$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/hWZKyv4crt0bGDmk-l15WnfM3XU.roa File: hWZKyv4crt0bGDmk-l15WnfM3XU.roa (raw, json) Hash identifier: GK3bHNAfMAbXjErPYZzmCiJMFBNwl/ztfVNs4P6F928= Subject key identifier: 85:66:4A:CA:FE:1C:AE:DD:1B:18:39:A4:FA:5D:79:5A:77:CC:DD:75 Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Certificate serial: 29 Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/hWZKyv4crt0bGDmk-l15WnfM3XU.roa Signing time: Sat 31 Aug 2024 01:32:01 +0000 ROA not before: Sat 31 Aug 2024 01:32:01 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 59127 IP address blocks: 61.44.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Validity Not Before: Aug 31 01:32:01 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=85664ACAFE1CAEDD1B1839A4FA5D795A77CCDD75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8a:60:2e:ac:8f:6b:48:a7:4e:01:50:ec:27: 71:50:1f:e5:32:90:35:e0:4b:ec:d7:17:a0:21:a7: 2f:77:03:82:e1:ae:e2:c6:e0:41:2f:d5:a7:79:79: 9e:d7:15:c3:98:fa:1a:98:0b:66:8f:cb:0a:15:c6: b7:11:f1:5d:d8:c8:e8:04:4e:0e:32:e8:ef:2b:f9: 42:fb:26:38:f5:50:7c:f0:9e:f8:91:29:21:ad:2d: b5:db:54:af:33:92:60:3d:93:d2:0d:e5:82:0b:f2: 71:30:e9:b5:d2:37:b2:e5:e3:51:c8:ea:17:cb:22: 78:48:b2:28:31:0e:16:f3:a8:c8:5c:61:fa:f8:14: 70:21:3f:27:61:f1:ce:4e:8c:70:44:c7:08:bc:9f: c1:b4:f4:08:7c:72:c3:3b:3c:d1:3e:60:b4:3b:9b: 21:d9:9f:9f:75:fa:cd:fa:6e:0b:8f:3a:b1:2d:2d: 27:7d:c9:46:18:d9:5a:9c:61:04:7b:93:13:7a:73: 3c:71:2f:19:ad:f3:64:6c:e6:52:fe:69:a2:6f:99: bb:25:ef:d7:a4:bb:9e:10:b2:5d:29:62:fb:4c:8b: f1:3e:cf:4b:a3:a0:e2:cd:43:24:c3:14:a9:43:ef: a8:8f:b7:ad:54:c7:f2:39:7d:eb:1a:bd:7f:49:90: 45:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:66:4A:CA:FE:1C:AE:DD:1B:18:39:A4:FA:5D:79:5A:77:CC:DD:75 X509v3 Authority Key Identifier: keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/hWZKyv4crt0bGDmk-l15WnfM3XU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.44.128.0/19 Signature Algorithm: sha256WithRSAEncryption cb:4e:15:ba:f1:79:9e:1c:14:c6:11:5c:43:3f:1a:64:bd:75: ed:a4:5b:56:a9:4a:8e:a5:f5:bc:04:34:6b:82:a7:92:2b:5b: 1d:f7:2b:0d:e6:d8:6b:25:1c:16:65:b3:f5:49:6e:1c:03:99: 73:10:7d:11:5b:7f:2b:2a:a0:cb:35:36:c2:cd:fe:da:e4:30: 70:3a:41:ba:76:88:7d:52:24:5d:6c:e3:e3:e8:eb:2b:fe:b4: d5:f4:83:4e:f6:eb:23:27:a4:3b:02:e2:53:ed:06:d3:71:7e: 4f:6a:5e:cd:86:6d:7a:c2:b1:6d:29:22:a3:11:e6:23:7a:59: 8e:13:7a:62:d4:98:91:39:aa:85:dd:22:b0:82:1a:5f:3a:67: 6e:5a:12:de:e3:e8:4b:96:92:a4:ae:2d:d8:51:12:a8:ba:e9: 2b:9e:45:0f:aa:5f:2b:61:56:43:2a:b2:d7:f2:1e:57:f1:e0: 8c:f6:b1:cb:b3:b4:4c:39:c2:52:69:25:be:a5:e9:a2:ba:f5: fe:c0:d3:8f:fc:7d:02:21:a8:ed:ff:15:6b:d8:6c:a6:88:91: ee:fb:99:6f:bc:15:8e:34:c9:57:28:b9:d8:68:76:2c:51:0b: 6d:50:19:26:7d:79:f3:b2:f6:a1:6f:fb:99:11:1c:4d:84:46: a3:58:67:a4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTI0MDgzMTAx MzIwMVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoODU2NjRBQ0FGRTFDQUVE RDFCMTgzOUE0RkE1RDc5NUE3N0NDREQ3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKeKYC6sj2tIp04BUOwncVAf5TKQNeBL7NcXoCGnL3cDguGu4sbg QS/Vp3l5ntcVw5j6GpgLZo/LChXGtxHxXdjI6ARODjLo7yv5QvsmOPVQfPCe+JEp Ia0ttdtUrzOSYD2T0g3lggvycTDptdI3suXjUcjqF8sieEiyKDEOFvOoyFxh+vgU cCE/J2Hxzk6McETHCLyfwbT0CHxywzs80T5gtDubIdmfn3X6zfpuC486sS0tJ33J RhjZWpxhBHuTE3pzPHEvGa3zZGzmUv5pom+ZuyXv16S7nhCyXSli+0yL8T7PS6Og 4s1DJMMUqUPvqI+3rVTH8jl96xq9f0mQRX0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSFZkrK/hyu3RsYOaT6XXlad8zddTAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40 am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODIvaFdaS3l2NGNydDBiR0Rtay1sMTVXbmZNM1hVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBT0sgDANBgkqhkiG9w0BAQsFAAOCAQEAy04VuvF5nhwUxhFcQz8aZL117aRb VqlKjqX1vAQ0a4KnkitbHfcrDebYayUcFmWz9UluHAOZcxB9EVt/KyqgyzU2ws3+ 2uQwcDpBunaIfVIkXWzj4+jrK/601fSDTvbrIyekOwLiU+0G03F+T2pezYZtesKx bSkioxHmI3pZjhN6YtSYkTmqhd0isIIaXzpnbloS3uPoS5aSpK4t2FESqLrpK55F D6pfK2FWQyqy1/IeV/HgjPaxy7O0TDnCUmklvqXporr1/sDTj/x9AiGo7f8Va9hs poiR7vuZb7wVjjTJVyi52Gh2LFELbVAZJn1587L2oW/7mREcTYRGo1hnpA== -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:49 2024 by rpki-client on console-ams.rpki-client.org