$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/dCtkJ7CFGwIVkv9rARoAIV-K8nI.roa File: dCtkJ7CFGwIVkv9rARoAIV-K8nI.roa (raw, json) Hash identifier: fks88cqbPOvTXYnieYQrWrLnYmGDZkXXeSMmtn//XL8= Subject key identifier: 74:2B:64:27:B0:85:1B:02:15:92:FF:6B:01:1A:00:21:5F:8A:F2:72 Certificate issuer: /CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5 Certificate serial: 48 Authority key identifier: E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/dCtkJ7CFGwIVkv9rARoAIV-K8nI.roa Signing time: Sat 30 Nov 2024 01:28:34 +0000 ROA not before: Sat 30 Nov 2024 01:28:34 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2515 IP address blocks: 192.41.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5 Validity Not Before: Nov 30 01:28:34 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=742B6427B0851B021592FF6B011A00215F8AF272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e0:7e:81:89:18:fb:0b:05:86:4a:4f:4c:a0: 2f:2e:c1:90:6b:e7:1f:fa:48:f5:b7:51:b3:4a:16: 73:1b:b3:f0:99:38:0a:3e:71:95:74:9a:28:30:b3: 2c:35:54:f4:ff:65:85:05:d1:c2:ab:78:e9:82:84: 54:f0:63:13:d7:af:43:b7:b6:28:92:0d:8f:6f:19: 16:1f:37:9a:70:40:51:4b:97:96:43:67:a6:5f:40: cc:a7:7d:9d:df:5c:7c:95:25:ff:48:15:38:d2:b7: d6:5a:fa:0c:9a:4b:e5:07:1e:e8:ec:71:ce:98:cc: ba:46:9b:d4:3c:58:0a:e9:30:03:e4:84:a4:87:de: 0a:4d:bd:62:00:fc:87:51:49:90:37:1f:e4:b5:a7: 46:1f:4b:c8:68:62:b6:18:9a:75:9a:18:26:df:29: b4:d1:46:63:8b:fb:38:40:d7:65:62:58:1e:33:f5: ac:ab:78:71:6b:7f:a7:4e:cd:1f:be:d3:fb:b5:8e: f3:04:be:ed:65:23:c2:ff:e6:16:d8:15:70:bf:6d: 7f:7d:b5:cb:ca:2e:3b:ed:da:f1:67:9e:13:b2:a1: 94:78:b8:16:a3:04:7a:a3:7d:75:16:f8:be:b0:06: c7:e4:59:a6:5f:11:98:e0:5f:a3:47:32:3d:9e:cb: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2B:64:27:B0:85:1B:02:15:92:FF:6B:01:1A:00:21:5F:8A:F2:72 X509v3 Authority Key Identifier: keyid:E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/dCtkJ7CFGwIVkv9rARoAIV-K8nI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.41.192.0/24 Signature Algorithm: sha256WithRSAEncryption 94:35:72:1a:47:f0:ae:d3:dd:55:a8:a9:29:70:c4:8f:cf:2f: 2e:11:ff:3b:c8:e7:23:22:0e:a1:5c:30:f5:c8:03:3e:b9:dc: b3:93:cd:88:57:74:7e:3e:19:01:11:8c:3b:20:f0:d5:2b:d9: fd:97:7f:c9:d7:3f:07:47:33:c1:55:c6:47:d6:64:c6:5f:b1: 33:15:72:42:26:26:ae:ee:d2:77:38:3c:96:0c:8e:78:b9:27: a3:2f:03:13:99:4c:97:60:cc:11:7a:34:0a:05:18:f5:1f:f4: c4:3a:74:63:61:c2:77:a2:3d:99:a4:02:9c:ed:1c:cb:0d:4f: 0b:0a:94:dd:cc:43:07:1e:bd:3a:a5:ce:cf:7b:3f:1e:58:66: 73:3f:db:bd:b1:4c:c6:47:08:d7:2d:0e:86:ea:45:0e:0d:50: 49:a2:41:30:d3:1d:d9:0b:23:ab:6c:b8:3f:da:98:17:a1:76: a5:c8:03:91:f3:83:9c:37:4d:b0:ee:64:57:e1:bb:fb:68:95: 1b:da:cc:b8:92:b5:b6:a0:ed:75:f8:c5:81:29:b5:55:4e:be: ad:56:79:25:25:7a:54:21:73:75:a4:57:37:05:bb:d0:20:c0: 4b:84:51:59:19:32:00:9f:d6:b1:41:f2:e5:05:88:c3:f9:2f: 10:3a:bb:82 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFOENE QkMyNEE2QzNDNTMwQjk5ODE1QUU3QjVDMERBM0VGOEE4NEQ1MB4XDTI0MTEzMDAx MjgzNFoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoNzQyQjY0MjdCMDg1MUIw MjE1OTJGRjZCMDExQTAwMjE1RjhBRjI3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKzgfoGJGPsLBYZKT0ygLy7BkGvnH/pI9bdRs0oWcxuz8Jk4Cj5x lXSaKDCzLDVU9P9lhQXRwqt46YKEVPBjE9evQ7e2KJINj28ZFh83mnBAUUuXlkNn pl9AzKd9nd9cfJUl/0gVONK31lr6DJpL5Qce6OxxzpjMukab1DxYCukwA+SEpIfe Ck29YgD8h1FJkDcf5LWnRh9LyGhithiadZoYJt8ptNFGY4v7OEDXZWJYHjP1rKt4 cWt/p07NH77T+7WO8wS+7WUjwv/mFtgVcL9tf321y8ouO+3a8WeeE7KhlHi4FqME eqN9dRb4vrAGx+RZpl8RmOBfo0cyPZ7LSb8CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBR0K2QnsIUbAhWS/2sBGgAhX4rycjAfBgNVHSMEGDAWgBTozbwkpsPFMLmYFa57 XA2j74qE1TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTAwMy82TTI4SktiRHhUQzVtQld1ZTF3Tm8tLUtoTlUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC82TTI4SktiRHhUQzVtQld1ZTF3Tm8t LUtoTlUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTAwMy9kQ3RrSjdDRkd3SVZrdjlyQVJvQUlWLUs4bkkucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwCnAMA0GCSqGSIb3DQEBCwUAA4IBAQCUNXIaR/Cu091VqKkpcMSPzy8u Ef87yOcjIg6hXDD1yAM+udyzk82IV3R+PhkBEYw7IPDVK9n9l3/J1z8HRzPBVcZH 1mTGX7EzFXJCJiau7tJ3ODyWDI54uSejLwMTmUyXYMwRejQKBRj1H/TEOnRjYcJ3 oj2ZpAKc7RzLDU8LCpTdzEMHHr06pc7Pez8eWGZzP9u9sUzGRwjXLQ6G6kUODVBJ okEw0x3ZCyOrbLg/2pgXoXalyAOR84OcN02w7mRX4bv7aJUb2sy4krW2oO11+MWB KbVVTr6tVnklJXpUIXN1pFc3BbvQIMBLhFFZGTIAn9axQfLlBYjD+S8QOruC -----END CERTIFICATE-----Generated at Sat Apr 26 20:35:00 2025 by rpki-client