$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/ctkF571l4DKJqil-PsdPHdGDzeg.roa File: ctkF571l4DKJqil-PsdPHdGDzeg.roa (raw, json) Hash identifier: /RH8tJOC+ZyLaGE6OnAot1ajIEJG9h8OCH3YVRcjdmk= Subject key identifier: 72:D9:05:E7:BD:65:E0:32:89:AA:29:7E:3E:C7:4F:1D:D1:83:CD:E8 Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697 Certificate serial: 4C Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/ctkF571l4DKJqil-PsdPHdGDzeg.roa Signing time: Thu 26 Sep 2024 23:58:14 +0000 ROA not before: Thu 26 Sep 2024 23:58:14 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 2907 IP address blocks: 202.213.160.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697 Validity Not Before: Sep 26 23:58:14 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=72D905E7BD65E03289AA297E3EC74F1DD183CDE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:3a:7e:78:4b:48:2c:54:73:4a:ea:c9:80: 88:57:14:4e:d3:2f:d6:98:37:01:d5:35:0d:fb:a0: 87:a6:98:eb:94:7b:53:f7:94:de:50:37:46:76:24: db:4e:c5:a2:33:0a:4d:e4:fb:f5:11:11:0f:86:d5: ce:9a:c5:12:5f:aa:99:6a:70:71:d1:b6:c1:18:dc: 1b:b9:dd:fd:20:bc:38:59:d1:a4:9b:fb:95:60:d0: 5d:11:c1:52:d7:68:55:a9:1e:18:b2:5a:dd:bc:07: 84:fd:d5:67:35:a7:f2:54:42:8c:03:e2:12:28:41: 55:90:09:b4:3b:a7:84:6e:e5:3e:1a:8a:24:e8:13: 0e:80:96:1b:f4:c9:c9:b7:1d:0c:3d:d8:78:61:8c: 6d:2d:2f:9b:46:5d:d9:e2:ae:66:24:e0:73:31:ac: b1:cd:10:6f:d5:4b:1e:72:9f:0c:87:2e:b9:e6:ea: d7:07:88:87:ac:4c:c3:60:c3:c8:ac:b4:50:d1:4a: 09:20:06:c7:c2:3c:b8:ae:eb:be:14:5c:d6:95:6d: 15:5a:d4:eb:98:2d:5d:67:9e:55:b4:af:d0:8f:e3: 2e:ab:32:20:d9:16:a1:1a:fc:7b:2c:c2:37:60:39: 4c:e5:09:e0:bb:3a:0e:41:c5:84:54:33:4d:68:86: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D9:05:E7:BD:65:E0:32:89:AA:29:7E:3E:C7:4F:1D:D1:83:CD:E8 X509v3 Authority Key Identifier: keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/ctkF571l4DKJqil-PsdPHdGDzeg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.213.160.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:1e:c6:d5:72:c2:e9:20:2f:b4:b2:9c:6f:fd:2b:01:77:cf: 2a:9d:34:9a:18:b5:f7:71:17:50:d1:00:03:da:e8:c2:1e:35: 9c:85:c4:b2:98:53:03:6b:86:7b:68:54:3a:34:d7:39:c6:7f: bc:d5:73:33:48:f9:69:91:57:77:8a:65:45:8f:c0:6f:77:04: 8b:98:c9:20:2f:61:2b:08:ea:d0:8b:ba:66:1c:86:59:28:08: f2:0c:33:56:32:0e:5f:26:8b:69:9f:a0:20:72:98:95:ae:4d: 9b:d8:c6:96:29:a5:cd:42:ea:c1:8f:80:4f:70:ca:0a:b6:32: fc:25:43:29:7a:37:cf:d4:24:73:90:e8:50:ee:9e:7b:53:49: ba:b4:82:f4:ca:7d:e6:2c:a1:7a:35:56:f1:7e:64:c8:f7:0c: f6:d1:8e:27:46:98:2c:f6:c2:c5:f1:59:06:a3:be:35:2c:8d: dc:05:06:24:7a:eb:c7:7d:e0:36:17:b9:a7:ce:46:e0:a0:b2: 2e:bf:b6:80:0a:3e:72:aa:7c:ba:8d:69:3d:2d:6e:20:8a:3d: 01:e0:e7:b2:cc:30:ca:e4:08:7c:10:0f:6d:5c:77:d2:6e:fe: 58:d7:f2:11:aa:64:d0:49:92:7a:b7:a2:98:44:71:f3:0d:07: 69:18:ad:14 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTg5 RUVDQ0M2NzE4QzY1MjYzOENGNEU5MkM2MDAwM0M1NkZCNjk3MB4XDTI0MDkyNjIz NTgxNFoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoNzJEOTA1RTdCRDY1RTAz Mjg5QUEyOTdFM0VDNzRGMUREMTgzQ0RFODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJvoOn54S0gsVHNK6smAiFcUTtMv1pg3AdU1Dfugh6aY65R7U/eU 3lA3RnYk207FojMKTeT79RERD4bVzprFEl+qmWpwcdG2wRjcG7nd/SC8OFnRpJv7 lWDQXRHBUtdoVakeGLJa3bwHhP3VZzWn8lRCjAPiEihBVZAJtDunhG7lPhqKJOgT DoCWG/TJybcdDD3YeGGMbS0vm0Zd2eKuZiTgczGssc0Qb9VLHnKfDIcuuebq1weI h6xMw2DDyKy0UNFKCSAGx8I8uK7rvhRc1pVtFVrU65gtXWeeVbSv0I/jLqsyINkW oRr8eyzCN2A5TOUJ4Ls6DkHFhFQzTWiGcv0CAwEAAaOCAiIwggIeMB0GA1UdDgQW BBRy2QXnvWXgMomqKX4+x08d0YPN6DAfBgNVHSMEGDAWgBQVie7MxnGMZSY4z06S xgADxW+2lzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2dHBjLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2 dHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEyL2N0a0Y1NzFsNERLSnFpbC1Qc2RQSGRHRHplZy5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATK1aAwDQYJKoZIhvcNAQELBQADggEBAG8extVywukgL7SynG/9KwF3zyqdNJoY tfdxF1DRAAPa6MIeNZyFxLKYUwNrhntoVDo01znGf7zVczNI+WmRV3eKZUWPwG93 BIuYySAvYSsI6tCLumYchlkoCPIMM1YyDl8mi2mfoCBymJWuTZvYxpYppc1C6sGP gE9wygq2MvwlQyl6N8/UJHOQ6FDunntTSbq0gvTKfeYsoXo1VvF+ZMj3DPbRjidG mCz2wsXxWQajvjUsjdwFBiR668d94DYXuafORuCgsi6/toAKPnKqfLqNaT0tbiCK PQHg57LMMMrkCHwQD21cd9Ju/ljX8hGqZNBJknq3ophEcfMNB2kYrRQ= -----END CERTIFICATE-----Generated at Sun Feb 16 22:25:00 2025 by rpki-client