$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/cKnXQ5OSv2mILH-0CYw9vhJZxJg.roa File: cKnXQ5OSv2mILH-0CYw9vhJZxJg.roa (raw, json) Hash identifier: NhjBO9S3Xi9i/pwRW87jYsQTirWCjYMYgMUZrq/WwSA= Subject key identifier: 70:A9:D7:43:93:92:BF:69:88:2C:7F:B4:09:8C:3D:BE:12:59:C4:98 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02AD Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cKnXQ5OSv2mILH-0CYw9vhJZxJg.roa Signing time: Fri 31 May 2024 01:41:39 +0000 ROA not before: Fri 31 May 2024 01:41:39 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 175.103.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:41:39 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=70A9D7439392BF69882C7FB4098C3DBE1259C498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:e2:c0:fa:55:a0:3c:ca:89:bd:be:44:5b: ab:2c:79:6b:53:7f:11:bb:01:38:25:de:82:97:c3: 9d:36:c1:e8:bd:91:31:f8:f0:e6:80:4b:ee:07:de: 53:95:8c:97:0f:46:cd:bf:46:fb:06:88:d0:e0:a8: 08:a3:a4:ec:06:ec:f0:59:24:8d:0a:0e:7e:1c:5e: 80:09:96:9c:4d:bf:49:dc:3d:76:65:dd:56:a8:17: 59:8d:4f:cc:a4:83:62:83:86:27:1e:96:c1:37:f8: 02:ad:b0:bd:50:07:79:9f:32:ac:e8:20:45:5a:65: 94:bf:4d:c9:aa:d8:39:71:01:00:cb:92:24:32:d5: fd:2d:f0:67:50:20:b8:17:e6:d6:6e:8c:05:b6:98: 51:e0:d8:b3:b8:5c:56:ed:a0:d5:32:03:b7:97:11: 61:7c:cd:00:2c:1b:77:67:13:f7:f3:e3:63:15:be: 7e:43:bc:ab:cc:d6:18:ff:ee:1d:e1:3b:e5:d0:73: 0e:f6:4d:a3:1e:79:58:d0:c6:66:08:06:9e:25:2d: 0e:67:81:99:73:5f:cf:0b:30:b7:a2:9a:42:6b:7f: 3e:37:f2:2e:0e:4d:05:b4:c7:e1:06:c4:62:2e:71: 00:a8:3a:28:4c:f8:fe:11:8f:a7:dc:ee:03:d6:57: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A9:D7:43:93:92:BF:69:88:2C:7F:B4:09:8C:3D:BE:12:59:C4:98 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cKnXQ5OSv2mILH-0CYw9vhJZxJg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.103.144.0/21 Signature Algorithm: sha256WithRSAEncryption 27:06:b6:47:fc:e2:d3:2d:53:aa:6c:4c:d3:12:f9:b9:12:ae: c0:b8:9d:1c:6a:8d:6b:39:86:fa:ca:f3:fc:6e:96:67:41:45: 20:ae:92:ff:81:e2:9c:e9:7a:13:d3:7e:96:eb:df:dc:0a:41: fe:7e:8b:44:4a:36:49:87:5a:73:7f:5e:78:96:9c:fc:35:58: 25:e7:14:b5:46:7a:b7:a1:78:32:01:ff:ae:38:c4:11:df:fc: d2:08:35:b0:6e:17:b7:d5:5b:b9:96:ea:aa:7b:2d:70:a3:6e: 29:49:10:49:35:6b:a0:75:72:31:2b:c8:8a:33:60:fd:91:67: f8:d5:76:90:b3:91:9b:d3:59:62:63:71:5d:a6:21:b2:21:bc: 5b:f7:60:f7:cc:26:1f:2f:07:bb:0c:79:ef:39:e1:73:d3:5b: fa:88:0b:63:89:b2:c9:64:af:ee:ed:19:9c:a6:14:1e:55:4e: 1a:80:1d:95:74:0a:0f:3b:e9:a4:ab:dc:90:57:11:93:34:44: 94:01:e9:4a:dd:2c:23:b5:af:95:5b:bc:7e:b9:8e:fb:be:c1: 07:09:06:17:a4:0f:d4:11:22:be:c6:de:e7:5f:80:94:ad:ad: 14:a8:58:76:f6:23:4a:7f:03:f0:96:0c:1e:90:31:96:28:4f: de:1a:92:bc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTQxMzlaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDcwQTlENzQzOTM5MkJG Njk4ODJDN0ZCNDA5OEMzREJFMTI1OUM0OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIneLA+lWgPMqJvb5EW6sseWtTfxG7ATgl3oKXw502wei9kTH4 8OaAS+4H3lOVjJcPRs2/RvsGiNDgqAijpOwG7PBZJI0KDn4cXoAJlpxNv0ncPXZl 3VaoF1mNT8ykg2KDhicelsE3+AKtsL1QB3mfMqzoIEVaZZS/Tcmq2DlxAQDLkiQy 1f0t8GdQILgX5tZujAW2mFHg2LO4XFbtoNUyA7eXEWF8zQAsG3dnE/fz42MVvn5D vKvM1hj/7h3hO+XQcw72TaMeeVjQxmYIBp4lLQ5ngZlzX88LMLeimkJrfz438i4O TQW0x+EGxGIucQCoOihM+P4Rj6fc7gPWV/nLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcKnXQ5OSv2mILH+0CYw9vhJZxJgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2NLblhRNU9TdjJtSUxILTBDWXc5dmhKWnhKZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOvZ5AwDQYJKoZIhvcNAQELBQADggEBACcGtkf84tMtU6psTNMS+bkSrsC4 nRxqjWs5hvrK8/xulmdBRSCukv+B4pzpehPTfpbr39wKQf5+i0RKNkmHWnN/XniW nPw1WCXnFLVGereheDIB/644xBHf/NIINbBuF7fVW7mW6qp7LXCjbilJEEk1a6B1 cjEryIozYP2RZ/jVdpCzkZvTWWJjcV2mIbIhvFv3YPfMJh8vB7sMee854XPTW/qI C2OJsslkr+7tGZymFB5VThqAHZV0Cg876aSr3JBXEZM0RJQB6UrdLCO1r5VbvH65 jvu+wQcJBhekD9QRIr7G3udfgJStrRSoWHb2I0p/A/CWDB6QMZYoT94akrw= -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org