$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/NJG0XrGRehXtC4Q0x88ZzKE2zEI.roa File: NJG0XrGRehXtC4Q0x88ZzKE2zEI.roa (raw, json) Hash identifier: 0dt3SCLXlzR0Or+J3QbZfsRa6NEcYd1+DhX1boGgA5k= Subject key identifier: 34:91:B4:5E:B1:91:7A:15:ED:0B:84:34:C7:CF:19:CC:A1:36:CC:42 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0113 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/NJG0XrGRehXtC4Q0x88ZzKE2zEI.roa Signing time: Fri 01 Sep 2023 01:31:36 +0000 ROA not before: Fri 01 Sep 2023 01:31:36 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 2497 IP address blocks: 202.221.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 07:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Sep 1 01:31:36 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=3491B45EB1917A15ED0B8434C7CF19CCA136CC42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:82:3c:4e:40:ef:9a:bd:4a:ac:4e:11:a2: 38:e2:52:d8:10:0b:af:2b:f7:50:8d:ea:62:e1:5b: e3:61:ea:cd:0d:54:72:82:2b:42:0e:10:c2:64:8b: 9e:29:b7:f0:ce:94:72:62:09:fa:fd:82:16:70:e6: 52:75:c8:4c:a6:09:28:29:18:c1:59:7e:88:fd:ae: 6b:44:74:48:79:10:3a:99:c6:33:33:d5:3f:a6:a7: 3a:33:c9:96:03:cf:76:a9:5e:ff:ee:35:5b:a5:f0: db:8b:e2:69:89:6c:a0:9c:0e:59:27:a3:da:0c:9f: c0:07:2c:73:d5:0b:de:00:8a:e6:93:be:dc:40:4e: 8e:63:fb:5d:0e:d6:58:67:17:84:c3:38:68:25:26: 22:87:76:63:57:74:99:c0:93:8a:3d:28:43:38:98: 3f:62:82:b2:f5:e0:a0:a3:45:a6:2c:13:30:b3:ff: 76:01:01:d6:87:d2:a7:6f:95:bb:c9:34:fe:3b:be: 5a:af:7c:07:b5:b3:11:b1:1a:69:9c:b7:7a:ab:f8: 58:89:52:89:67:24:48:91:c0:00:95:36:df:0f:f8: 58:23:08:10:b2:6e:bd:53:f0:ae:b3:77:a0:62:e6: a7:c1:2a:e1:40:87:c1:79:76:f3:a2:91:0a:18:5a: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:91:B4:5E:B1:91:7A:15:ED:0B:84:34:C7:CF:19:CC:A1:36:CC:42 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/NJG0XrGRehXtC4Q0x88ZzKE2zEI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.221.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9c:68:72:09:73:5b:b3:16:4e:1d:55:12:ea:f9:75:3b:5b:92: 72:c3:9b:e0:07:90:53:58:f1:2c:29:f8:d4:7f:1c:ec:26:74: ac:a4:64:bc:88:71:02:0a:77:8a:97:0c:17:83:6f:c9:c4:78: 30:44:ad:46:01:f4:f7:23:a4:2f:50:fa:f7:14:ec:05:83:8a: 02:ec:20:6f:49:87:92:f9:02:ac:66:d0:ff:12:07:0c:e6:3f: 10:89:8b:a4:b5:7b:ff:f6:ba:8d:cb:66:88:3a:6f:b7:d2:85: 65:78:28:fa:1b:44:f5:38:39:8a:1d:e2:d0:fa:9f:77:5a:56: 70:9d:3e:ff:51:d2:fe:a1:f0:57:95:c6:57:40:41:b3:32:51: 88:fa:4e:bd:6b:d9:9b:99:40:61:bd:9c:76:08:2f:29:16:53: c3:bc:cc:28:ee:e0:c7:43:f8:0b:6a:cf:da:8f:27:fa:94:3f: 8a:c9:54:b7:f6:4b:98:ee:ae:61:d7:04:6a:aa:d5:0f:10:5b: db:42:da:ad:eb:32:92:67:17:4b:19:e5:9a:86:02:61:46:9c: 2e:d3:7f:7c:c4:22:47:ea:5c:c6:42:9e:d3:d1:bc:81:d9:63: aa:11:d9:ab:0b:4e:d0:eb:05:62:40:f2:c3:ea:f6:7b:2a:cb: 98:2e:ce:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICARMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw MTMxMzZaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM0OTFCNDVFQjE5MTdB MTVFRDBCODQzNEM3Q0YxOUNDQTEzNkNDNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWf4I8TkDvmr1KrE4RojjiUtgQC68r91CN6mLhW+Nh6s0NVHKC K0IOEMJki54pt/DOlHJiCfr9ghZw5lJ1yEymCSgpGMFZfoj9rmtEdEh5EDqZxjMz 1T+mpzozyZYDz3apXv/uNVul8NuL4mmJbKCcDlkno9oMn8AHLHPVC94AiuaTvtxA To5j+10O1lhnF4TDOGglJiKHdmNXdJnAk4o9KEM4mD9igrL14KCjRaYsEzCz/3YB AdaH0qdvlbvJNP47vlqvfAe1sxGxGmmct3qr+FiJUolnJEiRwACVNt8P+FgjCBCy br1T8K6zd6Bi5qfBKuFAh8F5dvOikQoYWhenAgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUNJG0XrGRehXtC4Q0x88ZzKE2zEIwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvTkpHMFhyR1JlaFh0QzRRMHg4OFp6S0UyekVJLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AMrdMA0GCSqGSIb3DQEBCwUAA4IBAQCcaHIJc1uzFk4dVRLq+XU7W5Jyw5vgB5BT WPEsKfjUfxzsJnSspGS8iHECCneKlwwXg2/JxHgwRK1GAfT3I6QvUPr3FOwFg4oC 7CBvSYeS+QKsZtD/EgcM5j8QiYuktXv/9rqNy2aIOm+30oVleCj6G0T1ODmKHeLQ +p93WlZwnT7/UdL+ofBXlcZXQEGzMlGI+k69a9mbmUBhvZx2CC8pFlPDvMwo7uDH Q/gLas/ajyf6lD+KyVS39kuY7q5h1wRqqtUPEFvbQtqt6zKSZxdLGeWahgJhRpwu 0398xCJH6lzGQp7T0byB2WOqEdmrC07Q6wViQPLD6vZ7KsuYLs7T -----END CERTIFICATE-----Generated at Wed Jun 26 09:28:47 2024 by rpki-client on console-fra.rpki-client.org