$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/w-hxpgpXYbiCIx5pjmKJ50BebUg.roa File: w-hxpgpXYbiCIx5pjmKJ50BebUg.roa (raw, json) Hash identifier: 4ostjzQ/RD4IQE6eD+V8soEDYxSXTEg+4Y0R41tUjJE= Subject key identifier: C3:E8:71:A6:0A:57:61:B8:82:23:1E:69:8E:62:89:E7:40:5E:6D:48 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 04B1 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/w-hxpgpXYbiCIx5pjmKJ50BebUg.roa Signing time: Thu 29 Feb 2024 01:29:06 +0000 ROA not before: Thu 29 Feb 2024 01:29:06 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 42.125.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:29:06 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=C3E871A60A5761B882231E698E6289E7405E6D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fe:b6:6a:d1:cf:89:ca:e8:b2:4a:9d:6b:a8: f7:78:ff:9b:5b:68:94:49:3d:df:49:04:08:57:f4: 86:04:a2:7b:0c:1e:bc:b2:ae:37:13:44:99:93:2d: a4:6d:72:ad:bc:a9:a6:d6:98:49:b9:68:3c:b9:85: e4:14:17:c4:ee:f7:b2:bc:15:68:24:35:10:05:48: e2:99:d6:39:1e:81:f7:4b:1c:02:ee:96:86:0e:76: 81:04:fd:cc:37:f2:b4:ee:a0:c7:7c:68:68:a3:0e: 90:d2:4d:c7:1c:d4:f7:32:4e:1d:0f:d0:51:2b:a9: 57:25:19:16:be:75:19:45:f0:92:ea:c4:3a:e0:67: ad:d5:00:d1:6f:9b:e0:00:97:77:71:d0:c0:d9:4f: cb:9a:89:54:82:8c:c7:c7:56:54:40:1d:f7:e9:ed: e3:93:7b:95:85:c7:4a:c5:02:e1:78:c9:76:61:e0: 88:2e:28:26:df:53:db:0e:43:4e:bf:f0:d0:1c:fa: aa:84:26:27:36:41:33:33:5e:9d:a4:dc:f6:36:35: 1b:e4:d3:29:9b:3b:db:22:0f:65:f4:bf:ad:19:6d: ff:83:c6:c7:dc:92:e4:81:49:7e:c6:cc:b9:6b:ac: 15:10:ad:3b:98:89:76:81:85:f8:f3:d5:eb:34:46: 2a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E8:71:A6:0A:57:61:B8:82:23:1E:69:8E:62:89:E7:40:5E:6D:48 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/w-hxpgpXYbiCIx5pjmKJ50BebUg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 42.125.234.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:1c:47:09:fa:e9:06:56:31:a1:e7:4b:05:63:27:2f:c7:46: 07:13:4b:d1:e1:f2:67:61:47:66:e5:77:27:c1:68:3a:11:2e: ee:7e:4b:59:88:c3:ab:97:5e:e8:60:16:79:d4:4d:16:ae:b1: 1b:c8:78:15:cf:45:e8:de:3f:9d:14:50:0f:54:7e:6a:25:ea: 8b:00:d1:c3:e1:17:2a:75:5f:8f:ef:fa:e5:6d:82:86:b5:a3: 85:ce:29:5e:68:23:a2:b1:32:0b:a6:08:fc:88:69:b0:d1:61: 2d:c4:4c:e8:63:07:b3:d8:57:e7:c3:df:77:71:32:e9:cd:a9: 10:cd:1e:99:55:9a:28:6b:ab:9b:c5:b3:83:8c:69:3a:9b:c5: 49:d0:da:82:be:4e:3a:d0:dc:9c:8c:17:2f:6c:ff:c6:bf:7c: 00:70:43:d2:98:ab:fe:10:0f:1e:82:d7:77:ab:f5:62:92:57: 82:2b:36:6e:54:28:eb:32:43:ed:bb:9d:93:fb:77:35:5b:e5: f7:57:ee:61:ff:3a:7e:16:e4:87:41:45:e1:9e:73:69:5f:a2: f3:4c:a5:fb:cd:05:06:a9:35:aa:d3:c2:07:bf:40:13:ad:55: 6e:1b:bf:86:2c:83:4c:64:67:3e:28:4a:63:0f:33:de:6d:7a: d5:66:6f:10 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTI5MDZaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEMzRTg3MUE2MEE1NzYx Qjg4MjIzMUU2OThFNjI4OUU3NDA1RTZENDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl/rZq0c+JyuiySp1rqPd4/5tbaJRJPd9JBAhX9IYEonsMHryy rjcTRJmTLaRtcq28qabWmEm5aDy5heQUF8Tu97K8FWgkNRAFSOKZ1jkegfdLHALu loYOdoEE/cw38rTuoMd8aGijDpDSTccc1PcyTh0P0FErqVclGRa+dRlF8JLqxDrg Z63VANFvm+AAl3dx0MDZT8uaiVSCjMfHVlRAHffp7eOTe5WFx0rFAuF4yXZh4Igu KCbfU9sOQ06/8NAc+qqEJic2QTMzXp2k3PY2NRvk0ymbO9siD2X0v60Zbf+Dxsfc kuSBSX7GzLlrrBUQrTuYiXaBhfjz1es0RiqnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUw+hxpgpXYbiCIx5pjmKJ50BebUgwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L3ctaHhwZ3BYWWJpQ0l4NXBqbUtKNTBCZWJVZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAqfeowDQYJKoZIhvcNAQELBQADggEBAC4cRwn66QZWMaHnSwVjJy/HRgcT S9Hh8mdhR2bldyfBaDoRLu5+S1mIw6uXXuhgFnnUTRausRvIeBXPRejeP50UUA9U fmol6osA0cPhFyp1X4/v+uVtgoa1o4XOKV5oI6KxMgumCPyIabDRYS3ETOhjB7PY V+fD33dxMunNqRDNHplVmihrq5vFs4OMaTqbxUnQ2oK+TjrQ3JyMFy9s/8a/fABw Q9KYq/4QDx6C13er9WKSV4IrNm5UKOsyQ+27nZP7dzVb5fdX7mH/On4W5IdBReGe c2lfovNMpfvNBQapNarTwge/QBOtVW4bv4Ysg0xkZz4oSmMPM95tetVmbxA= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:23 2024 by rpki-client on console-fra.rpki-client.org