$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/8kwS1X-8VE0RjcxwQwHsHzqD1Jo.roa File: 8kwS1X-8VE0RjcxwQwHsHzqD1Jo.roa (raw, json) Hash identifier: FF1Z7Ggj5i0cjxB5j28CL+BL1fEeIWsXvlXRlBbeCHk= Subject key identifier: F2:4C:12:D5:7F:BC:54:4D:11:8D:CC:70:43:01:EC:1F:3A:83:D4:9A Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Certificate serial: 49 Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/8kwS1X-8VE0RjcxwQwHsHzqD1Jo.roa Signing time: Sat 31 Aug 2024 01:31:44 +0000 ROA not before: Sat 31 Aug 2024 01:31:44 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 9374 IP address blocks: 116.89.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Validity Not Before: Aug 31 01:31:44 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=F24C12D57FBC544D118DCC704301EC1F3A83D49A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:a5:15:c7:12:dc:47:3b:96:2a:88:ed:79: 5b:78:00:a0:a5:2c:44:32:34:22:b4:7e:7d:43:1c: 87:ee:f2:c5:2f:1e:88:39:8e:d1:a5:11:6a:02:6d: 23:ef:9c:78:ee:43:3b:62:98:5d:f5:50:80:56:98: a9:30:fe:6a:2e:87:f8:2c:e5:88:ff:a9:f9:6b:9c: 87:df:b1:84:68:96:9a:57:60:6e:ae:1e:99:df:8f: ce:a9:5c:85:61:48:cd:f0:b7:59:e3:46:01:d0:42: 3b:be:5c:e6:5e:af:71:a9:9c:af:d9:49:1d:72:97: 71:51:03:0b:f5:60:87:62:21:17:9d:ed:4b:de:d9: ce:a9:b3:d7:02:13:71:68:b7:09:48:ce:01:00:5a: ec:b4:1e:9c:91:fb:ae:73:14:dc:b4:9f:74:c5:73: 0f:36:79:ff:64:6e:11:13:bf:e0:e5:f7:a3:bf:65: 5f:ec:b5:4c:9b:fa:83:5e:a8:d4:3f:0b:f7:b2:b6: c0:35:02:ef:88:68:35:19:d1:cd:55:ff:29:5f:6e: 3c:20:47:4b:9d:32:ce:83:d7:20:68:dd:97:d5:83: 54:43:98:6e:e6:d3:ac:01:c0:1a:e7:8b:22:de:76: 3c:d8:dd:08:9b:6b:f2:14:66:e9:64:2c:44:3d:28: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4C:12:D5:7F:BC:54:4D:11:8D:CC:70:43:01:EC:1F:3A:83:D4:9A X509v3 Authority Key Identifier: keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/8kwS1X-8VE0RjcxwQwHsHzqD1Jo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.89.208.0/20 Signature Algorithm: sha256WithRSAEncryption 5e:73:c7:b0:b9:bb:53:21:43:2a:83:ea:2d:56:6c:a7:f9:08: 56:6c:89:75:be:84:74:22:25:cd:65:9e:d5:f2:1a:88:e3:2a: 76:f3:f8:58:9f:b0:10:f0:90:a9:e9:2e:da:12:da:66:71:7c: c6:95:ba:36:cb:72:59:92:31:e9:16:59:af:b2:2a:a1:53:55: bd:05:8e:1c:75:4b:39:00:29:ea:dc:08:f5:d9:ee:40:1a:81: 58:2a:ae:37:7e:05:5f:95:cc:44:d9:f5:58:94:36:1e:3a:59: 23:3d:99:a3:f1:c9:ee:40:4b:6f:64:8a:5f:11:78:14:34:60: 1b:72:f9:e4:ed:40:59:00:21:83:a5:81:85:8c:75:72:fe:68: 9b:7b:6d:71:2e:cf:85:40:d8:ff:a8:f7:b4:68:00:37:05:b1: c0:ad:42:ee:97:5b:86:d4:bc:dc:d2:f9:3d:42:91:a2:a4:a9: 7b:05:ec:be:7d:90:17:92:2a:ab:59:31:e9:d6:22:42:72:7f: 0f:a0:53:7a:51:55:a9:c5:37:67:9b:8c:54:72:9b:4a:b7:15: 58:d1:95:77:4c:12:10:1a:c8:12:0e:24:d2:57:8f:7e:85:af: 13:87:53:d2:8e:11:2e:62:0d:b1:ef:15:65:18:ae:83:91:b0: 4d:51:88:ec -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTI0MDgzMTAx MzE0NFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRjI0QzEyRDU3RkJDNTQ0 RDExOERDQzcwNDMwMUVDMUYzQTgzRDQ5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALjupRXHEtxHO5YqiO15W3gAoKUsRDI0IrR+fUMch+7yxS8eiDmO 0aURagJtI++ceO5DO2KYXfVQgFaYqTD+ai6H+CzliP+p+Wuch9+xhGiWmldgbq4e md+PzqlchWFIzfC3WeNGAdBCO75c5l6vcamcr9lJHXKXcVEDC/Vgh2IhF53tS97Z zqmz1wITcWi3CUjOAQBa7LQenJH7rnMU3LSfdMVzDzZ5/2RuERO/4OX3o79lX+y1 TJv6g16o1D8L97K2wDUC74hoNRnRzVX/KV9uPCBHS50yzoPXIGjdl9WDVEOYbubT rAHAGueLIt52PNjdCJtr8hRm6WQsRD0oVy0CAwEAAaOCAiIwggIeMB0GA1UdDgQW BBTyTBLVf7xUTRGNzHBDAewfOoPUmjAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy 00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzY4Lzhrd1MxWC04VkUwUmpjeHdRd0hzSHpxRDFKby5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAR0WdAwDQYJKoZIhvcNAQELBQADggEBAF5zx7C5u1MhQyqD6i1WbKf5CFZsiXW+ hHQiJc1lntXyGojjKnbz+FifsBDwkKnpLtoS2mZxfMaVujbLclmSMekWWa+yKqFT Vb0Fjhx1SzkAKercCPXZ7kAagVgqrjd+BV+VzETZ9ViUNh46WSM9maPxye5AS29k il8ReBQ0YBty+eTtQFkAIYOlgYWMdXL+aJt7bXEuz4VA2P+o97RoADcFscCtQu6X W4bUvNzS+T1CkaKkqXsF7L59kBeSKqtZMenWIkJyfw+gU3pRVanFN2ebjFRym0q3 FVjRlXdMEhAayBIOJNJXj36FrxOHU9KOES5iDbHvFWUYroORsE1RiOw= -----END CERTIFICATE-----Generated at Sun Feb 16 22:04:45 2025 by rpki-client