$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/Yhx635DvRZlzmgdBuHrRE4c4_28.roa File: Yhx635DvRZlzmgdBuHrRE4c4_28.roa (raw, json) Hash identifier: Dr4ZF6SuBO4Z5zDOspG3LKyyZOcd8mPAJmBEr341AlU= Subject key identifier: 62:1C:7A:DF:90:EF:45:99:73:9A:07:41:B8:7A:D1:13:87:38:FF:6F Certificate issuer: /CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773 Certificate serial: 04 Authority key identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/Yhx635DvRZlzmgdBuHrRE4c4_28.roa Signing time: Tue 29 Oct 2024 02:58:31 +0000 ROA not before: Tue 29 Oct 2024 02:58:31 +0000 ROA not after: Wed 29 Oct 2025 02:46:37 +0000 asID: 4694 IP address blocks: 154.34.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773 Validity Not Before: Oct 29 02:58:31 2024 GMT Not After : Oct 29 02:46:37 2025 GMT Subject: CN=621C7ADF90EF4599739A0741B87AD1138738FF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:65:77:0c:1b:de:c3:be:c8:3c:e9:d8:8e: b6:1f:c7:8f:f5:91:ba:1c:57:cf:2a:67:bb:7d:a3: 50:ec:77:36:47:a4:20:4e:5d:4f:32:b7:08:e1:84: 45:92:84:e8:e8:5f:6c:39:cc:c8:1f:8e:f6:64:08: 21:06:6d:53:b4:34:bb:ff:68:5b:04:39:ae:62:82: 85:3e:d0:8f:03:f9:8a:1d:98:99:b8:95:e6:34:37: 0b:27:71:19:ec:8e:33:fe:eb:cb:1a:c4:c2:17:f4: 41:0c:4a:d7:1c:d8:24:e6:b7:fe:6b:22:c9:57:67: 79:ce:de:b6:04:3b:39:b7:ed:c4:ce:7e:02:02:0f: 07:b7:f9:0b:dd:0b:4c:8c:e0:93:ef:a9:70:55:e7: ac:02:fa:f4:5c:e4:28:a4:34:e0:86:c2:aa:7e:77: 56:3d:14:32:cb:2f:68:6a:10:ae:b2:b8:f3:31:e2: eb:36:da:f6:4e:14:a0:21:9a:56:89:2c:da:55:ba: c4:4d:47:78:25:28:72:72:4e:48:c5:00:b9:3c:99: a3:13:94:cb:83:98:b8:45:e7:61:15:b8:8d:7d:8b: 93:a9:63:c6:1c:dd:f2:2e:32:4a:80:1d:fe:d1:76: 98:12:bf:f2:6b:27:99:2b:fd:1c:46:29:6e:43:71: b4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1C:7A:DF:90:EF:45:99:73:9A:07:41:B8:7A:D1:13:87:38:FF:6F X509v3 Authority Key Identifier: keyid:85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/Yhx635DvRZlzmgdBuHrRE4c4_28.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.34.128.0/17 Signature Algorithm: sha256WithRSAEncryption 5f:d5:2c:4f:72:7b:37:6c:dd:be:ae:a9:e9:b9:8e:43:11:36: db:b3:6a:34:44:9d:6a:d3:49:e1:47:ca:38:d2:7d:aa:f7:f2: fb:f3:a1:7e:4e:95:9b:20:f2:1a:8f:00:13:9f:c0:8f:f9:f2: 8c:c7:4f:75:8c:3b:c7:21:c8:ef:aa:95:f2:ac:8a:3b:70:34: 3e:48:b5:05:e7:1d:5c:90:5d:ab:b1:a3:83:56:2f:36:d8:38: f2:96:8f:b6:40:61:69:4d:f4:21:d7:17:4a:b0:af:89:39:08: e9:7e:25:25:6f:de:09:a8:a8:f1:35:90:30:85:08:ed:ee:9c: ac:4d:cf:71:da:bb:c7:94:ac:a5:00:61:4f:fa:ad:60:c0:c4: 82:6f:44:0f:52:a1:cd:c4:3c:73:1c:aa:ce:c9:cb:4f:a2:ee: df:22:63:20:ba:2e:7d:6a:e7:8e:fe:f3:fa:d7:51:06:2f:04: c8:61:26:b5:fb:07:4a:ad:ad:22:99:29:0e:f1:aa:c0:17:83: cc:4a:b6:61:f6:74:2e:ff:f6:99:55:2d:7c:89:e3:9a:9a:e8: f0:ac:37:43:65:b3:5c:46:1f:91:f7:70:9c:55:94:30:09:d4: 61:29:ac:4b:cf:39:5f:64:f8:19:13:91:1f:00:13:15:99:d4: 3b:85:71:fd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUE2 QzM2OUMxQTlDN0E1MkMzRTM4MDU3MjdBNUZEMzExODVBNzczMB4XDTI0MTAyOTAy NTgzMVoXDTI1MTAyOTAyNDYzN1owMzExMC8GA1UEAxMoNjIxQzdBREY5MEVGNDU5 OTczOUEwNzQxQjg3QUQxMTM4NzM4RkY2RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMWTZXcMG97Dvsg86diOth/Hj/WRuhxXzypnu32jUOx3NkekIE5d TzK3COGERZKE6OhfbDnMyB+O9mQIIQZtU7Q0u/9oWwQ5rmKChT7QjwP5ih2YmbiV 5jQ3CydxGeyOM/7ryxrEwhf0QQxK1xzYJOa3/msiyVdnec7etgQ7ObftxM5+AgIP B7f5C90LTIzgk++pcFXnrAL69FzkKKQ04IbCqn53Vj0UMssvaGoQrrK48zHi6zba 9k4UoCGaVoks2lW6xE1HeCUocnJOSMUAuTyZoxOUy4OYuEXnYRW4jX2Lk6ljxhzd 8i4ySoAd/tF2mBK/8msnmSv9HEYpbkNxtMUCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBRiHHrfkO9FmXOaB0G4etEThzj/bzAfBgNVHSMEGDAWgBSFpsNpwanHpSw+OAVy el/TEYWnczAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIwMy9oYWJEYWNHcHg2VXNQamdGY25wZjB4R0ZwM00uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oYWJEYWNHcHg2VXNQamdGY25wZjB4 R0ZwM00uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTIwMy9ZaHg2MzVEdlJabHptZ2RCdUhyUkU0YzRfMjgucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQHmiKAMA0GCSqGSIb3DQEBCwUAA4IBAQBf1SxPcns3bN2+rqnpuY5DETbb s2o0RJ1q00nhR8o40n2q9/L786F+TpWbIPIajwATn8CP+fKMx091jDvHIcjvqpXy rIo7cDQ+SLUF5x1ckF2rsaODVi822Djylo+2QGFpTfQh1xdKsK+JOQjpfiUlb94J qKjxNZAwhQjt7pysTc9x2rvHlKylAGFP+q1gwMSCb0QPUqHNxDxzHKrOyctPou7f ImMgui59aueO/vP611EGLwTIYSa1+wdKra0imSkO8arAF4PMSrZh9nQu//aZVS18 ieOamujwrDdDZbNcRh+R93CcVZQwCdRhKaxLzzlfZPgZE5EfABMVmdQ7hXH9 -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:26 2024 by rpki-client on console-ams.rpki-client.org