$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jGbS6Iz1qASgoPbcLRfNCcqqOic.roa File: jGbS6Iz1qASgoPbcLRfNCcqqOic.roa (raw, json) Hash identifier: 32+29xGpgX0JSe7nY0Pws2WsF/uHeEn36CmfVvt9/NI= Subject key identifier: 8C:66:D2:E8:8C:F5:A8:04:A0:A0:F6:DC:2D:17:CD:09:CA:AA:3A:27 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 037C Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jGbS6Iz1qASgoPbcLRfNCcqqOic.roa Signing time: Sat 31 Aug 2024 01:29:45 +0000 ROA not before: Sat 31 Aug 2024 01:29:45 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 2516 IP address blocks: 211.5.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Aug 31 01:29:45 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=8C66D2E88CF5A804A0A0F6DC2D17CD09CAAA3A27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b9:ce:e2:36:cd:90:10:5e:3d:07:b7:b5:c3: 9c:c0:31:10:02:eb:e2:18:ce:55:75:64:49:cb:e1: 0c:e3:c0:1c:48:33:5c:f8:4f:9f:d3:7e:3a:98:e4: 45:75:b9:57:03:60:59:c6:14:7e:c6:9a:06:3f:48: 7a:4e:58:e1:39:f2:53:2e:ad:06:09:bd:94:57:44: 47:b2:26:b5:b5:2f:8a:ea:17:44:7c:b0:d2:51:63: 43:11:4a:4a:ec:c2:63:d2:ea:02:15:58:ca:15:82: ab:87:e7:25:15:ee:46:f5:b1:19:52:7a:6a:a3:e0: 93:94:83:71:93:73:14:fb:2f:52:5d:bf:06:14:2c: f0:e0:10:b8:18:3c:b7:1d:ae:34:46:85:c7:37:48: d9:c4:c0:e5:c6:04:95:38:18:85:af:e7:81:74:c6: 05:1b:ba:3f:a7:17:e6:29:60:48:5d:3c:47:90:e7: 8b:e6:fc:2f:24:99:75:b1:8a:49:b9:03:0a:2d:61: be:09:5f:aa:59:42:3c:d8:03:32:88:6f:64:2e:33: 46:42:3e:f7:94:36:32:74:eb:f2:0d:f6:13:9b:d4: 50:25:8e:96:cc:1a:5f:51:74:a6:b0:50:0f:32:c2: a6:4e:a3:f8:b4:25:c1:6b:83:fd:c6:93:8e:a7:79: 2a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:66:D2:E8:8C:F5:A8:04:A0:A0:F6:DC:2D:17:CD:09:CA:AA:3A:27 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jGbS6Iz1qASgoPbcLRfNCcqqOic.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.5.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:94:6d:82:f4:55:63:5e:ec:0f:0f:59:dd:6d:a6:ac:a7:f7: dd:a3:08:ec:38:c5:8f:76:77:ff:f0:d6:52:c5:40:42:48:f6: 62:f4:8b:9f:83:34:39:b5:59:88:4a:b1:e5:b1:94:ae:c6:d2: 3e:c2:c9:22:a7:41:85:bb:2a:fd:3d:58:2c:f0:df:1f:b1:d3: da:52:01:ea:4c:70:df:bd:fc:aa:ac:ce:84:25:4f:1c:4c:0d: 8a:15:ea:b4:b7:02:28:bb:de:f7:65:55:73:f2:8d:3d:6f:ef: 8d:49:ae:21:c4:ed:f1:ad:73:09:25:a8:3c:08:90:54:8f:a3: 91:d6:28:38:1c:64:b4:7f:77:0a:0e:f2:e7:b5:04:da:6d:83: 0d:f0:9a:02:c4:3d:a2:42:4e:e6:17:57:4d:0b:f1:58:fd:a4: bb:4a:4e:49:fa:be:89:d4:d1:f7:43:3a:b4:8e:53:b3:f6:da: b5:e2:6d:a8:2a:b8:04:73:d8:03:e1:80:b3:3a:53:8d:44:6e: 6d:e6:85:65:79:67:ae:94:1a:0c:8e:28:7e:c3:5b:4b:e5:2c: 7a:08:ec:73:84:d7:19:4a:0b:0b:a3:93:64:29:d4:75:36:54: 27:72:3e:d1:34:36:14:d0:4a:62:90:e7:db:56:97:be:85:3b: f8:50:d8:94 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDA4MzEw MTI5NDVaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhDNjZEMkU4OENGNUE4 MDRBMEEwRjZEQzJEMTdDRDA5Q0FBQTNBMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyuc7iNs2QEF49B7e1w5zAMRAC6+IYzlV1ZEnL4QzjwBxIM1z4 T5/TfjqY5EV1uVcDYFnGFH7GmgY/SHpOWOE58lMurQYJvZRXREeyJrW1L4rqF0R8 sNJRY0MRSkrswmPS6gIVWMoVgquH5yUV7kb1sRlSemqj4JOUg3GTcxT7L1JdvwYU LPDgELgYPLcdrjRGhcc3SNnEwOXGBJU4GIWv54F0xgUbuj+nF+YpYEhdPEeQ54vm /C8kmXWxikm5AwotYb4JX6pZQjzYAzKIb2QuM0ZCPveUNjJ06/IN9hOb1FAljpbM Gl9RdKawUA8ywqZOo/i0JcFrg/3Gk46neSqdAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUjGbS6Iz1qASgoPbcLRfNCcqqOicwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2pHYlM2SXoxcUFTZ29QYmNMUmZOQ2NxcU9pYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDTBTANBgkqhkiG9w0BAQsFAAOCAQEAIpRtgvRVY17sDw9Z3W2mrKf33aMI 7DjFj3Z3//DWUsVAQkj2YvSLn4M0ObVZiEqx5bGUrsbSPsLJIqdBhbsq/T1YLPDf H7HT2lIB6kxw3738qqzOhCVPHEwNihXqtLcCKLve92VVc/KNPW/vjUmuIcTt8a1z CSWoPAiQVI+jkdYoOBxktH93Cg7y57UE2m2DDfCaAsQ9okJO5hdXTQvxWP2ku0pO Sfq+idTR90M6tI5Ts/bateJtqCq4BHPYA+GAszpTjURubeaFZXlnrpQaDI4ofsNb S+Usegjsc4TXGUoLC6OTZCnUdTZUJ3I+0TQ2FNBKYpDn21aXvoU7+FDYlA== -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:03 2024 by rpki-client on console-fra.rpki-client.org