$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/bmxObCEzUEnvhKso7wc9PicPpEk.roa File: bmxObCEzUEnvhKso7wc9PicPpEk.roa (raw, json) Hash identifier: T+hoowe2S21WZjYzWDSuS4fc4yqShYL3Km6bPlHyA9A= Subject key identifier: 6E:6C:4E:6C:21:33:50:49:EF:84:AB:28:EF:07:3D:3E:27:0F:A4:49 Certificate issuer: /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D Certificate serial: 07 Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/bmxObCEzUEnvhKso7wc9PicPpEk.roa Signing time: Mon 01 Apr 2024 23:53:03 +0000 ROA not before: Mon 01 Apr 2024 23:53:03 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2497 IP address blocks: 157.8.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D Validity Not Before: Apr 1 23:53:03 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=6E6C4E6C21335049EF84AB28EF073D3E270FA449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:ee:65:02:05:2a:11:29:e1:b7:f6:0d:ce: 34:1b:ba:99:22:d9:52:88:3e:1b:40:8a:a6:37:ec: 8c:6c:54:79:eb:d3:ee:f3:19:f4:42:39:0a:26:c1: 38:19:c0:a6:d5:eb:1d:35:8b:cf:e4:d3:0d:c8:fb: cf:4e:fd:14:77:3f:ba:da:81:0f:90:ed:67:75:cf: 49:16:26:ed:ef:e1:41:5c:7c:ef:fb:c8:27:89:ad: 34:dc:63:3e:96:8a:1c:a6:96:5b:82:53:fe:62:0e: b5:c4:5d:58:4c:43:5d:67:30:15:e9:b6:21:8f:19: 8e:3d:81:2d:36:95:49:d2:66:58:a3:41:c6:d3:85: 37:5f:05:e0:31:f1:a2:65:90:a2:ea:2a:9b:98:e4: fe:99:20:5f:24:ef:14:90:77:07:9b:fd:31:f0:83: d0:25:58:a2:db:6f:1a:8f:e5:fe:e3:c2:cb:5f:6b: 70:b1:f7:6e:e8:80:13:68:b1:4c:26:9e:4c:79:08: 15:b6:ac:1e:32:85:d1:14:1d:44:d7:f7:2e:03:d5: e1:43:36:52:7b:d6:fc:3b:92:46:4d:b4:8b:c6:b5: 03:ea:01:c9:7d:40:dc:ae:4f:9d:7e:c8:0f:e5:da: b6:5e:b7:bd:e5:c2:4a:6f:2a:e4:22:0f:80:7b:d3: 29:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6C:4E:6C:21:33:50:49:EF:84:AB:28:EF:07:3D:3E:27:0F:A4:49 X509v3 Authority Key Identifier: keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/bmxObCEzUEnvhKso7wc9PicPpEk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.8.88.0/21 Signature Algorithm: sha256WithRSAEncryption 16:68:90:e1:ef:87:8b:62:c6:74:97:af:c1:91:ee:e2:e2:a2: d7:b5:47:b9:93:82:05:6d:bd:e9:c5:4e:22:1c:25:a3:05:53: 5e:ff:39:65:c3:37:e2:94:4b:fa:7a:bb:50:cb:09:41:ff:2c: c3:9d:e4:e2:1c:4d:49:3c:eb:22:90:ca:2c:f1:e4:fe:cc:8d: 7c:28:bc:3c:25:f3:57:4c:55:b2:4f:20:8b:16:de:a1:a6:55: e6:e3:16:db:f4:a9:0a:87:e7:42:31:a3:6a:dc:82:86:03:62: cb:4f:65:c9:04:29:17:f6:4b:c7:08:25:60:cc:4e:cb:a8:48: f6:62:9a:0d:ab:1d:67:ae:6c:16:37:ac:d2:e5:68:e0:f8:da: a6:ca:d5:86:db:d8:41:c5:f8:ae:87:e4:c6:73:a8:6b:e1:de: 31:e1:e5:f1:66:11:14:1f:3b:a2:47:23:86:19:88:a9:2a:4d: fc:05:24:46:ea:84:a1:35:61:a7:f5:87:8d:81:d8:7e:9c:22: 73:2b:a3:60:36:04:71:cf:76:ef:8f:f6:2a:be:2a:b9:d3:6b: ce:72:5c:4e:b6:ae:6a:a5:ca:7c:7f:22:e5:b7:fc:5a:23:bc: 04:18:19:ea:68:70:e2:fd:9f:56:8f:bf:5a:78:d7:6a:e9:db: 50:d2:c8:ec -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTkx Q0I5RjRDNDIyRDNCM0Q2NzUzNzFCMThBOERBRERBRTg3OThEMB4XDTI0MDQwMTIz NTMwM1oXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNkU2QzRFNkMyMTMzNTA0 OUVGODRBQjI4RUYwNzNEM0UyNzBGQTQ0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANG+7mUCBSoRKeG39g3ONBu6mSLZUog+G0CKpjfsjGxUeevT7vMZ 9EI5CibBOBnAptXrHTWLz+TTDcj7z079FHc/utqBD5DtZ3XPSRYm7e/hQVx87/vI J4mtNNxjPpaKHKaWW4JT/mIOtcRdWExDXWcwFem2IY8Zjj2BLTaVSdJmWKNBxtOF N18F4DHxomWQouoqm5jk/pkgXyTvFJB3B5v9MfCD0CVYottvGo/l/uPCy19rcLH3 buiAE2ixTCaeTHkIFbasHjKF0RQdRNf3LgPV4UM2UnvW/DuSRk20i8a1A+oByX1A 3K5PnX7ID+Xatl63veXCSm8q5CIPgHvTKUMCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBRubE5sITNQSe+EqyjvBz0+Jw+kSTAfBgNVHSMEGDAWgBRxkcufTEItOz1nU3Gx io2t2uh5jTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTkzNy9jWkhMbjB4Q0xUczlaMU54c1lxTnJkcm9lWTAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jWkhMbjB4Q0xUczlaMU54c1lxTnJk cm9lWTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTkzNy9ibXhPYkNFelVFbnZoS3NvN3djOVBpY1BwRWsucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQDnQhYMA0GCSqGSIb3DQEBCwUAA4IBAQAWaJDh74eLYsZ0l6/Bke7i4qLX tUe5k4IFbb3pxU4iHCWjBVNe/zllwzfilEv6ertQywlB/yzDneTiHE1JPOsikMos 8eT+zI18KLw8JfNXTFWyTyCLFt6hplXm4xbb9KkKh+dCMaNq3IKGA2LLT2XJBCkX 9kvHCCVgzE7LqEj2YpoNqx1nrmwWN6zS5Wjg+NqmytWG29hBxfiuh+TGc6hr4d4x 4eXxZhEUHzuiRyOGGYipKk38BSRG6oShNWGn9YeNgdh+nCJzK6NgNgRxz3bvj/Yq viq502vOclxOtq5qpcp8fyLlt/xaI7wEGBnqaHDi/Z9Wj79aeNdq6dtQ0sjs -----END CERTIFICATE-----Generated at Wed Jun 26 09:28:35 2024 by rpki-client on console-fra.rpki-client.org