$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/lBpfv9HN-OIq0r3PphiMU151ywk.roa File: lBpfv9HN-OIq0r3PphiMU151ywk.roa (raw, json) Hash identifier: +i+i7gnheVidSj9lYb7pVeuKOjjJV/x8PdWGO28uWZU= Subject key identifier: 94:1A:5F:BF:D1:CD:F8:E2:2A:D2:BD:CF:A6:18:8C:53:5E:75:CB:09 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 014A Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/lBpfv9HN-OIq0r3PphiMU151ywk.roa Signing time: Fri 31 May 2024 01:31:16 +0000 ROA not before: Fri 31 May 2024 01:31:16 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 32787 IP address blocks: 210.148.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: May 31 01:31:16 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=941A5FBFD1CDF8E22AD2BDCFA6188C535E75CB09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:b4:84:c6:de:7b:3c:0c:b9:bd:ef:f3:a3: b2:37:f7:41:75:9d:49:d8:f2:b7:02:c6:6e:49:53: 84:5e:2c:27:65:8c:88:0b:3e:ec:0c:57:97:84:4d: d1:9e:aa:c5:c2:d0:d4:8e:3b:51:bf:c9:e4:35:ca: c8:c3:fc:b8:bb:9e:50:bc:6b:85:67:52:0c:a2:40: da:e6:d4:60:25:d7:04:44:5c:cd:08:b7:38:95:3a: 28:05:08:c2:d3:eb:d2:bc:f8:39:d8:56:dc:ff:8b: e2:e0:c9:37:40:6d:25:43:e0:30:40:7b:9e:68:2c: 20:39:74:e0:44:05:e5:49:c6:36:a7:7d:98:18:e5: a9:fd:d3:4b:8f:f2:1f:39:4e:c2:99:18:d7:87:27: 0d:8c:5f:ef:f0:6c:f0:56:ee:9f:76:b2:8f:76:b5: 1d:c9:dd:0e:95:0f:f4:d8:7b:06:2a:c1:b8:6a:1f: 84:3e:68:86:60:e7:83:62:39:24:68:81:96:85:b9: c0:52:22:1a:6e:e3:96:ea:a4:b3:84:0c:60:78:61: 9d:a6:d7:37:38:c0:39:da:82:ea:22:df:ee:00:eb: 95:8e:52:27:3b:12:60:21:73:f9:9d:e8:a2:37:08: 74:6f:e2:80:56:e6:ac:b8:6f:35:11:7c:71:ae:15: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1A:5F:BF:D1:CD:F8:E2:2A:D2:BD:CF:A6:18:8C:53:5E:75:CB:09 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/lBpfv9HN-OIq0r3PphiMU151ywk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.148.131.0/24 Signature Algorithm: sha256WithRSAEncryption 10:a2:83:7d:d7:ba:a2:b5:e1:0e:a3:f2:b4:a7:0f:45:40:e2: 2c:e0:c9:5a:b6:ec:f7:9a:e3:36:49:8d:04:fd:bb:19:ff:04: 31:31:50:ff:e1:3a:d1:f4:c9:24:52:26:d0:6b:8f:85:6d:30: 2a:13:d3:cc:6e:6a:c6:92:3b:3b:b6:65:54:21:a0:c1:3a:93: 4b:19:9d:ca:cd:a3:1e:da:01:bf:fb:7e:da:90:d6:be:e3:e7: e4:71:16:30:9b:f0:55:62:7f:a2:cf:2e:41:d7:3b:27:7d:2c: 96:4c:f3:56:cf:af:95:a4:c9:fe:a1:55:cb:ac:d8:73:31:8a: b4:52:33:ec:89:6c:6e:9e:f0:15:6c:82:a5:84:1f:00:74:66: 92:b1:e3:67:34:79:f7:c1:78:53:88:16:7b:28:c0:b3:e4:9d: f6:01:4b:d4:ed:d7:e4:2a:d2:61:0b:50:94:ba:59:b1:21:90: 1d:a4:43:a1:c6:0e:05:31:11:73:de:39:56:1e:3f:11:06:d5: 0a:70:05:f1:5a:e3:ff:d3:a9:2e:e2:73:70:93:36:34:1b:b4: ce:a8:32:e6:04:06:d5:b6:e4:bd:d3:de:04:19:ba:6f:46:90: 37:9e:d4:8b:22:9d:c2:20:10:d4:21:5c:cf:c9:db:9d:a8:af: ac:7b:04:23 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA1MzEw MTMxMTZaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk0MUE1RkJGRDFDREY4 RTIyQUQyQkRDRkE2MTg4QzUzNUU3NUNCMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCra7SExt57PAy5ve/zo7I390F1nUnY8rcCxm5JU4ReLCdljIgL PuwMV5eETdGeqsXC0NSOO1G/yeQ1ysjD/Li7nlC8a4VnUgyiQNrm1GAl1wREXM0I tziVOigFCMLT69K8+DnYVtz/i+LgyTdAbSVD4DBAe55oLCA5dOBEBeVJxjanfZgY 5an900uP8h85TsKZGNeHJw2MX+/wbPBW7p92so92tR3J3Q6VD/TYewYqwbhqH4Q+ aIZg54NiOSRogZaFucBSIhpu45bqpLOEDGB4YZ2m1zc4wDnaguoi3+4A65WOUic7 EmAhc/md6KI3CHRv4oBW5qy4bzURfHGuFbPZAgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUlBpfv9HN+OIq0r3PphiMU151ywkwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvbEJwZnY5SE4tT0lxMHIzUHBoaU1VMTUxeXdrLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANKUgzANBgkqhkiG9w0BAQsFAAOCAQEAEKKDfde6orXhDqPytKcPRUDiLODJWrbs 95rjNkmNBP27Gf8EMTFQ/+E60fTJJFIm0GuPhW0wKhPTzG5qxpI7O7ZlVCGgwTqT Sxmdys2jHtoBv/t+2pDWvuPn5HEWMJvwVWJ/os8uQdc7J30slkzzVs+vlaTJ/qFV y6zYczGKtFIz7Ilsbp7wFWyCpYQfAHRmkrHjZzR598F4U4gWeyjAs+Sd9gFL1O3X 5CrSYQtQlLpZsSGQHaRDocYOBTERc945Vh4/EQbVCnAF8Vrj/9OpLuJzcJM2NBu0 zqgy5gQG1bbkvdPeBBm6b0aQN57UiyKdwiAQ1CFcz8nbnaivrHsEIw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:35 2025 by rpki-client