$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/0xqgt5AXzM4eWGjHIU1qrU_1YNU.roa File: 0xqgt5AXzM4eWGjHIU1qrU_1YNU.roa (raw, json) Hash identifier: 1HZXkrRvVTNGWRNf/wmsXZqojQjT203BWxInh/bOWv4= Subject key identifier: D3:1A:A0:B7:90:17:CC:CE:1E:58:68:C7:21:4D:6A:AD:4F:F5:60:D5 Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Certificate serial: 0E Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/0xqgt5AXzM4eWGjHIU1qrU_1YNU.roa Signing time: Mon 21 Oct 2024 02:11:02 +0000 ROA not before: Mon 21 Oct 2024 02:11:02 +0000 ROA not after: Tue 21 Oct 2025 01:23:02 +0000 asID: 9354 IP address blocks: 202.157.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Validity Not Before: Oct 21 02:11:02 2024 GMT Not After : Oct 21 01:23:02 2025 GMT Subject: CN=D31AA0B79017CCCE1E5868C7214D6AAD4FF560D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:43:bd:74:48:34:96:51:d2:29:7e:13:93:b5: 30:87:74:f2:e0:39:f7:4c:f1:6f:20:80:6b:ee:b8: fe:92:f8:39:6b:5f:37:af:a8:96:a1:23:dc:01:b4: a5:81:80:f0:b1:cd:5d:39:74:14:81:b7:18:cb:a8: e1:a0:55:6f:aa:81:1c:6f:f5:33:f7:91:2f:39:42: 1b:2c:e3:7f:74:82:7b:2b:ab:ef:7b:70:29:c6:56: 31:ea:42:66:5f:20:3f:35:a0:33:f4:b8:00:dc:b9: 8b:50:43:ed:f1:e1:1e:58:a6:26:2c:0f:bc:7a:94: 73:02:45:6e:83:c6:4c:4a:90:22:ee:1c:8b:5e:ac: e9:e0:f1:fd:28:1f:bb:53:2d:4c:1d:fa:01:1d:9b: 7c:ec:6b:3b:2e:8d:f9:29:76:c9:17:6d:76:ef:e8: 3f:2a:8e:e3:c4:74:91:21:8e:e5:94:a9:a9:df:ed: 8e:1c:83:2b:87:1c:a0:a0:c8:97:76:74:d2:09:8a: c4:7c:eb:33:6d:45:81:89:b4:7a:b9:71:41:92:2e: b6:46:56:ee:f5:c0:20:a2:6a:9b:cc:df:f7:03:6d: d4:27:7c:ee:cf:3d:28:4f:a3:cc:4a:cb:6c:de:49: 6d:6e:81:a5:af:0a:bf:f0:f7:a5:09:9b:52:e7:1d: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1A:A0:B7:90:17:CC:CE:1E:58:68:C7:21:4D:6A:AD:4F:F5:60:D5 X509v3 Authority Key Identifier: keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/0xqgt5AXzM4eWGjHIU1qrU_1YNU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.157.240.0/22 Signature Algorithm: sha256WithRSAEncryption 95:ee:9c:1e:ac:8c:20:97:0f:63:91:86:b1:ed:a5:22:a5:b7: 6f:7a:d8:31:8f:44:04:c8:f3:9c:a4:aa:ba:69:cb:1e:27:24: 34:58:e8:45:6d:ea:e8:19:cb:b8:00:12:cd:8b:64:c8:de:07: 89:55:a1:2f:18:31:52:bb:ce:ce:5b:05:1d:82:55:ac:9d:87: aa:04:5b:45:4e:8d:9a:49:8b:48:09:07:d4:f8:d4:60:e6:d6: 3b:81:a2:8f:cb:4e:5b:0c:90:42:74:cc:2a:d4:96:0b:6a:6a: 4b:0a:b2:e5:4a:1b:b3:6a:fb:aa:13:d6:e8:2f:0c:c0:c5:b5: 3c:3a:5e:89:c5:27:e5:79:e3:06:48:a7:2e:59:be:fc:68:bf: cf:53:84:a5:4f:0a:59:8d:3a:91:ad:3b:94:88:e3:f6:d8:e0: 23:55:cd:43:47:cd:62:df:04:db:0c:89:d1:15:ff:ee:33:43: ea:16:61:87:3c:71:58:c3:18:fc:55:16:f7:5b:3e:6b:bd:74: d4:83:97:fe:53:86:00:6a:c6:6c:7a:b4:73:43:3a:15:99:6f: 2a:20:da:9f:73:d7:0e:65:bd:4c:be:0a:97:91:b5:ac:53:f0: 94:e3:af:01:6e:49:c8:6f:23:fd:66:b2:b4:66:05:63:e7:4e: 80:79:a0:75 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4 NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI0MTAyMTAy MTEwMloXDTI1MTAyMTAxMjMwMlowMzExMC8GA1UEAxMoRDMxQUEwQjc5MDE3Q0ND RTFFNTg2OEM3MjE0RDZBQUQ0RkY1NjBENTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO1DvXRINJZR0il+E5O1MId08uA590zxbyCAa+64/pL4OWtfN6+o lqEj3AG0pYGA8LHNXTl0FIG3GMuo4aBVb6qBHG/1M/eRLzlCGyzjf3SCeyur73tw KcZWMepCZl8gPzWgM/S4ANy5i1BD7fHhHlimJiwPvHqUcwJFboPGTEqQIu4ci16s 6eDx/Sgfu1MtTB36AR2bfOxrOy6N+Sl2yRdtdu/oPyqO48R0kSGO5ZSpqd/tjhyD K4ccoKDIl3Z00gmKxHzrM21FgYm0erlxQZIutkZW7vXAIKJqm8zf9wNt1Cd87s89 KE+jzErLbN5JbW6Bpa8Kv/D3pQmbUucddn8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTTGqC3kBfMzh5YaMchTWqtT/Vg1TAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80ODQvMHhxZ3Q1QVh6TTRlV0dqSElVMXFyVV8xWU5VLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsqd8DANBgkqhkiG9w0BAQsFAAOCAQEAle6cHqyMIJcPY5GGse2lIqW3b3rY MY9EBMjznKSqumnLHickNFjoRW3q6BnLuAASzYtkyN4HiVWhLxgxUrvOzlsFHYJV rJ2HqgRbRU6NmkmLSAkH1PjUYObWO4Gij8tOWwyQQnTMKtSWC2pqSwqy5Uobs2r7 qhPW6C8MwMW1PDpeicUn5XnjBkinLlm+/Gi/z1OEpU8KWY06ka07lIjj9tjgI1XN Q0fNYt8E2wyJ0RX/7jND6hZhhzxxWMMY/FUW91s+a7101IOX/lOGAGrGbHq0c0M6 FZlvKiDan3PXDmW9TL4Kl5G1rFPwlOOvAW5JyG8j/WaytGYFY+dOgHmgdQ== -----END CERTIFICATE-----Generated at Fri Nov 22 14:21:29 2024 by rpki-client on console-ams.rpki-client.org