$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/G6LBSx-QZb1yFmxsv8awKmd7pKw.roa File: G6LBSx-QZb1yFmxsv8awKmd7pKw.roa (raw, json) Hash identifier: kw/IqeKsZJchdRq76UxUKxAEtYOX6Cr6rTdei9tIaGI= Subject key identifier: 1B:A2:C1:4B:1F:90:65:BD:72:16:6C:6C:BF:C6:B0:2A:67:7B:A4:AC Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: 89 Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/G6LBSx-QZb1yFmxsv8awKmd7pKw.roa Signing time: Thu 31 Oct 2024 01:30:42 +0000 ROA not before: Thu 31 Oct 2024 01:30:42 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 2527 IP address blocks: 131.147.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Oct 31 01:30:42 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=1BA2C14B1F9065BD72166C6CBFC6B02A677BA4AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:f9:bf:1c:cf:6a:13:7c:83:8f:6a:41:43: 80:37:9e:17:5f:ce:cb:bd:e5:1a:99:ba:d8:54:06: 18:29:14:fe:1e:da:94:29:3a:34:43:6d:83:0a:d2: 39:7e:78:42:ee:fc:2e:34:ca:2f:cb:28:aa:eb:be: c0:55:7f:f3:43:83:84:8f:f9:97:b5:30:ca:ab:8d: ea:e6:83:14:0c:df:8e:a3:e3:08:38:11:77:c5:b8: f1:25:f7:02:d3:73:e7:eb:26:89:95:d2:b4:3e:97: bd:6f:8f:87:53:57:9c:32:c5:b5:02:0b:f0:d3:e3: 92:e5:fa:95:fd:9b:10:bc:54:be:19:54:c6:e4:79: 09:2a:7c:2d:70:ff:0f:b5:a7:92:c1:40:62:9f:d6: 19:a1:17:58:73:f6:78:e6:5d:f1:4f:18:63:a9:95: 44:74:99:87:d8:87:c6:3a:b0:dc:08:9f:f8:45:83: 0e:0f:52:bc:d9:cf:9d:6c:31:f1:cf:27:4f:92:54: 13:76:4f:8b:aa:bc:7b:64:58:2c:93:45:20:96:2c: 6e:dd:f5:ed:04:ba:8c:49:3f:b0:b1:84:36:b1:7f: 86:a6:38:df:c1:b7:15:c4:12:d2:55:9f:f9:1b:1d: c8:bb:99:98:f9:98:0c:fe:62:1c:d0:e3:67:39:91: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A2:C1:4B:1F:90:65:BD:72:16:6C:6C:BF:C6:B0:2A:67:7B:A4:AC X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/G6LBSx-QZb1yFmxsv8awKmd7pKw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 131.147.0.0/16 Signature Algorithm: sha256WithRSAEncryption cd:fc:ea:47:a0:e5:17:1a:5a:94:cb:a8:70:ed:21:2a:66:7f: 17:63:07:8d:e6:5b:4e:54:7b:49:39:ac:b9:92:7a:05:04:48: 76:90:d5:3e:69:e5:a0:c3:4a:04:2d:27:b8:44:8c:e6:f2:b7: 61:8d:be:1a:dd:44:b2:54:0c:e1:50:5c:cd:f1:5e:5e:40:75: af:e7:90:d8:a0:dc:ab:a8:e3:9d:31:6b:52:4c:89:14:c0:13: f7:02:7f:53:18:d4:2a:93:0f:f8:6f:49:b2:02:59:d8:d5:06: ce:9a:2b:fd:34:2f:59:b3:3f:e1:42:78:8c:02:22:e1:c0:cf: b0:d5:a6:63:47:37:76:d8:b3:77:b6:16:f4:d6:5d:f8:bf:6a: fd:14:68:3f:92:9b:05:dc:db:84:5e:69:4b:18:b5:91:f9:69: 90:53:12:25:01:f4:7e:3a:bc:b2:aa:48:d4:10:d5:52:1d:29: 57:29:c5:cb:92:e9:e3:e4:57:a8:4e:50:9f:c7:1c:a1:9d:01: 4b:4c:ed:b0:c9:a0:15:42:8f:dc:c8:56:c5:99:f6:4f:a2:3e: dc:e4:dc:48:24:fc:51:f8:47:3c:62:7d:ed:c3:ac:37:ab:1b: 40:e9:8a:cc:b5:f3:1f:cc:d6:ed:99:24:da:f1:e5:f0:b2:e3: 9f:ff:a9:81 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNDEwMzEw MTMwNDJaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFCQTJDMTRCMUY5MDY1 QkQ3MjE2NkM2Q0JGQzZCMDJBNjc3QkE0QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuq/m/HM9qE3yDj2pBQ4A3nhdfzsu95RqZuthUBhgpFP4e2pQp OjRDbYMK0jl+eELu/C40yi/LKKrrvsBVf/NDg4SP+Ze1MMqrjermgxQM346j4wg4 EXfFuPEl9wLTc+frJomV0rQ+l71vj4dTV5wyxbUCC/DT45Ll+pX9mxC8VL4ZVMbk eQkqfC1w/w+1p5LBQGKf1hmhF1hz9njmXfFPGGOplUR0mYfYh8Y6sNwIn/hFgw4P UrzZz51sMfHPJ0+SVBN2T4uqvHtkWCyTRSCWLG7d9e0EuoxJP7CxhDaxf4amON/B txXEEtJVn/kbHci7mZj5mAz+YhzQ42c5kYGfAgMBAAGjggIhMIICHTAdBgNVHQ4E FgQUG6LBSx+QZb1yFmxsv8awKmd7pKwwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9HNkxCU3gtUVpiMXlGbXhzdjhhd0ttZDdwS3cucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMAg5MwDQYJKoZIhvcNAQELBQADggEBAM386keg5RcaWpTLqHDtISpmfxdjB43m W05Ue0k5rLmSegUESHaQ1T5p5aDDSgQtJ7hEjObyt2GNvhrdRLJUDOFQXM3xXl5A da/nkNig3Kuo450xa1JMiRTAE/cCf1MY1CqTD/hvSbICWdjVBs6aK/00L1mzP+FC eIwCIuHAz7DVpmNHN3bYs3e2FvTWXfi/av0UaD+SmwXc24ReaUsYtZH5aZBTEiUB 9H46vLKqSNQQ1VIdKVcpxcuS6ePkV6hOUJ/HHKGdAUtM7bDJoBVCj9zIVsWZ9k+i Ptzk3Egk/FH4Rzxife3DrDerG0Dpisy18x/M1u2ZJNrx5fCy45//qYE= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org