$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/IVpIWd-lW8rhNF-0DWu_2uzI3pk.roa File: IVpIWd-lW8rhNF-0DWu_2uzI3pk.roa (raw, json) Hash identifier: NrxlV0OYGX20Zza+DAMf5AbqHjVetTEZoE4vZOSai0U= Subject key identifier: 21:5A:48:59:DF:A5:5B:CA:E1:34:5F:B4:0D:6B:BF:DA:EC:C8:DE:99 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 5C Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/IVpIWd-lW8rhNF-0DWu_2uzI3pk.roa Signing time: Sat 31 Aug 2024 01:30:31 +0000 ROA not before: Sat 31 Aug 2024 01:30:31 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 18144 IP address blocks: 219.118.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 31 01:30:31 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=215A4859DFA55BCAE1345FB40D6BBFDAECC8DE99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:55:41:4d:39:a8:f7:c4:bb:77:49:9e:b2:c2: 31:00:19:b3:d6:73:02:0f:d3:7e:cf:d7:61:bb:c5: 46:08:e9:1c:53:4a:62:9a:c3:db:71:6d:96:d3:82: fc:6f:97:6a:ab:b4:57:8d:06:0d:dc:6d:5c:74:ed: 37:39:51:1f:25:b6:03:d2:d8:c3:61:c9:92:6e:94: cd:6f:ad:9e:60:3a:e1:34:10:e8:e0:4c:fe:f0:c0: ad:09:73:b9:63:6f:96:ef:d8:c4:61:5b:88:c8:ad: a0:58:e4:ae:c4:9f:d0:cc:c5:c5:b7:77:a2:08:43: e3:0e:96:a7:b6:ad:56:b8:67:47:d2:55:90:b5:fe: 05:e2:a3:b7:0e:f4:d0:06:db:d0:b7:e5:83:6b:af: ce:61:8d:94:17:7a:d2:8d:8b:cc:87:0f:64:7b:0e: 8a:79:88:65:e4:9e:13:78:d5:cf:e6:04:46:34:6f: 78:77:83:2b:71:75:8d:08:9e:47:60:e5:6c:a0:20: 4e:e1:6c:2f:48:7b:f0:2c:d3:ec:ff:ed:41:c5:a1: 7e:56:ca:4b:28:32:30:4e:ac:64:42:c8:44:46:4a: e8:32:54:16:f6:03:78:4b:59:03:65:e3:3a:ca:91: e6:a3:e5:28:fb:2d:c5:95:9c:a4:16:1d:b2:cb:21: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5A:48:59:DF:A5:5B:CA:E1:34:5F:B4:0D:6B:BF:DA:EC:C8:DE:99 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/IVpIWd-lW8rhNF-0DWu_2uzI3pk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.118.224.0/19 Signature Algorithm: sha256WithRSAEncryption 75:9e:f7:ed:71:3b:a5:29:75:a0:62:4e:fc:c2:85:91:78:28: 12:72:cd:46:5e:74:50:a3:3d:6f:0b:02:61:9b:da:0b:e3:17: 79:15:70:80:03:97:84:04:10:e3:b0:a0:a0:b3:99:c0:b6:67: ac:d9:e7:ff:39:c9:12:7f:ee:93:89:ce:12:b8:32:c7:0a:46: e3:c0:65:c4:78:3f:8c:49:1d:0b:9f:47:d4:c6:38:d1:43:fe: 01:d3:e7:4b:97:e3:e6:3b:16:c5:2f:c8:0d:ca:f2:9a:81:97: 7c:47:2c:a5:88:8c:51:08:40:ed:27:34:f0:11:76:fa:8b:ef: 9c:a3:33:8b:49:2e:37:dc:5d:52:d2:f7:2c:46:0c:35:79:f2: 72:64:49:e8:4a:81:77:6a:01:61:05:df:0e:d3:3d:22:8c:59: 2a:39:d3:38:cc:c5:06:69:84:42:cf:f6:81:ed:d6:68:6d:c0: 51:5f:84:4f:79:61:50:90:ed:54:2f:dd:a0:67:60:d0:b4:ed: 11:01:ba:39:9b:c7:71:0a:ba:80:46:e4:b1:e0:29:0d:ab:10: f5:ad:11:31:1e:4f:fa:43:93:68:5e:a2:14:56:9c:ae:99:e4: 41:6c:5e:a5:db:51:09:31:c7:49:48:0b:a9:00:7e:1f:03:90: b9:58:a7:c6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI0MDgzMTAx MzAzMVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMjE1QTQ4NTlERkE1NUJD QUUxMzQ1RkI0MEQ2QkJGREFFQ0M4REU5OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKVVQU05qPfEu3dJnrLCMQAZs9ZzAg/Tfs/XYbvFRgjpHFNKYprD 23FtltOC/G+Xaqu0V40GDdxtXHTtNzlRHyW2A9LYw2HJkm6UzW+tnmA64TQQ6OBM /vDArQlzuWNvlu/YxGFbiMitoFjkrsSf0MzFxbd3oghD4w6Wp7atVrhnR9JVkLX+ BeKjtw700Abb0Lflg2uvzmGNlBd60o2LzIcPZHsOinmIZeSeE3jVz+YERjRveHeD K3F1jQieR2DlbKAgTuFsL0h78CzT7P/tQcWhflbKSygyME6sZELIREZK6DJUFvYD eEtZA2XjOsqR5qPlKPstxZWcpBYdssshqnkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQhWkhZ36VbyuE0X7QNa7/a7MjemTAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvSVZwSVdkLWxXOHJoTkYtMERXdV8ydXpJM3BrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdt24DANBgkqhkiG9w0BAQsFAAOCAQEAdZ737XE7pSl1oGJO/MKFkXgoEnLN Rl50UKM9bwsCYZvaC+MXeRVwgAOXhAQQ47CgoLOZwLZnrNnn/znJEn/uk4nOErgy xwpG48BlxHg/jEkdC59H1MY40UP+AdPnS5fj5jsWxS/IDcrymoGXfEcspYiMUQhA 7Sc08BF2+ovvnKMzi0kuN9xdUtL3LEYMNXnycmRJ6EqBd2oBYQXfDtM9IoxZKjnT OMzFBmmEQs/2ge3WaG3AUV+ET3lhUJDtVC/doGdg0LTtEQG6OZvHcQq6gEbkseAp DasQ9a0RMR5P+kOTaF6iFFacrpnkQWxepdtRCTHHSUgLqQB+HwOQuVinxg== -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:13 2024 by rpki-client on console-ams.rpki-client.org