$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/babrckd8XJRmEhP9QtyVVJzdHVs.roa File: babrckd8XJRmEhP9QtyVVJzdHVs.roa (raw, json) Hash identifier: UQIoFBB505kxzEfOVBhXVQS2e4Tk4bwZmClI/QQx+rE= Subject key identifier: 6D:A6:EB:72:47:7C:5C:94:66:12:13:FD:42:DC:95:54:9C:DD:1D:5B Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4 Certificate serial: 58 Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/babrckd8XJRmEhP9QtyVVJzdHVs.roa Signing time: Fri 01 Sep 2023 01:28:49 +0000 ROA not before: Fri 01 Sep 2023 01:28:49 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 2497 IP address blocks: 157.65.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4 Validity Not Before: Sep 1 01:28:49 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=6DA6EB72477C5C94661213FD42DC95549CDD1D5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:7c:e3:1d:ae:67:09:bf:4e:68:fc:05:b8: 5d:7f:18:dd:a7:37:b7:47:c6:79:69:d6:35:2d:ae: 0b:7c:77:23:c3:3e:ce:87:f5:10:c2:8c:dd:03:68: a7:db:50:fd:3d:3d:12:7c:4d:fc:4e:7a:32:88:cd: d1:23:87:96:65:03:07:36:ff:fa:10:b4:02:00:87: 5e:f4:f4:f1:89:91:e9:0e:7b:cb:89:42:7b:b8:81: 0b:21:01:7c:62:91:1c:10:f8:88:94:1d:33:94:65: 53:30:8c:97:e8:03:28:75:8a:56:a5:bf:f8:7d:72: dd:15:aa:a1:3d:cc:3f:61:0e:eb:a9:ba:e5:0a:a3: 94:fc:9c:22:e4:b0:40:2a:ff:ba:41:b4:7f:92:63: 96:57:1b:cc:9e:39:0e:a4:0e:e8:49:3a:da:50:a6: ea:c5:8c:1a:b4:ce:6b:7a:7c:eb:83:67:4e:37:1c: d7:9d:0a:9c:29:23:46:f4:57:02:f6:93:13:5d:f6: 22:de:d7:79:dd:86:8c:88:1d:ea:dc:82:5b:8b:ae: 8f:8a:02:17:e4:cc:16:11:f6:b2:ac:a9:3e:94:2d: cd:52:d4:98:d5:7f:f2:ac:14:d6:61:83:24:0b:db: 7c:55:22:90:d5:4f:fe:c2:65:b8:5b:bd:d3:c2:31: 2d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A6:EB:72:47:7C:5C:94:66:12:13:FD:42:DC:95:54:9C:DD:1D:5B X509v3 Authority Key Identifier: keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/babrckd8XJRmEhP9QtyVVJzdHVs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.65.216.0/21 Signature Algorithm: sha256WithRSAEncryption 26:9c:fb:4d:c9:0d:64:34:a6:ab:83:46:d9:7d:e9:cb:5d:17: a8:9d:cc:2e:74:36:39:6b:c1:47:2f:75:3c:08:62:98:33:cb: f9:90:32:83:28:20:42:f6:92:ba:75:26:d0:f8:f8:ed:2c:25: 32:f0:45:92:98:bc:e7:2e:fc:f2:10:e1:94:61:35:a4:68:0e: fd:ac:a3:8e:85:41:13:e5:71:c0:dc:4d:81:39:1f:35:82:6d: 60:46:70:38:c6:fc:0d:6b:e8:e7:02:e2:d0:aa:2a:d7:c5:78: 88:ad:48:6a:26:47:c9:10:eb:4e:96:b9:69:04:c9:b4:31:16: 78:13:e1:d7:cd:a8:8b:2f:7c:32:9d:18:36:1d:11:d8:05:1a: c6:bf:63:1e:8b:43:5c:ef:4d:6c:3e:6d:22:f6:51:1d:e0:8d: cc:67:41:4c:b1:20:9a:eb:d2:5a:ae:55:c1:8b:77:47:be:69: c7:74:d2:1e:50:3d:2e:f9:4c:a8:bf:62:98:c7:28:04:26:df: 22:c2:1c:33:6e:3c:7e:d1:1d:bc:ba:42:58:fd:73:fa:08:5b: 0a:7c:05:6f:7d:9d:c5:b8:93:bd:d4:2b:36:88:0a:cd:ad:ca: d2:64:28:9c:ab:ee:f3:2e:2d:59:18:93:26:93:d0:ad:83:a8: b4:c3:a0:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTY5 NjZERDcyMEMzMDU3NUY2MkQ4RkQ0MTQ5NDU4QTkwQUFDQUE0MB4XDTIzMDkwMTAx Mjg0OVoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoNkRBNkVCNzI0NzdDNUM5 NDY2MTIxM0ZENDJEQzk1NTQ5Q0REMUQ1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK/pfOMdrmcJv05o/AW4XX8Y3ac3t0fGeWnWNS2uC3x3I8M+zof1 EMKM3QNop9tQ/T09EnxN/E56MojN0SOHlmUDBzb/+hC0AgCHXvT08YmR6Q57y4lC e7iBCyEBfGKRHBD4iJQdM5RlUzCMl+gDKHWKVqW/+H1y3RWqoT3MP2EO66m65Qqj lPycIuSwQCr/ukG0f5JjllcbzJ45DqQO6Ek62lCm6sWMGrTOa3p864NnTjcc150K nCkjRvRXAvaTE132It7Xed2GjIgd6tyCW4uuj4oCF+TMFhH2sqypPpQtzVLUmNV/ 8qwU1mGDJAvbfFUikNVP/sJluFu908IxLckCAwEAAaOCAiAwggIcMB0GA1UdDgQW BBRtputyR3xclGYSE/1C3JVUnN0dWzAfBgNVHSMEGDAWgBQpaWbdcgwwV19i2P1B SUWKkKrKpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNi9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5cVEuY3JsMG0GCCsGAQUF BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5 cVEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuQYIKwYBBQUHAQsEgawwgakwXwYIKwYB BQUHMAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNi9iYWJyY2tkOFhKUm1FaFA5UXR5VlZKemRIVnMucm9hMEYGCCsG AQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9h cC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD nUHYMA0GCSqGSIb3DQEBCwUAA4IBAQAmnPtNyQ1kNKarg0bZfenLXReoncwudDY5 a8FHL3U8CGKYM8v5kDKDKCBC9pK6dSbQ+PjtLCUy8EWSmLznLvzyEOGUYTWkaA79 rKOOhUET5XHA3E2BOR81gm1gRnA4xvwNa+jnAuLQqirXxXiIrUhqJkfJEOtOlrlp BMm0MRZ4E+HXzaiLL3wynRg2HRHYBRrGv2Mei0Nc701sPm0i9lEd4I3MZ0FMsSCa 69JarlXBi3dHvmnHdNIeUD0u+Uyov2KYxygEJt8iwhwzbjx+0R28ukJY/XP6CFsK fAVvfZ3FuJO91Cs2iArNrcrSZCicq+7zLi1ZGJMmk9Ctg6i0w6BD -----END CERTIFICATE-----Generated at Wed Jun 26 08:13:02 2024 by rpki-client on console-ams.rpki-client.org