$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/Je-iLZYvXy03qmZXuK8mIokvqRg.roa File: Je-iLZYvXy03qmZXuK8mIokvqRg.roa (raw, json) Hash identifier: zyEEV8x9Gijys8ZG4ePAg8o7Y3lMox3jLi43GFMQRLk= Subject key identifier: 25:EF:A2:2D:96:2F:5F:2D:37:AA:66:57:B8:AF:26:22:89:2F:A9:18 Certificate issuer: /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Certificate serial: 17 Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/Je-iLZYvXy03qmZXuK8mIokvqRg.roa Signing time: Sat 31 Aug 2024 01:32:18 +0000 ROA not before: Sat 31 Aug 2024 01:32:18 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 4695 IP address blocks: 210.156.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Validity Not Before: Aug 31 01:32:18 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=25EFA22D962F5F2D37AA6657B8AF2622892FA918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:6d:96:46:b9:67:13:8f:15:96:1d:4c:24: d6:cd:27:e2:1f:ff:ac:7f:68:c3:04:26:c1:aa:26: 28:fe:87:9a:69:30:c6:c2:c5:9d:29:a8:cb:4b:9f: f8:42:9b:ab:96:75:91:ac:c8:56:7e:e8:a9:0d:47: f0:bd:1a:d5:20:9e:1e:96:9f:db:1d:41:a7:13:e4: 80:26:4a:22:d5:5e:dc:1a:0b:88:fa:1f:56:71:de: 78:77:e9:a2:eb:36:32:55:bb:e0:fd:8b:5a:ad:6d: 92:53:50:70:a1:1f:c5:42:c4:76:79:d9:74:84:ca: 26:93:85:8c:08:0c:87:f6:e8:ee:05:fc:b8:7e:bb: 3c:6b:cc:55:c1:57:c7:ff:69:24:96:e8:bd:4d:b5: b0:33:92:89:8f:29:e0:a1:c4:70:99:15:8f:dd:01: 43:47:8c:71:e7:08:18:5f:26:10:4e:15:e7:42:9e: 17:fe:d9:8c:ab:31:dc:c7:ab:60:cd:09:07:fb:63: 09:3d:29:f3:e0:fc:e4:c1:bc:da:1b:cb:ed:d0:47: 53:09:14:b5:ba:bb:6e:a0:b1:6a:a2:8b:e2:c8:8f: d7:f4:22:7b:6e:ac:6f:dc:1e:d3:95:28:0c:42:78: cb:b4:db:aa:c1:40:54:e6:e7:3d:0d:9f:5f:33:a6: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EF:A2:2D:96:2F:5F:2D:37:AA:66:57:B8:AF:26:22:89:2F:A9:18 X509v3 Authority Key Identifier: keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/Je-iLZYvXy03qmZXuK8mIokvqRg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.156.128.0/20 Signature Algorithm: sha256WithRSAEncryption 59:71:ec:7d:c5:df:8c:98:43:c5:9d:1d:d3:f9:db:62:9d:6d: 6e:e1:17:9f:68:09:ea:b2:c3:f9:24:47:b0:5f:36:ce:aa:ec: a8:ae:0e:b2:94:53:38:88:5e:39:d0:f9:a7:4b:43:35:fe:fd: 93:e9:81:e3:cf:e3:08:68:b7:7d:b6:67:44:a8:a3:41:54:66: aa:19:1b:49:bb:b5:2b:09:04:16:ff:c9:03:73:6d:cd:fe:7c: 2c:a6:31:7d:bd:8b:e6:75:2e:74:f1:79:80:18:d0:a3:43:a1: cd:68:e1:33:8d:80:69:1b:a5:8d:65:d7:58:70:c5:aa:30:8b: 94:75:45:56:aa:c5:2a:5b:a3:95:0b:a2:be:78:ab:18:ad:67: d4:48:6e:3c:f8:bf:ad:36:ec:b9:73:6d:cf:ae:2a:53:00:a0: e2:64:21:c0:62:6c:c1:d4:99:21:89:0a:d0:1c:3d:fe:80:66: 4f:72:35:20:20:b4:12:72:b8:b0:10:d1:d2:1d:1d:68:46:02: 53:71:1a:aa:bd:a6:01:c7:34:b4:46:a8:ae:e3:36:69:06:0c: 9a:43:2e:2c:36:94:15:2b:db:dc:76:b7:3e:56:b7:98:6e:be: a1:e7:91:fa:27:af:94:d1:df:7d:32:db:e7:d6:7d:49:18:b8: 03:f3:7a:91 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDhG NDhGOTlDNUIwNzQ1Qjc3RjhCQ0E3NTRFNjM4ODVDQURDNDE4MB4XDTI0MDgzMTAx MzIxOFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMjVFRkEyMkQ5NjJGNUYy RDM3QUE2NjU3QjhBRjI2MjI4OTJGQTkxODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANArbZZGuWcTjxWWHUwk1s0n4h//rH9owwQmwaomKP6HmmkwxsLF nSmoy0uf+EKbq5Z1kazIVn7oqQ1H8L0a1SCeHpaf2x1BpxPkgCZKItVe3BoLiPof VnHeeHfpous2MlW74P2LWq1tklNQcKEfxULEdnnZdITKJpOFjAgMh/bo7gX8uH67 PGvMVcFXx/9pJJbovU21sDOSiY8p4KHEcJkVj90BQ0eMcecIGF8mEE4V50KeF/7Z jKsx3MerYM0JB/tjCT0p8+D85MG82hvL7dBHUwkUtbq7bqCxaqKL4siP1/Qie26s b9we05UoDEJ4y7TbqsFAVObnPQ2fXzOm0dsCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBQl76Itli9fLTeqZle4ryYiiS+pGDAfBgNVHSMEGDAWgBRdj0j5nFsHRbd/i8p1 TmOIXK3EGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTQvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0eEJnLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0 eEJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzU0L0plLWlMWll2WHkwM3FtWlh1SzhtSW9rdnFSZy5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATSnIAwDQYJKoZIhvcNAQELBQADggEBAFlx7H3F34yYQ8WdHdP522KdbW7hF59o Ceqyw/kkR7BfNs6q7KiuDrKUUziIXjnQ+adLQzX+/ZPpgePP4whot322Z0Soo0FU ZqoZG0m7tSsJBBb/yQNzbc3+fCymMX29i+Z1LnTxeYAY0KNDoc1o4TONgGkbpY1l 11hwxaowi5R1RVaqxSpbo5ULor54qxitZ9RIbjz4v6027Llzbc+uKlMAoOJkIcBi bMHUmSGJCtAcPf6AZk9yNSAgtBJyuLAQ0dIdHWhGAlNxGqq9pgHHNLRGqK7jNmkG DJpDLiw2lBUr29x2tz5Wt5huvqHnkfonr5TR330y2+fWfUkYuAPzepE= -----END CERTIFICATE-----Generated at Fri Nov 22 13:33:23 2024 by rpki-client on console-fra.rpki-client.org