$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/HcMXuBvFRPmqQ7VxgtsBQawtROE.roa File: HcMXuBvFRPmqQ7VxgtsBQawtROE.roa (raw, json) Hash identifier: jXZ9Evxq6QMy75IjKsaxNmmkfEwE0f+SUloAH04ntyA= Subject key identifier: 1D:C3:17:B8:1B:C5:44:F9:AA:43:B5:71:82:DB:01:41:AC:2D:44:E1 Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Certificate serial: 2A Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/HcMXuBvFRPmqQ7VxgtsBQawtROE.roa Signing time: Sat 31 Aug 2024 01:32:01 +0000 ROA not before: Sat 31 Aug 2024 01:32:01 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 59127 IP address blocks: 61.44.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Validity Not Before: Aug 31 01:32:01 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=1DC317B81BC544F9AA43B57182DB0141AC2D44E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:32:0d:62:07:3b:03:75:ce:e4:e0:1a:6f: 42:e6:38:67:99:f0:53:67:28:10:82:8f:d1:12:cb: 35:d1:e7:42:7c:93:d9:03:db:85:d4:61:a9:4d:b1: 5e:9f:60:99:e2:74:8c:2d:5f:b5:6e:70:e6:5a:a6: de:77:ed:a8:b1:7d:55:7c:34:77:b6:56:0a:0d:3d: fa:94:c6:77:da:7e:75:b1:a2:8e:0a:39:38:70:0c: 08:0c:f2:cc:97:c4:a2:15:6c:1d:a8:d3:26:47:88: 45:97:d6:06:53:7e:fa:77:94:6d:f6:4c:55:6b:20: ec:d2:17:57:e4:af:94:0b:97:22:ce:fc:55:6b:a6: 9a:f0:93:8a:de:5d:9a:47:8c:9c:30:a2:d0:c5:ef: fd:e8:92:40:12:42:73:6d:8b:e9:09:dc:03:6d:1d: fd:f9:4d:d5:b6:ff:3b:b7:8c:a5:47:cf:20:f6:fe: 23:22:d8:5f:9a:ad:67:0d:83:2b:8d:07:e7:ea:55: 83:9d:8e:4d:a2:1c:0a:92:63:2c:1b:71:d0:4a:ab: 7a:02:f8:8e:65:77:ca:a7:11:be:85:46:6d:fd:bb: c2:b6:eb:9d:e7:d3:68:22:8f:69:0d:32:14:33:1b: 4b:2d:b6:95:b5:33:c9:98:c6:2c:9c:a8:35:7a:eb: 3b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C3:17:B8:1B:C5:44:F9:AA:43:B5:71:82:DB:01:41:AC:2D:44:E1 X509v3 Authority Key Identifier: keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/HcMXuBvFRPmqQ7VxgtsBQawtROE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.44.160.0/19 Signature Algorithm: sha256WithRSAEncryption 00:db:12:9d:8f:39:a8:87:f2:a6:7c:48:a5:69:76:9e:97:d4: d0:7d:28:22:98:04:3e:c9:8a:af:df:3c:8e:c9:b6:9a:79:31: 96:31:6d:ca:7c:db:4b:52:bd:ad:49:ac:1e:8f:9c:84:e0:75: ce:36:bf:98:fb:58:2a:ca:00:4b:df:06:4c:24:00:56:9d:44: a4:d6:e6:dc:72:c6:c2:bb:58:c8:78:de:a8:e7:6e:9c:b0:ef: 4b:01:d2:74:1a:c6:4d:a8:d7:93:cb:3e:ad:67:ac:b2:7c:a4: 45:6c:2b:09:56:a1:31:de:fd:d8:46:32:19:b6:91:6c:61:3a: 66:f0:94:97:cb:44:2d:af:3d:5c:c6:40:cc:a1:27:71:2d:67: ed:2d:da:46:87:21:11:30:e3:c7:fe:26:e4:74:32:55:f0:4a: a2:69:6c:9b:31:8b:33:6f:f6:14:3d:9a:86:9a:f7:d9:61:59: 98:f1:d0:26:fc:e9:88:4b:00:67:e8:fe:50:a4:2a:ec:16:e7: af:0c:15:76:13:36:25:8d:a1:0f:e2:d5:3b:7c:dc:2f:18:44: 84:1d:cc:03:a5:6b:ec:67:71:7b:2f:68:d9:23:06:86:3b:d7: 5f:f8:f0:c4:c4:ce:a4:6b:dd:75:50:ed:6d:ca:a8:59:e5:4a: fe:33:e1:b2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTI0MDgzMTAx MzIwMVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMURDMzE3QjgxQkM1NDRG OUFBNDNCNTcxODJEQjAxNDFBQzJENDRFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANOuMg1iBzsDdc7k4BpvQuY4Z5nwU2coEIKP0RLLNdHnQnyT2QPb hdRhqU2xXp9gmeJ0jC1ftW5w5lqm3nftqLF9VXw0d7ZWCg09+pTGd9p+dbGijgo5 OHAMCAzyzJfEohVsHajTJkeIRZfWBlN++neUbfZMVWsg7NIXV+SvlAuXIs78VWum mvCTit5dmkeMnDCi0MXv/eiSQBJCc22L6QncA20d/flN1bb/O7eMpUfPIPb+IyLY X5qtZw2DK40H5+pVg52OTaIcCpJjLBtx0EqregL4jmV3yqcRvoVGbf27wrbrnefT aCKPaQ0yFDMbSy22lbUzyZjGLJyoNXrrO0UCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQdwxe4G8VE+apDtXGC2wFBrC1E4TAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40 am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODIvSGNNWHVCdkZSUG1xUTdWeGd0c0JRYXd0Uk9FLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBT0soDANBgkqhkiG9w0BAQsFAAOCAQEAANsSnY85qIfypnxIpWl2npfU0H0o IpgEPsmKr988jsm2mnkxljFtynzbS1K9rUmsHo+chOB1zja/mPtYKsoAS98GTCQA Vp1EpNbm3HLGwrtYyHjeqOdunLDvSwHSdBrGTajXk8s+rWessnykRWwrCVahMd79 2EYyGbaRbGE6ZvCUl8tELa89XMZAzKEncS1n7S3aRochETDjx/4m5HQyVfBKomls mzGLM2/2FD2ahpr32WFZmPHQJvzpiEsAZ+j+UKQq7BbnrwwVdhM2JY2hD+LVO3zc LxhEhB3MA6Vr7Gdxey9o2SMGhjvXX/jwxMTOpGvddVDtbcqoWeVK/jPhsg== -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:58 2025 by rpki-client