$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/6wMuH6vwVMhL3d7yGnyjm9XsHhQ.roa File: 6wMuH6vwVMhL3d7yGnyjm9XsHhQ.roa (raw, json) Hash identifier: s8N21nayat0LaOn90kwx9uMe+7QoE9Vahswe+ydjznk= Subject key identifier: EB:03:2E:1F:AB:F0:54:C8:4B:DD:DE:F2:1A:7C:A3:9B:D5:EC:1E:14 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 4F Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/6wMuH6vwVMhL3d7yGnyjm9XsHhQ.roa Signing time: Sat 31 Aug 2024 01:30:26 +0000 ROA not before: Sat 31 Aug 2024 01:30:26 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 18144 IP address blocks: 36.53.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 31 01:30:26 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=EB032E1FABF054C84BDDDEF21A7CA39BD5EC1E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:01:71:d9:a5:95:04:b8:19:97:50:51:46: be:2f:a1:29:7f:b9:30:b6:f1:2b:e0:85:4c:e4:fc: e9:fd:9c:29:a3:70:65:ee:90:b7:1d:ef:7b:f0:a5: 34:27:7a:83:2c:c9:ea:11:a9:be:a1:76:e2:f3:39: 70:f8:6a:e9:fc:6a:49:6a:0a:df:c2:d6:61:37:a4: 4b:81:67:df:a8:71:56:ee:7d:12:e0:eb:d1:26:dd: 40:e4:d4:52:f9:35:75:47:b6:e7:b2:ea:a6:fa:43: df:fb:44:db:98:9f:5b:3c:16:6e:3c:81:b0:c3:87: 96:97:11:74:79:1c:9c:97:64:a5:6f:65:c8:ad:46: 95:91:c2:1f:97:a7:b5:8a:49:b1:16:af:28:e8:3c: 21:a1:a4:58:43:3a:64:62:56:d9:55:ad:e1:31:8f: 15:bc:30:a2:e5:27:fb:5f:69:c8:49:64:aa:42:86: 0a:d7:98:80:c5:b3:a1:f1:1c:30:d6:33:65:9b:3f: d2:ef:0d:9b:48:5b:db:52:12:76:86:a8:4b:00:7a: 11:90:21:a0:f1:3a:0d:fd:eb:9d:54:8e:ea:9c:ff: b1:df:d2:56:39:47:77:ef:b0:48:c7:c2:9f:a5:43: 34:e3:5a:13:76:c3:db:fc:90:6f:46:e9:b8:96:2a: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:03:2E:1F:AB:F0:54:C8:4B:DD:DE:F2:1A:7C:A3:9B:D5:EC:1E:14 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/6wMuH6vwVMhL3d7yGnyjm9XsHhQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.53.232.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:ff:fd:0c:47:0f:c6:4e:79:cf:a7:6d:de:be:47:54:d3:03: c4:c2:f2:a6:2f:61:b4:93:a3:0a:cf:c3:e3:29:59:ef:50:e5: 1d:0d:36:8d:db:78:58:17:40:dd:d9:f2:36:bb:71:c7:1c:11: 20:d5:57:e4:a9:c8:5b:e4:76:d0:4b:a1:12:f7:26:bc:fd:e6: dd:19:08:d4:92:06:49:14:5a:f3:c6:45:89:a7:cb:88:14:df: 9d:22:df:1f:5b:03:f8:42:87:43:88:32:8f:28:da:7b:72:3a: 49:06:ba:9c:21:dc:0d:95:a5:a2:ea:1d:a2:84:06:7b:d9:59: f5:a1:f9:2e:a7:00:b4:71:58:85:c0:b8:33:36:d9:32:e1:80: 85:47:33:ad:50:51:b8:15:b5:da:6c:46:1a:fe:80:c5:bf:36: 57:f4:c8:55:54:d7:97:0a:d2:da:dd:71:35:c6:ed:fa:c2:21: 9b:6a:25:71:c0:d2:7e:0a:1a:c7:32:ef:d5:a8:1b:99:c0:fe: ef:0d:10:75:7e:ff:85:1b:fe:9b:c6:c5:5d:a8:d2:29:49:be: 73:c6:99:4a:55:c5:01:67:9e:26:05:51:87:f9:ca:8c:e2:8d: 21:d5:a0:e2:b4:c6:05:03:6f:ce:46:8b:8f:c3:67:98:0c:9d: 8c:34:4e:0c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI0MDgzMTAx MzAyNloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRUIwMzJFMUZBQkYwNTRD ODRCRERERUYyMUE3Q0EzOUJENUVDMUUxNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM6iAXHZpZUEuBmXUFFGvi+hKX+5MLbxK+CFTOT86f2cKaNwZe6Q tx3ve/ClNCd6gyzJ6hGpvqF24vM5cPhq6fxqSWoK38LWYTekS4Fn36hxVu59EuDr 0SbdQOTUUvk1dUe257LqpvpD3/tE25ifWzwWbjyBsMOHlpcRdHkcnJdkpW9lyK1G lZHCH5entYpJsRavKOg8IaGkWEM6ZGJW2VWt4TGPFbwwouUn+19pyElkqkKGCteY gMWzofEcMNYzZZs/0u8Nm0hb21ISdoaoSwB6EZAhoPE6Df3rnVSO6pz/sd/SVjlH d++wSMfCn6VDNONaE3bD2/yQb0bpuJYqvRUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTrAy4fq/BUyEvd3vIafKOb1eweFDAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvNndNdUg2dndWTWhMM2Q3eUdueWptOVhzSGhRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyQ16DANBgkqhkiG9w0BAQsFAAOCAQEAnv/9DEcPxk55z6dt3r5HVNMDxMLy pi9htJOjCs/D4ylZ71DlHQ02jdt4WBdA3dnyNrtxxxwRINVX5KnIW+R20EuhEvcm vP3m3RkI1JIGSRRa88ZFiafLiBTfnSLfH1sD+EKHQ4gyjyjae3I6SQa6nCHcDZWl ouodooQGe9lZ9aH5LqcAtHFYhcC4MzbZMuGAhUczrVBRuBW12mxGGv6Axb82V/TI VVTXlwrS2t1xNcbt+sIhm2olccDSfgoaxzLv1agbmcD+7w0QdX7/hRv+m8bFXajS KUm+c8aZSlXFAWeeJgVRh/nKjOKNIdWg4rTGBQNvzkaLj8NnmAydjDRODA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:04:13 2025 by rpki-client