$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39067/kZsKPMAk9cBQfBmx6ScgdjJy8MY.roa File: kZsKPMAk9cBQfBmx6ScgdjJy8MY.roa (raw, json) Hash identifier: J8oHA522ZuTtI5QDuMEs2D9e5piuMp7Rz4DY3A9raFo= Subject key identifier: 91:9B:0A:3C:C0:24:F5:C0:50:7C:19:B1:E9:27:20:76:32:72:F0:C6 Certificate issuer: /CN=88EDBD88734B8DBB3586A6D059B8A657BFB3A218 Certificate serial: 11 Authority key identifier: 88:ED:BD:88:73:4B:8D:BB:35:86:A6:D0:59:B8:A6:57:BF:B3:A2:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/kZsKPMAk9cBQfBmx6ScgdjJy8MY.roa Signing time: Sat 26 Oct 2024 12:13:03 +0000 ROA not before: Sat 26 Oct 2024 12:13:03 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 63806 IP address blocks: 2001:df3:14c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88EDBD88734B8DBB3586A6D059B8A657BFB3A218 Validity Not Before: Oct 26 12:13:03 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=919B0A3CC024F5C0507C19B1E92720763272F0C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e6:41:0e:e5:8d:59:ec:76:c6:21:42:91:2d: 6a:46:b6:ea:e4:44:a0:c0:2d:84:87:46:e6:22:fc: ff:94:66:05:c5:78:f7:a3:af:8f:11:6b:0c:ee:1d: 87:b7:9c:da:19:bb:0b:47:96:c7:a5:97:01:fa:b8: 1f:0e:ef:70:e2:bc:6d:72:d6:02:8e:0f:6d:53:da: 8e:09:d4:e0:ab:2b:6c:00:cb:f8:05:3d:8a:cc:47: ce:af:3e:d5:e2:31:ff:f4:6c:45:5e:ef:47:06:ae: a0:51:a6:e5:22:fb:ac:33:cf:17:f2:db:1a:69:3b: 51:3a:89:71:15:8e:5d:41:52:b6:3a:1a:6a:61:a5: 7e:0a:5f:a8:7d:35:fc:1c:3d:c4:4c:e1:b1:55:d0: 33:5d:05:bc:2c:79:0d:2c:28:f2:3e:51:f4:06:21: 69:b9:00:a7:af:93:3c:99:bc:40:07:a8:74:d3:55: 27:bb:79:5d:3b:d0:e2:c6:72:0f:ea:7c:5a:b3:84: c9:63:6f:f8:42:a2:f6:84:22:c9:0e:a2:bc:c8:d6: 64:d0:32:32:f4:aa:6c:64:69:ed:5e:f6:af:a0:87: fb:1d:60:70:a9:ba:29:56:9e:3b:9e:9d:bb:27:45: 7c:23:e8:39:9e:3a:fd:47:07:dc:c2:83:24:6e:04: d6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9B:0A:3C:C0:24:F5:C0:50:7C:19:B1:E9:27:20:76:32:72:F0:C6 X509v3 Authority Key Identifier: keyid:88:ED:BD:88:73:4B:8D:BB:35:86:A6:D0:59:B8:A6:57:BF:B3:A2:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/kZsKPMAk9cBQfBmx6ScgdjJy8MY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:14c0::/48 Signature Algorithm: sha256WithRSAEncryption 9a:9a:2b:f9:a8:17:18:54:42:51:1c:c2:a4:bb:06:cc:00:97: 