$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/E9WMe-lVjw6GwWfE1RANBuMhPAA.roa File: E9WMe-lVjw6GwWfE1RANBuMhPAA.roa (raw, json) Hash identifier: nP1GzAnpXWq4wEGdQlGQBIC5g5LCf9NF6DMVXSsOSYo= Subject key identifier: 13:D5:8C:7B:E9:55:8F:0E:86:C1:67:C4:D5:10:0D:06:E3:21:3C:00 Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Certificate serial: 3C Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/E9WMe-lVjw6GwWfE1RANBuMhPAA.roa Signing time: Fri 01 Sep 2023 01:29:15 +0000 ROA not before: Fri 01 Sep 2023 01:29:15 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 17675 IP address blocks: 103.28.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 17 Jun 2024 13:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Validity Not Before: Sep 1 01:29:15 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=13D58C7BE9558F0E86C167C4D5100D06E3213C00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b1:eb:b7:8a:c9:eb:e6:9d:f6:db:5e:4a:5e: f4:bb:fa:96:fa:5b:8c:85:8f:ae:65:ef:b5:e5:c1: f9:ef:ca:a4:a8:58:8e:4d:07:b1:bb:82:d1:c7:d2: 94:e0:36:ba:3d:91:ac:43:9c:b6:14:bf:3a:ec:6d: d2:38:0f:80:bd:a1:61:71:c5:4f:cc:3d:9a:09:14: 01:50:59:50:be:84:90:51:87:87:bd:18:fc:0e:bd: 68:37:5d:32:3b:73:4f:ac:1b:a4:3d:f4:40:48:54: 38:4d:0e:0b:88:f9:88:f3:66:f4:ac:ad:62:d3:31: ea:6e:07:24:c3:42:9a:5c:9a:53:27:89:f7:fc:aa: 67:5e:89:f4:fb:98:39:1b:2a:22:51:e6:fd:3c:29: 08:67:df:96:08:99:3e:9d:93:14:e1:7a:26:19:21: fe:45:7f:cc:8f:23:28:bb:f4:6c:3b:42:00:3b:ea: 70:b6:fb:72:a0:0f:12:8d:70:24:d1:44:b6:1f:73: 1f:8e:88:75:e9:3f:04:d2:e4:ed:5e:08:5c:94:90: a1:66:08:7d:40:a1:4f:8a:ca:7d:01:ea:38:35:45: b6:cd:01:67:01:16:db:42:90:6d:45:b6:79:cd:1b: de:86:35:49:6a:45:4f:58:7e:43:c1:08:64:73:f2: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D5:8C:7B:E9:55:8F:0E:86:C1:67:C4:D5:10:0D:06:E3:21:3C:00 X509v3 Authority Key Identifier: keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/E9WMe-lVjw6GwWfE1RANBuMhPAA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.24.0/24 Signature Algorithm: sha256WithRSAEncryption 89:b9:16:a9:a0:1a:0b:c2:ec:90:73:cb:5b:98:13:ae:82:e9: c0:d7:fc:9a:6d:c1:e3:e9:be:a8:25:26:7a:e1:58:ad:8e:4b: 94:6a:93:df:77:2b:5d:bf:8b:f6:d1:ca:1e:dc:65:83:b4:ff: 25:a6:c7:2f:b3:49:cc:7c:09:d6:e6:d3:e8:33:59:84:a8:8f: 2a:f3:21:65:93:97:c0:96:dc:cc:44:43:66:eb:d0:cf:94:e6: 1d:14:4f:d1:a8:63:95:aa:16:86:8a:4d:7f:57:9f:a1:06:79: ec:6c:b3:2e:b1:b8:1d:66:0d:2e:09:19:d4:ca:6f:63:b1:6c: 50:5e:cb:6d:7a:46:c4:aa:64:aa:35:b9:a4:80:c6:a7:df:cf: 2e:4c:90:17:56:c1:b5:96:a5:0f:42:09:e6:25:6c:12:fe:9c: 21:37:3d:2b:21:18:5e:1b:79:9a:ad:b4:de:78:a5:5c:fe:cf: ee:48:1b:f9:61:6d:11:4e:9e:3c:e0:be:e3:c7:46:9e:19:fd: 84:c2:86:c1:8f:28:ff:52:57:ca:9c:5c:97:57:32:ba:aa:27: d3:fb:77:f7:da:92:80:24:cd:06:af:5c:59:b0:6d:a0:42:21: 0f:50:ef:55:cf:b9:a8:51:0d:91:01:5f:74:3d:c8:71:36:7e: c0:e0:66:bb -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODk5 NUQ2QjBEREMyMDVCMzU5NTkzMzJEMUNCMUQ5RDhDRjAyMjgzMB4XDTIzMDkwMTAx MjkxNVoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoMTNENThDN0JFOTU1OEYw RTg2QzE2N0M0RDUxMDBEMDZFMzIxM0MwMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMux67eKyevmnfbbXkpe9Lv6lvpbjIWPrmXvteXB+e/KpKhYjk0H sbuC0cfSlOA2uj2RrEOcthS/Ouxt0jgPgL2hYXHFT8w9mgkUAVBZUL6EkFGHh70Y /A69aDddMjtzT6wbpD30QEhUOE0OC4j5iPNm9KytYtMx6m4HJMNCmlyaUyeJ9/yq Z16J9PuYORsqIlHm/TwpCGfflgiZPp2TFOF6Jhkh/kV/zI8jKLv0bDtCADvqcLb7 cqAPEo1wJNFEth9zH46Idek/BNLk7V4IXJSQoWYIfUChT4rKfQHqODVFts0BZwEW 20KQbUW2ec0b3oY1SWpFT1h+Q8EIZHPyRlUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQT1Yx76VWPDobBZ8TVEA0G4yE8ADAfBgNVHSMEGDAWgBQomV1rDdwgWzWVkzLR yx2djPAigzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2MDIvS0psZGF3M2NJRnMxbFpNeTBjc2RuWXp3SW9NLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0psZGF3M2NJRnMxbFpNeTBjc2Ru WXp3SW9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwNjAyL0U5V01lLWxWanc2R3dXZkUxUkFOQnVNaFBBQS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABnHBgwDQYJKoZIhvcNAQELBQADggEBAIm5FqmgGgvC7JBzy1uYE66C 6cDX/JptwePpvqglJnrhWK2OS5Rqk993K12/i/bRyh7cZYO0/yWmxy+zScx8Cdbm 0+gzWYSojyrzIWWTl8CW3MxEQ2br0M+U5h0UT9GoY5WqFoaKTX9Xn6EGeexssy6x uB1mDS4JGdTKb2OxbFBey216RsSqZKo1uaSAxqffzy5MkBdWwbWWpQ9CCeYlbBL+ nCE3PSshGF4beZqttN54pVz+z+5IG/lhbRFOnjzgvuPHRp4Z/YTChsGPKP9SV8qc XJdXMrqqJ9P7d/fakoAkzQavXFmwbaBCIQ9Q71XPuahRDZEBX3Q9yHE2fsDgZrs= -----END CERTIFICATE-----Generated at Thu Jun 13 17:53:13 2024 by rpki-client on console-ams.rpki-client.org