$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mX_tjzuCLZKleIG8szVUvrvIUGU.roa File: mX_tjzuCLZKleIG8szVUvrvIUGU.roa (raw, json) Hash identifier: Uqq3lt3fDvuDenLWVADA13IJrGOU7fztPH+kW8y+i0g= Subject key identifier: 99:7F:ED:8F:3B:82:2D:92:A5:78:81:BC:B3:35:54:BE:BB:C8:50:65 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 01C6 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mX_tjzuCLZKleIG8szVUvrvIUGU.roa Signing time: Wed 01 Nov 2023 01:31:13 +0000 ROA not before: Wed 01 Nov 2023 01:31:13 +0000 ROA not after: Mon 14 Oct 2024 01:30:03 +0000 asID: 7684 IP address blocks: 49.212.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Nov 1 01:31:13 2023 GMT Not After : Oct 14 01:30:03 2024 GMT Subject: CN=997FED8F3B822D92A57881BCB33554BEBBC85065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:61:bc:c3:01:0a:2f:69:17:01:39:9e:20:01: 1d:75:0b:cc:1b:37:35:b4:92:db:ac:d4:d0:fc:0b: c6:33:e9:4d:64:12:8d:49:91:4a:7c:68:d5:97:c0: db:04:ab:b3:36:e3:8c:9d:b5:a8:aa:a5:61:27:5f: 41:e3:89:b1:13:71:e5:5c:57:6a:63:2a:c9:00:bd: 03:a3:94:f1:d3:fe:9e:3b:75:f6:c9:b7:8f:7a:87: ea:69:d7:4a:fd:45:9a:71:2e:cb:fc:8f:e8:5a:e0: 99:a0:17:00:79:b8:bf:c4:5d:5e:0d:ca:47:63:1e: a3:02:b1:b0:f2:d5:a9:36:48:79:d3:5a:e5:e5:d2: 29:75:36:3b:c1:20:9c:be:b1:f2:6e:8d:d1:88:0c: e0:6f:fc:41:68:f2:9b:fe:28:75:d0:f3:44:d2:08: 16:a0:ec:c1:9b:78:b0:ea:45:26:fb:b9:9e:63:e2: a1:ef:14:ab:4e:bd:e4:50:a0:86:88:4c:ea:a0:6e: 17:22:15:ca:4f:51:80:a3:1f:a9:12:15:ab:cc:99: d5:a5:e9:fd:d0:df:56:1c:3c:f5:77:a4:ef:41:39: ed:9e:aa:6a:d5:28:23:0f:df:af:dd:f1:5b:17:9d: e0:b6:40:24:2c:29:a8:e7:2d:bd:ad:de:41:fe:14: b8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7F:ED:8F:3B:82:2D:92:A5:78:81:BC:B3:35:54:BE:BB:C8:50:65 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mX_tjzuCLZKleIG8szVUvrvIUGU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.229.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:b9:6e:39:cb:7d:1d:0c:6d:e4:13:43:55:e8:e0:6b:fb:20: 74:de:71:ad:7c:6d:5a:cf:81:c9:d2:ec:15:7e:75:60:f1:7b: 22:63:27:84:2d:32:02:00:8e:29:b9:df:2e:d6:5f:de:52:99: d2:91:ee:cf:be:6a:96:e7:07:b8:fb:62:c3:88:96:cd:7f:3e: 1f:99:6d:5e:bb:1f:11:f2:8f:b2:00:c1:b5:d8:76:2d:c6:e2: fc:76:ad:b4:89:be:12:55:77:7b:24:e8:73:a4:b6:d3:1b:b7: 8a:17:14:e5:cf:11:ea:ac:01:43:a7:51:e2:52:ee:f7:75:d1: 7f:5e:d3:b2:8c:ea:5f:24:4b:0d:b4:09:a0:b5:e4:8d:e6:b8: d6:a9:6c:23:eb:7b:61:70:76:bf:b9:6d:5e:16:63:cf:3f:26: b7:e0:64:a1:b3:c0:14:40:c9:da:b7:97:45:6f:f9:b9:ca:48: b3:ed:a7:02:df:69:b6:b5:40:8b:ca:8f:28:6c:7c:36:68:0d: c8:f1:5c:f7:16:28:39:6f:b8:42:5d:5b:79:40:64:60:f9:e8: 4e:b2:9a:6c:8b:52:8e:cf:56:40:3c:c0:18:2b:91:0b:54:1e: da:6e:69:ae:a8:d3:9e:78:2e:d2:76:08:2d:49:96:f0:45:35: 8a:f8:df:1e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzExMDEw MTMxMTNaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDk5N0ZFRDhGM0I4MjJE OTJBNTc4ODFCQ0IzMzU1NEJFQkJDODUwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYYbzDAQovaRcBOZ4gAR11C8wbNzW0ktus1ND8C8Yz6U1kEo1J kUp8aNWXwNsEq7M244ydtaiqpWEnX0HjibETceVcV2pjKskAvQOjlPHT/p47dfbJ t496h+pp10r9RZpxLsv8j+ha4JmgFwB5uL/EXV4NykdjHqMCsbDy1ak2SHnTWuXl 0il1NjvBIJy+sfJujdGIDOBv/EFo8pv+KHXQ80TSCBag7MGbeLDqRSb7uZ5j4qHv FKtOveRQoIaITOqgbhciFcpPUYCjH6kSFavMmdWl6f3Q31YcPPV3pO9BOe2eqmrV KCMP36/d8VsXneC2QCQsKajnLb2t3kH+FLjTAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUmX/tjzuCLZKleIG8szVUvrvIUGUwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9tWF90anp1Q0xaS2xlSUc4c3pWVXZydklVR1Uu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdTlMA0GCSqGSIb3DQEBCwUAA4IBAQA7uW45y30dDG3kE0NV6OBr +yB03nGtfG1az4HJ0uwVfnVg8XsiYyeELTICAI4pud8u1l/eUpnSke7PvmqW5we4 +2LDiJbNfz4fmW1eux8R8o+yAMG12HYtxuL8dq20ib4SVXd7JOhzpLbTG7eKFxTl zxHqrAFDp1HiUu73ddF/XtOyjOpfJEsNtAmgteSN5rjWqWwj63thcHa/uW1eFmPP Pya34GShs8AUQMnat5dFb/m5ykiz7acC32m2tUCLyo8obHw2aA3I8Vz3Fig5b7hC XVt5QGRg+ehOsppsi1KOz1ZAPMAYK5ELVB7abmmuqNOeeC7SdggtSZbwRTWK+N8e -----END CERTIFICATE-----Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org