00:bd:77:14:c5:be:5e:e1:74:b8:f7:ed:b7:ef:b7:2d:b0:a2: 6e:f2:95:46:c6:9b:44:0b:e8:c5:a3:b3:72:72:24:50:80:4a: 5a:1f:50:5c:d0:11:17:9c:63:24:56:eb:b0:0a:e6:5d:77:fa: 2f:09:8c:86:ca:f1:37:0f:f4:24:8e:a6:00:02:21:bc:40:d7: 63:99:68:5c:4e:a7:32:4d:9c:62:d1:48:16:e6:22:33:12:c8: 79:a2:28:ed:34:3d:25:54:4f:d6:19:a8:64:56:9d:b4:8b:13: fc:82:e0:00:2e:eb:79:ac:b4:bb:47:e7:1e:8f:09:24:c5:66: 72:5d:74:96:9b:3a:e2:86:e2:79:1f:b6:97:6e:0b:93:a9:d3: 09:29:bf:b4:ea:05:8a:78:fb:a5:97:c1:0a:5e:a6:80:4e:2c: ab:4a:65:65:bd:93:42:c7:6e:d4:d1:6f:95:68:66:c0:3c:c1: 02:32:28:37:32:7d:90:bb:9c:0a:87:b9:df:5a:7b:70:a1:20: c1:47:b6:25:ca:ee:22:cd:9a:b6:c0:0b:76:29:6e:db:9b:7d: eb:3c:51:5a:5c:23:04:a5:18:6b:0b:2e:63:1b:05:30:36:44: 74:a8:19:d6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OEVE QkQ4ODczNEI4REJCMzU4NkE2RDA1OUI4QTY1N0JGQjNBMjE4MB4XDTI0MTAyNjEy MTMwM1oXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoOTE5QjBBM0NDMDI0RjVD MDUwN0MxOUIxRTkyNzIwNzYzMjcyRjBDNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANLmQQ7ljVnsdsYhQpEtaka26uREoMAthIdG5iL8/5RmBcV496Ov jxFrDO4dh7ec2hm7C0eWx6WXAfq4Hw7vcOK8bXLWAo4PbVPajgnU4KsrbADL+AU9 isxHzq8+1eIx//RsRV7vRwauoFGm5SL7rDPPF/LbGmk7UTqJcRWOXUFStjoaamGl fgpfqH01/Bw9xEzhsVXQM10FvCx5DSwo8j5R9AYhabkAp6+TPJm8QAeodNNVJ7t5 XTvQ4sZyD+p8WrOEyWNv+EKi9oQiyQ6ivMjWZNAyMvSqbGRp7V72r6CH+x1gcKm6 KVaeO56duydFfCPoOZ46/UcH3MKDJG4E1qsCAwEAAaOCAiswggInMB0GA1UdDgQW BBSRmwo8wCT1wFB8GbHpJyB2MnLwxjAfBgNVHSMEGDAWgBSI7b2Ic0uNuzWGptBZ uKZXv7OiGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzkwNjcvaU8yOWlITkxqYnMxaHFiUVdiaW1WNy16b2hnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaU8yOWlITkxqYnMxaHFiUVdiaW1W Ny16b2hnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzM5MDY3L2tac0tQTUFrOWNCUWZCbXg2U2NnZGpKeThNWS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ3zFMAwDQYJKoZIhvcNAQELBQADggEBAJqaK/moFxhUQlEcwqS7 BswAlwC9dxTFvl7hdLj37bfvty2wom7ylUbGm0QL6MWjs3JyJFCASlofUFzQERec YyRW67AK5l13+i8JjIbK8TcP9CSOpgACIbxA12OZaFxOpzJNnGLRSBbmIjMSyHmi KO00PSVUT9YZqGRWnbSLE/yC4AAu63mstLtH5x6PCSTFZnJddJabOuKG4nkftpdu C5Op0wkpv7TqBYp4+6WXwQpepoBOLKtKZWW9k0LHbtTRb5VoZsA8wQIyKDcyfZC7 nAqHud9ae3ChIMFHtiXK7iLNmrbAC3Ypbtubfes8UVpcIwSlGGsLLmMbBTA2RHSo GdY= -----END CERTIFICATE-----Generated at Sat Apr 26 18:51:29 2025 by rpki-client