$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/7UXXOFowW6eooQE1zakEtx6PV04.roa File: 7UXXOFowW6eooQE1zakEtx6PV04.roa (raw, json) Hash identifier: Pe84I7i/mN1sp/OAf/iriPUxblaGZEdSO7bHquPppw4= Subject key identifier: ED:45:D7:38:5A:30:5B:A7:A8:A1:01:35:CD:A9:04:B7:1E:8F:57:4E Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 011A Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7UXXOFowW6eooQE1zakEtx6PV04.roa Signing time: Fri 01 Sep 2023 01:31:39 +0000 ROA not before: Fri 01 Sep 2023 01:31:39 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 2497 IP address blocks: 202.238.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Sep 1 01:31:39 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=ED45D7385A305BA7A8A10135CDA904B71E8F574E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:7d:77:c9:98:85:15:83:6c:39:df:7e:3b: 09:8c:d3:49:1f:b0:8b:87:7c:32:cc:bd:0c:e4:a2: 95:4e:81:37:f9:a3:20:3e:92:28:ac:c0:b1:53:88: b4:cf:28:12:28:71:8f:3e:ef:b9:77:f4:02:61:a3: 70:ff:91:99:50:5e:a1:e0:5e:94:77:d0:4f:52:a0: 39:48:cf:de:9b:08:c7:61:2d:04:48:84:ac:38:7c: 04:42:0b:e9:d6:5d:95:2c:fd:eb:ab:e3:4c:86:ab: b0:a1:fb:14:1d:5f:4f:d7:cf:af:07:9a:57:c8:48: 8b:19:ba:99:89:33:6e:2f:b0:a5:0f:31:d9:1a:45: f5:e4:07:ef:c7:bd:d9:e3:7e:80:53:62:0d:6e:1d: 9d:b2:5f:e0:2c:15:74:6d:10:0e:21:e0:1a:0b:91: f9:ef:30:df:e8:15:64:6c:9f:32:70:b4:09:37:fb: 70:94:21:9a:de:bb:72:80:f1:46:1f:85:63:be:38: e6:d9:9a:ef:6b:42:d7:b9:65:b5:09:b4:cf:ab:3d: da:21:9e:ba:60:ce:1a:77:a3:3e:08:ae:b7:10:f4: c3:eb:7d:b6:18:4b:65:f4:01:65:4a:fa:f7:06:ce: c9:3f:dc:2c:f7:cc:ca:98:14:88:ee:14:9b:e0:86: 86:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:45:D7:38:5A:30:5B:A7:A8:A1:01:35:CD:A9:04:B7:1E:8F:57:4E X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7UXXOFowW6eooQE1zakEtx6PV04.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.238.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0e:0b:e4:4b:7b:9e:1c:49:31:98:52:84:5d:2e:7a:59:c6:a3: c1:bd:a5:21:7d:27:4d:d8:c0:9e:f1:40:5d:3c:9b:5d:78:25: 24:71:d4:be:4b:49:62:c6:45:cb:f9:e0:65:2f:c4:ea:d1:bb: 3f:27:d6:20:63:3d:1e:6b:2a:f8:cb:5d:2d:90:bf:35:79:98: d3:5e:2e:67:e1:35:01:66:38:5c:cf:37:4b:3c:af:7f:b9:71: 98:5d:2a:f2:8f:48:73:6f:59:fb:04:2f:fb:07:14:4f:e0:81: 37:68:be:06:63:63:99:46:9e:a8:78:52:58:0e:f4:d0:40:ed: 95:91:27:68:21:04:b6:2e:cc:72:40:9d:5c:d3:e0:18:52:5b: 4a:44:52:bb:0e:3e:b5:29:77:8c:70:1f:cc:84:2f:6c:0c:85: eb:67:f4:16:90:0e:7e:24:b9:43:c2:4d:6d:47:31:22:eb:90: 8f:07:2c:6b:32:1d:88:32:77:e6:08:9f:e1:a8:21:d0:0e:1f: 60:77:1d:eb:2b:e9:56:1d:38:c5:2b:39:eb:c8:44:e8:6e:c8: b5:51:cc:08:1e:1c:75:5b:01:8d:16:2d:8f:17:4f:bf:dc:c6: 52:a7:0c:17:57:9f:62:0b:43:88:27:0c:d7:ca:8d:3a:2b:20: 65:06:3f:e5 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICARowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw MTMxMzlaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEVENDVENzM4NUEzMDVC QTdBOEExMDEzNUNEQTkwNEI3MUU4RjU3NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+w313yZiFFYNsOd9+OwmM00kfsIuHfDLMvQzkopVOgTf5oyA+ kiiswLFTiLTPKBIocY8+77l39AJho3D/kZlQXqHgXpR30E9SoDlIz96bCMdhLQRI hKw4fARCC+nWXZUs/eur40yGq7Ch+xQdX0/Xz68HmlfISIsZupmJM24vsKUPMdka RfXkB+/HvdnjfoBTYg1uHZ2yX+AsFXRtEA4h4BoLkfnvMN/oFWRsnzJwtAk3+3CU IZreu3KA8UYfhWO+OObZmu9rQte5ZbUJtM+rPdohnrpgzhp3oz4IrrcQ9MPrfbYY S2X0AWVK+vcGzsk/3Cz3zMqYFIjuFJvghoaXAgMBAAGjggIgMIICHDAdBgNVHQ4E FgQU7UXXOFowW6eooQE1zakEtx6PV04wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvN1VYWE9Gb3dXNmVvb1FFMXpha0V0eDZQVjA0LnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BsrugDANBgkqhkiG9w0BAQsFAAOCAQEADgvkS3ueHEkxmFKEXS56Wcajwb2lIX0n TdjAnvFAXTybXXglJHHUvktJYsZFy/ngZS/E6tG7PyfWIGM9Hmsq+MtdLZC/NXmY 014uZ+E1AWY4XM83Szyvf7lxmF0q8o9Ic29Z+wQv+wcUT+CBN2i+BmNjmUaeqHhS WA700EDtlZEnaCEEti7MckCdXNPgGFJbSkRSuw4+tSl3jHAfzIQvbAyF62f0FpAO fiS5Q8JNbUcxIuuQjwcsazIdiDJ35gif4agh0A4fYHcd6yvpVh04xSs568hE6G7I tVHMCB4cdVsBjRYtjxdPv9zGUqcMF1efYgtDiCcM18qNOisgZQY/5Q== -----END CERTIFICATE-----Generated at Wed Jun 26 08:13:01 2024 by rpki-client on console-ams.rpki-client.org