$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/hghO5nzhhd6lmEEFl2tzby2E65w.roa File: hghO5nzhhd6lmEEFl2tzby2E65w.roa (raw, json) Hash identifier: CPNbExkToW69+SmZp+aHgGHV5G6f/rvU1E6OUzsnsFI= Subject key identifier: 86:08:4E:E6:7C:E1:85:DE:A5:98:41:05:97:6B:73:6F:2D:84:EB:9C Certificate issuer: /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692 Certificate serial: 22 Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/hghO5nzhhd6lmEEFl2tzby2E65w.roa Signing time: Wed 31 Jul 2024 01:29:50 +0000 ROA not before: Wed 31 Jul 2024 01:29:50 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 45677 IP address blocks: 103.251.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692 Validity Not Before: Jul 31 01:29:50 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=86084EE67CE185DEA5984105976B736F2D84EB9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:82:36:12:49:6e:d3:50:66:76:d8:b7:f8:16: 82:38:a4:6a:0b:2e:1e:4a:b1:c7:0e:78:cd:11:df: a6:63:99:d3:94:6d:b8:24:1e:c3:1e:af:1d:68:c4: b9:4e:48:1d:80:55:e2:10:fc:f9:74:40:3f:17:0e: 45:b4:98:e5:1b:d6:6f:6d:51:fb:66:dd:1d:49:93: cd:61:2c:89:61:45:ae:2f:bf:48:57:e8:eb:6d:32: 39:58:71:d6:5a:0f:12:8a:8a:98:88:42:bb:5c:eb: 51:33:50:e4:12:0e:5d:d9:e1:94:ad:2c:45:f8:a8: 1f:90:7a:b7:db:f7:3a:d9:81:a0:16:7a:5b:f1:b4: 95:04:f4:6c:49:07:35:77:ec:b1:01:a7:ce:a3:2f: 83:91:5d:92:1b:3b:92:55:ef:21:1d:ec:68:cb:cb: ac:5f:fe:ad:ef:5c:41:84:c6:90:97:87:4a:29:05: 4f:e5:dc:23:05:0f:56:ec:cc:61:10:5d:05:5e:78: 2f:b6:d3:cc:2b:95:b8:1f:f2:52:14:8c:7e:86:14: 13:c1:1f:5c:3d:86:ba:46:e9:51:2a:3f:56:9e:a9: a2:f1:d1:b0:84:f6:d0:aa:4f:cd:f9:04:02:78:c4: f6:33:35:f0:42:8a:4b:3b:af:f3:46:0b:c3:18:ac: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:08:4E:E6:7C:E1:85:DE:A5:98:41:05:97:6B:73:6F:2D:84:EB:9C X509v3 Authority Key Identifier: keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/hghO5nzhhd6lmEEFl2tzby2E65w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.251.116.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:60:4b:0e:ef:bb:f8:8e:43:f4:ab:11:50:11:6a:2b:25:a4: 4d:a3:3b:4d:de:02:89:96:29:4c:21:27:4d:f7:96:a3:e1:d3: d1:9f:2a:a9:c7:f6:b4:6a:44:80:f9:f1:96:64:22:04:91:43: 24:b2:1c:b8:05:b3:bf:ac:5c:54:e2:a0:b6:4e:ac:6e:ea:71: 49:43:d9:95:7d:cd:5e:79:5c:38:80:83:b1:ec:a2:44:94:a6: e7:53:19:4f:fd:a8:36:22:ce:3c:df:27:da:9e:d5:ca:58:da: d1:94:c7:0d:11:bb:3d:81:d8:c1:f2:de:42:fb:44:31:17:de: d1:dd:ae:e4:08:6f:0f:31:94:00:53:2b:32:81:11:3b:a0:74: c4:4c:16:43:4b:0d:a9:ea:cf:e1:7c:1c:01:34:c9:0f:3e:24: 16:d6:fd:bb:f7:fa:20:6e:a4:46:ad:a0:99:31:da:44:6b:21: 4e:55:ba:b5:05:28:f8:a4:9e:f9:c7:8c:15:35:07:43:98:34: 76:9f:3d:f8:43:6c:41:3d:83:35:27:f7:e9:54:18:12:9c:19: 27:fe:85:c1:6e:3e:88:03:be:74:61:8a:1e:52:b0:9e:e2:ec: b4:9f:d3:44:b2:38:fe:20:24:3c:55:ec:d9:5c:2c:9f:b8:40: 6d:66:61:06 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzN0Q3 NENGNzhCMDAzMUQyQUE1QzlBRUQzODhFN0MwNDM4QzYxNjkyMB4XDTI0MDczMTAx Mjk1MFoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoODYwODRFRTY3Q0UxODVE RUE1OTg0MTA1OTc2QjczNkYyRDg0RUI5QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOGCNhJJbtNQZnbYt/gWgjikagsuHkqxxw54zRHfpmOZ05RtuCQe wx6vHWjEuU5IHYBV4hD8+XRAPxcORbSY5RvWb21R+2bdHUmTzWEsiWFFri+/SFfo 620yOVhx1loPEoqKmIhCu1zrUTNQ5BIOXdnhlK0sRfioH5B6t9v3OtmBoBZ6W/G0 lQT0bEkHNXfssQGnzqMvg5Fdkhs7klXvIR3saMvLrF/+re9cQYTGkJeHSikFT+Xc IwUPVuzMYRBdBV54L7bTzCuVuB/yUhSMfoYUE8EfXD2GukbpUSo/Vp6povHRsIT2 0KpPzfkEAnjE9jM18EKKSzuv80YLwxis7TsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSGCE7mfOGF3qWYQQWXa3NvLYTrnDAfBgNVHSMEGDAWgBQ310z3iwAx0qpcmu04 jnwEOMYWkjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTg0L045ZE05NHNBTWRLcVhKcnRPSTU4QkRqR0ZwSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL045ZE05NHNBTWRLcVhKcnRPSTU4QkRq R0ZwSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85ODQvaGdoTzVuemhoZDZsbUVFRmwydHpieTJFNjV3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmf7dDANBgkqhkiG9w0BAQsFAAOCAQEAjmBLDu+7+I5D9KsRUBFqKyWkTaM7 Td4CiZYpTCEnTfeWo+HT0Z8qqcf2tGpEgPnxlmQiBJFDJLIcuAWzv6xcVOKgtk6s bupxSUPZlX3NXnlcOICDseyiRJSm51MZT/2oNiLOPN8n2p7Vylja0ZTHDRG7PYHY wfLeQvtEMRfe0d2u5AhvDzGUAFMrMoERO6B0xEwWQ0sNqerP4XwcATTJDz4kFtb9 u/f6IG6kRq2gmTHaRGshTlW6tQUo+KSe+ceMFTUHQ5g0dp89+ENsQT2DNSf36VQY EpwZJ/6FwW4+iAO+dGGKHlKwnuLstJ/TRLI4/iAkPFXs2Vwsn7hAbWZhBg== -----END CERTIFICATE-----Generated at Sun Feb 16 22:14:55 2025 by rpki-client