$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/wfHEimrW5BOSvW5zdxPArrmgyNo.roa File: wfHEimrW5BOSvW5zdxPArrmgyNo.roa (raw, json) Hash identifier: ylKU8MKtpt2KaK1KBwf7Sg4PlteoC4GBapZbEOlMt6k= Subject key identifier: C1:F1:C4:8A:6A:D6:E4:13:92:BD:6E:73:77:13:C0:AE:B9:A0:C8:DA Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 11 Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/wfHEimrW5BOSvW5zdxPArrmgyNo.roa Signing time: Mon 18 Mar 2024 02:13:39 +0000 ROA not before: Mon 18 Mar 2024 02:13:39 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 17698 IP address blocks: 123.176.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 18 02:13:39 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=C1F1C48A6AD6E41392BD6E737713C0AEB9A0C8DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:54:74:14:a3:33:07:82:5d:07:db:74:23:08: d5:e3:5e:5c:cc:0e:14:57:18:4f:db:7e:78:69:4b: 50:47:b2:96:c2:d3:5e:97:84:c2:fb:1b:e1:0c:fb: c1:6a:a7:68:a9:29:b8:31:18:b5:7b:b8:3b:4c:c0: f7:06:19:da:76:af:c8:3c:56:4a:b6:bf:b4:2e:e0: c4:43:07:37:12:b7:d8:85:02:f3:77:ce:7f:ab:35: c8:66:80:16:fc:82:b8:18:60:60:34:55:8b:4a:12: 1e:9a:b9:9b:7a:5b:03:ed:1f:9d:4e:b2:cd:76:7b: ac:a0:dc:15:13:cb:ea:bb:31:62:22:cb:91:b4:49: 55:98:98:1e:72:ed:b4:a8:44:77:2d:14:ba:cb:63: f5:9e:f0:63:56:37:37:7a:7b:a3:db:b3:3a:89:96: cf:bd:c9:3f:b2:c8:49:b0:6d:f8:23:8a:d7:ac:90: 72:05:f3:83:17:4b:21:e4:75:57:65:c5:fc:93:f1: 9a:f7:fe:08:1d:ea:7d:13:da:67:8e:18:3b:f9:47: fb:65:cd:e8:99:4a:14:f1:dd:2e:95:e6:dc:c1:3b: 6d:9c:7a:bd:52:48:4a:eb:31:7c:6a:08:ed:22:e5: 14:47:e9:62:54:05:34:dd:d2:29:2d:0e:5b:08:cb: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F1:C4:8A:6A:D6:E4:13:92:BD:6E:73:77:13:C0:AE:B9:A0:C8:DA X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/wfHEimrW5BOSvW5zdxPArrmgyNo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.176.48.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:d5:4b:fb:68:2e:80:0a:67:10:b4:2f:25:45:42:1b:c1:17: 88:48:bd:31:1e:63:98:f1:fb:b1:13:54:cb:d5:67:13:0c:05: 27:38:ee:8d:9f:0b:c3:12:64:dc:11:eb:47:6e:ae:6c:16:18: 12:21:9a:11:04:1d:75:d9:6a:86:04:60:7b:08:94:1d:d6:bd: bb:de:83:ea:b1:f8:fd:6d:2a:9a:cf:9e:2f:21:46:90:f6:d8: ff:8d:77:0f:55:f1:20:31:89:de:a7:ad:e3:17:6d:d5:5d:dc: 2e:7a:ef:13:55:d4:74:2b:7c:d3:0d:b9:3e:eb:7d:b0:3d:0a: aa:9a:8e:0c:82:bd:79:d9:8f:0f:e0:cf:07:f2:d9:71:a5:3e: 3b:2e:e4:43:85:c6:dd:d1:79:76:c7:95:70:df:38:ac:e9:3d: 00:3f:c2:a3:3f:fb:9e:af:bd:fd:98:51:e0:25:4e:39:d3:f3: 94:3d:a9:46:43:10:94:fe:eb:f3:dc:85:57:e7:dd:6a:b0:d7: 4f:2b:55:2d:6d:1a:18:ac:06:99:2f:cc:a4:61:99:c1:a5:71: ce:5c:5c:84:69:7e:4b:62:32:83:00:7c:9b:1b:e8:ec:11:86: 9a:52:eb:0c:46:ce:fe:2d:d6:3e:89:26:df:66:27:00:d2:0d: 29:17:8e:32 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI0MDMxODAy MTMzOVoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQzFGMUM0OEE2QUQ2RTQx MzkyQkQ2RTczNzcxM0MwQUVCOUEwQzhEQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPRUdBSjMweCXQfbdCMI1eNeXMwOFFcYT9t+eGlLUEeylsLTXpeE wvsb4Qz7wWqnaKkpuDEYtXu4O0zA9wYZ2navyDxWSra/tC7gxEMHNxK32IUC83fO f6s1yGaAFvyCuBhgYDRVi0oSHpq5m3pbA+0fnU6yzXZ7rKDcFRPL6rsxYiLLkbRJ VZiYHnLttKhEdy0Uustj9Z7wY1Y3N3p7o9uzOomWz73JP7LISbBt+COK16yQcgXz gxdLIeR1V2XF/JPxmvf+CB3qfRPaZ44YO/lH+2XN6JlKFPHdLpXm3ME7bZx6vVJI SusxfGoI7SLlFEfpYlQFNN3SKS0OWwjLD8cCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTB8cSKatbkE5K9bnN3E8CuuaDI2jAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwODIyL3dmSEVpbXJXNUJPU3ZXNXpkeFBBcnJtZ3lOby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAN7sDAwDQYJKoZIhvcNAQELBQADggEBAFvVS/toLoAKZxC0LyVFQhvB F4hIvTEeY5jx+7ETVMvVZxMMBSc47o2fC8MSZNwR60durmwWGBIhmhEEHXXZaoYE YHsIlB3Wvbveg+qx+P1tKprPni8hRpD22P+Ndw9V8SAxid6nreMXbdVd3C567xNV 1HQrfNMNuT7rfbA9CqqajgyCvXnZjw/gzwfy2XGlPjsu5EOFxt3ReXbHlXDfOKzp PQA/wqM/+56vvf2YUeAlTjnT85Q9qUZDEJT+6/PchVfn3Wqw108rVS1tGhisBpkv zKRhmcGlcc5cXIRpfktiMoMAfJsb6OwRhppS6wxGzv4t1j6JJt9mJwDSDSkXjjI= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org