$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/vBsjBJFKJZV1rQ8O1nX6KYcPoXQ.roa File: vBsjBJFKJZV1rQ8O1nX6KYcPoXQ.roa (raw, json) Hash identifier: FQxUHDNBrECubt+PAqyiWwDx+pTbzv7ZyMnTRWFcCR4= Subject key identifier: BC:1B:23:04:91:4A:25:95:75:AD:0F:0E:D6:75:FA:29:87:0F:A1:74 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 5A Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/vBsjBJFKJZV1rQ8O1nX6KYcPoXQ.roa Signing time: Sat 31 Aug 2024 01:30:31 +0000 ROA not before: Sat 31 Aug 2024 01:30:31 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 18144 IP address blocks: 203.168.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 31 01:30:31 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=BC1B2304914A259575AD0F0ED675FA29870FA174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:ad:51:fb:4d:86:bd:44:c3:02:98:6b:34: 9c:68:46:e6:0c:fa:80:b4:46:7d:0d:62:e9:6d:0a: 83:a9:12:d8:d7:1e:94:a3:24:cb:28:96:d7:8c:1f: 9c:5f:c9:b0:dd:61:ab:a7:fe:dc:8a:27:98:5b:0b: 15:7e:e7:d4:f1:69:4c:8c:db:e1:e5:20:ec:f8:1d: c2:f7:4d:4f:ed:53:06:d0:87:03:12:a3:7d:d2:35: 62:52:8f:b2:99:66:19:34:45:d5:cd:40:eb:dd:5b: cf:1d:3b:b6:21:74:03:25:18:61:0b:d4:23:d2:85: b4:e7:68:33:92:14:0f:33:9d:5e:18:72:a3:5c:52: 55:6a:eb:99:24:76:a6:2f:39:85:cb:3d:97:e0:e9: 72:f9:bd:9e:35:af:a5:f5:3f:37:81:c9:0e:6d:91: f0:0e:8e:be:45:73:68:7b:e3:2c:6d:d7:89:3e:2c: 45:f9:02:4d:02:19:c6:34:dd:11:81:a4:53:76:94: 62:6b:d3:2d:2f:e7:63:46:12:e6:2c:32:0a:47:56: b4:bf:8b:fd:7a:70:1d:04:77:2d:16:17:d9:f2:68: 63:bc:5c:b9:70:ad:66:1c:ec:3a:cd:2f:27:ea:02: f8:07:9f:ce:12:3c:e1:6f:7a:bd:ea:40:5c:e1:4e: 29:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1B:23:04:91:4A:25:95:75:AD:0F:0E:D6:75:FA:29:87:0F:A1:74 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/vBsjBJFKJZV1rQ8O1nX6KYcPoXQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.168.64.0/18 Signature Algorithm: sha256WithRSAEncryption 20:13:46:d2:a8:3b:6c:f5:5c:9c:b3:3b:df:f8:fc:9f:74:67: e7:b2:44:e6:a5:81:da:3a:cd:ea:c7:d1:a8:c1:ed:0e:df:51: 40:dd:c1:50:50:21:65:24:86:05:42:80:6c:4d:2f:02:3a:8b: f4:14:30:e8:fc:fe:f4:fa:b0:33:bb:c8:f2:78:33:30:81:6d: 06:a8:37:33:3c:27:58:1d:d9:37:c6:c8:2d:4b:6d:c9:87:a2: 4d:d1:91:36:7d:d9:4a:d9:b1:fa:e4:5b:20:27:4b:4d:c4:55: 8f:8d:64:39:a9:05:e4:10:c2:29:f3:19:76:96:ca:74:f5:58: f5:2b:1b:e1:ed:25:73:a5:bf:14:cc:c5:19:d1:8e:35:bd:07: 63:12:a6:f1:17:4d:19:1f:1d:99:86:6c:5d:e4:4a:b7:e1:71: 18:d2:4a:06:cc:a0:e7:9e:b3:5a:45:3b:57:ed:42:fb:b8:b4: 6f:d5:e5:04:41:c5:7d:f6:ba:1f:6a:a6:32:98:03:93:3b:74: e5:f9:68:38:a1:1a:45:e8:f4:56:5e:5c:12:f2:de:27:96:a1: 90:22:a1:6e:57:b5:7a:69:23:a7:9e:9e:54:5c:07:7d:1d:82: 99:a4:2b:c2:46:5a:c7:8a:a3:46:67:da:dd:db:80:cf:bf:19: 85:5b:30:48 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI0MDgzMTAx MzAzMVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQkMxQjIzMDQ5MTRBMjU5 NTc1QUQwRjBFRDY3NUZBMjk4NzBGQTE3NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL0zrVH7TYa9RMMCmGs0nGhG5gz6gLRGfQ1i6W0Kg6kS2NcelKMk yyiW14wfnF/JsN1hq6f+3IonmFsLFX7n1PFpTIzb4eUg7PgdwvdNT+1TBtCHAxKj fdI1YlKPsplmGTRF1c1A691bzx07tiF0AyUYYQvUI9KFtOdoM5IUDzOdXhhyo1xS VWrrmSR2pi85hcs9l+Dpcvm9njWvpfU/N4HJDm2R8A6OvkVzaHvjLG3XiT4sRfkC TQIZxjTdEYGkU3aUYmvTLS/nY0YS5iwyCkdWtL+L/XpwHQR3LRYX2fJoY7xcuXCt ZhzsOs0vJ+oC+AefzhI84W96vepAXOFOKfMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS8GyMEkUollXWtDw7Wdfophw+hdDAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvdkJzakJKRktKWlYxclE4TzFuWDZLWWNQb1hRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBsuoQDANBgkqhkiG9w0BAQsFAAOCAQEAIBNG0qg7bPVcnLM73/j8n3Rn57JE 5qWB2jrN6sfRqMHtDt9RQN3BUFAhZSSGBUKAbE0vAjqL9BQw6Pz+9PqwM7vI8ngz MIFtBqg3MzwnWB3ZN8bILUttyYeiTdGRNn3ZStmx+uRbICdLTcRVj41kOakF5BDC KfMZdpbKdPVY9Ssb4e0lc6W/FMzFGdGONb0HYxKm8RdNGR8dmYZsXeRKt+FxGNJK Bsyg556zWkU7V+1C+7i0b9XlBEHFffa6H2qmMpgDkzt05floOKEaRej0Vl5cEvLe J5ahkCKhble1emkjp56eVFwHfR2CmaQrwkZax4qjRmfa3duAz78ZhVswSA== -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:13 2024 by rpki-client on console-ams.rpki-client.org