$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/lCnGgGsbfFFWg6K_gJCjKkbEiH0.roa File: lCnGgGsbfFFWg6K_gJCjKkbEiH0.roa (raw, json) Hash identifier: N0wy8TR6ALdN70uVnj26Vir1o5FHGom8VOVl6GSzFng= Subject key identifier: 94:29:C6:80:6B:1B:7C:51:56:83:A2:BF:80:90:A3:2A:46:C4:88:7D Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0168 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lCnGgGsbfFFWg6K_gJCjKkbEiH0.roa Signing time: Thu 31 Oct 2024 01:34:19 +0000 ROA not before: Thu 31 Oct 2024 01:34:19 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 2527 IP address blocks: 116.67.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Oct 31 01:34:19 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=9429C6806B1B7C515683A2BF8090A32A46C4887D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:9d:ad:93:2b:ef:54:97:4f:f9:85:db:2a: 0f:58:fb:88:c5:07:77:98:fe:03:7c:7f:15:7b:d1: 85:66:2f:66:bd:ce:86:c2:77:51:61:08:86:e2:31: 9b:17:9e:ea:df:10:ea:a0:76:b9:7c:b2:20:eb:f5: 06:5d:6c:73:cc:d9:2a:d8:a7:cf:ce:77:bd:91:95: b7:a7:b7:59:6d:4f:cd:af:db:22:b8:50:5b:44:cc: a4:e3:85:31:ff:f3:1f:59:42:9d:72:6a:e1:08:a5: ab:d0:26:31:17:4b:40:15:1e:69:e1:ca:ec:30:72: f9:7d:e1:01:d1:11:d0:b4:c5:37:13:e9:16:31:67: a1:99:63:11:28:d7:a2:f2:45:54:d1:65:b6:68:60: a4:b6:c3:b8:27:95:e0:0e:6a:08:84:c1:f0:bb:ca: c5:06:b4:4d:f0:9a:65:76:10:83:63:72:09:a5:7e: 69:69:15:b0:9e:43:02:52:35:71:bd:6e:20:91:4f: 8b:bd:b3:2d:d8:b5:fb:10:fa:07:6e:6a:7b:02:a5: 7f:e3:34:d9:ff:bc:2c:96:7f:66:2f:5f:1d:96:75: ee:f2:01:08:a2:7c:35:df:25:ac:ca:06:1e:5f:3f: d1:71:fc:9a:e4:30:1e:ad:b4:bf:b4:dd:63:9b:95: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:29:C6:80:6B:1B:7C:51:56:83:A2:BF:80:90:A3:2A:46:C4:88:7D X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lCnGgGsbfFFWg6K_gJCjKkbEiH0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.67.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4d:42:46:a2:40:ba:f5:d0:cb:34:ac:ae:79:35:18:ff:51:5c: 85:ca:4c:d6:11:dc:66:9d:4a:9c:66:a5:34:c5:3d:4c:43:a4: e1:71:5e:a7:e5:4d:b7:b2:33:cb:68:6c:42:a9:ef:3d:bb:54: 7d:92:ec:ec:8d:89:0d:db:9a:99:14:d4:c9:bb:a5:1a:bd:fa: 38:3f:7b:dc:b2:19:af:8f:bf:c2:85:1f:ba:9e:2e:a0:51:6d: 87:ad:32:50:66:ec:92:38:ba:be:95:ce:59:c7:47:28:c4:ff: 65:3d:4e:f6:b3:1b:d5:d5:fa:7d:ae:5c:5c:36:3f:2e:30:d2: fa:6a:39:4d:ec:13:bb:c5:0c:84:4d:7e:34:9f:7f:c6:d4:c4: e5:dc:a5:12:2c:a1:69:2d:f8:25:c9:c1:8c:12:7b:15:2f:dc: 4a:4d:7d:a4:49:c3:ea:0c:d6:09:8c:a9:40:ac:f0:65:21:57: 71:54:61:86:18:e9:87:87:ad:8b:c7:ae:45:9d:fe:26:a0:52: 61:f6:73:11:1c:64:2f:e8:53:9e:60:89:3f:5e:65:9f:b4:07: 05:6f:23:49:68:e8:e7:fa:b4:7d:84:dc:70:ed:dd:f2:1e:a0: 22:41:40:6b:3d:60:34:f2:ad:45:0d:cc:26:03:29:32:f4:34: 56:1d:42:4b -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNDEwMzEw MTM0MTlaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0MjlDNjgwNkIxQjdD NTE1NjgzQTJCRjgwOTBBMzJBNDZDNDg4N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnrp2tkyvvVJdP+YXbKg9Y+4jFB3eY/gN8fxV70YVmL2a9zobC d1FhCIbiMZsXnurfEOqgdrl8siDr9QZdbHPM2SrYp8/Od72Rlbent1ltT82v2yK4 UFtEzKTjhTH/8x9ZQp1yauEIpavQJjEXS0AVHmnhyuwwcvl94QHREdC0xTcT6RYx Z6GZYxEo16LyRVTRZbZoYKS2w7gnleAOagiEwfC7ysUGtE3wmmV2EINjcgmlfmlp FbCeQwJSNXG9biCRT4u9sy3YtfsQ+gduansCpX/jNNn/vCyWf2YvXx2Wde7yAQii fDXfJazKBh5fP9Fx/JrkMB6ttL+03WOblXGxAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUlCnGgGsbfFFWg6K/gJCjKkbEiH0wHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9sQ25HZ0dzYmZGRldnNktfZ0pDaktrYkVpSDAucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQHdEOAMA0GCSqGSIb3DQEBCwUAA4IBAQBNQkaiQLr10Ms0rK55NRj/UVyFykzW EdxmnUqcZqU0xT1MQ6ThcV6n5U23sjPLaGxCqe89u1R9kuzsjYkN25qZFNTJu6Ua vfo4P3vcshmvj7/ChR+6ni6gUW2HrTJQZuySOLq+lc5Zx0coxP9lPU72sxvV1fp9 rlxcNj8uMNL6ajlN7BO7xQyETX40n3/G1MTl3KUSLKFpLfglycGMEnsVL9xKTX2k ScPqDNYJjKlArPBlIVdxVGGGGOmHh62Lx65Fnf4moFJh9nMRHGQv6FOeYIk/XmWf tAcFbyNJaOjn+rR9hNxw7d3yHqAiQUBrPWA08q1FDcwmAyky9DRWHUJL -----END CERTIFICATE-----Generated at Sun Feb 16 22:03:11 2025 by rpki-client