:a7:b1:d6:4b:cb:48:02:82:84:87:24: 05:d2:30:e7:5d:3d:8e:f2:15:1a:d8:9e:84:f7:62: c8:8f:94:cf:1b:7c:91:5f:bf:a5:51:0b:f3:37:8d: 89:ac:db:a4:54:c0:ad:13:fd:96:de:d6:59:03:4a: 30:88:28:ed:d1:40:59:22:a6:eb:94:49:4c:75:e6: 62:06:f5:24:44:9a:cb:39:d6:ad:a5:93:14:94:60: b3:ad:e0:7a:c7:44:89:05:e2:ba:14:10:77:19:d9: de:90:08:6f:13:c2:17:a3:e4:61:9c:01:10:0a:b3: fc:03:29:ef:20:44:a5:06:43:a7:74:dc:70:e4:31: 39:02:49:cd:18:92:40:34:b7:5e:93:a7:33:a9:dc: 7e:55:18:f7:e5:57:36:23:ba:bb:08:8c:2a:c6:0c: 2d:7e:75:ed:6c:f1:7c:c4:5a:33:4f:5d:97:52:0f: 6e:f8:34:91:61:50:26:7e:44:18:6c:72:42:bc:eb: 16:b4:25:df:39:5d:81:02:98:06:51:89:e8:e1:24: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A7:64:4A:A5:57:90:30:C6:19:DB:F5:C0:AC:5C:B4:6B:41:08:9C X509v3 Authority Key Identifier: keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/nadkSqVXkDDGGdv1wKxctGtBCJw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.125.133.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:7e:86:b9:1d:07:f7:44:5e:8e:b6:b5:c0:04:9f:f5:57:e9: 45:db:e3:36:77:51:b5:1c:09:1c:3a:5d:83:13:7c:0c:30:c5: 04:87:ee:c6:f9:c7:39:78:d0:6b:9b:67:1a:5c:d4:65:2f:4b: 36:ab:ca:08:20:35:a7:ee:d9:15:76:df:2a:db:ad:13:27:dd: d5:b2:98:b7:b7:ba:ad:19:ce:24:15:6f:3d:07:2d:db:de:fb: 09:b5:db:c1:0f:84:f7:73:cd:bc:7d:14:9e:26:8f:6b:ea:d4: 57:0d:00:52:7c:07:08:1d:35:41:8f:3a:f2:e9:a7:c5:d1:58: b1:a7:4c:1e:69:7a:20:8f:cb:e9:5a:65:35:bc:0c:97:2f:0b: a5:76:f2:2a:16:80:72:1c:5c:d7:a8:0b:26:7d:19:e6:13:e4: 11:d6:2b:ab:37:66:0e:0b:33:62:b8:d1:f2:f7:72:ee:93:0f: 74:e5:48:1b:41:c9:2c:ce:31:b9:99:3b:0c:43:b8:8b:b1:b6: 6c:fb:e0:54:7f:48:44:f9:a6:a0:af:4f:40:3f:55:16:ac:de: 5c:36:74:a5:f7:cc:20:47:29:6a:62:91:f1:37:29:55:fb:ce: fb:1e:15:42:39:70:47:e2:ca:d9:20:f9:b8:1f:76:18:23:04: 1b:de:e6:2a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI0MTIzMTAx MzE1N1oXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoOURBNzY0NEFBNTU3OTAz MEM2MTlEQkY1QzBBQzVDQjQ2QjQxMDg5QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL7/BzQZSds2qyA/Tq5JSukQKcN/w7IAakOKC3DvfYC7yBRbxf5S gBEAlasAhI5Nuqex1kvLSAKChIckBdIw5109jvIVGtiehPdiyI+Uzxt8kV+/pVEL 8zeNiazbpFTArRP9lt7WWQNKMIgo7dFAWSKm65RJTHXmYgb1JESayznWraWTFJRg s63gesdEiQXiuhQQdxnZ3pAIbxPCF6PkYZwBEAqz/AMp7yBEpQZDp3TccOQxOQJJ zRiSQDS3XpOnM6ncflUY9+VXNiO6uwiMKsYMLX517WzxfMRaM09dl1IPbvg0kWFQ Jn5EGGxyQrzrFrQl3zldgQKYBlGJ6OEkc5UCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSdp2RKpVeQMMYZ2/XArFy0a0EInDAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zOTUvbmFka1NxVlhrRERHR2R2MXdLeGN0R3RCQ0p3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANN9hTANBgkqhkiG9w0BAQsFAAOCAQEAKn6GuR0H90Rejra1wASf9VfpRdvj NndRtRwJHDpdgxN8DDDFBIfuxvnHOXjQa5tnGlzUZS9LNqvKCCA1p+7ZFXbfKtut Eyfd1bKYt7e6rRnOJBVvPQct2977CbXbwQ+E93PNvH0UniaPa+rUVw0AUnwHCB01 QY868umnxdFYsadMHml6II/L6VplNbwMly8LpXbyKhaAchxc16gLJn0Z5hPkEdYr qzdmDgszYrjR8vdy7pMPdOVIG0HJLM4xuZk7DEO4i7G2bPvgVH9IRPmmoK9PQD9V FqzeXDZ0pffMIEcpamKR8TcpVfvO+x4VQjlwR+LK2SD5uB92GCMEG97mKg== -----END CERTIFICATE-----Generated at Wed Feb 19 22:35:42 2025 by rpki-client