$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/gS15uQaPzwZuZZ1cDVnOYnSNt0w.roa File: gS15uQaPzwZuZZ1cDVnOYnSNt0w.roa (raw, json) Hash identifier: xJw6ZnJBSLETnXHXXIE8Ezb04FYvTGCjaRQjVOohK04= Subject key identifier: 81:2D:79:B9:06:8F:CF:06:6E:65:9D:5C:0D:59:CE:62:74:8D:B7:4C Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554 Certificate serial: 33 Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/gS15uQaPzwZuZZ1cDVnOYnSNt0w.roa Signing time: Tue 28 May 2024 01:03:03 +0000 ROA not before: Tue 28 May 2024 01:03:03 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 131934 IP address blocks: 118.27.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Sep 2024 01:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D79B3890C2DA3795148976B954C2024056797554 Validity Not Before: May 28 01:03:03 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=812D79B9068FCF066E659D5C0D59CE62748DB74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:3d:30:90:fb:b9:d0:00:e1:d0:c0:d7:2d: c4:30:cc:32:e0:5e:75:af:d9:f8:5b:c4:50:69:94: 26:a6:81:0d:6b:63:0c:ad:17:2d:78:f7:73:f0:a0: ab:a6:80:00:70:81:97:f4:68:97:ae:5e:20:40:e3: a5:6c:42:d1:79:30:5e:b1:e4:68:56:bf:48:3b:55: 9d:21:e5:da:0a:7f:2a:3c:9d:59:92:ac:0a:99:cc: 5c:95:1a:d9:5e:00:07:8f:1b:cb:ba:b6:18:9f:8a: 53:57:a5:49:1d:00:c8:82:fc:d7:48:38:5e:a4:cf: 0b:7a:ae:18:b3:1e:49:84:a7:ab:a5:10:d8:e4:3e: 8c:6a:f2:d5:de:f1:df:e3:3b:7a:0f:04:a4:90:52: 9f:09:15:13:bb:c3:4e:13:21:f7:04:bf:e4:3c:7f: 2a:d6:8e:d3:02:61:e4:d1:fc:ea:7e:ae:9c:c3:10: 00:30:5c:ed:b2:bb:af:21:d6:06:26:e6:9d:a0:bb: 6c:ee:f6:6b:66:46:c4:92:13:2b:bb:c3:eb:b3:c0: fa:1a:a1:ae:52:ba:d8:8f:f7:c4:f1:b3:a8:88:84: 2b:f6:91:f6:c2:49:89:95:5f:a5:d2:71:a4:cb:29: cc:cc:9b:37:96:ca:ed:27:ad:43:e0:28:05:d5:56: 91:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2D:79:B9:06:8F:CF:06:6E:65:9D:5C:0D:59:CE:62:74:8D:B7:4C X509v3 Authority Key Identifier: keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/gS15uQaPzwZuZZ1cDVnOYnSNt0w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.27.240.0/20 Signature Algorithm: sha256WithRSAEncryption 07:1d:66:0d:bb:24:9d:ca:6d:cc:6b:e8:c3:c8:ca:06:66:14: ae:bf:fe:c1:90:69:4b:a0:da:44:4e:5b:b7:bd:ee:55:c2:5e: 5e:3c:09:ff:d6:0d:8e:b2:a8:de:4f:00:5d:c2:3d:fe:34:e4: be:b0:4c:61:b8:6e:bb:95:c0:28:8b:a9:fe:49:8a:60:4c:88: 56:73:58:b8:21:8c:44:28:32:9f:9e:e7:73:43:70:11:5b:1b: f7:ce:78:59:16:65:3c:64:3e:af:f6:a9:3f:51:27:94:8d:ef: ca:ea:55:82:b1:d9:2e:c0:4b:f9:3b:bd:e2:f4:c0:9b:18:23: 43:86:c4:19:33:21:90:11:07:c0:c8:e5:cc:39:90:6d:73:75: 14:dc:44:45:18:86:a9:2b:04:e5:fd:65:b2:f9:6a:68:f8:e4: 2c:12:5a:30:13:75:88:2f:e6:f3:68:5a:07:d6:49:7b:52:ff: b0:c9:77:d7:dc:25:d4:b7:0e:ed:a3:ce:c6:cd:34:72:b3:e8: 66:e9:81:95:3c:5a:2f:04:04:bc:ce:6e:29:85:25:e8:5c:4b: a1:fd:75:31:15:0a:2c:69:32:d9:82:6f:a8:53:df:e6:4a:ca: c3:f0:e0:db:ff:b4:99:ce:37:08:cb:bf:29:3f:b3:96:c2:8b: 09:a7:11:8a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTI0MDUyODAx MDMwM1oXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoODEyRDc5QjkwNjhGQ0Yw NjZFNjU5RDVDMEQ1OUNFNjI3NDhEQjc0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ2fPTCQ+7nQAOHQwNctxDDMMuBeda/Z+FvEUGmUJqaBDWtjDK0X LXj3c/Cgq6aAAHCBl/Rol65eIEDjpWxC0XkwXrHkaFa/SDtVnSHl2gp/KjydWZKs CpnMXJUa2V4AB48by7q2GJ+KU1elSR0AyIL810g4XqTPC3quGLMeSYSnq6UQ2OQ+ jGry1d7x3+M7eg8EpJBSnwkVE7vDThMh9wS/5Dx/KtaO0wJh5NH86n6unMMQADBc 7bK7ryHWBibmnaC7bO72a2ZGxJITK7vD67PA+hqhrlK62I/3xPGzqIiEK/aR9sJJ iZVfpdJxpMspzMybN5bK7SetQ+AoBdVWkSECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSBLXm5Bo/PBm5lnVwNWc5idI23TDAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NDAvZ1MxNXVRYVB6d1p1WloxY0RWbk9ZblNOdDB3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHYb8DANBgkqhkiG9w0BAQsFAAOCAQEABx1mDbskncptzGvow8jKBmYUrr/+ wZBpS6DaRE5bt73uVcJeXjwJ/9YNjrKo3k8AXcI9/jTkvrBMYbhuu5XAKIup/kmK YEyIVnNYuCGMRCgyn57nc0NwEVsb9854WRZlPGQ+r/apP1EnlI3vyupVgrHZLsBL +Tu94vTAmxgjQ4bEGTMhkBEHwMjlzDmQbXN1FNxERRiGqSsE5f1lsvlqaPjkLBJa MBN1iC/m82haB9ZJe1L/sMl319wl1LcO7aPOxs00crPoZumBlTxaLwQEvM5uKYUl 6FxLof11MRUKLGky2YJvqFPf5krKw/Dg2/+0mc43CMu/KT+zlsKLCacRig== -----END CERTIFICATE-----Generated at Fri Sep 20 10:40:05 2024 by rpki-client on console-ams.rpki-client.org