$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/4KQpOy9B3FnReDjxyV44G5EBWxs.roa File: 4KQpOy9B3FnReDjxyV44G5EBWxs.roa (raw, json) Hash identifier: NL08iwmhb5QsVkys7BJ9AzAdcCJj0vL7au5/9MFjkPs= Subject key identifier: E0:A4:29:3B:2F:41:DC:59:D1:78:38:F1:C9:5E:38:1B:91:01:5B:1B Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC Certificate serial: 67 Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/4KQpOy9B3FnReDjxyV44G5EBWxs.roa Signing time: Fri 31 May 2024 01:31:10 +0000 ROA not before: Fri 31 May 2024 01:31:10 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 7684 IP address blocks: 153.120.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC Validity Not Before: May 31 01:31:10 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=E0A4293B2F41DC59D17838F1C95E381B91015B1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:fb:de:66:db:25:89:c9:b0:06:57:0a:eb: c7:53:61:c3:dd:65:f8:a0:bd:b3:bb:c9:47:15:27: ed:7c:ac:af:e5:99:cd:a3:82:cc:03:d0:61:ec:e4: 66:8c:e7:71:d8:82:a8:54:1f:79:f1:a7:b4:04:71: 24:29:8e:45:83:d7:76:33:d7:bb:a0:6e:e9:72:54: 52:e4:ac:b9:ea:1d:3d:64:cc:9e:88:8d:5c:78:10: 0e:bc:f7:8a:07:24:17:3c:9e:68:5f:f2:ca:84:17: 8e:4f:98:c1:ff:b9:ad:30:79:1e:b7:47:86:70:51: 78:1d:8c:08:2f:ec:da:c4:35:c0:9e:76:c1:b9:f1: 67:d1:2e:7b:06:b4:6c:db:d4:01:4e:59:2c:b5:e5: 57:e6:fd:c9:bf:d7:71:6c:25:07:33:84:ae:53:3c: 55:f5:b6:8e:82:6d:54:55:42:03:c6:85:c2:4b:6e: da:92:6e:62:46:5e:a1:1c:ab:d3:a9:5b:a6:48:06: d3:4b:ba:34:1e:fd:e9:ba:be:58:e7:46:fc:65:8f: 3e:42:4c:0a:26:b2:32:50:3a:7f:dc:6e:b4:06:13: 4c:e4:c2:33:ce:a6:f1:9b:1c:26:71:0c:c2:af:9a: af:4d:63:0a:04:d4:21:71:82:6a:ec:3b:43:b9:ba: 45:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A4:29:3B:2F:41:DC:59:D1:78:38:F1:C9:5E:38:1B:91:01:5B:1B X509v3 Authority Key Identifier: keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/4KQpOy9B3FnReDjxyV44G5EBWxs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.120.128.0/18 Signature Algorithm: sha256WithRSAEncryption 4e:42:37:1c:af:ea:e7:d9:7d:03:91:a1:10:76:a2:93:32:b2: 5f:3c:f1:f5:c1:61:d7:00:88:47:d6:bd:4c:54:33:fd:c8:e9: 89:c0:25:bb:ba:ff:c1:12:e1:c1:e3:36:e9:64:d5:c4:99:dc: d4:43:10:2c:2c:bb:15:f9:09:f0:0a:4f:7a:0a:c7:50:63:e9: d2:ba:1a:b8:43:c6:3c:dd:38:21:90:80:cc:5d:54:1f:02:04: 7a:89:e6:9b:99:9b:a2:af:65:83:d8:e7:20:7e:29:f2:df:95: 3d:7d:74:2f:6f:70:f0:84:af:ac:2c:2c:bf:85:64:e2:d8:66: b3:0c:2e:c5:4a:90:cb:44:98:4f:18:78:eb:97:18:14:b0:10: fb:79:94:f3:60:2b:e6:c9:c7:88:21:26:4e:af:52:ca:15:1c: 7d:f2:5b:b3:6d:4a:2a:d2:7e:50:cf:bc:ed:53:fe:1c:ff:4a: 9c:ac:0c:63:5f:21:d6:4f:99:a6:c4:4b:bc:21:e9:84:97:70: 5f:76:44:3a:dd:c9:a2:8c:20:fe:d7:c2:57:fa:22:f6:a4:0a: 42:9c:fe:13:34:39:ca:88:ac:06:83:3a:b3:f8:1d:45:1c:3d: d2:81:56:76:0b:40:d0:cf:c1:bf:63:23:85:b2:12:71:ca:17: 17:ba:76:8d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRkMx NTY0OUE4MjU3RjY0RkM5NDIxNjdFMzEwQUQzOEFEMDJDREJDMB4XDTI0MDUzMTAx MzExMFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoRTBBNDI5M0IyRjQxREM1 OUQxNzgzOEYxQzk1RTM4MUI5MTAxNUIxQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMui+95m2yWJybAGVwrrx1Nhw91l+KC9s7vJRxUn7Xysr+WZzaOC zAPQYezkZozncdiCqFQfefGntARxJCmORYPXdjPXu6Bu6XJUUuSsueodPWTMnoiN XHgQDrz3igckFzyeaF/yyoQXjk+Ywf+5rTB5HrdHhnBReB2MCC/s2sQ1wJ52wbnx Z9Euewa0bNvUAU5ZLLXlV+b9yb/XcWwlBzOErlM8VfW2joJtVFVCA8aFwktu2pJu YkZeoRyr06lbpkgG00u6NB796bq+WOdG/GWPPkJMCiayMlA6f9xutAYTTOTCM86m 8ZscJnEMwq+ar01jCgTUIXGCauw7Q7m6RQkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTgpCk7L0HcWdF4OPHJXjgbkQFbGzAfBgNVHSMEGDAWgBTvwVZJqCV/ZPyUIWfj EK04rQLNvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyNDcvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RPSzBDemJ3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RP SzBDemJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjQ3LzRLUXBPeTlCM0ZuUmVEanh5VjQ0RzVFQld4cy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAaZeIAwDQYJKoZIhvcNAQELBQADggEBAE5CNxyv6ufZfQORoRB2opMy sl888fXBYdcAiEfWvUxUM/3I6YnAJbu6/8ES4cHjNulk1cSZ3NRDECwsuxX5CfAK T3oKx1Bj6dK6GrhDxjzdOCGQgMxdVB8CBHqJ5puZm6KvZYPY5yB+KfLflT19dC9v cPCEr6wsLL+FZOLYZrMMLsVKkMtEmE8YeOuXGBSwEPt5lPNgK+bJx4ghJk6vUsoV HH3yW7NtSirSflDPvO1T/hz/SpysDGNfIdZPmabES7wh6YSXcF92RDrdyaKMIP7X wlf6IvakCkKc/hM0OcqIrAaDOrP4HUUcPdKBVnYLQNDPwb9jI4WyEnHKFxe6do0= -----END CERTIFICATE-----Generated at Sun Feb 16 21:10:25 2025 by rpki-client