$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/NLN_hCgOlMFLd30kfZ7oY7HSbwk.roa File: NLN_hCgOlMFLd30kfZ7oY7HSbwk.roa (raw, json) Hash identifier: cpqJpdQPgXwxk4DMXR1LHQiSnQe8rF1LeuIxyXt6dN8= Subject key identifier: 34:B3:7F:84:28:0E:94:C1:4B:77:7D:24:7D:9E:E8:63:B1:D2:6F:09 Certificate issuer: /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Certificate serial: 2D Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/NLN_hCgOlMFLd30kfZ7oY7HSbwk.roa Signing time: Sat 31 Aug 2024 01:31:22 +0000 ROA not before: Sat 31 Aug 2024 01:31:22 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 18274 IP address blocks: 219.100.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Validity Not Before: Aug 31 01:31:22 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=34B37F84280E94C14B777D247D9EE863B1D26F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:7c:2e:0e:3b:ee:09:bf:e5:4e:ea:21:b4: c7:70:8c:c7:73:07:ae:77:d4:7e:d2:a2:ab:e7:0e: 46:f8:b7:f8:d1:98:5b:e9:e7:38:bb:32:81:58:38: 5c:fc:5b:25:58:f7:de:dd:58:46:89:16:bc:be:d3: b0:a1:01:52:2f:49:cd:2c:3a:ca:06:5e:95:c2:a6: f0:73:48:98:84:0e:8a:34:44:48:90:d4:06:62:d2: 20:a3:27:cc:51:29:4c:61:a4:6c:3e:f9:88:b5:19: 8c:27:c1:6d:d0:73:c2:a0:a0:ab:e1:52:82:1f:49: cf:9a:a1:01:2d:d6:ef:a7:01:19:29:b5:94:a2:40: f5:e9:ed:b0:12:e9:be:0f:8e:5a:35:58:c9:76:63: f8:13:09:87:74:25:c0:a1:f3:80:33:c6:65:0a:4d: 27:0e:c4:86:01:34:63:4a:9b:b9:4d:e2:37:92:58: f2:bb:ec:46:f3:3a:bd:f4:53:8f:48:23:4e:70:d2: 60:bb:d4:ef:ba:47:48:90:03:1a:e4:ad:7f:00:03: ee:88:86:97:65:1a:64:20:00:4b:07:40:0c:ff:d6: 42:85:24:db:e8:53:7b:7e:55:90:12:58:e4:e1:25: 9e:10:c7:8d:8d:6f:3a:be:e7:4b:77:41:6a:90:fa: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B3:7F:84:28:0E:94:C1:4B:77:7D:24:7D:9E:E8:63:B1:D2:6F:09 X509v3 Authority Key Identifier: keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/NLN_hCgOlMFLd30kfZ7oY7HSbwk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.164.0/22 Signature Algorithm: sha256WithRSAEncryption 65:fd:09:8a:22:d1:29:cb:00:b8:68:de:23:69:a0:70:e7:83: a6:4b:b4:d2:74:e7:1a:40:82:b7:0d:4c:58:21:f3:e6:e4:69: 1c:36:9a:f2:09:27:2e:f8:59:6b:a1:d5:f9:3b:3f:0c:16:a3: 97:ae:0f:cb:6b:e0:86:dc:90:83:31:1f:10:48:c0:e7:58:93: d6:88:ad:49:b2:69:82:5e:b1:b0:91:d9:30:19:b8:7d:cb:60: 41:68:93:e7:bd:21:1c:5b:33:6d:b7:fe:36:85:5c:f3:0a:16: 4e:d7:ce:19:1d:5c:f1:14:82:87:1c:81:5b:4e:c4:04:bb:a7: de:dc:e2:5a:23:d8:10:de:cf:52:f0:e6:88:a8:fb:46:5e:9f: 57:fa:ea:f1:52:d2:13:ed:7f:00:dd:f9:0c:39:5c:b7:38:68: ed:61:69:f2:60:48:88:86:01:be:38:4b:2a:e4:da:f0:bb:be: 7a:74:c2:b7:52:15:e1:03:a7:03:3c:78:a2:71:f7:ae:8a:c8: 1f:d3:e9:68:98:fb:f4:8d:41:02:d9:36:56:f6:50:b5:ff:fa: 4f:09:b9:5e:a2:0e:dc:f6:ca:2c:29:07:9c:06:2f:cc:05:40: 15:43:09:f2:4b:f8:14:46:8c:10:c0:ca:c7:9f:a2:68:39:29: b3:ac:a9:9b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDhE MjY1ODgxNUNBM0M0RUU1QTUzRjkxQkE2MTI2OEUzRjRDMEUxMB4XDTI0MDgzMTAx MzEyMloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMzRCMzdGODQyODBFOTRD MTRCNzc3RDI0N0Q5RUU4NjNCMUQyNkYwOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALq0fC4OO+4Jv+VO6iG0x3CMx3MHrnfUftKiq+cORvi3+NGYW+nn OLsygVg4XPxbJVj33t1YRokWvL7TsKEBUi9JzSw6ygZelcKm8HNImIQOijRESJDU BmLSIKMnzFEpTGGkbD75iLUZjCfBbdBzwqCgq+FSgh9Jz5qhAS3W76cBGSm1lKJA 9entsBLpvg+OWjVYyXZj+BMJh3QlwKHzgDPGZQpNJw7EhgE0Y0qbuU3iN5JY8rvs RvM6vfRTj0gjTnDSYLvU77pHSJADGuStfwAD7oiGl2UaZCAASwdADP/WQoUk2+hT e35VkBJY5OElnhDHjY1vOr7nS3dBapD6qxkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ0s3+EKA6UwUt3fSR9nuhjsdJvCTAfBgNVHSMEGDAWgBSNjSZYgVyjxO5aU/kb phJo4/TA4TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzkzL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9QMHdPRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9Q MHdPRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83OTMvTkxOX2hDZ09sTUZMZDMwa2ZaN29ZN0hTYndrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAttkpDANBgkqhkiG9w0BAQsFAAOCAQEAZf0JiiLRKcsAuGjeI2mgcOeDpku0 0nTnGkCCtw1MWCHz5uRpHDaa8gknLvhZa6HV+Ts/DBajl64Py2vghtyQgzEfEEjA 51iT1oitSbJpgl6xsJHZMBm4fctgQWiT570hHFszbbf+NoVc8woWTtfOGR1c8RSC hxyBW07EBLun3tziWiPYEN7PUvDmiKj7Rl6fV/rq8VLSE+1/AN35DDlctzho7WFp 8mBIiIYBvjhLKuTa8Lu+enTCt1IV4QOnAzx4onH3rorIH9PpaJj79I1BAtk2VvZQ tf/6Twm5XqIO3PbKLCkHnAYvzAVAFUMJ8kv4FEaMEMDKx5+iaDkps6ypmw== -----END CERTIFICATE-----Generated at Sun Feb 16 22:22:08 2025 by rpki-client