$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/DlArmwNy2g-M9c4PuaIjBm2_wVI.roa File: DlArmwNy2g-M9c4PuaIjBm2_wVI.roa (raw, json) Hash identifier: k2FcrXoOXSF+5Qh/4n1Qs7omJczB5jAdx0t5EuLobXU= Subject key identifier: 0E:50:2B:9B:03:72:DA:0F:8C:F5:CE:0F:B9:A2:23:06:6D:BF:C1:52 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0128 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/DlArmwNy2g-M9c4PuaIjBm2_wVI.roa Signing time: Sun 01 Oct 2023 01:28:38 +0000 ROA not before: Sun 01 Oct 2023 01:28:38 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 2497 IP address blocks: 133.159.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 07:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Oct 1 01:28:38 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=0E502B9B0372DA0F8CF5CE0FB9A223066DBFC152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:c0:bb:fc:d3:e2:04:6b:3c:82:c2:47:ca:aa: 5b:e4:ed:fe:ca:e1:42:1f:fd:f0:8e:60:78:c8:b2: df:ba:79:b3:b5:1a:88:44:7f:39:6d:cb:c0:e9:64: 7e:ce:09:b0:29:85:81:bd:34:0e:d8:5f:21:b3:62: a4:4f:ec:4e:d8:5f:ec:bf:42:1b:4c:51:44:52:00: 4d:11:9e:09:bf:8c:10:70:9b:19:be:91:48:ff:82: e3:4e:85:2c:c8:96:9c:bc:e0:ca:9a:bb:49:9a:4d: 55:aa:a0:38:75:02:e1:b4:54:da:9b:b3:9d:13:f8: ad:aa:1a:3e:b5:12:2e:f3:c3:ce:7c:c0:00:6c:58: 89:43:04:08:c8:e4:cd:57:3e:41:fa:3c:38:56:98: 2d:aa:4e:e3:00:e1:52:1f:ed:72:c2:68:a9:00:fe: 2f:5f:01:93:5e:8f:9f:3c:52:0c:c6:6f:66:5e:cc: e2:e4:f6:bd:89:10:c1:af:2a:f8:f2:83:0c:d9:98: ba:f3:23:40:55:fd:be:71:f3:46:de:09:9c:bc:2f: 9a:ae:39:88:a0:b9:20:b1:65:0a:9a:70:e5:3a:e9: a2:57:16:f7:cd:09:0f:29:a9:cf:e6:2b:2f:56:32: 3d:03:e2:cb:c0:63:21:d9:6c:1e:9f:fb:a1:e8:4e: 0e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:50:2B:9B:03:72:DA:0F:8C:F5:CE:0F:B9:A2:23:06:6D:BF:C1:52 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/DlArmwNy2g-M9c4PuaIjBm2_wVI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.159.0.0/16 Signature Algorithm: sha256WithRSAEncryption 66:ba:0c:63:e2:4f:a0:8f:4a:c0:5a:37:a0:9b:50:b8:9f:0e: fd:ae:09:c7:82:c3:ee:1c:86:e1:1a:50:6d:eb:90:cc:4c:54: 2f:9b:d5:3e:a4:57:d0:f3:32:54:f0:0b:e1:51:9a:2d:21:91: 67:b1:c1:79:12:ed:2b:45:34:ff:d1:a0:2a:7f:df:c9:8e:a6: 19:de:16:f4:82:03:49:af:07:63:a7:5e:ff:e0:f3:87:10:5f: a3:c0:a6:0b:9b:a0:c1:dc:dd:52:2c:91:fa:05:80:12:cc:cf: 22:9d:09:f7:f0:86:bd:9f:ac:31:94:02:52:da:65:29:26:e4: b6:38:76:73:3f:7c:17:ec:a2:64:66:dc:25:f8:13:8b:77:d5: 24:64:25:cc:d0:18:ae:54:59:cd:cc:ab:37:86:3e:cb:a4:ba: 65:36:7e:b9:ca:14:43:30:0f:fb:5c:b0:39:5b:cc:35:34:e9: 11:a7:8e:9c:08:08:ea:d9:e7:95:a8:f1:7d:ae:26:f7:b2:92: 01:2c:f3:b9:cb:41:ec:8d:ef:65:af:bb:c1:e3:8c:fc:4a:af: 1b:07:b8:f9:78:83:f6:1d:cf:12:23:ba:fe:67:b6:6c:b9:18: 08:22:77:9a:a8:8f:df:bb:8b:88:2b:0c:7f:81:51:ff:b5:15: 7f:92:5a:cb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICASgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzEwMDEw MTI4MzhaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDBFNTAyQjlCMDM3MkRB MEY4Q0Y1Q0UwRkI5QTIyMzA2NkRCRkMxNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD9wLv80+IEazyCwkfKqlvk7f7K4UIf/fCOYHjIst+6ebO1GohE fzlty8DpZH7OCbAphYG9NA7YXyGzYqRP7E7YX+y/QhtMUURSAE0Rngm/jBBwmxm+ kUj/guNOhSzIlpy84Mqau0maTVWqoDh1AuG0VNqbs50T+K2qGj61Ei7zw858wABs WIlDBAjI5M1XPkH6PDhWmC2qTuMA4VIf7XLCaKkA/i9fAZNej588UgzGb2ZezOLk 9r2JEMGvKvjygwzZmLrzI0BV/b5x80beCZy8L5quOYiguSCxZQqacOU66aJXFvfN CQ8pqc/mKy9WMj0D4svAYyHZbB6f+6HoTg4BAgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUDlArmwNy2g+M9c4PuaIjBm2/wVIwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvRGxBcm13TnkyZy1NOWM0UHVhSWpCbTJfd1ZJLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AIWfMA0GCSqGSIb3DQEBCwUAA4IBAQBmugxj4k+gj0rAWjegm1C4nw79rgnHgsPu HIbhGlBt65DMTFQvm9U+pFfQ8zJU8AvhUZotIZFnscF5Eu0rRTT/0aAqf9/JjqYZ 3hb0ggNJrwdjp17/4POHEF+jwKYLm6DB3N1SLJH6BYASzM8inQn38Ia9n6wxlAJS 2mUpJuS2OHZzP3wX7KJkZtwl+BOLd9UkZCXM0BiuVFnNzKs3hj7LpLplNn65yhRD MA/7XLA5W8w1NOkRp46cCAjq2eeVqPF9rib3spIBLPO5y0Hsje9lr7vB44z8Sq8b B7j5eIP2Hc8SI7r+Z7ZsuRgIIneaqI/fu4uIKwx/gVH/tRV/klrL -----END CERTIFICATE-----Generated at Wed Jun 26 09:28:46 2024 by rpki-client on console-fra.rpki-client.org