$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/97aT8MY67QHs4qSsZrOYgU3ypTQ.roa File: 97aT8MY67QHs4qSsZrOYgU3ypTQ.roa (raw, json) Hash identifier: JArTZKBu0YoVPgmdCP30dog2kZck9hYfsIxIzlfp3V4= Subject key identifier: F7:B6:93:F0:C6:3A:ED:01:EC:E2:A4:AC:66:B3:98:81:4D:F2:A5:34 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0107 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/97aT8MY67QHs4qSsZrOYgU3ypTQ.roa Signing time: Fri 01 Sep 2023 01:29:00 +0000 ROA not before: Fri 01 Sep 2023 01:29:00 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 2497 IP address blocks: 125.30.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Sep 1 01:29:00 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=F7B693F0C63AED01ECE2A4AC66B398814DF2A534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:d8:cb:86:0a:41:82:5d:67:69:8b:9a:3a: e9:f4:26:b0:c0:e3:9c:50:0e:e4:6e:8d:a0:1a:6b: f5:ea:ff:20:18:9d:2c:e8:2d:ca:97:43:fb:79:e9: f0:23:9e:7f:57:8b:bd:94:c9:0a:48:37:36:44:82: a9:1d:fc:8c:72:32:51:d1:3d:6d:fa:0c:81:1f:85: 8d:b2:d7:69:f5:c4:de:6c:2d:7f:93:86:d1:3a:59: ed:e8:a4:8d:00:27:a8:8e:49:70:a1:e0:f2:c5:a3: e2:d9:41:e4:49:a4:75:15:bd:a0:fa:fc:05:81:e9: ad:10:ec:ae:56:f3:3d:3c:ea:97:cf:d2:33:71:84: d2:79:7a:58:58:4a:dc:31:a8:06:9c:5a:56:6a:e5: ef:d9:2f:75:37:c7:d7:e5:3c:9c:7a:d7:34:56:4e: 53:1c:04:d3:93:ab:18:01:42:91:dc:75:5c:ce:80: a7:ac:7c:2f:25:d5:79:f5:45:d1:fa:39:cf:37:5e: 75:44:13:0e:be:9f:35:4e:5f:68:fe:ac:41:c3:e9: 01:17:1a:2c:34:d1:04:f1:6e:db:22:86:89:19:e9: 1f:c8:1b:ae:2d:c6:20:40:62:74:01:a2:c7:64:24: db:fb:26:1e:87:85:96:1c:d8:5e:6f:74:9c:7b:95: 05:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B6:93:F0:C6:3A:ED:01:EC:E2:A4:AC:66:B3:98:81:4D:F2:A5:34 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/97aT8MY67QHs4qSsZrOYgU3ypTQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.30.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:07:68:76:bf:9e:30:49:67:f1:f2:8d:8d:4d:c6:f6:25:fd: 8c:07:f8:eb:4d:8e:f8:36:98:57:30:2b:a1:2a:f9:16:70:e9: 65:3b:c7:76:3a:8f:c1:f6:bc:4f:e7:10:d7:b7:50:d7:f5:40: 02:e4:0f:2a:b1:d8:72:7b:98:fd:65:bf:50:3c:b1:11:90:07: 59:0b:34:3f:0c:e7:bf:ac:61:57:b0:f3:d0:0d:f1:f4:14:f5: 2f:5d:4f:60:69:a9:b2:24:99:41:69:e0:2f:10:a6:e4:a5:b8: c3:c9:e6:2c:0f:24:16:17:0b:3e:91:da:25:1a:1e:fe:45:58: f5:e3:e8:68:17:ef:f5:6a:e4:96:53:b3:89:19:63:74:be:88: 65:4d:bc:e6:fb:b0:1b:53:82:83:ff:ac:9c:dd:5a:ec:91:31: d7:08:cd:73:14:7c:eb:47:53:9b:29:02:0a:29:29:48:67:12: 7f:74:a3:52:37:08:58:a2:fc:28:ce:70:36:be:e2:0c:4e:0a: 8c:e9:87:ab:e0:5d:61:bc:45:a4:35:d5:ea:0c:f2:ef:4c:80: 04:97:5c:d7:2b:8d:27:a8:50:eb:cf:11:ac:5d:0c:1b:00:f7: 97:b7:48:0a:d4:56:d8:6c:ae:a8:7d:62:bc:a3:61:f5:45:1a: cf:75:42:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw MTI5MDBaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEY3QjY5M0YwQzYzQUVE MDFFQ0UyQTRBQzY2QjM5ODgxNERGMkE1MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQTNjLhgpBgl1naYuaOun0JrDA45xQDuRujaAaa/Xq/yAYnSzo LcqXQ/t56fAjnn9Xi72UyQpINzZEgqkd/IxyMlHRPW36DIEfhY2y12n1xN5sLX+T htE6We3opI0AJ6iOSXCh4PLFo+LZQeRJpHUVvaD6/AWB6a0Q7K5W8z086pfP0jNx hNJ5elhYStwxqAacWlZq5e/ZL3U3x9flPJx61zRWTlMcBNOTqxgBQpHcdVzOgKes fC8l1Xn1RdH6Oc83XnVEEw6+nzVOX2j+rEHD6QEXGiw00QTxbtsihokZ6R/IG64t xiBAYnQBosdkJNv7Jh6HhZYc2F5vdJx7lQW1AgMBAAGjggIfMIICGzAdBgNVHQ4E FgQU97aT8MY67QHs4qSsZrOYgU3ypTQwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvOTdhVDhNWTY3UUhzNHFTc1pyT1lnVTN5cFRRLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AH0eMA0GCSqGSIb3DQEBCwUAA4IBAQBcB2h2v54wSWfx8o2NTcb2Jf2MB/jrTY74 NphXMCuhKvkWcOllO8d2Oo/B9rxP5xDXt1DX9UAC5A8qsdhye5j9Zb9QPLERkAdZ CzQ/DOe/rGFXsPPQDfH0FPUvXU9gaamyJJlBaeAvEKbkpbjDyeYsDyQWFws+kdol Gh7+RVj14+hoF+/1auSWU7OJGWN0vohlTbzm+7AbU4KD/6yc3VrskTHXCM1zFHzr R1ObKQIKKSlIZxJ/dKNSNwhYovwoznA2vuIMTgqM6Yer4F1hvEWkNdXqDPLvTIAE l1zXK40nqFDrzxGsXQwbAPeXt0gK1FbYbK6ofWK8o2H1RRrPdUKt -----END CERTIFICATE-----Generated at Wed Jun 26 08:13:01 2024 by rpki-client on console-ams.rpki-client.org