$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/Ngs5XTfhxDKJeEngQGJJSyeI6Js.roa File: Ngs5XTfhxDKJeEngQGJJSyeI6Js.roa (raw, json) Hash identifier: Nty+LMeJ9ubwyShSN/Yk4YmF6/DgqYZVw4aSiEA7JVI= Subject key identifier: 36:0B:39:5D:37:E1:C4:32:89:78:49:E0:40:62:49:4B:27:88:E8:9B Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 56 Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/Ngs5XTfhxDKJeEngQGJJSyeI6Js.roa Signing time: Sat 31 Aug 2024 01:30:29 +0000 ROA not before: Sat 31 Aug 2024 01:30:29 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 18144 IP address blocks: 121.200.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 31 01:30:29 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=360B395D37E1C432897849E04062494B2788E89B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:a0:2b:1b:27:1a:4f:5f:11:81:1b:67:0b: a8:fd:c3:78:31:f5:c6:d5:49:eb:a0:ca:81:2f:f5: 77:a9:d7:c0:7f:99:0a:63:a0:53:7d:9d:86:b7:5d: 6c:0e:91:69:f2:e5:fe:c5:48:77:8d:57:21:58:ae: d9:88:29:1d:f9:4a:25:f5:e2:14:76:72:96:3c:bb: 91:05:3c:5c:49:06:9a:7e:73:84:80:b3:b5:03:b1: 51:98:7e:22:6c:7d:1d:8e:ab:60:c9:6c:be:76:99: 98:20:c6:a0:d7:0c:d5:1b:9f:b8:34:1e:7d:e6:cf: 80:0a:b4:7e:b4:fe:3e:fa:f4:13:bb:7f:3c:f9:93: 57:27:7b:c8:e5:a7:77:a2:f7:dd:01:48:7f:b0:bd: da:c1:fc:5d:82:b9:a6:95:b5:22:d0:f3:5a:e3:b1: cd:4b:61:0d:df:9a:6e:0e:1f:bf:00:b3:1c:f0:66: 9e:1d:39:4c:15:d1:81:c2:58:5b:2b:be:6f:30:84: 10:d5:84:b1:8a:95:3a:f5:f4:b0:35:7e:27:44:e2: b0:45:c7:c5:38:26:2e:fd:a8:41:98:d1:90:b1:19: 10:d5:e8:7a:67:22:90:86:af:7a:26:0a:c9:65:d4: a2:92:18:54:66:da:85:93:65:58:b9:55:41:4a:91: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0B:39:5D:37:E1:C4:32:89:78:49:E0:40:62:49:4B:27:88:E8:9B X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/Ngs5XTfhxDKJeEngQGJJSyeI6Js.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.200.128.0/18 Signature Algorithm: sha256WithRSAEncryption 24:7c:3b:82:ca:4e:f4:83:f2:d7:46:a0:98:aa:36:fc:2b:65: ec:f7:fc:a6:e6:36:c5:f3:45:8d:ca:d0:70:f6:fd:b7:0a:52: 02:93:7c:1b:57:a7:4d:56:20:ca:ca:ce:d9:5b:38:36:28:6d: 72:2f:fa:ea:b3:e3:f4:f2:0f:99:02:91:0b:d7:9c:9f:0f:64: ac:cf:08:8e:38:80:a7:59:af:e8:ed:cb:ed:fa:19:c6:fb:aa: 03:ff:88:f4:4d:43:f6:32:a1:54:2d:f7:a0:65:a8:1b:0c:04: 43:24:fa:8d:14:97:8b:2c:c4:16:10:20:21:46:f4:00:d8:0a: ea:81:c5:ee:bc:db:d3:bc:38:98:71:17:33:a9:a9:c4:5f:35: 96:1b:f5:ea:63:88:34:94:38:34:84:d8:49:fe:2d:02:1e:2e: a3:77:96:2c:52:fe:f9:5a:3f:66:d9:2c:9e:8a:8b:7f:83:b3: f2:b0:96:8f:6d:f9:6f:95:4a:69:6a:14:5c:10:d6:70:f1:9a: d9:ca:84:e5:d2:e5:1f:36:8e:50:fe:3b:55:73:5c:47:71:d7: be:56:b5:cc:22:eb:54:bd:bc:a8:3b:fa:d8:a0:83:ae:84:e4: 4e:78:22:dc:3a:95:71:88:36:8f:d8:8e:f7:08:58:bd:44:dd: 4f:57:a6:52 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI0MDgzMTAx MzAyOVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMzYwQjM5NUQzN0UxQzQz Mjg5Nzg0OUUwNDA2MjQ5NEIyNzg4RTg5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALf3oCsbJxpPXxGBG2cLqP3DeDH1xtVJ66DKgS/1d6nXwH+ZCmOg U32dhrddbA6RafLl/sVId41XIViu2YgpHflKJfXiFHZyljy7kQU8XEkGmn5zhICz tQOxUZh+Imx9HY6rYMlsvnaZmCDGoNcM1RufuDQefebPgAq0frT+Pvr0E7t/PPmT Vyd7yOWnd6L33QFIf7C92sH8XYK5ppW1ItDzWuOxzUthDd+abg4fvwCzHPBmnh05 TBXRgcJYWyu+bzCEENWEsYqVOvX0sDV+J0TisEXHxTgmLv2oQZjRkLEZENXoemci kIaveiYKyWXUopIYVGbahZNlWLlVQUqRA+kCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ2CzldN+HEMol4SeBAYklLJ4jomzAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvTmdzNVhUZmh4REtKZUVuZ1FHSkpTeWVJNkpzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBnnIgDANBgkqhkiG9w0BAQsFAAOCAQEAJHw7gspO9IPy10agmKo2/Ctl7Pf8 puY2xfNFjcrQcPb9twpSApN8G1enTVYgysrO2Vs4Nihtci/66rPj9PIPmQKRC9ec nw9krM8IjjiAp1mv6O3L7foZxvuqA/+I9E1D9jKhVC33oGWoGwwEQyT6jRSXiyzE FhAgIUb0ANgK6oHF7rzb07w4mHEXM6mpxF81lhv16mOINJQ4NITYSf4tAh4uo3eW LFL++Vo/ZtksnoqLf4Oz8rCWj235b5VKaWoUXBDWcPGa2cqE5dLlHzaOUP47VXNc R3HXvla1zCLrVL28qDv62KCDroTkTngi3DqVcYg2j9iO9whYvUTdT1emUg== -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:13 2024 by rpki-client on console-ams.rpki-client.org