$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/pamOR_F8E9bbHMWgjK5jgK7IIEw.roa File: pamOR_F8E9bbHMWgjK5jgK7IIEw.roa (raw, json) Hash identifier: MBTW/O6Ru0AgYrW9sV9IIwLCZ9OOkBvh2fENpCDpEXo= Subject key identifier: A5:A9:8E:47:F1:7C:13:D6:DB:1C:C5:A0:8C:AE:63:80:AE:C8:20:4C Certificate issuer: /CN=28393FAE129B501824696BAE24B64734A203C376 Certificate serial: 57 Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/pamOR_F8E9bbHMWgjK5jgK7IIEw.roa Signing time: Fri 01 Dec 2023 01:30:20 +0000 ROA not before: Fri 01 Dec 2023 01:30:20 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 7514 IP address blocks: 120.89.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28393FAE129B501824696BAE24B64734A203C376 Validity Not Before: Dec 1 01:30:20 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=A5A98E47F17C13D6DB1CC5A08CAE6380AEC8204C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:0c:fd:87:5c:f7:88:a1:41:a3:e5:16:47: 1a:6e:49:97:f6:d1:31:46:97:17:10:90:7d:4f:ba: 5c:5a:36:c5:69:0f:aa:58:c8:60:e8:19:e8:94:2f: 0c:5a:83:08:e8:ae:64:59:0c:93:16:0c:7e:8a:b2: 10:f9:8c:21:23:1e:2f:b6:dd:f2:bd:30:20:a3:53: ec:2b:cf:42:9f:18:11:12:3a:26:06:b8:af:64:6e: ed:b2:a7:e1:f1:18:77:a2:35:ec:6a:fc:80:89:de: 5e:6d:19:ac:d6:eb:bf:0a:5f:f2:92:9c:89:70:0d: 0e:dc:e7:dc:db:39:7a:2a:40:20:af:6a:b3:d9:43: 50:48:f4:78:23:38:e8:0c:dc:31:eb:96:be:30:ca: 5a:6c:dc:e5:e3:9d:68:e7:a0:72:07:6c:44:da:97: ca:5d:49:56:d3:b1:22:78:df:70:7f:0a:1c:25:8b: 3c:d2:7e:18:4e:10:76:43:16:e5:45:59:95:ec:09: 19:47:13:1a:cc:30:66:91:ca:11:4f:84:8f:92:b3: f0:c3:6a:ce:43:30:c8:03:a4:5d:39:eb:15:2f:65: 8f:de:4b:06:9f:05:26:e7:26:73:ba:a6:57:ff:43: d9:9a:e2:7d:40:1e:e9:50:d9:d1:b5:cc:b7:12:c5: 4e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A9:8E:47:F1:7C:13:D6:DB:1C:C5:A0:8C:AE:63:80:AE:C8:20:4C X509v3 Authority Key Identifier: keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/pamOR_F8E9bbHMWgjK5jgK7IIEw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.89.128.0/17 Signature Algorithm: sha256WithRSAEncryption aa:a8:c0:71:20:71:06:0a:f3:57:aa:a6:65:10:57:5c:8d:9b: b3:27:2e:a9:eb:c6:e1:61:d9:f8:76:e9:59:22:98:32:a0:51: 19:e7:69:9e:92:24:37:21:6a:05:2f:68:30:f1:50:85:fb:a5: d1:fc:d3:0e:bc:b0:00:31:70:1e:dc:a7:95:7c:79:82:7c:8d: 05:a8:0c:a8:70:58:50:99:7d:86:44:f6:e8:d7:f6:11:27:52: a3:ba:7e:8c:75:ff:a7:60:fa:9f:d7:de:22:1d:6e:04:45:70: 82:8e:45:41:44:9f:a7:01:02:b3:29:b2:47:4f:3a:8a:dc:64: 60:a2:0b:c5:f9:a9:56:39:26:96:0f:93:ad:0e:5f:75:f5:5c: a0:03:0b:2e:0f:38:34:9e:06:89:b6:3b:dd:54:28:a8:21:ee: e3:49:85:b6:00:7a:30:f9:77:1a:aa:96:27:d4:da:c6:68:12: 58:57:93:ea:dd:ac:e9:24:7f:5b:4f:90:a5:46:82:4f:94:32: cd:61:4b:7b:74:e7:71:ec:70:fb:1f:91:cf:ac:8c:02:47:8e: eb:a0:1d:e9:38:9e:4f:f2:1c:dc:c9:5a:63:60:03:8c:ac:b5: f9:7e:25:59:39:b9:e6:6f:7e:c2:3e:4a:d4:e2:e1:8e:02:8d: 3d:51:35:94 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODM5 M0ZBRTEyOUI1MDE4MjQ2OTZCQUUyNEI2NDczNEEyMDNDMzc2MB4XDTIzMTIwMTAx MzAyMFoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoQTVBOThFNDdGMTdDMTNE NkRCMUNDNUEwOENBRTYzODBBRUM4MjA0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANaZDP2HXPeIoUGj5RZHGm5Jl/bRMUaXFxCQfU+6XFo2xWkPqljI YOgZ6JQvDFqDCOiuZFkMkxYMfoqyEPmMISMeL7bd8r0wIKNT7CvPQp8YERI6Jga4 r2Ru7bKn4fEYd6I17Gr8gIneXm0ZrNbrvwpf8pKciXANDtzn3Ns5eipAIK9qs9lD UEj0eCM46AzcMeuWvjDKWmzc5eOdaOegcgdsRNqXyl1JVtOxInjfcH8KHCWLPNJ+ GE4QdkMW5UVZlewJGUcTGswwZpHKEU+Ej5Kz8MNqzkMwyAOkXTnrFS9lj95LBp8F Jucmc7qmV/9D2ZrifUAe6VDZ0bXMtxLFTgsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSlqY5H8XwT1tscxaCMrmOArsggTDAfBgNVHSMEGDAWgBQoOT+uEptQGCRpa64k tkc0ogPDdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA3NjIvS0RrX3JoS2JVQmdrYVd1dUpMWkhOS0lEdzNZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0RrX3JoS2JVQmdrYVd1dUpMWkhO S0lEdzNZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwNzYyL3BhbU9SX0Y4RTliYkhNV2dqSzVqZ0s3SUlFdy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAd4WYAwDQYJKoZIhvcNAQELBQADggEBAKqowHEgcQYK81eqpmUQV1yN m7MnLqnrxuFh2fh26VkimDKgURnnaZ6SJDchagUvaDDxUIX7pdH80w68sAAxcB7c p5V8eYJ8jQWoDKhwWFCZfYZE9ujX9hEnUqO6fox1/6dg+p/X3iIdbgRFcIKORUFE n6cBArMpskdPOorcZGCiC8X5qVY5JpYPk60OX3X1XKADCy4PODSeBom2O91UKKgh 7uNJhbYAejD5dxqqlifU2sZoElhXk+rdrOkkf1tPkKVGgk+UMs1hS3t053HscPsf kc+sjAJHjuugHek4nk/yHNzJWmNgA4ystfl+JVk5ueZvfsI+StTi4Y4CjT1RNZQ= -----END CERTIFICATE-----Generated at Thu May 30 03:38:37 2024 by rpki-client on console-ams.rpki-client.org