$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/O-VLvaBiSeLrHCqpElrL1mMCsfU.roa File: O-VLvaBiSeLrHCqpElrL1mMCsfU.roa (raw, json) Hash identifier: AA6JHyNFMJGKRGHKntjG0oC8O9CkOcNqaPsVKdmul6w= Subject key identifier: 3B:E5:4B:BD:A0:62:49:E2:EB:1C:2A:A9:12:5A:CB:D6:63:02:B1:F5 Certificate issuer: /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8 Certificate serial: 55 Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/O-VLvaBiSeLrHCqpElrL1mMCsfU.roa Signing time: Thu 29 Feb 2024 01:29:38 +0000 ROA not before: Thu 29 Feb 2024 01:29:38 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 7671 IP address blocks: 124.245.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8 Validity Not Before: Feb 29 01:29:38 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=3BE54BBDA06249E2EB1C2AA9125ACBD66302B1F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:30:d9:49:ce:38:6e:8b:f9:fc:2e:5d:4c: 8d:52:b2:b6:5a:3f:0a:5f:e0:eb:69:5f:77:72:21: 79:88:c3:da:53:c8:29:a8:6d:07:b0:8d:2e:62:5d: 96:a8:70:b7:50:16:3f:80:ca:b7:7f:46:c0:0b:fc: 56:95:0c:32:8e:3b:9f:ce:c3:e2:45:b8:0e:92:70: e2:66:2b:0a:f9:9a:94:e0:05:32:19:86:bc:48:0f: b5:42:26:99:c8:44:4d:4b:02:44:33:91:47:20:d4: 82:39:03:8c:4f:8f:5b:75:81:5e:65:83:c2:3c:aa: ee:fe:3f:21:ca:2d:8a:7f:26:4b:b9:7d:6f:15:18: a5:da:4f:e0:6b:6b:99:73:4a:8f:22:46:92:68:12: 81:dd:26:f7:27:61:7b:d9:11:2a:33:92:7f:9e:64: c2:35:1c:ad:70:6c:d0:fc:03:e9:6c:f1:a8:e8:60: 3b:5e:a9:bd:85:0d:b2:6d:aa:33:40:f5:de:72:14: 8d:1d:a0:e0:19:ba:2d:1f:86:a3:72:83:c9:ae:04: ff:8f:2e:78:a0:86:89:4c:f1:ab:45:c7:bd:36:17: 47:c7:f1:8c:3b:7d:52:e1:78:a8:40:e5:9f:a3:6e: 34:ff:43:83:62:e7:0a:d1:81:63:af:d1:89:e8:29: e6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E5:4B:BD:A0:62:49:E2:EB:1C:2A:A9:12:5A:CB:D6:63:02:B1:F5 X509v3 Authority Key Identifier: keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/O-VLvaBiSeLrHCqpElrL1mMCsfU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.245.0.0/16 Signature Algorithm: sha256WithRSAEncryption 49:1e:32:38:01:5b:b0:40:6e:d3:4f:16:9c:55:6f:99:58:f5: 98:ff:c3:c5:88:77:a3:a3:f8:97:6e:bf:b4:03:6c:e8:0e:eb: 98:a1:d1:1a:2c:49:12:2d:91:33:59:83:87:ac:bc:25:9d:8d: 0f:b5:11:25:10:1c:25:a9:8b:cf:d1:db:cc:3a:be:35:eb:84: 2d:5f:01:95:60:56:46:d4:24:13:6c:f7:2d:91:aa:c4:2b:56: 0b:d0:a9:d1:cc:1e:14:e3:79:e4:95:a4:36:12:be:25:28:7b: 78:81:83:50:60:ea:b8:b1:4f:bf:d4:a9:38:bc:cc:6e:80:4f: 95:a6:67:ae:47:92:31:78:1e:01:bb:9e:77:88:b7:f0:4c:b0: d5:b5:5e:ad:2e:c5:78:32:85:5c:16:7e:4d:2b:3f:b2:1f:10: 15:d0:97:01:bf:c8:c7:fe:20:1c:8b:2e:5e:c7:5b:7a:41:54: b4:9b:bf:a2:20:55:f0:08:47:e6:31:09:c8:de:35:3f:27:ed: a3:65:7a:28:b4:13:d7:33:12:20:af:6c:88:70:95:a4:99:64: 7e:85:bb:31:63:49:b5:91:4a:d4:47:09:72:4e:71:cd:6a:95: 39:a7:09:84:3f:34:d2:21:90:78:68:05:e1:4b:d5:f2:24:0f: 92:59:3e:0d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRkVB MkMyQUFENjNCQ0NBNEQ0QUM5NkE4NTIxNDBENDI2MTU5N0I4MB4XDTI0MDIyOTAx MjkzOFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoM0JFNTRCQkRBMDYyNDlF MkVCMUMyQUE5MTI1QUNCRDY2MzAyQjFGNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALW/MNlJzjhui/n8Ll1MjVKytlo/Cl/g62lfd3IheYjD2lPIKaht B7CNLmJdlqhwt1AWP4DKt39GwAv8VpUMMo47n87D4kW4DpJw4mYrCvmalOAFMhmG vEgPtUImmchETUsCRDORRyDUgjkDjE+PW3WBXmWDwjyq7v4/Icotin8mS7l9bxUY pdpP4GtrmXNKjyJGkmgSgd0m9ydhe9kRKjOSf55kwjUcrXBs0PwD6WzxqOhgO16p vYUNsm2qM0D13nIUjR2g4Bm6LR+Go3KDya4E/48ueKCGiUzxq0XHvTYXR8fxjDt9 UuF4qEDln6NuNP9Dg2LnCtGBY6/Riegp5kkCAwEAAaOCAicwggIjMB0GA1UdDgQW BBQ75Uu9oGJJ4uscKqkSWsvWYwKx9TAfBgNVHSMEGDAWgBTP6iwqrWO8yk1KyWqF IUDUJhWXuDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2OTkvei1vc0txMWp2TXBOU3NscWhTRkExQ1lWbDdnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvei1vc0txMWp2TXBOU3NscWhTRkEx Q1lWbDdnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwNjk5L08tVkx2YUJpU2VMckhDcXBFbHJMMW1NQ3NmVS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsE AgABMAUDAwB89TANBgkqhkiG9w0BAQsFAAOCAQEASR4yOAFbsEBu008WnFVvmVj1 mP/DxYh3o6P4l26/tANs6A7rmKHRGixJEi2RM1mDh6y8JZ2ND7URJRAcJamLz9Hb zDq+NeuELV8BlWBWRtQkE2z3LZGqxCtWC9Cp0cweFON55JWkNhK+JSh7eIGDUGDq uLFPv9SpOLzMboBPlaZnrkeSMXgeAbued4i38Eyw1bVerS7FeDKFXBZ+TSs/sh8Q FdCXAb/Ix/4gHIsuXsdbekFUtJu/oiBV8AhH5jEJyN41Pyfto2V6KLQT1zMSIK9s iHCVpJlkfoW7MWNJtZFK1EcJck5xzWqVOacJhD800iGQeGgF4UvV8iQPklk+DQ== -----END CERTIFICATE-----Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org