$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/yVsmnFPXE2AeHQEx49QavXD5ko4.roa File: yVsmnFPXE2AeHQEx49QavXD5ko4.roa (raw, json) Hash identifier: LVe3zajGIc0z7NhaiHXhe8uVq0D0QbEyEkEX+hjUhz0= Subject key identifier: C9:5B:26:9C:53:D7:13:60:1E:1D:01:31:E3:D4:1A:BD:70:F9:92:8E Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Certificate serial: 46 Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/yVsmnFPXE2AeHQEx49QavXD5ko4.roa Signing time: Tue 31 Dec 2024 01:31:59 +0000 ROA not before: Tue 31 Dec 2024 01:31:59 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 9619 IP address blocks: 211.125.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Validity Not Before: Dec 31 01:31:59 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=C95B269C53D713601E1D0131E3D41ABD70F9928E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:04:5d:c7:6b:df:c5:b7:8a:7d:6d:f3:0e: c9:b8:a2:2a:70:84:68:93:7d:63:97:4b:7b:c6:a0: 06:79:09:1a:d3:49:e6:cd:a4:36:34:2f:5a:6e:de: ca:46:9a:72:f1:b0:98:9f:7c:93:29:41:fb:59:32: e0:7b:7e:f0:3b:13:58:9c:c8:a3:44:58:72:78:9d: 0f:c2:bf:de:f5:08:83:d8:41:2b:5b:44:dd:9b:8d: eb:d6:08:e4:89:b2:f7:ee:c8:69:db:d1:4b:b9:78: 52:6f:18:a9:71:74:f4:6c:38:52:f4:e2:be:cc:90: 93:9f:5c:69:57:9c:33:62:73:c2:86:67:c1:b5:fe: dd:92:22:0e:6e:fa:b7:fb:af:c2:7a:f3:72:62:c4: c6:9a:f2:73:0e:4b:38:22:4d:1c:1a:3a:9b:e9:e2: 7c:cb:e3:71:8d:e2:ca:3e:61:22:38:b4:7e:32:af: 98:4b:b9:4d:93:0c:3d:09:28:43:3c:a8:d7:77:f0: 6a:d9:24:27:44:8a:99:bf:7d:01:24:d0:3b:cb:6e: d7:c5:eb:ac:2f:76:ae:dd:65:a6:73:c1:01:73:cd: 19:75:bb:a5:c6:01:0a:2e:e7:ce:5c:6e:19:72:19: e6:ee:c8:80:b6:1e:c0:4b:e3:4c:b1:6f:8d:0d:70: 32:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5B:26:9C:53:D7:13:60:1E:1D:01:31:E3:D4:1A:BD:70:F9:92:8E X509v3 Authority Key Identifier: keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/yVsmnFPXE2AeHQEx49QavXD5ko4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.125.138.0/24 Signature Algorithm: sha256WithRSAEncryption 02:8e:91:fb:be:ee:fc:72:d0:0f:19:70:1e:89:ce:b4:cb:82: 3f:b4:b0:37:81:69:21:38:8b:97:95:cd:3a:f0:f4:89:55:90: 09:be:73:e1:80:d4:e8:c3:f4:3e:6e:c1:f2:d7:3b:37:77:28: 4f:35:ea:e3:b2:2a:53:ed:b0:53:43:53:3c:08:b7:81:51:39: 60:1b:75:50:40:8b:ef:28:0d:bf:dd:3b:3f:93:0b:9d:95:8b: 71:85:0e:ba:0e:b3:03:10:8a:39:cd:3a:ce:cb:11:08:08:69: e4:24:3a:2d:e3:bd:ea:4d:9f:0f:f8:9b:ad:24:72:f2:a0:48: 00:44:86:e4:e0:e1:00:20:d6:4e:86:a0:63:47:f7:e0:7c:ee: 71:c8:95:81:2c:c8:55:1a:06:d1:c5:59:e1:ce:53:22:fe:8a: 90:c7:7e:41:03:e9:cd:78:04:a1:37:0a:a3:c4:1a:c5:65:7e: bd:7f:c7:9d:82:ce:8d:c5:3d:6a:fc:94:8e:dd:e3:65:12:8c: 8c:70:2c:ab:03:59:f3:a6:61:4b:c5:79:7c:c2:27:06:b6:88: 35:f9:59:52:0b:d1:91:3f:5b:3d:1d:f1:fd:b1:9f:e7:27:38: 34:b1:62:81:22:b7:17:6f:bd:23:d1:ef:e6:f8:74:de:25:35: ae:00:d0:25 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI0MTIzMTAx MzE1OVoXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoQzk1QjI2OUM1M0Q3MTM2 MDFFMUQwMTMxRTNENDFBQkQ3MEY5OTI4RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALFABF3Ha9/Ft4p9bfMOybiiKnCEaJN9Y5dLe8agBnkJGtNJ5s2k NjQvWm7eykaacvGwmJ98kylB+1ky4Ht+8DsTWJzIo0RYcnidD8K/3vUIg9hBK1tE 3ZuN69YI5Imy9+7IadvRS7l4Um8YqXF09Gw4UvTivsyQk59caVecM2JzwoZnwbX+ 3ZIiDm76t/uvwnrzcmLExprycw5LOCJNHBo6m+nifMvjcY3iyj5hIji0fjKvmEu5 TZMMPQkoQzyo13fwatkkJ0SKmb99ASTQO8tu18XrrC92rt1lpnPBAXPNGXW7pcYB Ci7nzlxuGXIZ5u7IgLYewEvjTLFvjQ1wMrcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTJWyacU9cTYB4dATHj1Bq9cPmSjjAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zOTUveVZzbW5GUFhFMkFlSFFFeDQ5UWF2WEQ1a280LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANN9ijANBgkqhkiG9w0BAQsFAAOCAQEAAo6R+77u/HLQDxlwHonOtMuCP7Sw N4FpITiLl5XNOvD0iVWQCb5z4YDU6MP0Pm7B8tc7N3coTzXq47IqU+2wU0NTPAi3 gVE5YBt1UECL7ygNv907P5MLnZWLcYUOug6zAxCKOc06zssRCAhp5CQ6LeO96k2f D/ibrSRy8qBIAESG5ODhACDWToagY0f34HzucciVgSzIVRoG0cVZ4c5TIv6KkMd+ QQPpzXgEoTcKo8QaxWV+vX/HnYLOjcU9avyUjt3jZRKMjHAsqwNZ86ZhS8V5fMIn BraINflZUgvRkT9bPR3x/bGf5yc4NLFigSK3F2+9I9Hv5vh03iU1rgDQJQ== -----END CERTIFICATE-----Generated at Wed Feb 19 22:32:15 2025 by rpki-client