$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/nIMwQFPGiNQHbBGCvBYssZBdrCk.roa File: nIMwQFPGiNQHbBGCvBYssZBdrCk.roa (raw, json) Hash identifier: Ku19Kqf+yPnZ8gC1HRyvrf2Etkd/DvwWGUZjtyNCrDg= Subject key identifier: 9C:83:30:40:53:C6:88:D4:07:6C:11:82:BC:16:2C:B1:90:5D:AC:29 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 59 Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/nIMwQFPGiNQHbBGCvBYssZBdrCk.roa Signing time: Sat 31 Aug 2024 01:30:30 +0000 ROA not before: Sat 31 Aug 2024 01:30:30 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 18144 IP address blocks: 202.7.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 31 01:30:30 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=9C83304053C688D4076C1182BC162CB1905DAC29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d4:37:5e:17:d6:d2:8c:11:cc:9a:c6:1f:02: 6a:6c:ce:86:bc:28:58:21:6c:5c:e1:3f:08:82:20: 82:21:13:45:da:cc:53:41:d9:f1:49:9f:05:d4:eb: 1b:29:54:45:73:9e:4b:c8:fd:8c:36:b8:b5:11:20: 07:f2:3a:f5:c3:33:6a:00:c3:71:cc:b6:4c:63:ab: bc:68:06:53:96:fd:d5:0c:69:c3:65:2b:92:95:a9: 35:df:93:a1:d4:1a:ba:c2:bd:59:53:81:aa:32:02: 09:2a:71:c3:dc:37:10:5f:43:42:c2:49:e2:21:c5: 75:9e:b5:27:c3:6e:72:64:58:df:69:ae:5f:4e:cb: d0:38:bd:77:c9:c5:ca:c3:f3:80:42:1c:d3:a3:b0: e6:70:a0:d0:cd:22:25:4a:79:b1:06:55:c4:1d:82: b1:31:45:3e:5b:8c:83:88:2f:a8:ec:54:2b:5c:7b: 0c:cd:a2:27:d5:c0:27:5f:f9:6d:74:32:35:36:ed: c1:c4:f6:df:93:38:f8:5b:fa:68:ac:fd:c1:8d:39: a0:ee:ba:d5:8f:41:72:cc:ae:b4:48:cd:29:96:54: fb:1b:7b:39:c4:5e:a9:8a:92:b3:46:47:21:a6:de: fe:6c:ce:d9:39:be:5e:1a:d8:e1:b7:02:54:4a:91: fb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:83:30:40:53:C6:88:D4:07:6C:11:82:BC:16:2C:B1:90:5D:AC:29 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/nIMwQFPGiNQHbBGCvBYssZBdrCk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.7.112.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:df:7b:61:bc:35:3e:0b:1c:bd:68:48:10:f5:b8:37:a0:65: c6:aa:80:d1:b9:28:da:8f:2a:34:99:09:0e:dc:c7:33:e6:47: 0c:c3:92:1a:a9:80:3a:b5:d7:b1:82:86:88:4b:da:ce:5f:55: 92:4d:95:68:dd:8b:b8:cc:5a:28:ba:b7:d0:43:a0:bb:e3:8a: 1b:a3:d3:b6:7e:54:79:e1:3a:e0:85:36:f2:36:01:f1:12:45: 04:42:fd:92:37:07:2d:42:a4:36:30:d7:1a:2b:5c:da:25:23: b8:04:bc:79:8a:c2:1b:11:30:3f:f8:68:4d:a9:2e:34:39:82: 3c:ad:ac:4d:94:36:69:8c:eb:d3:5f:1c:87:ac:bd:78:b0:f0: d2:ba:d7:e4:8d:e2:ef:c5:17:80:f6:65:ad:94:dd:f9:75:93: 70:e6:6a:40:ad:29:dc:40:7d:aa:cf:30:65:0b:00:90:85:7b: df:c3:a6:4b:87:d1:ae:e8:f6:47:08:b7:77:90:aa:66:01:2c: fb:bd:c1:a9:20:fc:b0:a1:17:3b:85:7d:49:e6:17:95:31:a6: d3:a7:f7:d1:ad:08:1b:53:31:eb:c1:4d:fd:f7:e2:c8:81:4e: 73:ac:ef:6a:95:f1:67:82:64:bf:0e:80:33:3f:ae:98:cb:00: fa:15:9d:63 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI0MDgzMTAx MzAzMFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoOUM4MzMwNDA1M0M2ODhE NDA3NkMxMTgyQkMxNjJDQjE5MDVEQUMyOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANHUN14X1tKMEcyaxh8CamzOhrwoWCFsXOE/CIIggiETRdrMU0HZ 8UmfBdTrGylURXOeS8j9jDa4tREgB/I69cMzagDDccy2TGOrvGgGU5b91Qxpw2Ur kpWpNd+TodQausK9WVOBqjICCSpxw9w3EF9DQsJJ4iHFdZ61J8NucmRY32muX07L 0Di9d8nFysPzgEIc06Ow5nCg0M0iJUp5sQZVxB2CsTFFPluMg4gvqOxUK1x7DM2i J9XAJ1/5bXQyNTbtwcT235M4+Fv6aKz9wY05oO661Y9BcsyutEjNKZZU+xt7OcRe qYqSs0ZHIabe/mzO2Tm+XhrY4bcCVEqR+6ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBScgzBAU8aI1AdsEYK8FiyxkF2sKTAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvbklNd1FGUEdpTlFIYkJHQ3ZCWXNzWkJkckNrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMoHcDANBgkqhkiG9w0BAQsFAAOCAQEAjt97Ybw1PgscvWhIEPW4N6BlxqqA 0bko2o8qNJkJDtzHM+ZHDMOSGqmAOrXXsYKGiEvazl9Vkk2VaN2LuMxaKLq30EOg u+OKG6PTtn5UeeE64IU28jYB8RJFBEL9kjcHLUKkNjDXGitc2iUjuAS8eYrCGxEw P/hoTakuNDmCPK2sTZQ2aYzr018ch6y9eLDw0rrX5I3i78UXgPZlrZTd+XWTcOZq QK0p3EB9qs8wZQsAkIV738OmS4fRruj2Rwi3d5CqZgEs+73BqSD8sKEXO4V9SeYX lTGm06f30a0IG1Mx68FN/ffiyIFOc6zvapXxZ4Jkvw6AMz+umMsA+hWdYw== -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:13 2024 by rpki-client on console-ams.rpki-client.org