$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1250/bThKXIn-L8SGhI-2EvB5_C3T7y8.roa File: bThKXIn-L8SGhI-2EvB5_C3T7y8.roa (raw, json) Hash identifier: 59RE5bLuvaFrk4P3pUsNN+5O213smiMBM1wpejExZ4E= Subject key identifier: 6D:38:4A:5C:89:FE:2F:C4:86:84:8F:B6:12:F0:79:FC:2D:D3:EF:2F Certificate issuer: /CN=FEE7DD96E49322460E0A010EC8D983EDA2F254C5 Certificate serial: 0E Authority key identifier: FE:E7:DD:96:E4:93:22:46:0E:0A:01:0E:C8:D9:83:ED:A2:F2:54:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/bThKXIn-L8SGhI-2EvB5_C3T7y8.roa Signing time: Sat 14 Oct 2023 09:05:04 +0000 ROA not before: Sat 14 Oct 2023 09:05:04 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 0 IP address blocks: 202.242.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEE7DD96E49322460E0A010EC8D983EDA2F254C5 Validity Not Before: Oct 14 09:05:04 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=6D384A5C89FE2FC486848FB612F079FC2DD3EF2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:0b:3f:66:73:1c:7d:ad:ec:c1:ae:ed:fe: 96:e7:48:7a:51:f0:85:be:38:34:07:9a:84:41:14: 29:cd:a7:31:c0:66:17:7f:3c:75:f6:a0:aa:a1:3e: 89:05:41:9e:d2:1c:7f:fd:ce:b4:36:a4:76:82:16: 37:3b:bb:f9:e5:a7:66:d0:62:da:bf:e0:96:52:6c: 9f:fe:96:b6:b3:9b:63:c2:05:0d:b8:c0:a4:f1:4c: 44:ef:61:c5:fc:56:cd:9e:ac:33:8b:82:0f:72:67: c6:88:b6:23:68:6b:9c:a7:d0:a0:fe:df:00:01:f6: be:58:85:40:ba:f4:ea:d5:87:e8:b5:ec:97:44:f9: bb:bb:e2:99:e5:9b:ee:72:d6:0e:dd:a7:72:22:68: 48:1b:80:58:1e:35:98:ea:f0:8d:3c:c9:34:93:1e: 41:90:cb:34:94:ea:bc:ad:4e:ed:7f:95:07:de:16: 32:11:64:c5:3e:af:6f:30:3e:12:87:98:12:e9:4b: 4d:ec:dd:c6:e9:23:32:86:22:1c:b3:f5:2f:35:23: c5:82:32:d5:97:30:13:51:40:32:3f:f1:30:3f:25: b6:65:24:2d:c2:6a:f8:44:dd:14:a2:9b:8e:b9:b7: c7:93:b4:b1:35:81:02:a0:c4:98:aa:1d:a8:bb:5b: d5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:38:4A:5C:89:FE:2F:C4:86:84:8F:B6:12:F0:79:FC:2D:D3:EF:2F X509v3 Authority Key Identifier: keyid:FE:E7:DD:96:E4:93:22:46:0E:0A:01:0E:C8:D9:83:ED:A2:F2:54:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/bThKXIn-L8SGhI-2EvB5_C3T7y8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.242.132.0/22 Signature Algorithm: sha256WithRSAEncryption 21:ef:98:86:d6:69:53:9d:a7:30:a6:df:74:1b:86:03:ce:3d: 42:12:23:04:a6:72:99:88:52:a4:24:12:7e:35:b4:ab:53:7e: 42:df:16:5d:50:75:a7:38:a9:15:cd:8d:06:17:2e:e6:e3:49: 50:1c:cf:9d:df:f3:25:0d:ee:5c:b2:9d:97:9d:de:3a:33:2f: 31:d7:10:01:b1:63:06:04:3a:fb:6a:44:94:3c:e0:a0:ea:12: 2f:6a:2b:45:63:53:49:be:9d:00:da:95:f0:56:61:11:df:08: 0d:a2:c8:26:bd:ec:3c:13:e9:e6:4b:ad:ed:36:24:dd:45:f9: 89:19:7e:f3:71:83:60:61:ba:aa:9a:7d:d3:c9:3e:8d:6e:5d: 50:19:c2:87:14:30:1f:61:7b:62:07:a8:31:56:ba:ee:0d:fd: 4f:5c:2e:f9:31:62:42:7d:92:43:44:c1:6c:f1:b0:7d:bb:37: 75:40:15:f3:91:1c:a9:a8:f9:34:ba:a7:a4:78:af:52:81:f0: 0f:5c:73:ce:34:90:3d:4d:ed:85:72:36:89:f7:2e:c9:a4:7f: 5e:7c:2d:58:91:2e:b7:a9:f0:e9:95:2f:24:bb:87:a8:ae:3e: 3f:d9:e8:99:8e:51:eb:a3:05:1a:fa:b5:a0:f1:e5:b8:19:bc: 3b:cd:70:91 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRUU3 REQ5NkU0OTMyMjQ2MEUwQTAxMEVDOEQ5ODNFREEyRjI1NEM1MB4XDTIzMTAxNDA5 MDUwNFoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoNkQzODRBNUM4OUZFMkZD NDg2ODQ4RkI2MTJGMDc5RkMyREQzRUYyRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALCgCz9mcxx9rezBru3+ludIelHwhb44NAeahEEUKc2nMcBmF388 dfagqqE+iQVBntIcf/3OtDakdoIWNzu7+eWnZtBi2r/gllJsn/6WtrObY8IFDbjA pPFMRO9hxfxWzZ6sM4uCD3Jnxoi2I2hrnKfQoP7fAAH2vliFQLr06tWH6LXsl0T5 u7vimeWb7nLWDt2nciJoSBuAWB41mOrwjTzJNJMeQZDLNJTqvK1O7X+VB94WMhFk xT6vbzA+EoeYEulLTezdxukjMoYiHLP1LzUjxYIy1ZcwE1FAMj/xMD8ltmUkLcJq +ETdFKKbjrm3x5O0sTWBAqDEmKodqLtb1SMCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBRtOEpcif4vxIaEj7YS8Hn8LdPvLzAfBgNVHSMEGDAWgBT+592W5JMiRg4KAQ7I 2YPtovJUxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTI1MC9fdWZkbHVTVElrWU9DZ0VPeU5tRDdhTHlWTVUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9fdWZkbHVTVElrWU9DZ0VPeU5tRDdh THlWTVUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTI1MC9iVGhLWEluLUw4U0doSS0yRXZCNV9DM1Q3eTgucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCyvKEMA0GCSqGSIb3DQEBCwUAA4IBAQAh75iG1mlTnacwpt90G4YDzj1C EiMEpnKZiFKkJBJ+NbSrU35C3xZdUHWnOKkVzY0GFy7m40lQHM+d3/MlDe5csp2X nd46My8x1xABsWMGBDr7akSUPOCg6hIvaitFY1NJvp0A2pXwVmER3wgNosgmvew8 E+nmS63tNiTdRfmJGX7zcYNgYbqqmn3TyT6Nbl1QGcKHFDAfYXtiB6gxVrruDf1P XC75MWJCfZJDRMFs8bB9uzd1QBXzkRypqPk0uqekeK9SgfAPXHPONJA9Te2FcjaJ 9y7JpH9efC1YkS63qfDplS8ku4eorj4/2eiZjlHrowUa+rWg8eW4Gbw7zXCR -----END CERTIFICATE-----Generated at Fri Apr 26 13:35:43 2024 by rpki-client on console-ams.rpki-client.org