$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/LhTxBe5KZKLUSosQK27GZcmSopE.roa File: LhTxBe5KZKLUSosQK27GZcmSopE.roa (raw, json) Hash identifier: yUSkWK8L+UCFIN5gYvwohvb2bjiU8OsSLMT20hSFY9M= Subject key identifier: 2E:14:F1:05:EE:4A:64:A2:D4:4A:8B:10:2B:6E:C6:65:C9:92:A2:91 Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Certificate serial: A2 Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/LhTxBe5KZKLUSosQK27GZcmSopE.roa Signing time: Sat 30 Nov 2024 01:31:21 +0000 ROA not before: Sat 30 Nov 2024 01:31:21 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 9351 IP address blocks: 218.216.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Validity Not Before: Nov 30 01:31:21 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=2E14F105EE4A64A2D44A8B102B6EC665C992A291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:b8:56:89:a3:ed:49:7c:f9:01:41:e4:3c: 14:00:dc:72:79:82:7c:80:aa:86:cc:53:16:5f:79: c1:04:36:4a:67:bc:38:33:b8:c2:14:b6:c9:fa:40: 37:b7:a5:01:e7:a0:ae:97:31:9d:d3:2f:22:cd:47: 7d:a3:15:a3:55:ad:1d:0d:6d:b7:f4:e9:89:41:b2: 24:7c:26:dc:bc:20:31:ea:6c:47:33:06:c6:a9:15: b5:35:6e:eb:55:02:2e:4e:dd:7c:f0:e5:91:48:ea: ec:74:fd:e9:84:f7:42:48:85:12:09:dc:1c:5e:4d: 28:14:5d:19:c6:5b:1f:ed:2f:c1:bb:cf:f5:83:4d: 4f:8d:5d:dd:fc:02:9d:3a:3e:7c:b7:52:11:31:f1: dd:23:29:3e:35:f6:ea:6c:b9:ee:37:84:54:d7:8f: 08:56:eb:3a:04:11:34:99:e9:51:63:cd:28:6a:bc: ff:65:d1:28:64:49:b2:0d:3b:70:11:e0:23:94:af: aa:09:b6:9c:81:e2:6e:ba:68:ba:36:71:25:6f:14: be:2a:cd:63:b5:af:6e:32:b3:e2:15:75:5d:23:54: dc:97:04:17:26:fb:dc:5c:1d:b2:f6:7e:30:ec:af: 6e:c7:4d:4b:e6:e3:7d:21:df:a1:d9:0d:e7:d5:b4: 25:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:14:F1:05:EE:4A:64:A2:D4:4A:8B:10:2B:6E:C6:65:C9:92:A2:91 X509v3 Authority Key Identifier: keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/LhTxBe5KZKLUSosQK27GZcmSopE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.216.160.0/20 Signature Algorithm: sha256WithRSAEncryption b7:93:04:c1:20:6e:b3:5d:51:9d:6e:e3:4e:ab:78:2e:c8:3d: dd:30:54:15:c9:e8:e7:97:41:9d:bb:d1:12:cd:ff:7e:19:40: 1c:93:f4:08:ff:01:a1:33:69:ae:79:6f:a9:1f:7e:2f:5e:69: 89:1a:51:9a:b9:1c:0d:d0:f9:e0:62:9a:39:0d:3c:12:23:72: 19:66:59:da:26:00:1a:98:cf:57:0b:0b:02:e3:e8:ad:b4:fb: 20:66:03:05:d8:a7:f2:a5:02:7a:a5:30:33:47:45:88:ff:d6: fa:bc:14:a2:0d:77:a7:41:64:76:cc:17:6a:a5:58:ed:c1:53: c8:7a:41:55:4b:9c:67:1b:8d:57:78:ec:36:18:f8:d8:dd:5f: 08:80:e8:e8:9e:51:48:16:2b:3f:e7:db:68:c1:09:dd:10:f1: 0e:1d:ae:d5:05:19:cc:a6:af:7c:0f:38:8f:15:04:ee:f8:af: 61:dc:3e:33:30:4d:bd:f5:ae:61:97:ff:41:5f:76:19:cc:ae: e3:a1:2f:d1:a7:f1:a6:f3:a6:62:0d:f7:04:6d:6d:11:9e:6c: 99:cf:74:2f:4b:e5:07:5f:a5:83:ee:99:44:18:34:a9:2d:b3: 62:e7:88:3d:28:66:21:25:a4:c3:55:f6:12:38:76:12:f3:14: 85:51:3a:bb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNDExMzAw MTMxMjFaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJFMTRGMTA1RUU0QTY0 QTJENDRBOEIxMDJCNkVDNjY1Qzk5MkEyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCia7hWiaPtSXz5AUHkPBQA3HJ5gnyAqobMUxZfecEENkpnvDgz uMIUtsn6QDe3pQHnoK6XMZ3TLyLNR32jFaNVrR0Nbbf06YlBsiR8Jty8IDHqbEcz BsapFbU1butVAi5O3Xzw5ZFI6ux0/emE90JIhRIJ3BxeTSgUXRnGWx/tL8G7z/WD TU+NXd38Ap06Pny3UhEx8d0jKT419upsue43hFTXjwhW6zoEETSZ6VFjzShqvP9l 0ShkSbINO3AR4COUr6oJtpyB4m66aLo2cSVvFL4qzWO1r24ys+IVdV0jVNyXBBcm +9xcHbL2fjDsr27HTUvm430h36HZDefVtCVVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULhTxBe5KZKLUSosQK27GZcmSopEwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM0L0xoVHhCZTVLWktMVVNvc1FLMjdHWmNtU29wRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATa2KAwDQYJKoZIhvcNAQELBQADggEBALeTBMEgbrNdUZ1u406reC7IPd0w VBXJ6OeXQZ270RLN/34ZQByT9Aj/AaEzaa55b6kffi9eaYkaUZq5HA3Q+eBimjkN PBIjchlmWdomABqYz1cLCwLj6K20+yBmAwXYp/KlAnqlMDNHRYj/1vq8FKINd6dB ZHbMF2qlWO3BU8h6QVVLnGcbjVd47DYY+NjdXwiA6OieUUgWKz/n22jBCd0Q8Q4d rtUFGcymr3wPOI8VBO74r2HcPjMwTb31rmGX/0FfdhnMruOhL9Gn8abzpmIN9wRt bRGebJnPdC9L5QdfpYPumUQYNKkts2LniD0oZiElpMNV9hI4dhLzFIVROrs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:47:39 2025 by rpki-client