$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/k1TDsItBUWOtMi01qIcLALM5VxE.roa File: k1TDsItBUWOtMi01qIcLALM5VxE.roa (raw, json) Hash identifier: jrmye9t6PgHmF0X6xooQLnJD8juiv81jTEhZyKDHEpw= Subject key identifier: 93:54:C3:B0:8B:41:51:63:AD:32:2D:35:A8:87:0B:00:B3:39:57:11 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0119 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/k1TDsItBUWOtMi01qIcLALM5VxE.roa Signing time: Fri 01 Sep 2023 01:31:39 +0000 ROA not before: Fri 01 Sep 2023 01:31:39 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 2497 IP address blocks: 219.126.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Sep 1 01:31:39 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=9354C3B08B415163AD322D35A8870B00B3395711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:20:cb:6d:be:42:c0:ea:62:48:95:d6:08: a5:43:d9:c8:2c:26:b1:5f:47:2d:4e:65:0b:9a:f7: 7c:4a:aa:e8:f1:41:44:eb:3c:0f:ee:2d:75:76:0d: 42:db:f2:66:84:90:af:8d:ce:36:20:d2:d8:4e:b5: 85:23:6e:ed:8c:f5:bb:72:b8:23:9a:df:52:41:8d: 63:67:4b:63:62:21:e8:8c:4f:21:de:44:e8:19:e7: a2:b4:9d:9c:c6:c0:90:a7:32:c1:9f:24:1b:b2:ce: e3:b9:cf:29:b8:0f:17:e1:0a:64:48:72:97:ea:a8: 95:56:23:e8:b3:b7:1e:f3:b9:0c:93:bc:c7:7e:72: bb:ff:33:1f:dc:29:47:79:b4:33:7b:d8:68:57:e6: 0d:23:2c:e7:ad:b6:c8:e7:0b:13:0a:4c:9e:69:3d: f5:6f:31:a4:87:b6:63:d7:d8:40:db:95:b1:b0:15: 25:c9:c9:c6:32:0c:38:a7:90:0f:ce:3e:27:16:9a: e7:6c:ce:98:d6:39:e6:ec:b0:4b:50:40:df:9e:2f: 6f:6a:65:db:a0:75:e4:e9:29:27:a3:cc:dc:a0:1c: c3:58:23:d7:59:f2:da:fd:4d:84:db:f5:87:e8:ef: 7b:f8:6c:76:e6:46:e2:63:ed:34:aa:0e:6b:88:92: 7c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:54:C3:B0:8B:41:51:63:AD:32:2D:35:A8:87:0B:00:B3:39:57:11 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/k1TDsItBUWOtMi01qIcLALM5VxE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.126.128.0/17 Signature Algorithm: sha256WithRSAEncryption 97:b2:38:c8:39:9e:ce:ce:3b:5a:2c:f8:a5:33:5e:60:0a:c8: f0:1c:9c:bf:f0:68:96:22:a5:74:65:39:0a:87:e2:bc:9b:ed: 17:bc:a0:7e:aa:7f:18:86:d2:fe:fd:ae:a5:99:b8:d2:fc:90: b1:d3:56:71:52:f8:91:a2:22:61:a1:b6:c2:4b:7e:55:1d:f0: c5:3e:28:5c:d7:08:87:62:1b:e3:0b:86:04:58:08:ba:df:b9: 5c:f9:87:d3:d5:a7:a8:8f:67:11:58:e2:04:e7:46:90:44:88: 8a:89:54:e0:9b:f4:66:ac:1a:60:9b:83:b2:a4:ad:02:1c:4e: f6:af:a5:b5:26:20:3b:2b:8c:28:14:c0:53:84:40:50:53:04: ce:83:d4:61:b9:31:ad:80:40:7e:e4:ce:8a:8c:4e:2a:a2:f3: 47:47:1f:ba:09:11:ba:c8:9e:a1:0c:f9:f3:1e:33:18:3b:f0: 7e:12:32:da:6e:4d:f6:b8:e4:f1:1c:db:91:cd:d4:ef:cc:a4: 8d:90:dd:d6:b8:c7:b0:ef:5f:7d:b8:b0:3d:b1:99:31:d4:07: b6:be:3f:f6:1f:aa:ed:7b:64:cf:ba:4d:19:9b:0f:e3:fc:1f: 4e:55:54:da:49:2c:97:8b:0a:3f:51:2b:8c:3a:a3:71:04:cf: d9:3e:30:4e -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw MTMxMzlaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDkzNTRDM0IwOEI0MTUx NjNBRDMyMkQzNUE4ODcwQjAwQjMzOTU3MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzryDLbb5CwOpiSJXWCKVD2cgsJrFfRy1OZQua93xKqujxQUTr PA/uLXV2DULb8maEkK+NzjYg0thOtYUjbu2M9btyuCOa31JBjWNnS2NiIeiMTyHe ROgZ56K0nZzGwJCnMsGfJBuyzuO5zym4DxfhCmRIcpfqqJVWI+iztx7zuQyTvMd+ crv/Mx/cKUd5tDN72GhX5g0jLOettsjnCxMKTJ5pPfVvMaSHtmPX2EDblbGwFSXJ ycYyDDinkA/OPicWmudszpjWOebssEtQQN+eL29qZdugdeTpKSejzNygHMNYI9dZ 8tr9TYTb9Yfo73v4bHbmRuJj7TSqDmuIknwhAgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUk1TDsItBUWOtMi01qIcLALM5VxEwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvazFURHNJdEJVV090TWkwMXFJY0xBTE01VnhFLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME B9t+gDANBgkqhkiG9w0BAQsFAAOCAQEAl7I4yDmezs47Wiz4pTNeYArI8Bycv/Bo liKldGU5CofivJvtF7ygfqp/GIbS/v2upZm40vyQsdNWcVL4kaIiYaG2wkt+VR3w xT4oXNcIh2Ib4wuGBFgIut+5XPmH09WnqI9nEVjiBOdGkESIiolU4Jv0ZqwaYJuD sqStAhxO9q+ltSYgOyuMKBTAU4RAUFMEzoPUYbkxrYBAfuTOioxOKqLzR0cfugkR usieoQz58x4zGDvwfhIy2m5N9rjk8Rzbkc3U78ykjZDd1rjHsO9ffbiwPbGZMdQH tr4/9h+q7Xtkz7pNGZsP4/wfTlVU2kksl4sKP1ErjDqjcQTP2T4wTg== -----END CERTIFICATE-----Generated at Wed Jun 26 08:13:02 2024 by rpki-client on console-ams.rpki-client.org