$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/agzas6OW364SfMjzip8rYLegZWs.roa File: agzas6OW364SfMjzip8rYLegZWs.roa (raw, json) Hash identifier: 7C9Q8M0Tp2mTUkjkMiVLcYZmZ9KLvGIOI4ObWSL2F4Q= Subject key identifier: 6A:0C:DA:B3:A3:96:DF:AE:12:7C:C8:F3:8A:9F:2B:60:B7:A0:65:6B Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02D3 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/agzas6OW364SfMjzip8rYLegZWs.roa Signing time: Sun 30 Jun 2024 01:32:17 +0000 ROA not before: Sun 30 Jun 2024 01:32:17 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 10013 IP address blocks: 180.131.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jun 30 01:32:17 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=6A0CDAB3A396DFAE127CC8F38A9F2B60B7A0656B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cd:66:e3:6f:e1:9b:65:81:83:9a:39:11:5d: b5:fe:39:a1:59:57:a4:c3:23:e8:7d:89:ce:ef:c0: 37:01:4a:7f:3b:27:e9:22:dc:04:11:a7:bf:51:89: 8c:5a:ce:ea:49:d6:d7:ca:09:7e:8f:00:97:21:9a: b5:a0:61:05:94:ce:97:ef:0f:6b:12:8e:4e:ba:98: 7b:da:1b:84:4a:fe:a9:96:98:b4:60:8e:bf:74:66: 32:93:d7:10:b5:13:6a:3b:54:3b:5b:d0:44:88:44: e0:f3:f4:95:7f:0b:8a:ed:65:cb:9e:aa:7d:90:ee: 6c:0b:5b:3c:bb:c0:52:05:5a:50:b2:fa:43:4c:e5: 40:bd:af:7d:ca:39:f9:2c:72:b9:01:f8:50:2e:d1: 06:f1:01:75:0b:86:63:fd:3b:52:0a:02:bd:ac:b9: c4:21:1e:24:46:6b:1b:d7:90:30:0c:31:62:10:85: 7c:94:16:3e:3b:72:d7:3d:7e:72:f1:c7:a8:0f:9e: 21:11:34:7a:32:6a:9a:b3:b4:86:d9:c9:d1:af:e2: 1f:17:c7:b7:71:56:a5:48:b5:81:00:f6:e7:a6:74: ad:75:b2:9f:95:bd:0d:ac:f6:c3:f7:d0:30:25:55: 9e:cd:4b:5c:cc:20:06:ff:3d:08:2b:f5:27:d7:89: 99:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0C:DA:B3:A3:96:DF:AE:12:7C:C8:F3:8A:9F:2B:60:B7:A0:65:6B X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/agzas6OW364SfMjzip8rYLegZWs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.119.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:27:8f:9d:6b:aa:88:47:c4:3c:27:e2:71:3c:eb:8b:46:23: b1:88:57:f7:36:e8:a6:77:2f:c9:ef:bc:15:77:14:97:59:fb: 21:c9:e0:2e:36:a5:c4:e7:1c:e8:a9:95:6d:e6:a2:3e:bf:a4: 56:78:77:ca:5c:9f:86:1c:98:67:56:28:25:69:7c:d6:07:cc: 66:3b:b7:cf:f2:99:aa:eb:dc:29:51:29:e8:3d:a2:d3:fb:38: e5:ed:57:5e:20:da:04:8b:63:d7:c3:a7:23:f3:06:85:15:f8: fe:94:5d:cb:a5:e4:13:9f:fd:7e:9c:65:6a:c4:3b:1c:db:31: de:46:d2:c3:25:af:40:cb:e5:ad:23:75:f0:c5:2f:cc:c2:8e: d9:0a:30:42:65:e9:2d:58:64:d0:8d:c0:f7:64:b6:8a:d2:f2: 1e:de:70:53:7f:23:2e:d2:08:47:8e:8d:51:5b:7e:2b:2a:1f: 52:ca:ec:79:9c:1e:1f:b5:f6:67:15:9b:84:e3:d1:c3:77:e6: 82:57:6c:0f:70:d6:6e:f5:f7:40:55:68:e2:dd:44:43:d1:b7: 26:6d:b1:4c:8a:17:b4:89:b6:ec:f9:b9:4e:cc:f0:84:bc:96: 3f:c7:27:14:6a:11:0d:f0:35:dd:4f:e5:b4:4b:bf:6d:bd:4e: 66:a2:5e:ed -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA2MzAw MTMyMTdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDZBMENEQUIzQTM5NkRG QUUxMjdDQzhGMzhBOUYyQjYwQjdBMDY1NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLzWbjb+GbZYGDmjkRXbX+OaFZV6TDI+h9ic7vwDcBSn87J+ki 3AQRp79RiYxazupJ1tfKCX6PAJchmrWgYQWUzpfvD2sSjk66mHvaG4RK/qmWmLRg jr90ZjKT1xC1E2o7VDtb0ESIRODz9JV/C4rtZcueqn2Q7mwLWzy7wFIFWlCy+kNM 5UC9r33KOfkscrkB+FAu0QbxAXULhmP9O1IKAr2sucQhHiRGaxvXkDAMMWIQhXyU Fj47ctc9fnLxx6gPniERNHoyapqztIbZydGv4h8Xx7dxVqVItYEA9uemdK11sp+V vQ2s9sP30DAlVZ7NS1zMIAb/PQgr9SfXiZlpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUagzas6OW364SfMjzip8rYLegZWswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2FnemFzNk9XMzY0U2ZNanppcDhyWUxlZ1pXcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC0g3cwDQYJKoZIhvcNAQELBQADggEBAB0nj51rqohHxDwn4nE864tGI7GI V/c26KZ3L8nvvBV3FJdZ+yHJ4C42pcTnHOiplW3moj6/pFZ4d8pcn4YcmGdWKCVp fNYHzGY7t8/ymarr3ClRKeg9otP7OOXtV14g2gSLY9fDpyPzBoUV+P6UXcul5BOf /X6cZWrEOxzbMd5G0sMlr0DL5a0jdfDFL8zCjtkKMEJl6S1YZNCNwPdktorS8h7e cFN/Iy7SCEeOjVFbfisqH1LK7HmcHh+19mcVm4Tj0cN35oJXbA9w1m7190BVaOLd REPRtyZtsUyKF7SJtuz5uU7M8IS8lj/HJxRqEQ3wNd1P5bRLv229TmaiXu0= -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org