$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/441UZPsLjTXm-oqnyeaNJpmQ2Ow.roa File: 441UZPsLjTXm-oqnyeaNJpmQ2Ow.roa (raw, json) Hash identifier: ztqfMJu9Qo9tnedOG8PVWxcTeLFG3rbm87rcA1yKvmg= Subject key identifier: E3:8D:54:64:FB:0B:8D:35:E6:FA:8A:A7:C9:E6:8D:26:99:90:D8:EC Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 022B Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/441UZPsLjTXm-oqnyeaNJpmQ2Ow.roa Signing time: Mon 30 Sep 2024 01:33:48 +0000 ROA not before: Mon 30 Sep 2024 01:33:48 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 7684 IP address blocks: 49.212.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Sep 30 01:33:48 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=E38D5464FB0B8D35E6FA8AA7C9E68D269990D8EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:86:e1:48:2b:88:07:db:da:cc:f3:1c:dd: b0:92:38:e6:69:a2:e7:e2:1d:29:73:d9:1b:91:75: 14:22:f7:c8:01:1c:16:64:0f:16:69:9c:b0:37:f6: 4c:cb:cf:a2:05:eb:10:f7:c3:b3:e0:e7:e3:b2:d4: 2e:32:b0:eb:c2:ca:6f:e5:69:77:f7:9e:1f:e3:8c: ed:37:84:dd:eb:c8:16:1c:75:a6:91:99:21:7c:18: 43:41:5e:cc:54:2d:36:03:5f:d4:72:c7:7f:3e:ea: 16:ba:28:d0:a0:29:fc:c4:e0:1f:cb:dd:f5:00:d6: 77:b9:0d:d5:7b:27:0d:2d:58:e9:02:74:53:a1:47: 97:84:41:40:02:96:30:13:4c:53:13:b8:1d:95:e9: 1e:77:a9:cc:2b:94:60:02:5e:a0:94:c5:4f:e5:fe: e1:58:1b:46:8e:7f:9b:9d:19:6a:f5:e5:41:10:b7: 38:8c:2f:2c:2b:54:0d:a8:b7:f7:96:2c:d3:34:b6: cf:bd:a1:36:29:83:8d:5b:4b:3c:72:00:76:e2:60: a7:99:ff:34:d1:55:d8:ba:c6:12:e0:3c:8c:b4:58: bb:e9:96:ef:d7:94:eb:f6:07:f4:2f:bd:af:b8:dc: 7a:4c:74:a3:51:a7:98:fa:82:ee:39:47:e1:40:07: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8D:54:64:FB:0B:8D:35:E6:FA:8A:A7:C9:E6:8D:26:99:90:D8:EC X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/441UZPsLjTXm-oqnyeaNJpmQ2Ow.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.72.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:e9:c0:db:e2:f9:ab:90:34:58:7e:49:11:ec:83:cb:98:49: e9:96:b4:36:d1:51:12:d6:63:78:8d:e1:bd:e2:71:10:16:ca: 50:f8:a7:65:8e:2e:ea:38:23:86:5b:16:09:02:99:27:1f:28: 1c:f0:b7:cf:26:f2:c4:27:00:07:45:f2:1b:c9:52:6e:ea:82: ce:84:e4:ed:58:b7:76:8c:7c:84:94:c0:78:00:92:d6:e4:a3: ac:a8:3c:d1:0d:c4:4e:f8:41:91:98:50:2d:2e:23:1d:85:6e: 48:cd:de:1b:f1:b4:54:74:14:3d:da:aa:4f:af:90:c6:1f:6f: 0f:07:88:5e:f2:00:f2:ab:11:1e:b1:93:28:4b:57:e8:1f:20: 3c:73:8d:68:68:74:65:c9:9c:a7:48:ea:ff:d3:ce:1c:93:1f: 72:1e:a8:2b:03:22:dd:89:86:3d:d1:80:0f:15:4a:b3:02:47: 40:d2:4a:da:1b:a0:7b:22:f4:cc:36:c2:6c:e8:9a:75:26:14: 50:37:f9:4d:a2:3e:d4:12:4f:2f:7f:c4:6b:aa:51:01:e5:fd: a4:db:32:22:8d:39:4e:f3:57:e3:70:84:cf:84:37:f3:cb:03: 6c:b0:e7:2e:cd:45:91:fe:60:0a:b4:aa:b6:54:16:07:00:85: 81:f5:f4:7c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA5MzAw MTMzNDhaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUzOEQ1NDY0RkIwQjhE MzVFNkZBOEFBN0M5RTY4RDI2OTk5MEQ4RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCptobhSCuIB9vazPMc3bCSOOZpoufiHSlz2RuRdRQi98gBHBZk DxZpnLA39kzLz6IF6xD3w7Pg5+Oy1C4ysOvCym/laXf3nh/jjO03hN3ryBYcdaaR mSF8GENBXsxULTYDX9Ryx38+6ha6KNCgKfzE4B/L3fUA1ne5DdV7Jw0tWOkCdFOh R5eEQUACljATTFMTuB2V6R53qcwrlGACXqCUxU/l/uFYG0aOf5udGWr15UEQtziM LywrVA2ot/eWLNM0ts+9oTYpg41bSzxyAHbiYKeZ/zTRVdi6xhLgPIy0WLvplu/X lOv2B/Qvva+43HpMdKNRp5j6gu45R+FAB77tAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU441UZPsLjTXm+oqnyeaNJpmQ2OwwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny80NDFVWlBzTGpUWG0tb3FueWVhTkpwbVEyT3cu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdRIMA0GCSqGSIb3DQEBCwUAA4IBAQCa6cDb4vmrkDRYfkkR7IPL mEnplrQ20VES1mN4jeG94nEQFspQ+Kdlji7qOCOGWxYJApknHygc8LfPJvLEJwAH RfIbyVJu6oLOhOTtWLd2jHyElMB4AJLW5KOsqDzRDcRO+EGRmFAtLiMdhW5Izd4b 8bRUdBQ92qpPr5DGH28PB4he8gDyqxEesZMoS1foHyA8c41oaHRlyZynSOr/084c kx9yHqgrAyLdiYY90YAPFUqzAkdA0kraG6B7IvTMNsJs6Jp1JhRQN/lNoj7UEk8v f8RrqlEB5f2k2zIijTlO81fjcITPhDfzywNssOcuzUWR/mAKtKq2VBYHAIWB9fR8 -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:24 2024 by rpki-client on console-ams.rpki-client.org