$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ctQhBxnqa0hCGdhR0kxK7tw5ORs.roa File: ctQhBxnqa0hCGdhR0kxK7tw5ORs.roa (raw, json) Hash identifier: HlUtah1ODYsLYchkQy7P6htOoKGj//wbWkb29n8iWeI= Subject key identifier: 72:D4:21:07:19:EA:6B:48:42:19:D8:51:D2:4C:4A:EE:DC:39:39:1B Certificate issuer: /CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65 Certificate serial: 4F Authority key identifier: B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ctQhBxnqa0hCGdhR0kxK7tw5ORs.roa Signing time: Thu 29 Feb 2024 01:29:19 +0000 ROA not before: Thu 29 Feb 2024 01:29:19 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 55391 IP address blocks: 14.0.8.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65 Validity Not Before: Feb 29 01:29:19 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=72D4210719EA6B484219D851D24C4AEEDC39391B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:29:4e:f7:57:b5:df:3e:6a:0b:3b:d1:f9: 0d:a3:ba:d7:3c:db:58:e7:19:1b:d3:a1:15:9e:f4: a8:e3:e4:cd:f4:58:aa:22:36:66:3a:df:0b:02:19: 56:a8:c5:28:04:9d:db:94:fe:0a:34:c2:5e:1d:77: 40:eb:ce:90:08:4e:d1:f7:70:a4:fa:15:4f:2b:2a: d6:97:0d:22:0a:fd:a8:ae:48:d9:22:c3:59:fe:05: d7:39:7f:17:2a:8f:30:a5:1c:7c:6c:cf:fd:88:ce: 61:ec:85:2e:2e:12:00:f7:1e:3c:4a:e8:be:8e:15: 54:86:1a:4a:f6:f4:cd:b3:4a:82:ee:b4:b1:b2:cb: 09:6f:73:66:e4:35:1c:d5:fc:c0:86:ef:1d:eb:c7: fa:86:42:30:3c:83:bc:98:2d:c2:ef:7f:66:aa:df: de:4a:93:e0:fe:3e:ea:c8:68:02:6a:8c:74:1d:57: 91:21:e3:f5:d9:90:25:2f:1f:9a:83:5c:4e:c9:ee: 26:2b:ca:de:bf:7e:bd:ed:1f:73:1f:b0:fc:e9:71: 9a:28:5d:1f:2e:1f:63:5a:ad:44:04:9c:98:f4:dc: 53:ae:df:4a:3e:69:58:74:5c:bb:2b:2c:85:ea:49: 40:e2:3d:8a:be:df:a3:91:40:a3:f3:72:21:d0:d2: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D4:21:07:19:EA:6B:48:42:19:D8:51:D2:4C:4A:EE:DC:39:39:1B X509v3 Authority Key Identifier: keyid:B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ctQhBxnqa0hCGdhR0kxK7tw5ORs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.0.8.0/22 Signature Algorithm: sha256WithRSAEncryption 26:dd:5f:42:d1:90:bb:38:a4:e8:c7:2d:13:6e:0d:7c:79:fa: c8:bb:c7:e9:6e:8b:7b:e3:7c:5a:33:8c:86:e2:a6:af:6e:e2: da:67:76:13:47:e5:18:12:e0:db:d6:ec:f1:8b:98:ff:61:e3: bf:1c:d2:db:2e:ad:22:d7:45:6a:cf:54:f8:32:95:aa:c7:ba: 7c:bd:12:60:44:97:bb:6d:6e:81:b6:d3:36:97:68:5c:9d:bf: 08:68:c5:b4:69:e0:3c:49:54:11:f8:7d:70:43:4f:9c:f0:00: 94:57:53:11:94:bf:ca:92:c4:f3:b7:7d:18:d2:ec:ba:6b:47: b5:12:69:77:ae:73:21:fb:4c:ea:64:9b:30:90:f6:1d:6d:a9: 69:25:d7:f5:58:59:28:24:90:5d:06:c7:23:8b:c4:94:a4:3c: 39:71:6c:a2:ed:57:de:7c:ed:b8:ba:5b:6f:15:6a:c6:d6:de: 98:0b:82:15:d8:9d:7a:b4:7e:50:67:30:82:60:6a:af:82:04: 22:6b:23:2f:5b:f1:bd:e8:83:8f:3a:68:8d:de:ec:8a:11:45: db:35:02:4c:0e:35:41:d9:03:cd:dd:fe:93:27:0d:4d:3e:e8: 2d:36:36:47:65:15:30:c2:56:44:d3:68:48:5e:30:b6:70:e6: 0f:bc:61:a6 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNzlD NDdDRDU0RDMyN0QzQzE3NzdDRjVFNDFGMTYyQzk4NzZCQjY1MB4XDTI0MDIyOTAx MjkxOVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoNzJENDIxMDcxOUVBNkI0 ODQyMTlEODUxRDI0QzRBRUVEQzM5MzkxQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM0NKU73V7XfPmoLO9H5DaO61zzbWOcZG9OhFZ70qOPkzfRYqiI2 ZjrfCwIZVqjFKASd25T+CjTCXh13QOvOkAhO0fdwpPoVTysq1pcNIgr9qK5I2SLD Wf4F1zl/FyqPMKUcfGzP/YjOYeyFLi4SAPcePErovo4VVIYaSvb0zbNKgu60sbLL CW9zZuQ1HNX8wIbvHevH+oZCMDyDvJgtwu9/Zqrf3kqT4P4+6shoAmqMdB1XkSHj 9dmQJS8fmoNcTsnuJivK3r9+ve0fcx+w/OlxmihdHy4fY1qtRAScmPTcU67fSj5p WHRcuysshepJQOI9ir7fo5FAo/NyIdDS1w0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBRy1CEHGeprSEIZ2FHSTEru3Dk5GzAfBgNVHSMEGDAWgBS3nEfNVNMn08F3fPXk HxYsmHa7ZTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyMDcvdDV4SHpWVFRKOVBCZDN6MTVCOFdMSmgydTJVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdDV4SHpWVFRKOVBCZDN6MTVCOFdM SmgydTJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjA3L2N0UWhCeG5xYTBoQ0dkaFIwa3hLN3R3NU9Scy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAIOAAgwDQYJKoZIhvcNAQELBQADggEBACbdX0LRkLs4pOjHLRNuDXx5 +si7x+lui3vjfFozjIbipq9u4tpndhNH5RgS4NvW7PGLmP9h478c0tsurSLXRWrP VPgylarHuny9EmBEl7ttboG20zaXaFydvwhoxbRp4DxJVBH4fXBDT5zwAJRXUxGU v8qSxPO3fRjS7LprR7USaXeucyH7TOpkmzCQ9h1tqWkl1/VYWSgkkF0GxyOLxJSk PDlxbKLtV9587bi6W28VasbW3pgLghXYnXq0flBnMIJgaq+CBCJrIy9b8b3og486 aI3e7IoRRds1AkwONUHZA83d/pMnDU0+6C02NkdlFTDCVkTTaEheMLZw5g+8YaY= -----END CERTIFICATE-----Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org