$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/ZBXmQRo0RJvljclTs6DkObccftA.roa File: ZBXmQRo0RJvljclTs6DkObccftA.roa (raw, json) Hash identifier: scUA9Mic3LjJ9C4r1L2kIytfAL5KBfV+1aYNGHfwPFY= Subject key identifier: 64:15:E6:41:1A:34:44:9B:E5:8D:C9:53:B3:A0:E4:39:B7:1C:7E:D0 Certificate issuer: /CN=C0EDE8C3879081138F9495306BE79EF7340A9451 Certificate serial: 47 Authority key identifier: C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/ZBXmQRo0RJvljclTs6DkObccftA.roa Signing time: Thu 29 Feb 2024 01:29:15 +0000 ROA not before: Thu 29 Feb 2024 01:29:15 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 7667 IP address blocks: 192.26.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0EDE8C3879081138F9495306BE79EF7340A9451 Validity Not Before: Feb 29 01:29:15 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=6415E6411A34449BE58DC953B3A0E439B71C7ED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:bf:82:04:12:d2:10:59:8b:d2:a1:c5:59: ae:7f:e3:20:24:a4:65:34:84:df:61:ac:01:33:39: 82:2e:b2:05:6c:b8:ce:ab:0b:0f:97:e4:f9:4a:3c: cb:50:79:4c:dc:31:04:e3:3c:8e:6a:bf:cd:6e:35: c4:75:e2:5e:ce:35:bd:ea:e6:70:58:06:06:e5:51: 6b:30:42:cf:06:23:5f:6f:fa:b3:35:4f:48:c6:cd: d1:f7:ff:4c:4f:4f:3c:2d:a4:d8:ab:7d:45:a3:95: b8:1e:da:60:3c:35:6e:a4:c4:eb:4f:e7:6e:ae:3f: 85:80:8e:66:11:0d:ed:96:0d:c2:73:d4:fc:d6:b7: 2f:b3:49:a5:ca:cd:79:ba:4d:88:bd:ae:f2:51:be: 6c:aa:71:c8:36:ea:88:21:ba:52:9c:e9:78:47:76: 32:bc:06:98:db:fb:56:aa:aa:61:1e:43:6a:71:b5: 4d:7f:4c:b3:4a:d3:9f:98:32:c7:2c:f0:ec:70:25: cb:b0:39:11:62:ce:fb:a1:26:b5:9c:ce:9e:26:10: 75:73:1c:40:57:1f:66:2e:0c:67:ef:d2:ad:99:6e: 5b:16:3a:b9:2a:2e:89:fd:f8:3c:57:1b:c9:c3:38: 60:dd:4c:57:98:e7:25:f7:ee:e9:30:be:cd:d5:23: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:15:E6:41:1A:34:44:9B:E5:8D:C9:53:B3:A0:E4:39:B7:1C:7E:D0 X509v3 Authority Key Identifier: keyid:C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/ZBXmQRo0RJvljclTs6DkObccftA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.26.91.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:1c:0a:72:5e:2d:e7:29:16:a9:21:5a:c5:a2:8b:49:35:c7: 39:8b:e7:eb:17:2a:75:d7:6a:17:2d:4d:c0:07:6c:6b:d5:93: 5d:bf:dc:29:f0:c9:e4:6e:52:d1:a9:9a:73:40:bf:90:95:b8: a1:c3:81:8c:4e:41:fe:4a:9a:e8:bb:54:ac:62:0c:c4:37:f5: 53:e4:a2:b4:b1:90:91:6a:82:b7:14:f7:98:5f:e7:49:dc:66: 06:c9:d2:31:74:4d:58:0d:07:af:a8:09:8d:56:49:e8:55:fb: ed:83:e8:e9:60:be:85:46:35:a8:f6:06:7d:ba:53:d2:18:62: f4:c7:04:67:85:b0:bc:f8:bc:a0:2a:a4:d4:cd:78:c8:dd:21: c8:72:5e:5d:4c:30:e6:6b:23:37:24:e5:3e:83:62:7d:ec:48: d0:9a:a1:2f:70:d4:df:b9:2d:59:80:28:b4:89:31:0a:8b:79: 5e:44:a3:fc:e8:15:5c:72:db:90:21:92:dd:ab:a7:3e:99:25: 6b:ff:83:2c:2e:de:67:a1:26:27:95:65:b5:14:d6:c0:8d:03: d1:84:d1:30:a6:85:1d:7e:5b:4a:c1:38:a1:1f:97:25:79:0e: cc:b5:80:a2:9a:01:51:a9:42:82:d9:79:d1:e7:c3:b3:a8:1f: ec:72:a4:43 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMEVE RThDMzg3OTA4MTEzOEY5NDk1MzA2QkU3OUVGNzM0MEE5NDUxMB4XDTI0MDIyOTAx MjkxNVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoNjQxNUU2NDExQTM0NDQ5 QkU1OERDOTUzQjNBMEU0MzlCNzFDN0VEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMPkv4IEEtIQWYvSocVZrn/jICSkZTSE32GsATM5gi6yBWy4zqsL D5fk+Uo8y1B5TNwxBOM8jmq/zW41xHXiXs41vermcFgGBuVRazBCzwYjX2/6szVP SMbN0ff/TE9PPC2k2Kt9RaOVuB7aYDw1bqTE60/nbq4/hYCOZhEN7ZYNwnPU/Na3 L7NJpcrNebpNiL2u8lG+bKpxyDbqiCG6UpzpeEd2MrwGmNv7VqqqYR5DanG1TX9M s0rTn5gyxyzw7HAly7A5EWLO+6EmtZzOniYQdXMcQFcfZi4MZ+/SrZluWxY6uSou if34PFcbycM4YN1MV5jnJffu6TC+zdUjf5cCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBRkFeZBGjREm+WNyVOzoOQ5txx+0DAfBgNVHSMEGDAWgBTA7ejDh5CBE4+UlTBr 5573NAqUUTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTYzOS93TzNvdzRlUWdST1BsSlV3YS1lZTl6UUtsRkUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC93TzNvdzRlUWdST1BsSlV3YS1lZTl6 UUtsRkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYzOS9aQlhtUVJvMFJKdmxqY2xUczZEa09iY2NmdEEucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwBpbMA0GCSqGSIb3DQEBCwUAA4IBAQBaHApyXi3nKRapIVrFootJNcc5 i+frFyp112oXLU3AB2xr1ZNdv9wp8MnkblLRqZpzQL+Qlbihw4GMTkH+Sprou1Ss YgzEN/VT5KK0sZCRaoK3FPeYX+dJ3GYGydIxdE1YDQevqAmNVknoVfvtg+jpYL6F RjWo9gZ9ulPSGGL0xwRnhbC8+LygKqTUzXjI3SHIcl5dTDDmayM3JOU+g2J97EjQ mqEvcNTfuS1ZgCi0iTEKi3leRKP86BVcctuQIZLdq6c+mSVr/4MsLt5noSYnlWW1 FNbAjQPRhNEwpoUdfltKwTihH5cleQ7MtYCimgFRqUKC2XnR58OzqB/scqRD -----END CERTIFICATE-----Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org