$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/iAz9mX_y4YXDVacE2TW6w21EOIM.roa File: iAz9mX_y4YXDVacE2TW6w21EOIM.roa (raw, json) Hash identifier: GWeKe/b3f62t3MNyVan1QbjD5CpOIGxbqIR4w9U7sbw= Subject key identifier: 88:0C:FD:99:7F:F2:E1:85:C3:55:A7:04:D9:35:BA:C3:6D:44:38:83 Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC Certificate serial: 61 Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/iAz9mX_y4YXDVacE2TW6w21EOIM.roa Signing time: Fri 31 May 2024 01:31:07 +0000 ROA not before: Fri 31 May 2024 01:31:07 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 7684 IP address blocks: 153.127.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC Validity Not Before: May 31 01:31:07 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=880CFD997FF2E185C355A704D935BAC36D443883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:46:74:64:45:2a:d6:b9:fc:b9:e4:52:b7: a5:81:15:b6:f7:a8:5f:fe:af:c1:71:87:9c:5f:ab: 5b:8d:38:6e:fb:45:94:22:62:46:5c:fb:a9:9f:fe: a5:00:28:8b:25:0d:27:48:20:f9:c7:1b:d7:18:62: 1e:8e:27:94:e9:12:b5:71:58:b3:57:45:10:2e:ba: 2c:c6:75:07:ad:cd:28:73:fc:0c:07:b3:49:45:8d: 9f:9c:26:fa:bc:2f:5b:b1:de:6a:0d:26:30:9b:b5: 1b:4c:4e:0e:d3:b6:b3:50:fc:f4:9c:b6:19:bf:51: 29:ee:83:4f:a9:3d:85:bc:92:d3:08:7a:62:f8:34: fe:2f:ea:31:19:70:56:5f:ed:f0:c1:77:b3:10:64: 8e:3e:3b:95:a3:66:67:3f:c5:b2:66:7c:5e:74:e7: 14:88:f2:3f:86:e3:21:e7:7b:b5:04:15:23:69:a4: 18:93:e4:95:7c:57:c3:69:5e:ce:5e:47:42:62:fc: 74:a5:63:ce:29:a0:c4:9e:de:7d:32:46:0a:eb:9f: 9d:a5:75:99:e4:e7:f8:df:83:a5:db:7a:13:a0:6c: 04:65:7e:3e:0e:04:87:34:c4:63:e0:df:7b:0b:a8: e5:52:37:03:56:5e:e7:82:39:11:8b:15:80:3a:c4: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0C:FD:99:7F:F2:E1:85:C3:55:A7:04:D9:35:BA:C3:6D:44:38:83 X509v3 Authority Key Identifier: keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/iAz9mX_y4YXDVacE2TW6w21EOIM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.127.0.0/17 Signature Algorithm: sha256WithRSAEncryption a2:73:6f:92:a7:81:e4:0f:19:11:ec:e9:a7:e0:a1:b0:81:d8: f0:3e:5e:a9:b2:4b:26:54:39:29:5f:65:dc:40:96:f1:fa:95: f9:8b:46:af:a7:1d:4d:d2:c8:9d:d9:dd:e3:33:42:af:d0:96: 8c:de:df:38:82:99:fe:6c:e6:f8:ec:2a:77:f8:ea:ce:e9:dc: cb:7e:64:73:de:fb:d1:f0:3f:15:3e:d3:f0:c6:27:da:da:5a: 44:ec:7b:60:e3:c7:53:1d:07:c8:f9:70:6a:de:be:cd:72:36: 6f:05:46:23:af:09:78:a1:f5:88:4b:18:03:a8:1f:8b:cf:de: 5f:44:f3:f3:63:62:77:2c:19:f1:75:b0:64:95:8c:20:c5:4f: 91:28:46:3b:60:23:bc:df:d6:70:b1:1c:28:df:6c:4d:21:98: ae:b1:74:76:33:50:f8:51:29:8a:04:4b:fd:96:f9:92:27:e5: 1c:03:92:72:1a:ee:0a:cd:44:0c:47:4e:8f:09:89:72:51:4f: 1f:01:b3:25:32:47:f5:8c:a9:c5:9b:67:47:6c:44:0b:47:03: 95:4e:69:ac:85:28:76:1f:da:95:4f:8f:42:db:b7:1c:08:bc: 67:e6:5d:f2:7d:9c:61:f5:df:d9:bf:b1:96:08:e5:db:5f:50: 4f:c1:e4:ec -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRkMx NTY0OUE4MjU3RjY0RkM5NDIxNjdFMzEwQUQzOEFEMDJDREJDMB4XDTI0MDUzMTAx MzEwN1oXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoODgwQ0ZEOTk3RkYyRTE4 NUMzNTVBNzA0RDkzNUJBQzM2RDQ0Mzg4MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM9ORnRkRSrWufy55FK3pYEVtveoX/6vwXGHnF+rW404bvtFlCJi Rlz7qZ/+pQAoiyUNJ0gg+ccb1xhiHo4nlOkStXFYs1dFEC66LMZ1B63NKHP8DAez SUWNn5wm+rwvW7Heag0mMJu1G0xODtO2s1D89Jy2Gb9RKe6DT6k9hbyS0wh6Yvg0 /i/qMRlwVl/t8MF3sxBkjj47laNmZz/FsmZ8XnTnFIjyP4bjIed7tQQVI2mkGJPk lXxXw2lezl5HQmL8dKVjzimgxJ7efTJGCuufnaV1meTn+N+Dpdt6E6BsBGV+Pg4E hzTEY+Dfewuo5VI3A1Ze54I5EYsVgDrE/dECAwEAAaOCAigwggIkMB0GA1UdDgQW BBSIDP2Zf/LhhcNVpwTZNbrDbUQ4gzAfBgNVHSMEGDAWgBTvwVZJqCV/ZPyUIWfj EK04rQLNvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyNDcvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RPSzBDemJ3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RP SzBDemJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjQ3L2lBejltWF95NFlYRFZhY0UyVFc2dzIxRU9JTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAeZfwAwDQYJKoZIhvcNAQELBQADggEBAKJzb5KngeQPGRHs6afgobCB 2PA+XqmySyZUOSlfZdxAlvH6lfmLRq+nHU3SyJ3Z3eMzQq/Qloze3ziCmf5s5vjs Knf46s7p3Mt+ZHPe+9HwPxU+0/DGJ9raWkTse2Djx1MdB8j5cGrevs1yNm8FRiOv CXih9YhLGAOoH4vP3l9E8/NjYncsGfF1sGSVjCDFT5EoRjtgI7zf1nCxHCjfbE0h mK6xdHYzUPhRKYoES/2W+ZIn5RwDknIa7grNRAxHTo8JiXJRTx8BsyUyR/WMqcWb Z0dsRAtHA5VOaayFKHYf2pVPj0LbtxwIvGfmXfJ9nGH139m/sZYI5dtfUE/B5Ow= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:30 2024 by rpki-client on console-ams.rpki-client.org