$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/nj0oETTYDBMPnBW_0OnHBHaN_3Q.roa File: nj0oETTYDBMPnBW_0OnHBHaN_3Q.roa (raw, json) Hash identifier: HAesfNykLiVc03WIXob8fHJ+cx+ud5q38IbXPiSC9LI= Subject key identifier: 9E:3D:28:11:34:D8:0C:13:0F:9C:15:BF:D0:E9:C7:04:76:8D:FF:74 Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: 86 Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nj0oETTYDBMPnBW_0OnHBHaN_3Q.roa Signing time: Mon 30 Sep 2024 01:30:34 +0000 ROA not before: Mon 30 Sep 2024 01:30:34 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 2527 IP address blocks: 66.11.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 20:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Sep 30 01:30:34 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=9E3D281134D80C130F9C15BFD0E9C704768DFF74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:d5:e2:d1:dc:e3:d4:27:a1:5a:7a:12:03: 9e:42:60:7c:fa:19:18:e0:8e:41:82:63:5c:2d:38: ad:79:5a:77:86:0a:5d:0f:d0:6b:97:77:25:12:66: f7:63:af:09:8d:ae:81:c1:09:98:d0:9d:2f:c5:57: 1e:df:bb:d0:cf:ba:64:f9:0d:46:b6:2e:21:45:39: 30:3c:ba:ec:da:e4:ca:02:b3:4c:b8:06:87:58:f2: 2e:da:98:7c:2f:eb:1c:65:09:bd:61:97:8a:6d:e1: 21:23:00:9e:77:70:15:9d:9d:5f:78:77:2f:c5:d0: 52:eb:9a:26:f3:74:0d:2f:39:82:9d:d0:f2:30:9b: 91:02:b1:ef:20:06:84:c4:c7:e7:52:f8:06:85:ee: a4:03:ef:36:3c:f0:e8:92:0b:75:82:50:20:04:06: c8:2c:85:8a:17:10:f0:b8:51:58:60:46:df:09:f7: 5e:09:47:79:3d:f5:f5:c8:f6:ee:25:59:30:40:81: 93:d8:70:e7:4e:31:65:e8:01:ac:b4:dd:50:ec:9f: bb:a1:e8:31:f5:ef:b2:67:28:a7:d6:d1:af:00:85: a2:db:19:ed:79:94:3e:c6:27:f5:5e:03:f6:13:f9: 35:06:5c:2a:e1:58:5d:93:cf:44:8b:74:29:cc:76: 8a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3D:28:11:34:D8:0C:13:0F:9C:15:BF:D0:E9:C7:04:76:8D:FF:74 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nj0oETTYDBMPnBW_0OnHBHaN_3Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 66.11.48.0/20 Signature Algorithm: sha256WithRSAEncryption 91:e2:38:44:6e:2e:73:aa:e5:ac:b1:70:84:f4:7b:69:44:0d: ce:e5:e2:07:d6:41:cf:e8:65:b0:ea:9d:2b:fb:54:fc:cf:2b: 9a:9f:fa:f3:de:f3:9c:80:77:cf:23:f6:fc:16:e6:59:67:c4: e9:04:3a:d5:ca:2d:66:10:6b:e8:e0:fb:27:cc:a3:59:33:fe: 82:23:fe:14:77:0b:68:d5:7c:bd:41:d3:94:27:ad:d6:1b:7f: 19:03:3c:6b:b3:5f:bd:25:e3:3b:7c:ef:67:aa:22:65:4b:2d: 6d:05:b0:4c:12:67:58:ae:a8:84:7e:2a:d8:b6:91:6c:b6:74: f7:58:dd:67:2e:57:de:cb:1b:06:0b:70:1c:50:0d:ce:a3:0b: 0a:34:c0:bf:2f:2f:61:d4:29:90:91:ad:6f:84:29:b7:bd:f9: 60:d9:67:f8:2e:98:65:9e:6d:05:f8:3a:e6:ab:3f:21:18:c4: da:03:1f:ae:59:26:60:ea:f7:c1:5f:d5:ab:94:92:0c:f1:0b: b5:ff:6b:f3:95:02:3d:f0:a8:98:55:70:20:2a:cc:c1:04:01: 8f:51:2b:ef:04:8b:d6:2f:33:24:ac:8f:e8:83:fc:2f:c8:2a: a1:ce:53:9c:47:14:cb:4b:f3:8b:32:2a:19:93:74:39:1e:fa: 30:76:54:19 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNDA5MzAw MTMwMzRaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlFM0QyODExMzREODBD MTMwRjlDMTVCRkQwRTlDNzA0NzY4REZGNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsjdXi0dzj1CehWnoSA55CYHz6GRjgjkGCY1wtOK15WneGCl0P 0GuXdyUSZvdjrwmNroHBCZjQnS/FVx7fu9DPumT5DUa2LiFFOTA8uuza5MoCs0y4 BodY8i7amHwv6xxlCb1hl4pt4SEjAJ53cBWdnV94dy/F0FLrmibzdA0vOYKd0PIw m5ECse8gBoTEx+dS+AaF7qQD7zY88OiSC3WCUCAEBsgshYoXEPC4UVhgRt8J914J R3k99fXI9u4lWTBAgZPYcOdOMWXoAay03VDsn7uh6DH177JnKKfW0a8AhaLbGe15 lD7GJ/VeA/YT+TUGXCrhWF2Tz0SLdCnMdooFAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUnj0oETTYDBMPnBW/0OnHBHaN/3QwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9uajBvRVRUWURCTVBuQldfME9uSEJIYU5fM1Eucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQEQgswMA0GCSqGSIb3DQEBCwUAA4IBAQCR4jhEbi5zquWssXCE9HtpRA3O5eIH 1kHP6GWw6p0r+1T8zyuan/rz3vOcgHfPI/b8FuZZZ8TpBDrVyi1mEGvo4PsnzKNZ M/6CI/4Udwto1Xy9QdOUJ63WG38ZAzxrs1+9JeM7fO9nqiJlSy1tBbBMEmdYrqiE firYtpFstnT3WN1nLlfeyxsGC3AcUA3OowsKNMC/Ly9h1CmQka1vhCm3vflg2Wf4 Lphlnm0F+Drmqz8hGMTaAx+uWSZg6vfBX9WrlJIM8Qu1/2vzlQI98KiYVXAgKszB BAGPUSvvBIvWLzMkrI/og/wvyCqhzlOcRxTLS/OLMioZk3Q5HvowdlQZ -----END CERTIFICATE-----Generated at Thu Mar 13 01:46:01 2025 by rpki-client