$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Apr2R9CGANjzj0w5NpvTmbuUkPc.roa File: Apr2R9CGANjzj0w5NpvTmbuUkPc.roa (raw, json) Hash identifier: ejVhW79g9xTCG7swEG/XEf3JD9nxRZMdCaiAd6FX6Gw= Subject key identifier: 02:9A:F6:47:D0:86:00:D8:F3:8F:4C:39:36:9B:D3:99:BB:94:90:F7 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 01FE Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Apr2R9CGANjzj0w5NpvTmbuUkPc.roa Signing time: Fri 31 May 2024 01:29:08 +0000 ROA not before: Fri 31 May 2024 01:29:08 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 27.120.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:29:08 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=029AF647D08600D8F38F4C39369BD399BB9490F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:bb:64:55:be:19:47:21:0a:c6:2d:64:ed: 22:1d:37:ff:b6:0a:c4:81:30:ff:f3:07:45:f1:c1: e6:ed:57:2d:d6:02:d0:d7:69:8d:15:a8:df:dc:23: 58:14:98:55:27:a3:21:0e:81:9f:0d:3e:dd:e9:1c: f0:88:c2:2d:49:b7:22:2b:6a:1f:be:08:2e:49:90: 08:a8:a3:bf:19:92:7d:27:91:13:c8:86:a0:0c:2a: 24:f9:1e:20:89:47:22:41:a9:7a:27:e0:b8:c0:75: 11:2e:60:de:e5:2e:b9:58:a6:f5:41:94:65:91:7e: 25:a4:cd:fd:0b:32:93:4a:3a:d5:ad:9c:01:83:69: 29:16:84:27:19:c6:f2:30:10:df:1a:d7:9b:57:bf: f0:c0:9c:55:66:dd:8e:b2:d8:67:ba:b3:2a:e0:31: 62:e6:4d:2f:b7:2e:bc:24:6d:82:60:21:e0:3e:f9: f9:9a:6e:85:43:42:8f:33:75:8a:09:e9:0b:4a:ea: 82:24:7b:e3:39:30:b5:89:b5:9b:20:1f:ca:ff:7d: ca:d8:8a:06:ed:2a:e3:a5:e0:6e:1c:dd:8f:81:ae: 42:47:2a:b5:b8:af:02:73:33:57:52:04:18:c1:18: 21:b2:37:21:db:23:e2:37:e6:0d:9d:dc:c8:1b:b3: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9A:F6:47:D0:86:00:D8:F3:8F:4C:39:36:9B:D3:99:BB:94:90:F7 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Apr2R9CGANjzj0w5NpvTmbuUkPc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.120.180.0/22 Signature Algorithm: sha256WithRSAEncryption 72:04:ea:37:7f:8f:47:b1:f8:6a:79:6e:b1:8d:9d:37:9a:15: 0a:e2:eb:6b:d6:34:6c:77:af:72:71:56:ac:fa:91:ce:ff:71: 85:de:eb:34:86:64:ef:bc:17:ab:70:61:f9:ba:cc:ce:f5:e5: b3:51:36:10:0c:ae:94:e3:e0:60:42:5d:22:4c:32:d6:5f:95: d0:af:b6:70:5d:a7:e5:6f:bb:39:e7:cb:9e:7f:7a:59:96:4f: f5:f3:51:f8:ef:2d:0f:b9:d3:13:71:38:23:70:f6:e7:78:78: fa:3b:16:2c:be:9e:00:0b:d9:5a:63:bf:51:1a:de:28:36:27: e3:a4:96:c2:e9:7a:03:e9:fb:28:fe:b1:5c:50:5b:30:6f:ba: ba:0d:a8:ef:8f:05:eb:b9:c8:dd:1c:99:6a:cd:76:32:b4:a9: 19:0a:6f:46:e5:84:a4:38:41:3a:92:97:9c:60:e1:71:3c:51: 97:69:56:37:5d:2e:bf:c4:a3:17:ff:9a:02:b8:e6:e8:52:f8: e0:e8:25:a4:c8:50:52:07:95:41:34:8e:27:e3:ce:21:05:6f: 5f:26:fb:6d:5f:6f:75:05:8a:f0:68:24:a3:d9:81:3c:a8:e5: c5:06:44:08:f0:b8:2f:be:cd:86:1c:b6:39:2f:1f:32:45:44: 19:e7:93:a7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTI5MDhaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAyOUFGNjQ3RDA4NjAw RDhGMzhGNEMzOTM2OUJEMzk5QkI5NDkwRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC05LtkVb4ZRyEKxi1k7SIdN/+2CsSBMP/zB0XxwebtVy3WAtDX aY0VqN/cI1gUmFUnoyEOgZ8NPt3pHPCIwi1JtyIrah++CC5JkAioo78Zkn0nkRPI hqAMKiT5HiCJRyJBqXon4LjAdREuYN7lLrlYpvVBlGWRfiWkzf0LMpNKOtWtnAGD aSkWhCcZxvIwEN8a15tXv/DAnFVm3Y6y2Ge6syrgMWLmTS+3LrwkbYJgIeA++fma boVDQo8zdYoJ6QtK6oIke+M5MLWJtZsgH8r/fcrYigbtKuOl4G4c3Y+BrkJHKrW4 rwJzM1dSBBjBGCGyNyHbI+I35g2d3Mgbs0TZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUApr2R9CGANjzj0w5NpvTmbuUkPcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0FwcjJSOUNHQU5qemowdzVOcHZUbWJ1VWtQYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIbeLQwDQYJKoZIhvcNAQELBQADggEBAHIE6jd/j0ex+Gp5brGNnTeaFQri 62vWNGx3r3JxVqz6kc7/cYXe6zSGZO+8F6twYfm6zM715bNRNhAMrpTj4GBCXSJM MtZfldCvtnBdp+Vvuznny55/elmWT/XzUfjvLQ+50xNxOCNw9ud4ePo7Fiy+ngAL 2Vpjv1Ea3ig2J+OklsLpegPp+yj+sVxQWzBvuroNqO+PBeu5yN0cmWrNdjK0qRkK b0blhKQ4QTqSl5xg4XE8UZdpVjddLr/Eoxf/mgK45uhS+ODoJaTIUFIHlUE0jifj ziEFb18m+21fb3UFivBoJKPZgTyo5cUGRAjwuC++zYYctjkvHzJFRBnnk6c= -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org