$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/71iWiw79Qcv5_nOSZ0yHL47PNgo.roa File: 71iWiw79Qcv5_nOSZ0yHL47PNgo.roa (raw, json) Hash identifier: /eioVn3+794FU70tzw+1XIPb63RqCMxaqyFGhebxgyo= Subject key identifier: EF:58:96:8B:0E:FD:41:CB:F9:FE:73:92:67:4C:87:2F:8E:CF:36:0A Certificate issuer: /CN=4F2A36BE85AB88338854C5A568CCD44E19E654F1 Certificate serial: 17 Authority key identifier: 4F:2A:36:BE:85:AB:88:33:88:54:C5:A5:68:CC:D4:4E:19:E6:54:F1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/71iWiw79Qcv5_nOSZ0yHL47PNgo.roa Signing time: Sat 31 Aug 2024 01:31:58 +0000 ROA not before: Sat 31 Aug 2024 01:31:58 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 59127 IP address blocks: 216.171.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2A36BE85AB88338854C5A568CCD44E19E654F1 Validity Not Before: Aug 31 01:31:58 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=EF58968B0EFD41CBF9FE7392674C872F8ECF360A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:f6:ef:5f:c5:1f:31:70:39:a1:0e:35:cc: 7d:6e:74:b5:9f:fd:a2:16:3a:e5:83:08:64:a9:78: d2:80:49:ce:6f:b4:ab:53:13:9c:90:8d:fa:48:b8: 3c:ae:0e:b7:8f:99:e8:36:4d:10:37:d3:0a:0b:e9: 6d:7c:22:36:57:5c:b6:c5:6b:8b:95:3d:5d:bc:9b: 12:f9:20:b3:4e:ac:c4:2c:45:df:22:72:f8:f0:15: cc:50:50:75:a2:6c:e9:e8:c9:22:17:38:76:59:31: 16:7d:98:e3:17:f7:bf:64:33:a4:1d:48:40:13:eb: ea:22:86:85:0c:94:ce:c0:b9:5f:32:61:2f:17:15: 4c:9c:a9:bb:29:19:68:37:96:9a:8b:13:63:0a:45: ea:ed:47:8c:54:a8:77:bc:e5:21:cc:6f:67:de:4a: c5:83:b3:58:ce:87:fa:b9:ed:c9:72:91:f1:62:b8: 7a:ce:ef:ba:91:8a:35:97:42:4f:32:a0:7e:60:b8: ed:d5:f2:74:43:da:b3:36:1d:97:cf:85:38:cd:bb: bf:5e:07:bd:fe:cd:dd:22:dc:b4:72:0a:ff:3c:6c: d3:ba:a2:91:77:e8:65:40:96:83:ba:fe:90:30:73: 14:26:78:f6:34:2b:7a:df:b0:f3:8c:96:80:8c:1d: 8d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:58:96:8B:0E:FD:41:CB:F9:FE:73:92:67:4C:87:2F:8E:CF:36:0A X509v3 Authority Key Identifier: keyid:4F:2A:36:BE:85:AB:88:33:88:54:C5:A5:68:CC:D4:4E:19:E6:54:F1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/71iWiw79Qcv5_nOSZ0yHL47PNgo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 216.171.112.0/20 Signature Algorithm: sha256WithRSAEncryption b9:44:5e:49:a2:f5:b6:2d:6e:29:5a:28:d1:54:a0:60:13:4a: 58:34:74:bc:4f:d5:fa:91:6d:df:48:9b:a7:58:72:96:8c:7b: 14:e8:7f:23:6a:c3:a2:d4:fa:b7:7f:34:11:8d:ae:20:1f:28: 65:64:71:3b:ac:88:44:a0:42:2f:25:50:29:29:9b:10:73:00: 66:c7:b7:54:59:b2:01:7b:02:8b:74:29:53:30:99:07:1a:f7: 61:90:f7:62:53:72:e8:58:32:7d:02:5c:ab:c2:39:4e:89:42: 6e:a9:fd:df:13:81:fc:c5:87:d5:9d:9c:fd:fe:0f:f3:8c:60: 60:d4:09:fe:fe:59:d1:32:3e:73:ca:88:7c:99:a3:43:f5:7d: f3:d6:83:fd:08:a9:9c:df:50:ab:05:07:9f:34:12:39:75:21: 11:83:d7:a4:10:e9:e0:bd:9f:9f:4f:85:21:44:5c:f0:b4:2c: c5:25:25:2c:c9:db:5d:2f:35:ae:01:28:fe:f5:d1:66:60:ad: 37:1c:f1:c4:9b:26:71:47:c2:c6:37:6f:e2:bf:bb:f3:93:a5: b0:e4:f6:4d:dd:53:70:19:b6:98:52:08:5b:19:68:eb:c9:68: 70:6e:13:cf:31:c0:91:8e:a1:14:f4:ec:26:63:56:c6:40:87: c2:83:6c:bc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjJB MzZCRTg1QUI4ODMzODg1NEM1QTU2OENDRDQ0RTE5RTY1NEYxMB4XDTI0MDgzMTAx MzE1OFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRUY1ODk2OEIwRUZENDFD QkY5RkU3MzkyNjc0Qzg3MkY4RUNGMzYwQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMbM9u9fxR8xcDmhDjXMfW50tZ/9ohY65YMIZKl40oBJzm+0q1MT nJCN+ki4PK4Ot4+Z6DZNEDfTCgvpbXwiNldctsVri5U9XbybEvkgs06sxCxF3yJy +PAVzFBQdaJs6ejJIhc4dlkxFn2Y4xf3v2QzpB1IQBPr6iKGhQyUzsC5XzJhLxcV TJypuykZaDeWmosTYwpF6u1HjFSod7zlIcxvZ95KxYOzWM6H+rntyXKR8WK4es7v upGKNZdCTzKgfmC47dXydEPaszYdl8+FOM27v14Hvf7N3SLctHIK/zxs07qikXfo ZUCWg7r+kDBzFCZ49jQret+w84yWgIwdjaECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTvWJaLDv1By/n+c5JnTIcvjs82CjAfBgNVHSMEGDAWgBRPKja+hauIM4hUxaVo zNROGeZU8TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgyL1R5bzJ2b1dyaURPSVZNV2xhTXpVVGhubVZQRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R5bzJ2b1dyaURPSVZNV2xhTXpVVGhu bVZQRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODIvNzFpV2l3NzlRY3Y1X25PU1oweUhMNDdQTmdvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNircDANBgkqhkiG9w0BAQsFAAOCAQEAuUReSaL1ti1uKVoo0VSgYBNKWDR0 vE/V+pFt30ibp1hylox7FOh/I2rDotT6t380EY2uIB8oZWRxO6yIRKBCLyVQKSmb EHMAZse3VFmyAXsCi3QpUzCZBxr3YZD3YlNy6FgyfQJcq8I5TolCbqn93xOB/MWH 1Z2c/f4P84xgYNQJ/v5Z0TI+c8qIfJmjQ/V989aD/QipnN9QqwUHnzQSOXUhEYPX pBDp4L2fn0+FIURc8LQsxSUlLMnbXS81rgEo/vXRZmCtNxzxxJsmcUfCxjdv4r+7 85OlsOT2Td1TcBm2mFIIWxlo68locG4TzzHAkY6hFPTsJmNWxkCHwoNsvA== -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:17 2024 by rpki-client on console-fra.rpki-client.org