$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/FDIlRlsWFXV1vFG2giIE3uNmFL0.roa File: FDIlRlsWFXV1vFG2giIE3uNmFL0.roa (raw, json) Hash identifier: 27MxGboS4AjnaNKsIEUM/w5nqoERZ9Yz8Bgkc1wU6Wk= Subject key identifier: 14:32:25:46:5B:16:15:75:75:BC:51:B6:82:22:04:DE:E3:66:14:BD Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Certificate serial: 7E Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/FDIlRlsWFXV1vFG2giIE3uNmFL0.roa Signing time: Thu 31 Oct 2024 01:30:34 +0000 ROA not before: Thu 31 Oct 2024 01:30:34 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 9621 IP address blocks: 123.108.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Validity Not Before: Oct 31 01:30:34 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=143225465B16157575BC51B6822204DEE36614BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:0b:4d:7d:0f:09:5b:59:57:86:19:97:71: dd:19:a6:db:39:8f:75:5b:e6:e7:90:41:15:14:4c: 85:7e:06:1a:50:92:bb:5a:5b:4b:af:12:dc:c4:d8: c4:47:2f:d3:fa:3a:12:b7:ae:9f:39:d5:55:72:42: da:03:9d:fe:77:2e:98:5f:64:97:d3:56:6a:9f:68: 73:c2:2e:f8:1a:29:97:02:35:64:59:28:74:79:c7: 65:83:45:e8:93:44:b3:ee:5f:29:4f:e6:08:46:94: 91:3d:55:2a:e7:d0:ef:c6:2d:61:d3:54:3c:7e:e7: 3c:03:d9:b1:08:aa:7e:4c:9f:1d:af:1e:b1:3b:82: 71:43:09:dd:b7:26:54:45:20:26:32:11:97:fa:02: 6d:f1:02:db:5a:de:68:de:4a:2d:d5:a3:d4:e6:f5: 4f:a4:80:f7:98:4e:73:12:18:74:f5:e3:12:77:ff: d9:5d:3f:a8:7d:b5:26:09:ab:dc:19:00:3a:50:62: 0d:b7:0c:23:82:53:1b:36:10:ad:96:3b:70:e2:69: 17:83:98:8c:18:21:81:62:c5:55:0d:1e:81:64:21: 09:93:34:33:b9:0f:87:65:a0:0d:56:fc:5f:4d:87: 18:dd:a6:0e:a9:d6:9f:ce:7b:4c:be:45:46:e8:3a: 1e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:32:25:46:5B:16:15:75:75:BC:51:B6:82:22:04:DE:E3:66:14:BD X509v3 Authority Key Identifier: keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/FDIlRlsWFXV1vFG2giIE3uNmFL0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.108.192.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:3b:f9:10:81:24:7e:45:4e:76:c8:10:42:3d:6c:6e:5e:49: 29:3e:73:ca:97:1e:7f:c7:b9:40:a6:34:d9:bb:65:7d:a7:16: 19:21:7b:57:db:da:56:cb:83:18:75:ea:da:34:e5:b1:17:32: 98:67:02:d7:32:33:6d:47:36:3a:f4:cb:1e:bd:ec:d2:f9:90: 0e:91:f2:f2:d9:a4:72:4c:a0:28:0c:10:1b:61:e9:23:41:31: 04:00:45:c1:1f:40:b1:30:64:30:d3:72:71:13:33:4f:db:7b: 5c:cb:a1:1c:e6:99:52:3c:76:1e:11:db:a6:82:d9:8e:4e:22: 46:66:9b:85:74:bb:09:c4:a3:f7:3b:8e:59:10:d0:4f:da:4a: c5:ab:bc:86:99:36:23:9b:bd:2d:6a:ae:6c:d2:05:79:f3:0e: bb:34:65:30:2b:32:e1:56:b4:f8:ec:1b:ec:ab:66:75:5d:75: 64:90:14:d3:54:76:7a:29:2c:88:bd:df:b0:94:5a:0c:b8:e5: cd:d9:e6:52:2a:4e:50:e3:75:86:05:36:3e:37:ef:3e:7c:d7: 61:d8:6f:3d:1f:61:7c:24:4f:54:0a:3a:68:f7:47:c0:89:fa: f5:5a:71:21:cd:2e:a2:5f:d3:75:4c:83:9b:2e:78:c5:4d:72: ac:cc:cb:a3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQTA4 MDk3QzYwNjA3MTAyODBDREFBQTRFN0UwNkMxRjEzQ0QxNkYyMB4XDTI0MTAzMTAx MzAzNFoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMTQzMjI1NDY1QjE2MTU3 NTc1QkM1MUI2ODIyMjA0REVFMzY2MTRCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKn0C019DwlbWVeGGZdx3Rmm2zmPdVvm55BBFRRMhX4GGlCSu1pb S68S3MTYxEcv0/o6EreunznVVXJC2gOd/ncumF9kl9NWap9oc8Iu+BoplwI1ZFko dHnHZYNF6JNEs+5fKU/mCEaUkT1VKufQ78YtYdNUPH7nPAPZsQiqfkyfHa8esTuC cUMJ3bcmVEUgJjIRl/oCbfEC21reaN5KLdWj1Ob1T6SA95hOcxIYdPXjEnf/2V0/ qH21Jgmr3BkAOlBiDbcMI4JTGzYQrZY7cOJpF4OYjBghgWLFVQ0egWQhCZM0M7kP h2WgDVb8X02HGN2mDqnWn857TL5FRug6HmECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQUMiVGWxYVdXW8UbaCIgTe42YUvTAfBgNVHSMEGDAWgBSqCAl8YGBxAoDNqqTn 4GwfE80W8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3L3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQTkZ2SS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQ TkZ2SS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTcvRkRJbFJsc1dGWFYxdkZHMmdpSUUzdU5tRkwwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3tswDANBgkqhkiG9w0BAQsFAAOCAQEAjDv5EIEkfkVOdsgQQj1sbl5JKT5z ypcef8e5QKY02btlfacWGSF7V9vaVsuDGHXq2jTlsRcymGcC1zIzbUc2OvTLHr3s 0vmQDpHy8tmkckygKAwQG2HpI0ExBABFwR9AsTBkMNNycRMzT9t7XMuhHOaZUjx2 HhHbpoLZjk4iRmabhXS7CcSj9zuOWRDQT9pKxau8hpk2I5u9LWqubNIFefMOuzRl MCsy4Va0+Owb7KtmdV11ZJAU01R2eiksiL3fsJRaDLjlzdnmUipOUON1hgU2Pjfv PnzXYdhvPR9hfCRPVAo6aPdHwIn69VpxIc0uol/TdUyDmy54xU1yrMzLow== -----END CERTIFICATE-----Generated at Sun Feb 16 22:21:53 2025 by rpki-client