$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/tYIhh4ZdsqXn2avgRYWDWU5s9MU.roa File: tYIhh4ZdsqXn2avgRYWDWU5s9MU.roa (raw, json) Hash identifier: nwACDOIisws5HCtT8wjuOPHcsF876mUstR1x4hLFdU8= Subject key identifier: B5:82:21:87:86:5D:B2:A5:E7:D9:AB:E0:45:85:83:59:4E:6C:F4:C5 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 1C Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/tYIhh4ZdsqXn2avgRYWDWU5s9MU.roa Signing time: Mon 18 Mar 2024 05:49:41 +0000 ROA not before: Mon 18 Mar 2024 05:49:41 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 17698 IP address blocks: 219.113.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 18 05:49:41 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=B5822187865DB2A5E7D9ABE0458583594E6CF4C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:e1:85:4a:c9:ed:7b:a8:92:1a:56:ff:c5: 87:1d:5b:d6:32:ac:df:2f:d0:cb:16:4a:79:e6:5c: d3:81:0a:b6:83:25:be:b6:80:9e:14:ee:3b:77:5a: 0e:18:ce:48:7b:29:b2:0c:9f:07:32:5c:8a:1e:97: f2:db:a5:df:63:51:d4:24:46:c5:77:2b:4d:c4:a6: 15:dc:9e:10:8d:bc:1a:8e:02:a3:f3:55:88:ab:fc: 4d:f5:36:c3:29:e2:18:14:e3:25:bc:8d:b0:ef:5e: 1e:54:28:49:f4:8e:19:a9:e7:5d:ee:5e:b3:bd:ba: b8:0a:e8:2e:46:65:8d:d5:6a:88:54:e9:72:8b:82: 2b:e0:1a:24:05:fc:40:c6:97:07:83:ec:70:48:0a: c0:68:b9:08:18:bc:57:4e:35:44:73:ea:62:fa:9d: 4b:ac:6a:f1:ef:fa:6d:c7:1b:86:4c:af:43:7d:77: ab:90:06:c6:89:b2:77:c2:b1:cd:27:10:43:1c:b3: b5:83:58:ad:d8:d5:08:fd:c4:e2:f6:e5:16:9c:82: e3:c3:b2:08:f2:9d:e4:c4:21:69:bc:f4:3e:04:ba: 60:25:bd:82:06:e7:b4:f7:92:00:1f:b0:9a:44:b9: a8:d5:e4:93:fa:26:5d:5b:23:45:62:a9:ae:4a:d7: 53:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:82:21:87:86:5D:B2:A5:E7:D9:AB:E0:45:85:83:59:4E:6C:F4:C5 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/tYIhh4ZdsqXn2avgRYWDWU5s9MU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.113.48.0/20 Signature Algorithm: sha256WithRSAEncryption 68:ba:7a:1d:ab:9a:b9:51:6b:d2:4a:7b:a8:7d:d1:79:b7:b5: 72:f8:c7:5b:1a:3f:dd:8e:09:d5:c9:90:fc:31:86:72:7d:63: ed:9d:28:7d:23:80:8f:04:cf:a6:97:60:ff:2d:d7:1e:44:98: 98:41:e0:8f:95:1a:69:63:11:01:9f:bf:41:98:d7:fb:81:27: 38:b2:4e:5e:ed:17:c6:01:2a:35:72:4b:b7:e7:6c:88:c2:47: cd:df:dd:8f:fc:e1:86:43:fc:0a:98:a1:48:35:0f:50:93:92: 43:96:44:b3:91:61:11:b3:ff:14:97:c5:5d:02:2d:d9:41:50: cb:7e:7e:f2:47:fe:d7:14:00:17:63:4c:1a:7e:be:68:5c:57: 17:19:a1:85:a0:25:2b:67:2d:48:a0:8d:57:11:90:93:ca:6b: 22:91:01:e6:52:dc:64:b9:68:21:30:77:7f:b3:ed:bf:ac:5c: 67:5c:eb:3d:8b:2a:32:2d:cc:ed:ab:b0:a1:d2:93:66:ab:6c: c9:13:08:2e:09:3f:a3:e6:20:24:31:2b:8e:d1:3f:b0:fa:62: 12:5f:97:e4:90:bb:a0:52:61:f1:09:28:d3:46:5f:c6:b9:bd: 08:13:ce:7f:da:4a:76:1d:5f:27:28:a7:7d:a9:bf:f7:b1:4b: cf:e0:c5:7b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI0MDMxODA1 NDk0MVoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjU4MjIxODc4NjVEQjJB NUU3RDlBQkUwNDU4NTgzNTk0RTZDRjRDNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANAQ4YVKye17qJIaVv/Fhx1b1jKs3y/QyxZKeeZc04EKtoMlvraA nhTuO3daDhjOSHspsgyfBzJcih6X8tul32NR1CRGxXcrTcSmFdyeEI28Go4Co/NV iKv8TfU2wyniGBTjJbyNsO9eHlQoSfSOGannXe5es726uAroLkZljdVqiFTpcouC K+AaJAX8QMaXB4PscEgKwGi5CBi8V041RHPqYvqdS6xq8e/6bccbhkyvQ313q5AG xomyd8KxzScQQxyztYNYrdjVCP3E4vblFpyC48OyCPKd5MQhabz0PgS6YCW9ggbn tPeSAB+wmkS5qNXkk/omXVsjRWKprkrXU/8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBS1giGHhl2ypefZq+BFhYNZTmz0xTAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwODIyL3RZSWhoNFpkc3FYbjJhdmdSWVdEV1U1czlNVS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBATbcTAwDQYJKoZIhvcNAQELBQADggEBAGi6eh2rmrlRa9JKe6h90Xm3 tXL4x1saP92OCdXJkPwxhnJ9Y+2dKH0jgI8Ez6aXYP8t1x5EmJhB4I+VGmljEQGf v0GY1/uBJziyTl7tF8YBKjVyS7fnbIjCR83f3Y/84YZD/AqYoUg1D1CTkkOWRLOR YRGz/xSXxV0CLdlBUMt+fvJH/tcUABdjTBp+vmhcVxcZoYWgJStnLUigjVcRkJPK ayKRAeZS3GS5aCEwd3+z7b+sXGdc6z2LKjItzO2rsKHSk2arbMkTCC4JP6PmICQx K47RP7D6YhJfl+SQu6BSYfEJKNNGX8a5vQgTzn/aSnYdXycop32pv/exS8/gxXs= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org