$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/NGB4lSHoT4emF92ClWj_-s-XehA.roa File: NGB4lSHoT4emF92ClWj_-s-XehA.roa (raw, json) Hash identifier: FuWpIO0iBl3Jcp22KrbT20U1BZsKNG+gTVdQdDFBfmI= Subject key identifier: 34:60:78:95:21:E8:4F:87:A6:17:DD:82:95:68:FF:FA:CF:97:7A:10 Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554 Certificate serial: 2B Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/NGB4lSHoT4emF92ClWj_-s-XehA.roa Signing time: Thu 29 Feb 2024 01:34:12 +0000 ROA not before: Thu 29 Feb 2024 01:34:12 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 131934 IP address blocks: 27.147.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Sep 2024 01:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D79B3890C2DA3795148976B954C2024056797554 Validity Not Before: Feb 29 01:34:12 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=3460789521E84F87A617DD829568FFFACF977A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:2a:72:f2:00:73:a6:8a:29:92:63:b2:58: b3:2a:1d:55:34:99:3f:c1:5d:52:7d:b0:a9:15:04: a6:91:60:0e:ad:40:a5:74:2c:c2:5a:0f:41:af:53: fa:63:e0:19:ec:27:1d:cb:76:66:3e:4d:98:a7:ef: 76:9a:91:9d:db:12:4e:86:d0:b3:56:7b:6c:97:87: e0:8b:f6:fd:ea:2e:ff:0a:10:3f:d0:a4:70:5d:08: bc:b0:14:7b:04:48:97:11:0d:5e:e7:2a:cc:ab:32: 17:b6:e0:4c:75:d9:2e:45:97:fd:b6:77:23:a4:01: 72:9e:44:e7:b5:92:7f:d7:2a:be:76:6e:78:2f:4b: 20:73:93:e4:fa:81:10:7a:10:de:0b:e2:d0:77:df: 11:99:0a:2b:0c:c4:27:8a:6a:cb:65:e2:81:cf:f9: d7:fc:68:d1:24:40:72:81:dd:67:a9:6d:81:04:7e: 4b:46:61:16:df:36:c4:c8:e5:85:d0:78:ba:f7:4a: cb:24:6d:28:c6:5f:8b:b5:41:d5:9b:70:df:14:de: aa:cf:67:ac:66:23:48:da:a5:52:0c:91:1a:51:42: 0c:39:1a:be:6f:37:5c:3e:ae:94:89:b5:3b:0a:af: 4d:ee:5a:53:d7:2e:04:94:6f:b0:cf:91:f8:b7:99: 4a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:60:78:95:21:E8:4F:87:A6:17:DD:82:95:68:FF:FA:CF:97:7A:10 X509v3 Authority Key Identifier: keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/NGB4lSHoT4emF92ClWj_-s-XehA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.147.112.0/20 Signature Algorithm: sha256WithRSAEncryption 5c:21:18:78:80:32:b9:2d:86:dc:9b:5a:ff:72:90:67:8f:6c: 5e:cb:58:60:16:43:79:67:ce:59:2c:f5:4c:27:4f:2d:7f:0a: 95:6c:03:cb:b3:18:8a:f7:72:10:20:26:5e:57:ad:75:ac:4e: 1e:02:39:9f:44:25:53:d6:84:38:ef:29:93:94:28:02:dd:ff: 02:35:2a:38:c7:3d:18:25:02:3b:87:78:4d:16:93:b0:ff:a7: c2:8a:28:97:cb:e1:b2:54:dc:19:ac:b8:28:5c:89:43:be:30: 43:67:e9:24:79:d7:3e:ae:83:d2:77:6a:9d:b0:f8:6b:97:8a: 0b:69:ec:ef:14:24:d7:0b:47:12:36:24:05:e5:79:36:b0:0b: a4:62:53:aa:d3:84:73:2c:e3:c1:95:9b:f8:42:88:b5:19:8f: 9d:6f:3c:24:13:91:7b:b0:d2:7f:d2:2d:09:56:77:09:d6:59: ab:78:97:ac:e6:fb:4e:ca:9e:c3:4c:48:2d:1d:4f:57:5d:46: 2d:b6:51:b8:84:a4:fb:e7:dc:8b:eb:ed:55:33:26:e1:be:8d: a4:c5:89:3b:34:de:77:9a:21:63:c2:84:0e:5b:95:85:08:d6: 38:b4:06:d8:9b:18:9b:f0:7a:22:70:b7:2a:ad:4e:7e:5e:32: 30:9d:b8:e3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTI0MDIyOTAx MzQxMloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMzQ2MDc4OTUyMUU4NEY4 N0E2MTdERDgyOTU2OEZGRkFDRjk3N0ExMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK1rKnLyAHOmiimSY7JYsyodVTSZP8FdUn2wqRUEppFgDq1ApXQs wloPQa9T+mPgGewnHct2Zj5NmKfvdpqRndsSTobQs1Z7bJeH4Iv2/eou/woQP9Ck cF0IvLAUewRIlxENXucqzKsyF7bgTHXZLkWX/bZ3I6QBcp5E57WSf9cqvnZueC9L IHOT5PqBEHoQ3gvi0HffEZkKKwzEJ4pqy2Xigc/51/xo0SRAcoHdZ6ltgQR+S0Zh Ft82xMjlhdB4uvdKyyRtKMZfi7VB1Ztw3xTeqs9nrGYjSNqlUgyRGlFCDDkavm83 XD6ulIm1OwqvTe5aU9cuBJRvsM+R+LeZSj0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ0YHiVIehPh6YX3YKVaP/6z5d6EDAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NDAvTkdCNGxTSG9UNGVtRjkyQ2xXal8tcy1YZWhBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBBuTcDANBgkqhkiG9w0BAQsFAAOCAQEAXCEYeIAyuS2G3Jta/3KQZ49sXstY YBZDeWfOWSz1TCdPLX8KlWwDy7MYivdyECAmXletdaxOHgI5n0QlU9aEOO8pk5Qo At3/AjUqOMc9GCUCO4d4TRaTsP+nwoool8vhslTcGay4KFyJQ74wQ2fpJHnXPq6D 0ndqnbD4a5eKC2ns7xQk1wtHEjYkBeV5NrALpGJTqtOEcyzjwZWb+EKItRmPnW88 JBORe7DSf9ItCVZ3CdZZq3iXrOb7Tsqew0xILR1PV11GLbZRuISk++fci+vtVTMm 4b6NpMWJOzTed5ohY8KEDluVhQjWOLQG2JsYm/B6InC3Kq1Ofl4yMJ244w== -----END CERTIFICATE-----Generated at Fri Sep 20 10:52:09 2024 by rpki-client on console-fra.rpki-client.org