$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/NbwIZd5NhSWvFZ9AKKdcL3cJZfY.roa File: NbwIZd5NhSWvFZ9AKKdcL3cJZfY.roa (raw, json) Hash identifier: aZbaJ76XlWWM7fnr/e0KRFftDqqKc5CenQnTfdLG2Sg= Subject key identifier: 35:BC:08:65:DE:4D:85:25:AF:15:9F:40:28:A7:5C:2F:77:09:65:F6 Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Certificate serial: 7A Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/NbwIZd5NhSWvFZ9AKKdcL3cJZfY.roa Signing time: Sat 31 Aug 2024 01:29:32 +0000 ROA not before: Sat 31 Aug 2024 01:29:32 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 9621 IP address blocks: 218.40.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Validity Not Before: Aug 31 01:29:32 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=35BC0865DE4D8525AF159F4028A75C2F770965F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:cd:3a:e0:cf:31:62:f9:3e:cc:7b:eb:90: 9b:97:f4:dc:d0:e0:ac:4e:9b:ce:13:93:b1:de:68: 7a:64:cc:92:04:4a:d6:15:99:4e:24:b2:0b:5f:bf: 3a:09:87:dc:ec:51:c4:f3:5e:1c:56:04:55:7b:fa: 18:bb:80:d1:62:3e:06:07:b8:a5:85:f7:26:17:2e: 64:39:ec:8a:85:a6:93:19:8e:1e:cd:05:c9:e2:1d: 34:d9:a2:aa:cf:95:ec:f2:15:26:79:86:30:e7:c2: e1:d9:42:cf:de:99:6b:e4:14:ca:00:d4:cb:b4:39: 5f:2a:b7:77:4d:6f:4a:1a:54:98:5f:b6:c3:7c:94: 71:24:c7:ba:41:8f:54:12:14:e5:40:ef:bb:f0:37: 8d:4d:57:2c:f0:9c:ed:40:c4:52:b6:55:81:37:cd: 73:49:b5:28:cc:79:f1:51:6f:fa:86:7f:18:d7:15: 3b:cd:5f:a6:81:84:bb:39:87:56:78:f9:25:d2:16: 4e:b2:97:c2:8d:3e:e7:d1:06:f4:b9:d6:73:39:f3: 7f:7c:bd:d3:13:8c:1d:9f:ae:73:26:c7:87:3c:80: ee:40:40:a0:06:dd:9e:6f:97:d2:4d:58:94:74:b1: a7:77:4f:c6:c5:83:22:b0:70:c1:3b:84:74:a7:7b: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BC:08:65:DE:4D:85:25:AF:15:9F:40:28:A7:5C:2F:77:09:65:F6 X509v3 Authority Key Identifier: keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/NbwIZd5NhSWvFZ9AKKdcL3cJZfY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.40.160.0/20 Signature Algorithm: sha256WithRSAEncryption 19:f7:08:27:89:b9:c2:30:60:a6:f3:b9:27:86:b3:59:4b:4b: 2f:e4:4e:bf:4e:65:b1:f3:d9:24:29:0b:04:45:d5:09:b0:c8: 68:51:0b:b0:e5:b9:8d:84:62:34:ab:c2:9e:25:9e:73:06:30: bb:00:50:de:86:c9:a8:c4:a5:36:a2:b4:2a:63:ce:64:bc:4c: c1:78:45:59:21:ae:50:88:42:1a:de:b7:9d:65:87:6f:7d:5c: c7:ef:1e:dc:04:89:97:c6:d9:91:6d:71:42:82:bc:99:59:88: cd:b2:69:42:5a:55:ef:d9:fa:d8:c4:8e:75:cf:6d:05:a5:5c: 0a:13:cb:64:01:2e:f7:90:b0:77:68:1e:c1:11:cf:ea:f4:e2: 98:24:ff:d7:c3:fb:b3:fd:88:e7:67:96:ad:81:93:0d:0c:b8: f9:1b:73:d7:d3:76:75:73:bf:7e:e0:df:1a:3b:a7:61:89:ea: c1:cd:e9:8d:1e:08:5e:0f:ba:fc:cf:26:db:d1:11:d6:34:f8: a7:39:ad:57:d6:93:af:28:28:eb:b1:02:60:12:03:67:59:3f: e9:b3:51:8b:8e:ef:54:cc:fd:82:7b:bb:70:84:14:58:4e:9c: 59:15:0b:0d:b8:9b:cb:f3:fc:04:f7:65:a7:60:16:1b:6f:67: 65:e2:ef:23 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQTA4 MDk3QzYwNjA3MTAyODBDREFBQTRFN0UwNkMxRjEzQ0QxNkYyMB4XDTI0MDgzMTAx MjkzMloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMzVCQzA4NjVERTREODUy NUFGMTU5RjQwMjhBNzVDMkY3NzA5NjVGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALzYzTrgzzFi+T7Me+uQm5f03NDgrE6bzhOTsd5oemTMkgRK1hWZ TiSyC1+/OgmH3OxRxPNeHFYEVXv6GLuA0WI+Bge4pYX3JhcuZDnsioWmkxmOHs0F yeIdNNmiqs+V7PIVJnmGMOfC4dlCz96Za+QUygDUy7Q5Xyq3d01vShpUmF+2w3yU cSTHukGPVBIU5UDvu/A3jU1XLPCc7UDEUrZVgTfNc0m1KMx58VFv+oZ/GNcVO81f poGEuzmHVnj5JdIWTrKXwo0+59EG9LnWcznzf3y90xOMHZ+ucybHhzyA7kBAoAbd nm+X0k1YlHSxp3dPxsWDIrBwwTuEdKd7j7sCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ1vAhl3k2FJa8Vn0Aop1wvdwll9jAfBgNVHSMEGDAWgBSqCAl8YGBxAoDNqqTn 4GwfE80W8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3L3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQTkZ2SS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQ TkZ2SS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTcvTmJ3SVpkNU5oU1d2Rlo5QUtLZGNMM2NKWmZZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNoooDANBgkqhkiG9w0BAQsFAAOCAQEAGfcIJ4m5wjBgpvO5J4azWUtLL+RO v05lsfPZJCkLBEXVCbDIaFELsOW5jYRiNKvCniWecwYwuwBQ3obJqMSlNqK0KmPO ZLxMwXhFWSGuUIhCGt63nWWHb31cx+8e3ASJl8bZkW1xQoK8mVmIzbJpQlpV79n6 2MSOdc9tBaVcChPLZAEu95Cwd2gewRHP6vTimCT/18P7s/2I52eWrYGTDQy4+Rtz 19N2dXO/fuDfGjunYYnqwc3pjR4IXg+6/M8m29ER1jT4pzmtV9aTrygo67ECYBID Z1k/6bNRi47vVMz9gnu7cIQUWE6cWRULDbiby/P8BPdlp2AWG29nZeLvIw== -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:18 2024 by rpki-client on console-fra.rpki-client.org