$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/DCwfGLUcMxg0fokldpDgzDXMHYQ.roa File: DCwfGLUcMxg0fokldpDgzDXMHYQ.roa (raw, json) Hash identifier: MNZOo7I0SG13HNQQr6synlGw/LnOH0uTZY/7CkRS+qM= Subject key identifier: 0C:2C:1F:18:B5:1C:33:18:34:7E:89:25:76:90:E0:CC:35:CC:1D:84 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 5D Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/DCwfGLUcMxg0fokldpDgzDXMHYQ.roa Signing time: Sat 31 Aug 2024 01:30:32 +0000 ROA not before: Sat 31 Aug 2024 01:30:32 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 18144 IP address blocks: 220.210.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 31 01:30:32 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=0C2C1F18B51C3318347E89257690E0CC35CC1D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:a6:96:d3:d0:30:e9:2b:a2:c8:86:33:f4: 91:e6:99:e4:34:8e:59:0e:fc:ad:5d:7b:b0:b4:6c: d7:d4:8d:cd:c3:7e:ea:d8:c9:ee:71:a2:a5:f5:e0: 5a:0e:b3:8b:b3:82:e4:6a:fc:bc:3c:63:bd:22:16: c4:5e:6d:ea:22:d1:6e:e3:99:aa:45:b1:dd:10:a8: 0e:c3:7b:9f:5a:14:5c:2e:2b:16:1c:6a:79:52:94: 8f:f6:ad:d6:a8:e5:35:8e:96:36:9e:61:dc:a3:a1: 1a:49:b8:23:72:d4:bb:12:78:7e:14:e2:da:93:bd: c7:8f:4a:e2:c1:14:17:8b:c9:d8:c1:1e:dd:f9:7d: 47:92:85:d3:1a:31:31:4b:c7:94:3d:3a:ca:12:90: 5e:09:3b:f3:6c:34:2a:1c:ec:67:d1:b6:2c:04:96: 53:59:ed:0e:0d:64:e8:ee:a4:47:a7:25:d1:28:8a: 8d:6f:5a:15:20:a9:1c:44:bd:bb:03:e7:c9:67:35: 7b:25:99:2f:75:d0:db:5e:f5:d2:eb:8b:6e:df:f3: 84:17:49:4d:c7:38:a3:4a:91:44:4d:b8:0e:26:34: 02:5c:0d:bf:4f:63:85:8b:f6:02:5c:73:e1:5e:0c: 7e:4c:f9:41:3c:1c:c2:d8:12:e6:1c:66:f4:52:ff: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2C:1F:18:B5:1C:33:18:34:7E:89:25:76:90:E0:CC:35:CC:1D:84 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/DCwfGLUcMxg0fokldpDgzDXMHYQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.224.0/19 Signature Algorithm: sha256WithRSAEncryption 41:d5:62:75:cb:aa:44:c9:cc:42:87:df:64:6e:40:16:b9:f2: 9b:f6:d5:56:ec:cc:4c:f6:09:0b:4b:87:63:2a:6e:91:d7:2e: 3f:d6:ac:13:5e:af:5a:39:a7:9f:54:53:e1:e9:2d:9a:1d:ee: ea:e1:2f:b7:7d:bf:69:40:83:27:e1:e5:f4:c8:77:68:19:a0: 56:90:21:19:e5:8d:c5:25:11:7a:b6:4d:9f:f9:21:09:f4:2b: 62:ff:05:28:cd:c3:5f:95:61:1d:23:4d:69:65:3f:cb:94:30: 95:74:38:f2:b9:70:42:7c:db:eb:1b:c0:8c:c2:c5:29:17:5c: 51:08:55:09:ef:a6:25:61:66:b7:73:47:0c:0c:6e:96:c4:8b: 43:17:32:2a:56:d1:61:19:09:71:d1:3a:9f:3d:f6:81:4c:4e: 4d:4b:b2:5a:19:6e:1b:81:7e:49:d7:58:33:96:85:92:20:1d: a0:c1:fd:06:91:b8:0a:21:9b:7a:84:ca:f4:2a:78:32:78:76: 39:f7:92:de:e6:40:a2:37:0e:d3:bc:3f:41:fb:b0:bc:1b:34: 5d:64:7f:40:c9:55:c6:c6:5e:ed:f8:73:97:a2:52:5c:e5:9a: 63:03:02:d1:77:8b:6c:86:a7:a1:6c:79:35:19:47:c7:d3:03: 1d:8a:1a:8b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI0MDgzMTAx MzAzMloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMEMyQzFGMThCNTFDMzMx ODM0N0U4OTI1NzY5MEUwQ0MzNUNDMUQ4NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALgTppbT0DDpK6LIhjP0keaZ5DSOWQ78rV17sLRs19SNzcN+6tjJ 7nGipfXgWg6zi7OC5Gr8vDxjvSIWxF5t6iLRbuOZqkWx3RCoDsN7n1oUXC4rFhxq eVKUj/at1qjlNY6WNp5h3KOhGkm4I3LUuxJ4fhTi2pO9x49K4sEUF4vJ2MEe3fl9 R5KF0xoxMUvHlD06yhKQXgk782w0KhzsZ9G2LASWU1ntDg1k6O6kR6cl0SiKjW9a FSCpHES9uwPnyWc1eyWZL3XQ21710uuLbt/zhBdJTcc4o0qRRE24DiY0AlwNv09j hYv2Alxz4V4Mfkz5QTwcwtgS5hxm9FL/gKsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQMLB8YtRwzGDR+iSV2kODMNcwdhDAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvREN3ZkdMVWNNeGcwZm9rbGRwRGd6RFhNSFlRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdzS4DANBgkqhkiG9w0BAQsFAAOCAQEAQdVidcuqRMnMQoffZG5AFrnym/bV VuzMTPYJC0uHYypukdcuP9asE16vWjmnn1RT4ektmh3u6uEvt32/aUCDJ+Hl9Mh3 aBmgVpAhGeWNxSURerZNn/khCfQrYv8FKM3DX5VhHSNNaWU/y5QwlXQ48rlwQnzb 6xvAjMLFKRdcUQhVCe+mJWFmt3NHDAxulsSLQxcyKlbRYRkJcdE6nz32gUxOTUuy WhluG4F+SddYM5aFkiAdoMH9BpG4CiGbeoTK9Cp4Mnh2OfeS3uZAojcO07w/Qfuw vBs0XWR/QMlVxsZe7fhzl6JSXOWaYwMC0XeLbIanoWx5NRlHx9MDHYoaiw== -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:13 2024 by rpki-client on console-ams.rpki-client.org