$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/tGMSV59N9vYMArVaO7tiWPc3ZWs.roa File: tGMSV59N9vYMArVaO7tiWPc3ZWs.roa (raw, json) Hash identifier: NBjw7xqwItzr3N/dFR8uuT5BXUHzjDeCM2CSsuvkGc4= Subject key identifier: B4:63:12:57:9F:4D:F6:F6:0C:02:B5:5A:3B:BB:62:58:F7:37:65:6B Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC Certificate serial: 4B Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/tGMSV59N9vYMArVaO7tiWPc3ZWs.roa Signing time: Sat 01 Jul 2023 01:31:02 +0000 ROA not before: Sat 01 Jul 2023 01:31:02 +0000 ROA not after: Fri 14 Jun 2024 01:30:02 +0000 asID: 7684 IP address blocks: 153.125.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC Validity Not Before: Jul 1 01:31:02 2023 GMT Not After : Jun 14 01:30:02 2024 GMT Subject: CN=B46312579F4DF6F60C02B55A3BBB6258F737656B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:c1:b1:c4:88:0e:56:13:4a:f0:62:e9:f9: d6:71:d3:18:fe:a3:0f:23:f7:c7:5e:34:1d:be:10: fc:26:38:a4:30:25:d3:5b:3f:3b:eb:c5:f9:3e:b2: a1:b0:aa:7c:a7:7e:7a:2c:97:a2:37:4f:e2:59:d3: f6:1a:6d:fc:72:81:0c:df:e4:a5:d7:9a:cb:67:c9: db:f0:0e:0d:37:2e:e2:c1:ec:41:73:43:21:0d:05: 24:a9:ea:4c:c0:11:49:36:45:fa:bc:dd:15:b8:70: c7:cf:c1:17:45:4f:f7:91:33:b3:ad:46:8c:c0:07: 7a:1b:fc:37:65:aa:f7:01:fa:6f:40:61:b8:af:f2: 47:f9:23:fa:c1:32:d7:e3:9d:ba:0f:9f:ef:f8:da: 2a:67:1d:f9:ff:60:dc:3d:b2:57:26:30:40:b7:a4: 3e:b4:b9:16:e3:d5:be:6c:88:ed:6e:2b:ba:bd:e1: e8:b7:72:cd:63:90:0f:ed:a4:20:c0:58:17:ee:86: 0d:58:86:73:65:0a:50:5c:da:c2:77:ce:d2:4b:5b: 7f:1a:04:31:99:7a:c4:24:70:7d:d6:46:15:72:9f: c7:e5:64:7a:57:89:6d:ac:7c:45:4b:83:1f:85:01: c5:0b:81:02:3b:54:16:3f:31:53:6e:dd:30:88:dc: cd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:63:12:57:9F:4D:F6:F6:0C:02:B5:5A:3B:BB:62:58:F7:37:65:6B X509v3 Authority Key Identifier: keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/tGMSV59N9vYMArVaO7tiWPc3ZWs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.125.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0f:47:ed:c5:d5:82:30:3e:00:51:44:5a:d8:fb:4c:d1:67:31: ba:c0:5b:11:ef:05:ab:4c:b1:64:5f:06:cd:c1:b6:cd:0e:45: 06:7a:b6:f3:f4:80:b2:06:6d:41:20:64:1d:b2:82:44:5e:50: f5:af:2c:56:76:9e:12:a5:f6:e5:e6:3e:dc:9b:03:85:3c:0a: e3:9b:7e:9e:25:a0:5c:a2:93:89:71:88:14:75:62:15:b0:55: ab:c2:1b:18:9c:bc:5e:37:fd:05:fb:b7:c2:c1:59:7c:72:ff: 9b:eb:bb:88:79:b7:e5:22:06:7b:9b:b3:b8:e0:3e:1a:c2:3e: 2f:f6:15:42:4a:96:a1:f6:21:03:e5:18:24:72:3c:fc:80:a4: 86:6a:07:91:5a:cf:0a:ed:f6:8f:97:3f:05:f0:10:af:5f:88: a6:12:d0:2a:30:d4:de:44:dc:68:23:67:fc:0a:40:43:69:24: 49:95:2d:7b:6b:09:56:17:d2:b4:94:e8:8c:c4:40:ef:25:62: e8:47:59:42:c8:a0:4a:19:76:6f:4a:9c:11:55:a2:1d:4b:a1: 3d:55:54:82:af:83:f6:44:52:fe:15:44:13:93:42:ff:79:7a: 22:01:e7:e8:84:0c:10:47:7b:78:ca:b2:8f:99:ab:8e:42:9c: ea:46:77:b5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRkMx NTY0OUE4MjU3RjY0RkM5NDIxNjdFMzEwQUQzOEFEMDJDREJDMB4XDTIzMDcwMTAx MzEwMloXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoQjQ2MzEyNTc5RjRERjZG NjBDMDJCNTVBM0JCQjYyNThGNzM3NjU2QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANG4wbHEiA5WE0rwYun51nHTGP6jDyP3x140Hb4Q/CY4pDAl01s/ O+vF+T6yobCqfKd+eiyXojdP4lnT9hpt/HKBDN/kpdeay2fJ2/AODTcu4sHsQXND IQ0FJKnqTMARSTZF+rzdFbhwx8/BF0VP95Ezs61GjMAHehv8N2Wq9wH6b0BhuK/y R/kj+sEy1+Odug+f7/jaKmcd+f9g3D2yVyYwQLekPrS5FuPVvmyI7W4rur3h6Ldy zWOQD+2kIMBYF+6GDViGc2UKUFzawnfO0ktbfxoEMZl6xCRwfdZGFXKfx+VkeleJ bax8RUuDH4UBxQuBAjtUFj8xU27dMIjcze0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBS0YxJXn0329gwCtVo7u2JY9zdlazAfBgNVHSMEGDAWgBTvwVZJqCV/ZPyUIWfj EK04rQLNvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyNDcvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RPSzBDemJ3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RP SzBDemJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjQ3L3RHTVNWNTlOOXZZTUFyVmFPN3RpV1BjM1pXcy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAaZfYAwDQYJKoZIhvcNAQELBQADggEBAA9H7cXVgjA+AFFEWtj7TNFn MbrAWxHvBatMsWRfBs3Bts0ORQZ6tvP0gLIGbUEgZB2ygkReUPWvLFZ2nhKl9uXm PtybA4U8CuObfp4loFyik4lxiBR1YhWwVavCGxicvF43/QX7t8LBWXxy/5vru4h5 t+UiBnubs7jgPhrCPi/2FUJKlqH2IQPlGCRyPPyApIZqB5Fazwrt9o+XPwXwEK9f iKYS0Cow1N5E3GgjZ/wKQENpJEmVLXtrCVYX0rSU6IzEQO8lYuhHWULIoEoZdm9K nBFVoh1LoT1VVIKvg/ZEUv4VRBOTQv95eiIB5+iEDBBHe3jKso+Zq45CnOpGd7U= -----END CERTIFICATE-----Generated at Mon May 20 02:36:25 2024 by rpki-client on console-ams.rpki-client.org