$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/g0NDLo1aFXHVGKd35y09fqC0AEU.roa File: g0NDLo1aFXHVGKd35y09fqC0AEU.roa (raw, json) Hash identifier: Mb1pVC/rOrkOjctShVE2tWT+STRy29TOGv1+PuQe+6A= Subject key identifier: 83:43:43:2E:8D:5A:15:71:D5:18:A7:77:E7:2D:3D:7E:A0:B4:00:45 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0246 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/g0NDLo1aFXHVGKd35y09fqC0AEU.roa Signing time: Fri 31 May 2024 01:35:31 +0000 ROA not before: Fri 31 May 2024 01:35:31 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 61.87.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:35:31 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=8343432E8D5A1571D518A777E72D3D7EA0B40045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:ed:26:78:c8:b1:02:89:78:2f:1e:79:57: 20:28:33:08:c3:29:69:29:ad:e8:f1:c5:9f:5c:9d: 3e:93:37:b7:d6:95:e1:19:99:6e:4f:31:db:99:1f: 94:e1:45:63:54:35:bd:75:dd:64:76:6f:43:83:77: a1:1b:6a:60:35:42:6d:2e:0d:ff:78:4d:31:35:29: a4:18:b1:eb:e7:3a:df:a6:ad:5a:a1:f8:e4:ef:de: 06:2b:05:d6:38:36:49:54:90:7f:5c:34:1b:e6:87: 02:a3:f7:6d:d3:78:a1:94:fd:00:d7:9e:82:b9:ff: fc:fa:76:dd:1f:ec:0e:20:49:28:0e:02:c4:0f:c9: f8:2c:9d:63:dc:b9:0a:e4:d8:f7:2a:40:2a:ee:23: 15:70:bf:c5:6b:64:26:13:df:f4:99:4d:b1:0d:a9: 9c:81:60:cd:5f:bb:16:c2:5f:ee:b5:45:2e:2e:69: 72:7c:e0:58:84:b2:24:03:0f:8a:a8:36:27:b7:cd: fa:62:63:0a:28:98:59:5d:71:d8:71:a6:bd:38:3a: f4:70:ed:93:e8:ca:6f:af:ce:04:14:e6:b3:35:b4: e0:bf:0c:50:aa:01:d7:50:dc:c5:3b:ee:ca:9d:71: 90:a3:9f:e2:47:ed:14:c1:bf:88:49:b9:d6:30:11: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:43:43:2E:8D:5A:15:71:D5:18:A7:77:E7:2D:3D:7E:A0:B4:00:45 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/g0NDLo1aFXHVGKd35y09fqC0AEU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.87.0.0/21 Signature Algorithm: sha256WithRSAEncryption 17:36:4f:79:c7:e4:a8:15:8e:01:ec:3b:b9:a1:30:13:e6:9c: aa:e1:6d:fe:86:9d:9a:d4:d5:be:05:1c:b9:d4:1d:6b:b1:a3: af:6d:4a:cb:e5:f7:3e:3d:e7:0b:17:b9:31:c3:66:0b:9c:ac: d3:6b:61:83:6a:72:05:20:aa:42:fc:aa:88:07:aa:d0:b6:fb: 05:21:c2:b8:1d:fe:f5:a5:0c:44:0d:8a:d4:15:24:75:a6:69: 45:18:5f:d5:84:65:22:14:d7:38:f2:f5:71:96:7c:f6:a4:cc: aa:df:d7:bf:b2:1e:51:88:c7:ec:17:50:79:d2:61:8f:3a:fc: 2f:a7:92:62:bd:fd:22:6f:1b:12:97:77:3c:23:6a:a1:95:37: eb:78:55:ea:50:01:c6:d7:c4:aa:3f:b4:6e:06:2f:29:95:9c: 0d:e0:36:29:f8:ba:7b:d1:56:2c:62:af:91:29:14:84:87:46: 97:ee:b6:a2:3a:de:27:47:af:01:22:95:fc:16:93:9e:13:00: 2b:43:97:ae:88:ed:78:ae:5f:19:9f:ac:c1:ab:c4:65:0c:df: 39:6f:df:b2:3b:80:bb:b1:63:41:55:12:91:be:c6:f4:25:35: 57:4c:0c:ae:d7:54:c4:c2:13:c5:89:20:f7:a9:15:ba:1d:b3: 33:f9:1f:aa -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM1MzFaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgzNDM0MzJFOEQ1QTE1 NzFENTE4QTc3N0U3MkQzRDdFQTBCNDAwNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq/+0meMixAol4Lx55VyAoMwjDKWkprejxxZ9cnT6TN7fWleEZ mW5PMduZH5ThRWNUNb113WR2b0ODd6EbamA1Qm0uDf94TTE1KaQYsevnOt+mrVqh +OTv3gYrBdY4NklUkH9cNBvmhwKj923TeKGU/QDXnoK5//z6dt0f7A4gSSgOAsQP yfgsnWPcuQrk2PcqQCruIxVwv8VrZCYT3/SZTbENqZyBYM1fuxbCX+61RS4uaXJ8 4FiEsiQDD4qoNie3zfpiYwoomFldcdhxpr04OvRw7ZPoym+vzgQU5rM1tOC/DFCq AddQ3MU77sqdcZCjn+JH7RTBv4hJudYwEaWtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUg0NDLo1aFXHVGKd35y09fqC0AEUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2cwTkRMbzFhRlhIVkdLZDM1eTA5ZnFDMEFFVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9VwAwDQYJKoZIhvcNAQELBQADggEBABc2T3nH5KgVjgHsO7mhMBPmnKrh bf6GnZrU1b4FHLnUHWuxo69tSsvl9z495wsXuTHDZgucrNNrYYNqcgUgqkL8qogH qtC2+wUhwrgd/vWlDEQNitQVJHWmaUUYX9WEZSIU1zjy9XGWfPakzKrf17+yHlGI x+wXUHnSYY86/C+nkmK9/SJvGxKXdzwjaqGVN+t4VepQAcbXxKo/tG4GLymVnA3g Nin4unvRVixir5EpFISHRpfutqI63idHrwEilfwWk54TACtDl66I7XiuXxmfrMGr xGUM3zlv37I7gLuxY0FVEpG+xvQlNVdMDK7XVMTCE8WJIPepFbodszP5H6o= -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org