$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/URkAARRYKF5msftEx9z2KdBUQkc.roa File: URkAARRYKF5msftEx9z2KdBUQkc.roa (raw, json) Hash identifier: 4vUM/KJo7nI/bfEOT2KIsRLOC/5iw5PjR/KiPsuBzNA= Subject key identifier: 51:19:00:01:14:58:28:5E:66:B1:FB:44:C7:DC:F6:29:D0:54:42:47 Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: 87 Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/URkAARRYKF5msftEx9z2KdBUQkc.roa Signing time: Mon 30 Sep 2024 01:30:35 +0000 ROA not before: Mon 30 Sep 2024 01:30:35 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 2527 IP address blocks: 209.17.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Sep 30 01:30:35 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=511900011458285E66B1FB44C7DCF629D0544247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:c6:a3:29:a2:a6:28:ee:ee:a0:70:18:87: d3:7d:28:ff:fc:b2:e2:6d:12:4e:45:65:cb:c8:a7: 6a:0f:cd:ed:f3:7a:60:30:c9:df:3a:df:54:06:59: 1c:39:77:a1:79:b2:49:8e:93:1b:2e:b2:ef:87:bb: 02:3d:30:71:4a:22:c0:22:22:52:ed:62:d7:e5:68: ec:b1:fb:5f:c3:6f:1e:2e:22:f8:27:2f:62:f8:a1: 18:f5:ce:64:1d:e3:d4:66:79:eb:17:eb:17:86:c4: 83:5f:85:96:8a:0b:9b:52:e6:21:bd:b7:ec:42:7f: f0:7c:46:05:68:9c:07:57:48:68:3f:ed:f4:a9:b3: 62:05:ba:6c:6a:7e:74:7a:77:81:4e:ff:35:9c:fa: 2d:37:de:7e:a6:e0:92:79:cf:62:eb:16:76:fa:82: 4d:e8:5b:62:10:88:50:2b:29:01:4e:cd:39:6e:65: 14:fc:d1:cd:39:e7:fd:f3:4c:b0:a4:d9:18:45:7a: 91:a1:19:07:48:40:09:03:13:f0:00:d1:34:40:23: 62:4a:12:95:74:ec:a4:87:a7:75:1b:67:41:ae:4a: e7:b5:b1:bd:74:0b:18:f8:6d:ae:ca:bd:71:9a:58: fb:50:37:46:c6:d2:c8:3e:2e:90:b3:b8:dd:b8:da: ea:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:19:00:01:14:58:28:5E:66:B1:FB:44:C7:DC:F6:29:D0:54:42:47 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/URkAARRYKF5msftEx9z2KdBUQkc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 209.17.64.0/19 Signature Algorithm: sha256WithRSAEncryption 36:f9:ed:54:71:d1:3f:59:d7:c7:81:37:e1:aa:0e:eb:89:3b: 86:22:c2:91:80:ea:ed:5d:c3:87:88:02:4e:d7:d4:a2:58:9f: d2:de:5a:32:3d:c0:54:10:80:a4:d8:96:e4:5b:59:e9:8f:99: 52:cb:00:56:e6:6b:35:30:78:7b:0d:11:5f:c6:8b:d9:af:6f: 62:28:e8:58:14:a3:1d:6d:bb:48:a0:40:4e:d5:09:8c:a9:c6: 52:75:1e:8a:50:54:52:30:81:b6:25:95:9b:de:90:7a:f8:05: 9c:ce:55:80:a0:80:56:44:53:00:9f:08:44:8d:65:12:ae:8e: 90:66:0f:4b:79:55:68:0b:0f:ce:8c:bb:98:c1:7f:ef:7d:1d: 75:5a:0d:28:81:f2:86:94:07:fd:30:2a:1d:0b:f4:6e:24:93: 69:78:48:68:08:26:26:29:91:7c:a1:c6:4a:f9:b4:c4:28:62: 8f:7f:0b:63:12:4d:8d:88:3b:3b:6f:db:ec:44:d6:bb:a8:09: 79:aa:c2:94:00:e0:c5:ec:b0:51:bd:ab:b5:c9:04:ec:d4:5b: 9a:c3:7d:a4:2c:08:96:54:d6:d8:ef:bc:6d:2e:ad:37:f5:b7: e0:6b:5a:9d:24:a8:6e:20:9c:35:b8:f7:df:91:22:bc:35:c2: 66:71:77:30 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNDA5MzAw MTMwMzVaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDUxMTkwMDAxMTQ1ODI4 NUU2NkIxRkI0NEM3RENGNjI5RDA1NDQyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpd8ajKaKmKO7uoHAYh9N9KP/8suJtEk5FZcvIp2oPze3zemAw yd8631QGWRw5d6F5skmOkxsusu+HuwI9MHFKIsAiIlLtYtflaOyx+1/Dbx4uIvgn L2L4oRj1zmQd49RmeesX6xeGxINfhZaKC5tS5iG9t+xCf/B8RgVonAdXSGg/7fSp s2IFumxqfnR6d4FO/zWc+i033n6m4JJ5z2LrFnb6gk3oW2IQiFArKQFOzTluZRT8 0c055/3zTLCk2RhFepGhGQdIQAkDE/AA0TRAI2JKEpV07KSHp3UbZ0GuSue1sb10 Cxj4ba7KvXGaWPtQN0bG0sg+LpCzuN242uqhAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUURkAARRYKF5msftEx9z2KdBUQkcwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9VUmtBQVJSWUtGNW1zZnRFeDl6MktkQlVRa2Mucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQF0RFAMA0GCSqGSIb3DQEBCwUAA4IBAQA2+e1UcdE/WdfHgTfhqg7riTuGIsKR gOrtXcOHiAJO19SiWJ/S3loyPcBUEICk2JbkW1npj5lSywBW5ms1MHh7DRFfxovZ r29iKOhYFKMdbbtIoEBO1QmMqcZSdR6KUFRSMIG2JZWb3pB6+AWczlWAoIBWRFMA nwhEjWUSro6QZg9LeVVoCw/OjLuYwX/vfR11Wg0ogfKGlAf9MCodC/RuJJNpeEho CCYmKZF8ocZK+bTEKGKPfwtjEk2NiDs7b9vsRNa7qAl5qsKUAODF7LBRvau1yQTs 1Fuaw32kLAiWVNbY77xtLq039bfga1qdJKhuIJw1uPffkSK8NcJmcXcw -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org