$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/dGO5G8cP35JHzwdfqUt60DdrBhc.roa File: dGO5G8cP35JHzwdfqUt60DdrBhc.roa (raw, json) Hash identifier: UvUUcN4Ud/OM16IhO9/JEJbdjBB1nTQfexzL2Koy52o= Subject key identifier: 74:63:B9:1B:C7:0F:DF:92:47:CF:07:5F:A9:4B:7A:D0:37:6B:06:17 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 4D Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/dGO5G8cP35JHzwdfqUt60DdrBhc.roa Signing time: Sat 31 Aug 2024 01:30:25 +0000 ROA not before: Sat 31 Aug 2024 01:30:25 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 18144 IP address blocks: 36.52.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 31 01:30:25 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=7463B91BC70FDF9247CF075FA94B7AD0376B0617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:b7:e6:87:c0:92:ad:78:c6:cf:b9:89:20: 8f:77:76:0d:45:4a:a1:ff:8e:b1:77:50:22:f8:77: de:25:cc:d7:3e:e1:75:3a:84:0c:6d:54:d7:b6:6b: 73:79:e1:c7:73:e3:87:a3:32:fa:ff:43:a4:23:c3: 32:68:ef:41:e2:65:29:d8:4c:b7:cd:1e:b4:5b:2c: e1:cc:01:8a:92:c3:6d:73:d8:5f:03:90:53:21:23: c0:18:d5:e4:1f:56:1a:2d:01:f2:d8:1a:d5:f1:43: 12:0f:73:6d:d3:74:ba:5c:ff:76:3d:ba:95:80:f4: 63:87:1a:47:c9:5f:93:e2:b0:6b:27:e9:ae:91:a2: f1:9d:97:dc:47:98:b5:1c:69:d7:f6:e8:ba:4e:ef: aa:f2:6b:47:f2:a2:93:fa:f3:6b:a0:2e:e7:40:04: 1f:cd:02:6e:4b:f2:18:7c:fe:37:2b:9b:a3:c4:1e: 1f:57:0a:a5:6c:97:0e:a4:63:21:6a:e0:df:73:f1: 13:5a:a3:06:ac:d6:5b:c4:82:90:76:fb:ba:f2:77: 1c:c6:48:1e:a3:b3:af:35:55:2a:9b:ad:90:7a:97: a8:68:68:c8:94:bd:fc:04:16:3f:fe:75:06:ea:82: 16:f3:a3:d4:67:4c:5e:e7:fe:f7:e3:c4:7a:7e:4f: 96:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:63:B9:1B:C7:0F:DF:92:47:CF:07:5F:A9:4B:7A:D0:37:6B:06:17 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/dGO5G8cP35JHzwdfqUt60DdrBhc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.152.0/21 Signature Algorithm: sha256WithRSAEncryption 76:f4:c9:8d:08:72:04:17:61:79:c0:e8:45:9c:a9:6d:27:2e: e2:27:75:db:fc:49:9a:19:bc:a2:2b:46:40:b4:e7:24:41:e7: 09:34:ed:c2:a0:df:b0:23:00:8e:09:df:cc:4f:33:12:a4:1c: 80:a1:82:02:b8:4f:fd:ba:6d:8e:90:31:79:0f:22:c5:f3:a9: 97:fc:a9:ea:1e:96:0b:1b:b5:84:b1:f7:1d:2b:40:54:46:eb: 86:e9:a5:70:35:0f:0c:b8:72:01:7e:16:7f:70:41:e7:fa:08: e7:72:27:8b:ad:ed:ef:a2:49:94:de:5f:90:66:e5:b3:24:cc: a0:97:47:58:11:3b:25:0e:0c:d5:ac:ef:e7:63:50:16:6c:d6: 57:ce:5b:5f:47:e1:b5:ac:0d:e2:4e:f3:43:0a:44:d5:26:f0: c5:c9:6e:d8:6f:20:2a:a7:de:13:3d:f7:2c:59:a0:af:d6:81: c7:36:00:71:64:29:7b:51:24:b8:ee:fd:c9:ef:55:eb:5d:a1: 4c:f4:b1:79:12:a7:7c:8e:bd:05:4d:6a:de:f2:4a:cb:50:9f: e3:88:6a:83:1e:28:1e:50:4e:42:f7:1c:f5:dd:0f:81:f2:94: a8:b3:db:a9:3f:10:63:00:72:0c:3d:92:5f:bb:08:92:5f:ac: 25:78:2e:1c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI0MDgzMTAx MzAyNVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNzQ2M0I5MUJDNzBGREY5 MjQ3Q0YwNzVGQTk0QjdBRDAzNzZCMDYxNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALxgt+aHwJKteMbPuYkgj3d2DUVKof+OsXdQIvh33iXM1z7hdTqE DG1U17Zrc3nhx3Pjh6My+v9DpCPDMmjvQeJlKdhMt80etFss4cwBipLDbXPYXwOQ UyEjwBjV5B9WGi0B8tga1fFDEg9zbdN0ulz/dj26lYD0Y4caR8lfk+KwayfprpGi 8Z2X3EeYtRxp1/bouk7vqvJrR/Kik/rza6Au50AEH80CbkvyGHz+Nyubo8QeH1cK pWyXDqRjIWrg33PxE1qjBqzWW8SCkHb7uvJ3HMZIHqOzrzVVKputkHqXqGhoyJS9 /AQWP/51BuqCFvOj1GdMXuf+9+PEen5PlqUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR0Y7kbxw/fkkfPB1+pS3rQN2sGFzAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvZEdPNUc4Y1AzNUpIendkZnFVdDYwRGRyQmhjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyQ0mDANBgkqhkiG9w0BAQsFAAOCAQEAdvTJjQhyBBdhecDoRZypbScu4id1 2/xJmhm8oitGQLTnJEHnCTTtwqDfsCMAjgnfzE8zEqQcgKGCArhP/bptjpAxeQ8i xfOpl/yp6h6WCxu1hLH3HStAVEbrhumlcDUPDLhyAX4Wf3BB5/oI53Ini63t76JJ lN5fkGblsyTMoJdHWBE7JQ4M1azv52NQFmzWV85bX0fhtawN4k7zQwpE1Sbwxclu 2G8gKqfeEz33LFmgr9aBxzYAcWQpe1EkuO79ye9V612hTPSxeRKnfI69BU1q3vJK y1Cf44hqgx4oHlBOQvcc9d0PgfKUqLPbqT8QYwByDD2SX7sIkl+sJXguHA== -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:26 2024 by rpki-client on console-fra.rpki-client.org