$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FKbMRfq9ekHWetpY7Xbc97jTF6k.roa File: FKbMRfq9ekHWetpY7Xbc97jTF6k.roa (raw, json) Hash identifier: bnFp+kDBtDLasvirQeNv5zKLH6/Kq9bEzBLXqXzvgpI= Subject key identifier: 14:A6:CC:45:FA:BD:7A:41:D6:7A:DA:58:ED:76:DC:F7:B8:D3:17:A9 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 85 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FKbMRfq9ekHWetpY7Xbc97jTF6k.roa Signing time: Tue 03 Dec 2024 17:28:20 +0000 ROA not before: Tue 03 Dec 2024 17:28:20 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 2914 IP address blocks: 120.29.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Dec 3 17:28:20 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=14A6CC45FABD7A41D67ADA58ED76DCF7B8D317A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:0c:58:4a:46:74:39:f0:8d:f7:be:a0:4f: e8:22:17:2a:44:51:67:32:bc:54:7c:10:2d:3b:71: ed:f7:0a:0e:ac:33:05:4b:fa:79:b1:98:eb:c2:c0: a8:c2:db:65:c7:28:19:91:be:60:3f:58:60:45:3e: 5d:d9:10:8d:12:ad:4b:4d:59:0e:3d:21:4f:ee:6b: 29:42:0a:3f:bc:6e:c7:49:be:44:45:58:6b:7c:8b: ca:8e:3d:a5:6e:aa:a1:52:be:d4:63:9e:a7:a4:77: 19:0e:0e:f6:9b:3d:3f:3d:52:c3:cd:2f:74:1e:06: 1c:d3:0d:54:cd:ca:5c:a3:0c:98:26:63:cd:d5:09: 64:f3:2b:fd:8b:f6:a1:85:40:f1:2f:49:aa:69:a4: c3:00:57:bb:aa:55:9b:9b:0a:19:88:b1:9e:e7:f2: b4:cd:74:f9:ad:f2:93:d6:e6:75:c0:33:2e:f5:c2: fc:9a:8b:a6:e2:18:ff:09:d4:e9:16:b5:de:0d:45: 0c:f1:82:24:9b:0a:9e:4b:fb:7a:77:dc:18:01:7d: 9f:58:4c:f5:25:83:bf:ca:22:72:7f:11:8e:fd:32: 77:f8:cc:b2:fe:51:24:68:91:1f:5a:10:f7:7c:f9: 70:aa:97:36:6c:25:96:f9:2b:bd:ae:8c:fa:30:22: 32:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A6:CC:45:FA:BD:7A:41:D6:7A:DA:58:ED:76:DC:F7:B8:D3:17:A9 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FKbMRfq9ekHWetpY7Xbc97jTF6k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.144.0/21 Signature Algorithm: sha256WithRSAEncryption 6f:86:2b:f0:9f:d9:86:44:28:63:f3:31:b3:03:84:a9:35:ff: 6c:60:1b:b6:8c:ba:cc:5a:e7:6a:5f:25:90:1c:d1:43:cc:e8: da:0a:ae:12:5f:90:25:ca:10:8f:10:91:e5:a6:02:d7:ef:03: f2:70:47:e7:6c:f2:2e:30:37:fc:cc:8d:5a:f1:f3:4a:c0:58: 78:6b:3f:0f:78:5a:00:92:6c:ff:25:a3:77:67:34:4e:e9:71: 99:cb:4a:38:09:74:af:99:00:6a:f7:59:43:2b:63:71:23:22: 8c:7f:85:97:98:7e:dd:5c:f0:77:3f:98:c4:05:d3:11:ee:60: 1d:6e:af:29:fa:09:0d:d4:d8:2c:f7:b3:19:97:88:36:4d:91: f0:bc:85:f1:48:74:e3:97:09:64:fb:7a:89:1a:19:a3:6d:92: 95:3a:f4:8e:37:4c:a5:e4:f7:b2:ce:08:10:3e:15:fe:c4:f4: ee:99:6d:e4:9a:a9:f7:0c:9d:2c:be:c7:18:e0:69:42:6b:05: 8a:45:72:3a:3b:ad:83:ed:ce:82:9d:c1:9c:36:a9:a8:af:54: 76:3a:d1:24:fd:d9:9b:98:e4:36:fb:b4:e5:7b:1f:87:aa:b9: f3:11:62:43:f2:2b:0a:84:3a:4a:f2:9c:0a:43:f7:95:60:68: 68:b8:d7:9b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDMx NzI4MjBaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE0QTZDQzQ1RkFCRDdB NDFENjdBREE1OEVENzZEQ0Y3QjhEMzE3QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIBwxYSkZ0OfCN976gT+giFypEUWcyvFR8EC07ce33Cg6sMwVL +nmxmOvCwKjC22XHKBmRvmA/WGBFPl3ZEI0SrUtNWQ49IU/uaylCCj+8bsdJvkRF WGt8i8qOPaVuqqFSvtRjnqekdxkODvabPT89UsPNL3QeBhzTDVTNylyjDJgmY83V CWTzK/2L9qGFQPEvSapppMMAV7uqVZubChmIsZ7n8rTNdPmt8pPW5nXAMy71wvya i6biGP8J1OkWtd4NRQzxgiSbCp5L+3p33BgBfZ9YTPUlg7/KInJ/EY79Mnf4zLL+ USRokR9aEPd8+XCqlzZsJZb5K72ujPowIjLNAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUFKbMRfq9ekHWetpY7Xbc97jTF6kwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9GS2JNUmZxOWVrSFdldHBZN1hiYzk3alRGNmsu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDeB2QMA0GCSqGSIb3DQEBCwUAA4IBAQBvhivwn9mGRChj8zGzA4Sp Nf9sYBu2jLrMWudqXyWQHNFDzOjaCq4SX5AlyhCPEJHlpgLX7wPycEfnbPIuMDf8 zI1a8fNKwFh4az8PeFoAkmz/JaN3ZzRO6XGZy0o4CXSvmQBq91lDK2NxIyKMf4WX mH7dXPB3P5jEBdMR7mAdbq8p+gkN1Ngs97MZl4g2TZHwvIXxSHTjlwlk+3qJGhmj bZKVOvSON0yl5PeyzggQPhX+xPTumW3kmqn3DJ0svscY4GlCawWKRXI6O62D7c6C ncGcNqmor1R2OtEk/dmbmOQ2+7Tlex+HqrnzEWJD8isKhDpK8pwKQ/eVYGhouNeb -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:11 2025 by rpki-client on console.sobornost.net