$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5648/3cBKkS_mgT1L8OZX8sG3u0gOEng.roa File: 3cBKkS_mgT1L8OZX8sG3u0gOEng.roa (raw, json) Hash identifier: wZDpMw83hglsra/PWei2dy/Bt6hGtLCKfd9dSYWgokE= Subject key identifier: DD:C0:4A:91:2F:E6:81:3D:4B:F0:E6:57:F2:C1:B7:BB:48:0E:12:78 Certificate issuer: /CN=81F38225F9EE5EF4AEEE1E8CCB3B666C1BF16D27 Certificate serial: 11 Authority key identifier: 81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/3cBKkS_mgT1L8OZX8sG3u0gOEng.roa Signing time: Fri 18 Oct 2024 09:37:37 +0000 ROA not before: Fri 18 Oct 2024 09:37:37 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 63806 IP address blocks: 43.228.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81F38225F9EE5EF4AEEE1E8CCB3B666C1BF16D27 Validity Not Before: Oct 18 09:37:37 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=DDC04A912FE6813D4BF0E657F2C1B7BB480E1278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:37:59:dd:d2:90:7c:7a:32:96:72:dc:3a:3b: 42:5c:da:a9:a5:48:6a:94:04:b7:58:57:7f:5d:13: 4e:69:cc:be:bc:c1:a1:e5:0f:59:81:e6:ee:06:41: 24:86:b7:b3:45:55:57:b2:a0:ca:00:81:96:7f:ab: d0:3a:fe:e0:6c:1a:b3:ed:6f:08:34:d8:cc:81:cf: 93:29:85:2c:82:cc:0d:6f:95:c3:d3:38:13:8a:33: d6:e4:53:17:42:45:29:8b:42:70:d9:34:80:93:3f: 74:68:28:78:1b:48:58:ad:34:6e:b8:30:a7:55:63: 48:45:bc:53:65:9f:ad:c2:cd:8d:e9:f8:a0:6f:38: f3:14:ae:40:ed:b6:66:9e:55:dd:2d:2c:a4:f9:d2: 61:c8:0a:a2:b1:b5:7d:5d:39:60:59:a1:5e:21:b0: 77:d2:c6:b2:46:5c:09:f8:e5:14:76:7f:c8:cc:07: 36:28:7d:c7:c0:91:36:91:38:98:52:08:95:2c:65: f0:82:a9:4b:3c:10:e9:fa:39:71:63:0c:b8:34:6e: 33:1d:4e:8d:ac:a6:db:0f:f3:9f:c8:0b:9f:cd:36: cc:13:46:83:d1:02:52:01:08:a7:65:97:d7:e2:44: d7:55:9c:8f:b5:dd:41:ba:a7:7c:4a:b1:c8:92:7b: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C0:4A:91:2F:E6:81:3D:4B:F0:E6:57:F2:C1:B7:BB:48:0E:12:78 X509v3 Authority Key Identifier: keyid:81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/3cBKkS_mgT1L8OZX8sG3u0gOEng.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.174.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:d2:fd:a3:79:2c:d3:d2:29:44:29:25:cb:31:f8:74:b7:f4: 59:e3:69:bf:7c:18:34:2a:f5:af:9d:6f:16:06:0f:f6:ef:6e: 5c:23:60:60:bf:94:39:71:34:08:76:f2:9b:91:83:b8:c9:b2: 5e:f6:f8:53:6a:86:32:08:7d:11:af:70:7d:03:94:52:79:58: eb:cc:6f:ef:e3:13:30:94:a4:14:3a:a2:b1:4d:fc:e4:b5:eb: 1c:f4:89:ac:9c:a7:2a:b2:c1:82:f6:32:9e:18:2c:ea:b6:55: 13:ee:76:77:52:dc:39:dc:a6:90:e2:00:18:9f:04:c9:dd:a8: 0c:1d:d7:38:f2:63:89:b2:8f:45:4e:5c:e8:6c:1c:d9:cf:e7: 9d:36:c4:0a:7b:5c:21:c8:3a:0f:1a:13:c3:5b:cc:11:fc:43: b5:34:80:98:ad:43:ff:32:a2:d5:ee:72:76:27:3a:d3:dc:79: ec:e1:8f:bb:05:d5:3f:95:11:9c:bf:15:56:15:76:39:89:bd: 1d:4e:65:ae:d4:37:42:45:56:d8:53:d2:14:40:d3:13:a5:15: 27:43:11:de:e8:7e:82:63:15:af:d0:47:ad:4a:46:c2:fc:f8: d8:ec:c3:f3:24:b3:eb:13:bf:04:09:03:e1:4b:5a:fd:e2:6c: 35:2a:4a:7b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MUYz ODIyNUY5RUU1RUY0QUVFRTFFOENDQjNCNjY2QzFCRjE2RDI3MB4XDTI0MTAxODA5 MzczN1oXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRERDMDRBOTEyRkU2ODEz RDRCRjBFNjU3RjJDMUI3QkI0ODBFMTI3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO43Wd3SkHx6MpZy3Do7QlzaqaVIapQEt1hXf10TTmnMvrzBoeUP WYHm7gZBJIa3s0VVV7KgygCBln+r0Dr+4Gwas+1vCDTYzIHPkymFLILMDW+Vw9M4 E4oz1uRTF0JFKYtCcNk0gJM/dGgoeBtIWK00brgwp1VjSEW8U2WfrcLNjen4oG84 8xSuQO22Zp5V3S0spPnSYcgKorG1fV05YFmhXiGwd9LGskZcCfjlFHZ/yMwHNih9 x8CRNpE4mFIIlSxl8IKpSzwQ6fo5cWMMuDRuMx1Ojaym2w/zn8gLn802zBNGg9EC UgEIp2WX1+JE11Wcj7XdQbqnfEqxyJJ7q50CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTdwEqRL+aBPUvw5lfywbe7SA4SeDAfBgNVHSMEGDAWgBSB84Il+e5e9K7uHozL O2ZsG/FtJzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTY0OC9nZk9DSmZudVh2U3U3aDZNeXp0bWJCdnhiU2MuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9nZk9DSmZudVh2U3U3aDZNeXp0bWJC dnhiU2MuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTY0OC8zY0JLa1NfbWdUMUw4T1pYOHNHM3UwZ09Fbmcucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAK+SuMA0GCSqGSIb3DQEBCwUAA4IBAQBN0v2jeSzT0ilEKSXLMfh0t/RZ 42m/fBg0KvWvnW8WBg/2725cI2Bgv5Q5cTQIdvKbkYO4ybJe9vhTaoYyCH0Rr3B9 A5RSeVjrzG/v4xMwlKQUOqKxTfzktesc9ImsnKcqssGC9jKeGCzqtlUT7nZ3Utw5 3KaQ4gAYnwTJ3agMHdc48mOJso9FTlzobBzZz+edNsQKe1whyDoPGhPDW8wR/EO1 NICYrUP/MqLV7nJ2JzrT3Hns4Y+7BdU/lRGcvxVWFXY5ib0dTmWu1DdCRVbYU9IU QNMTpRUnQxHe6H6CYxWv0EetSkbC/PjY7MPzJLPrE78ECQPhS1r94mw1Kkp7 -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:12 2025 by rpki-client