$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/HOZZpSomN0E4ZzdBymdmPvm4axY.roa File: HOZZpSomN0E4ZzdBymdmPvm4axY.roa (raw, json) Hash identifier: C/EaWmXDh73fbeaNi4phjv3eciNy9GCED3PkF6tq1JM= Subject key identifier: 1C:E6:59:A5:2A:26:37:41:38:67:37:41:CA:67:66:3E:F9:B8:6B:16 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 0110 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/HOZZpSomN0E4ZzdBymdmPvm4axY.roa Signing time: Sat 31 Aug 2024 01:29:23 +0000 ROA not before: Sat 31 Aug 2024 01:29:23 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 10021 IP address blocks: 27.110.60.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Aug 31 01:29:23 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=1CE659A52A26374138673741CA67663EF9B86B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8e:f3:44:16:94:34:24:16:97:ba:30:c8:ee: ca:05:64:52:0d:f3:d0:64:14:ad:dd:62:c3:25:04: 33:1a:cd:13:83:2a:6d:a3:4e:91:69:a5:df:f7:51: 0a:2f:4d:1d:ad:b7:61:7c:e5:32:b6:a1:d8:29:6a: 51:3b:81:d6:ae:3c:35:89:b8:98:9c:12:18:77:90: b8:95:f8:5e:43:09:ba:b2:65:e7:30:1d:ee:1b:6d: 83:61:35:97:3c:27:41:0b:55:8a:de:23:79:6e:0d: 94:43:35:57:d9:79:00:8c:6a:f4:07:06:5c:bc:c7: 70:1d:71:07:39:41:5d:6a:6b:4b:ba:21:cc:8b:da: 28:a1:98:4b:dc:56:ce:d7:34:0d:62:17:b4:24:72: 82:1a:7f:2c:e1:9e:64:2e:eb:8e:30:97:69:4c:d9: c2:75:8c:e0:2e:36:3d:20:e0:38:cc:1b:60:e0:cc: 6c:ac:94:5a:3e:c1:8d:4e:8c:d9:86:36:86:bd:23: 85:f2:31:ef:57:22:be:ed:3a:64:6e:f8:ea:37:cb: 4a:f9:b6:70:d8:0d:c6:ba:69:96:f2:8d:6f:98:46: 10:60:fc:a1:48:4d:04:f0:dd:15:66:b8:89:8f:7e: 1b:f8:2a:94:af:ce:56:67:8c:fd:ad:7f:ec:aa:7d: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E6:59:A5:2A:26:37:41:38:67:37:41:CA:67:66:3E:F9:B8:6B:16 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/HOZZpSomN0E4ZzdBymdmPvm4axY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.110.60.0/23 Signature Algorithm: sha256WithRSAEncryption 00:92:1d:b8:5e:51:a1:8b:f0:c8:f9:a8:1d:2f:40:96:65:e6: 02:b3:fa:53:02:1f:d2:2c:5a:b9:f2:a7:5e:63:17:9f:4c:ca: e3:59:96:4c:70:60:de:6e:31:3c:17:e0:35:a4:df:70:9a:34: b8:d9:79:bb:23:e9:1e:c8:c4:57:70:a0:b2:1d:2c:b6:ab:34: 91:29:1c:7a:25:8a:eb:42:ab:ef:63:72:49:f2:d6:7b:c5:e8: fa:04:0e:b8:f2:21:2e:33:b9:ba:ab:59:aa:aa:fd:c8:6d:ef: a4:33:fd:3d:33:be:6c:d2:61:5e:39:7e:6b:94:d6:ca:f5:6d: b5:3d:30:74:c1:d2:80:60:72:b2:54:a5:35:f1:86:23:ad:3d: 1c:45:b5:64:80:09:e2:af:08:cf:9a:05:dd:82:93:a4:27:41: ca:22:cb:a6:86:a5:d7:30:71:27:a5:3e:60:2c:d4:a2:fc:76: ab:31:ec:d5:9a:5c:e5:55:9c:c2:6c:17:2f:5b:3b:e5:ef:6e: d6:3d:63:76:06:9e:65:98:fc:30:9b:7e:09:fd:d5:97:2d:05: 2d:6c:76:96:3d:57:de:1a:d4:39:41:0d:3b:47:7e:b8:01:dd: 0b:4a:ab:35:9e:45:11:22:e7:e3:63:bf:44:ca:76:7e:5c:e1: a2:f2:c7:c3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICARAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNDA4MzEw MTI5MjNaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFDRTY1OUE1MkEyNjM3 NDEzODY3Mzc0MUNBNjc2NjNFRjlCODZCMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNjvNEFpQ0JBaXujDI7soFZFIN89BkFK3dYsMlBDMazRODKm2j TpFppd/3UQovTR2tt2F85TK2odgpalE7gdauPDWJuJicEhh3kLiV+F5DCbqyZecw He4bbYNhNZc8J0ELVYreI3luDZRDNVfZeQCMavQHBly8x3AdcQc5QV1qa0u6IcyL 2iihmEvcVs7XNA1iF7QkcoIafyzhnmQu644wl2lM2cJ1jOAuNj0g4DjMG2DgzGys lFo+wY1OjNmGNoa9I4XyMe9XIr7tOmRu+Oo3y0r5tnDYDca6aZbyjW+YRhBg/KFI TQTw3RVmuImPfhv4KpSvzlZnjP2tf+yqfRvFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHOZZpSomN0E4ZzdBymdmPvm4axYwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L0hPWlpwU29tTjBFNFp6ZEJ5bWRtUHZtNGF4WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEbbjwwDQYJKoZIhvcNAQELBQADggEBAACSHbheUaGL8Mj5qB0vQJZl5gKz +lMCH9IsWrnyp15jF59MyuNZlkxwYN5uMTwX4DWk33CaNLjZebsj6R7IxFdwoLId LLarNJEpHHoliutCq+9jckny1nvF6PoEDrjyIS4zubqrWaqq/cht76Qz/T0zvmzS YV45fmuU1sr1bbU9MHTB0oBgcrJUpTXxhiOtPRxFtWSACeKvCM+aBd2Ck6QnQcoi y6aGpdcwcSelPmAs1KL8dqsx7NWaXOVVnMJsFy9bO+XvbtY9Y3YGnmWY/DCbfgn9 1ZctBS1sdpY9V94a1DlBDTtHfrgB3QtKqzWeRREi5+Njv0TKdn5c4aLyx8M= -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:42 2025 by rpki-client