$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/TFJI84jaXLxRWEERbTQMUejLObc.roa File: TFJI84jaXLxRWEERbTQMUejLObc.roa (raw, json) Hash identifier: BJaMcq6UyocJTEINR8/y64KqiRHommrzz8IiBdP5Zrk= Subject key identifier: 4C:52:48:F3:88:DA:5C:BC:51:58:41:11:6D:34:0C:51:E8:CB:39:B7 Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Certificate serial: 2A Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/TFJI84jaXLxRWEERbTQMUejLObc.roa Signing time: Tue 26 Sep 2023 06:27:19 +0000 ROA not before: Tue 26 Sep 2023 06:27:19 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 23637 IP address blocks: 112.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Validity Not Before: Sep 26 06:27:19 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=4C5248F388DA5CBC515841116D340C51E8CB39B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:b8:f3:51:1a:e5:3f:91:12:5a:48:70:b1: cf:9f:e9:89:1f:a1:0a:d2:11:7a:52:5f:9e:c9:fc: 02:59:29:f5:0b:fb:6b:03:0f:f8:47:19:15:76:7e: bb:94:04:40:5f:18:bc:33:86:8d:e7:68:20:4b:c2: bd:bb:30:9b:d0:95:6c:d7:b7:f0:58:79:c5:4b:16: ae:b7:87:f5:74:f5:d5:38:a5:27:97:b7:83:29:d3: ba:6f:a5:45:e9:e7:14:5e:eb:d8:b4:71:b6:c2:d5: ce:bf:90:5c:dc:28:2b:25:7d:29:cb:ca:1d:a2:f3: 98:f2:e6:d2:a2:d4:38:33:fb:dd:e3:9e:04:a0:6f: c4:e7:0c:97:b3:4e:6e:76:a3:ed:2a:71:2b:ff:47: eb:2a:fa:4b:ac:e4:c2:41:e2:6a:36:17:a1:c8:6a: 90:4d:13:5e:2a:9d:25:68:36:c1:8b:b9:73:a6:05: 36:c9:7e:02:5f:85:d6:b5:24:13:82:d8:3a:6f:ec: ea:9c:0c:c2:f7:5a:74:ba:72:54:d7:46:ca:b6:eb: 78:0d:11:82:70:c1:b8:c4:65:e4:49:20:48:44:e2: ca:4e:bd:26:29:d9:b3:66:34:e8:83:08:83:ce:83: e4:2c:28:48:66:81:41:a7:63:44:da:2a:6d:3d:dd: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:52:48:F3:88:DA:5C:BC:51:58:41:11:6D:34:0C:51:E8:CB:39:B7 X509v3 Authority Key Identifier: keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/TFJI84jaXLxRWEERbTQMUejLObc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.137.184.0/21 Signature Algorithm: sha256WithRSAEncryption 21:17:df:d5:63:87:4e:32:46:34:4f:d8:78:8c:23:28:a9:1c: 4b:1a:e8:7a:a3:f8:02:84:02:39:49:a6:12:70:94:3d:b3:2b: c3:98:db:ba:dc:50:42:50:89:5b:8d:89:a3:63:f8:17:bf:e8: ca:fb:7d:96:13:b3:4b:38:fa:5b:b2:59:ee:cf:01:14:0d:79: dd:c0:f5:2f:16:6f:17:f9:2a:a2:09:d9:74:db:c1:25:56:d4: 8a:07:84:86:50:ca:3f:82:1f:a4:bd:d3:7a:c9:33:fc:7e:f8: 68:73:84:37:42:21:44:71:20:74:f4:b7:35:b9:82:16:c0:60: 86:6d:41:50:20:d7:b1:28:23:dc:ce:72:ad:ca:7d:51:f8:24: f7:b2:54:90:a9:dc:59:e8:dd:70:20:c9:e3:2b:f1:da:d4:f0: bc:e2:ad:64:1c:d8:84:d5:c9:d3:e5:b3:a9:4e:2d:eb:dd:41: c6:d9:60:30:ca:86:c4:8c:86:de:b3:72:20:cb:b6:76:ef:37: ba:e9:d4:84:d3:de:d0:86:3e:48:ca:01:74:97:f1:b4:98:68: 21:b3:db:35:7a:b2:25:f5:01:a9:09:36:f4:93:7a:d5:dc:ab: b3:48:8b:96:f7:dc:c2:59:76:e5:27:7a:ef:17:0b:d7:20:c7: b3:e6:b2:82 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTIzMDkyNjA2 MjcxOVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoNEM1MjQ4RjM4OERBNUNC QzUxNTg0MTExNkQzNDBDNTFFOENCMzlCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALvEuPNRGuU/kRJaSHCxz5/piR+hCtIRelJfnsn8Alkp9Qv7awMP +EcZFXZ+u5QEQF8YvDOGjedoIEvCvbswm9CVbNe38Fh5xUsWrreH9XT11TilJ5e3 gynTum+lRennFF7r2LRxtsLVzr+QXNwoKyV9KcvKHaLzmPLm0qLUODP73eOeBKBv xOcMl7NObnaj7SpxK/9H6yr6S6zkwkHiajYXochqkE0TXiqdJWg2wYu5c6YFNsl+ Al+F1rUkE4LYOm/s6pwMwvdadLpyVNdGyrbreA0RgnDBuMRl5EkgSETiyk69JinZ s2Y06IMIg86D5CwoSGaBQadjRNoqbT3dfvkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBRMUkjziNpcvFFYQRFtNAxR6Ms5tzAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIxMDQyL1RGSkk4NGphWEx4UldFRVJiVFFNVWVqTE9iYy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBANwibgwDQYJKoZIhvcNAQELBQADggEBACEX39Vjh04yRjRP2HiMIyip HEsa6Hqj+AKEAjlJphJwlD2zK8OY27rcUEJQiVuNiaNj+Be/6Mr7fZYTs0s4+luy We7PARQNed3A9S8Wbxf5KqIJ2XTbwSVW1IoHhIZQyj+CH6S903rJM/x++GhzhDdC IURxIHT0tzW5ghbAYIZtQVAg17EoI9zOcq3KfVH4JPeyVJCp3Fno3XAgyeMr8drU 8LzirWQc2ITVydPls6lOLevdQcbZYDDKhsSMht6zciDLtnbvN7rp1ITT3tCGPkjK AXSX8bSYaCGz2zV6siX1AakJNvSTetXcq7NIi5b33MJZduUneu8XC9cgx7PmsoI= -----END CERTIFICATE-----Generated at Sun Jun 2 11:54:23 2024 by rpki-client on console-fra.rpki-client.org