$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/y3hYVxYjV4KPUnU8pSWV_tUxSrc.roa File: y3hYVxYjV4KPUnU8pSWV_tUxSrc.roa (raw, json) Hash identifier: EizFFWFp5mSzOrQsgrUtGL3HoVvrb6BenTlCCVlGhMQ= Subject key identifier: CB:78:58:57:16:23:57:82:8F:52:75:3C:A5:25:95:FE:D5:31:4A:B7 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 028E Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/y3hYVxYjV4KPUnU8pSWV_tUxSrc.roa Signing time: Fri 31 May 2024 01:39:42 +0000 ROA not before: Fri 31 May 2024 01:39:42 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 175.28.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:39:42 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=CB785857162357828F52753CA52595FED5314AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:35:e5:9e:f0:ad:35:9a:72:d7:7b:90:04: 2c:a9:e9:c3:71:09:eb:9a:21:59:c0:23:16:18:a9: ca:49:55:0c:63:1c:21:88:ee:79:37:e9:a8:4f:c5: b6:c8:ac:ec:5b:8c:7d:d2:20:97:f0:2f:66:10:68: a8:40:93:f4:3b:50:81:28:37:43:4c:01:75:4d:7c: 42:b1:12:05:3d:90:e0:af:cf:2c:09:98:cd:9f:dc: 03:0a:ef:dc:e6:cd:17:7b:7c:2b:5a:41:74:71:17: 5c:cd:d7:59:77:55:74:96:a7:9f:e3:27:6d:5d:69: eb:f4:44:90:dc:a9:43:f6:ae:c0:aa:a8:c3:f6:a6: 88:ea:86:f3:64:fa:25:da:bd:e8:46:07:9c:b5:d6: 97:9e:2a:e4:e6:bf:00:8e:93:1d:a5:68:72:a2:d2: 39:61:67:f3:de:1a:92:0e:79:53:63:f9:a3:6f:2d: b4:77:03:b0:70:68:66:aa:25:ea:39:69:b5:7b:ef: 63:29:78:b0:dc:a3:dc:b5:1a:31:76:74:df:39:db: 13:30:a6:aa:6b:72:e9:37:ff:3c:04:0f:4d:ac:9b: db:a2:b4:83:39:09:c7:97:ae:9f:e4:cb:60:08:51: c9:66:d6:6d:4b:78:af:e4:43:42:e6:51:c7:e5:e8: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:78:58:57:16:23:57:82:8F:52:75:3C:A5:25:95:FE:D5:31:4A:B7 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/y3hYVxYjV4KPUnU8pSWV_tUxSrc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.28.52.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:a6:a9:8a:8a:71:01:3f:2f:ad:6a:47:1f:4e:05:96:16:63: 66:3a:95:b7:f6:d2:75:a6:34:c4:fb:9c:54:6a:b4:d8:89:c6: 16:22:5d:f7:07:3e:9c:cf:f2:35:e4:fa:81:4f:83:cc:34:74: 15:3d:8f:e9:41:9d:52:17:78:8a:d0:00:71:e4:13:4e:22:b8: da:f0:67:30:b2:5d:4a:4b:bf:c8:12:0c:a0:7c:9e:e8:51:28: 33:6e:3d:18:9d:c2:2e:ab:33:db:3d:de:c4:65:c3:d3:c0:87: ff:1c:5a:a8:a3:61:ef:ea:0a:d8:9a:b1:4f:be:14:84:2a:28: 89:fb:86:dc:98:93:b3:16:bc:5a:f3:2a:75:4e:d7:14:19:6c: 40:3b:f7:51:a6:f5:58:ef:03:47:d0:c4:5b:91:ee:a7:e5:54: 16:99:28:de:77:b7:55:af:b1:77:33:d8:31:9b:b0:e8:71:cc: 21:e7:81:7e:70:b2:73:8d:a4:ba:8f:f9:c2:fb:f9:77:a8:d9: 79:ad:97:82:0e:67:fa:a4:a6:75:9d:c3:33:a1:49:77:46:3d: 7a:25:42:f2:88:9a:0a:e3:c4:12:32:b6:3d:20:fb:74:96:f3: 2c:0f:42:ca:90:7a:48:40:8e:b4:90:f5:d1:6d:70:19:d8:ba: 56:03:42:8e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM5NDJaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKENCNzg1ODU3MTYyMzU3 ODI4RjUyNzUzQ0E1MjU5NUZFRDUzMTRBQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeOzXlnvCtNZpy13uQBCyp6cNxCeuaIVnAIxYYqcpJVQxjHCGI 7nk36ahPxbbIrOxbjH3SIJfwL2YQaKhAk/Q7UIEoN0NMAXVNfEKxEgU9kOCvzywJ mM2f3AMK79zmzRd7fCtaQXRxF1zN11l3VXSWp5/jJ21daev0RJDcqUP2rsCqqMP2 pojqhvNk+iXavehGB5y11peeKuTmvwCOkx2laHKi0jlhZ/PeGpIOeVNj+aNvLbR3 A7BwaGaqJeo5abV772MpeLDco9y1GjF2dN852xMwpqprcuk3/zwED02sm9uitIM5 CceXrp/ky2AIUclm1m1LeK/kQ0LmUcfl6CYTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy3hYVxYjV4KPUnU8pSWV/tUxSrcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3kzaFlWeFlqVjRLUFVuVThwU1dWX3RVeFNyYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKvHDQwDQYJKoZIhvcNAQELBQADggEBADumqYqKcQE/L61qRx9OBZYWY2Y6 lbf20nWmNMT7nFRqtNiJxhYiXfcHPpzP8jXk+oFPg8w0dBU9j+lBnVIXeIrQAHHk E04iuNrwZzCyXUpLv8gSDKB8nuhRKDNuPRidwi6rM9s93sRlw9PAh/8cWqijYe/q CtiasU++FIQqKIn7htyYk7MWvFrzKnVO1xQZbEA791Gm9VjvA0fQxFuR7qflVBaZ KN53t1WvsXcz2DGbsOhxzCHngX5wsnONpLqP+cL7+Xeo2Xmtl4IOZ/qkpnWdwzOh SXdGPXolQvKImgrjxBIytj0g+3SW8ywPQsqQekhAjrSQ9dFtcBnYulYDQo4= -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org