$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/DVBDliGvCKiBaEVkvYvzYgYuOWw.roa File: DVBDliGvCKiBaEVkvYvzYgYuOWw.roa (raw, json) Hash identifier: EguRS1f7i0MR5Ci7ihjV1zTVmFolERIaSXws2Q5VK70= Subject key identifier: 0D:50:43:96:21:AF:08:A8:81:68:45:64:BD:8B:F3:62:06:2E:39:6C Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: BD Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/DVBDliGvCKiBaEVkvYvzYgYuOWw.roa Signing time: Sun 30 Jun 2024 01:28:42 +0000 ROA not before: Sun 30 Jun 2024 01:28:42 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 19905 IP address blocks: 203.129.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Sep 2024 03:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Jun 30 01:28:42 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=0D50439621AF08A881684564BD8BF362062E396C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:e8:81:38:9f:3e:72:74:bc:e4:1d:6b:a5: 9d:4a:f2:dd:96:55:92:3a:47:21:ef:43:98:f6:2a: 51:dc:39:19:7e:2a:d9:44:58:d8:a6:c8:20:61:9a: 82:66:d2:d7:a3:1f:8a:63:cc:2c:53:73:f7:e9:a6: 0b:d1:e9:ea:06:4d:59:79:fb:5c:6b:18:a9:f2:6b: 93:11:68:61:6d:5c:46:d2:91:42:7a:c4:26:5c:18: 8a:b9:ed:a0:80:c9:0b:ab:0d:c8:64:9a:9a:06:3f: 35:a3:d5:87:b6:47:14:69:1d:0b:34:9e:4b:d8:cd: 04:7b:55:bf:16:e0:3e:eb:65:fa:8f:7a:9c:c9:08: 1b:2c:8b:0e:b5:ec:d6:5c:ee:ff:e9:ee:8e:55:19: ea:c7:38:f3:14:a7:9c:5a:2e:d5:6e:83:3c:f4:1f: 44:c4:93:99:4c:03:6d:da:43:21:4d:28:64:5b:30: d9:33:67:47:18:d3:9f:69:52:7d:f1:7e:f0:0e:d5: f8:3b:8f:94:43:8e:77:62:e1:74:70:c4:f3:74:0e: 64:68:e9:66:ae:9a:cc:32:88:11:bd:90:13:2f:f4: 6a:85:6b:51:f6:95:c4:74:73:6a:3b:ea:17:02:cf: 50:5d:9f:e2:71:87:b2:ca:ca:d6:43:36:17:22:81: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:50:43:96:21:AF:08:A8:81:68:45:64:BD:8B:F3:62:06:2E:39:6C X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/DVBDliGvCKiBaEVkvYvzYgYuOWw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.129.112.0/20 Signature Algorithm: sha256WithRSAEncryption 17:d4:f0:85:fd:33:0c:1f:5c:90:a1:4e:2d:1b:a7:d9:71:ba: 84:c7:ea:53:d1:67:aa:a7:eb:b8:71:b5:dc:ec:d3:e8:7a:fd: 5f:f6:bd:d8:a7:6a:50:8d:e3:44:f3:48:58:04:d0:ec:3b:ee: bf:90:72:01:0d:42:c2:81:1e:fb:73:fa:d4:8e:96:6c:90:fb: fc:6a:c2:c5:57:a4:ef:fa:1a:78:2d:83:cd:59:90:cc:98:2e: dc:2c:e6:23:16:7c:0d:ce:dd:d1:69:e0:df:61:8f:5d:c4:b3: ee:ec:cf:3c:c6:6b:aa:ee:00:76:ab:a1:d6:c6:e6:a8:59:fa: aa:c3:19:37:7b:f4:62:da:0a:df:6a:ce:e8:dd:4c:97:7e:50: 24:84:78:38:ef:08:67:3c:00:21:cf:a4:9a:4d:d9:b1:ad:d3: 1c:36:e7:0c:73:61:0d:3f:72:f9:a8:f4:50:de:1c:86:aa:78: 2d:d3:05:c3:d3:c6:85:46:f2:db:11:d5:43:ab:82:7a:80:57: 3b:d0:62:3a:bc:66:8b:47:6e:d5:ce:48:44:61:76:38:ab:3f: 19:a5:70:33:ed:28:10:f8:10:ca:8e:6c:70:9d:b5:b5:4b:d5: 9c:2c:eb:a2:0f:c3:5f:df:59:ec:db:46:09:d4:cd:42:a9:42: 86:b5:a8:72 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNDA2MzAw MTI4NDJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDBENTA0Mzk2MjFBRjA4 QTg4MTY4NDU2NEJEOEJGMzYyMDYyRTM5NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE1OiBOJ8+cnS85B1rpZ1K8t2WVZI6RyHvQ5j2KlHcORl+KtlE WNimyCBhmoJm0tejH4pjzCxTc/fppgvR6eoGTVl5+1xrGKnya5MRaGFtXEbSkUJ6 xCZcGIq57aCAyQurDchkmpoGPzWj1Ye2RxRpHQs0nkvYzQR7Vb8W4D7rZfqPepzJ CBssiw617NZc7v/p7o5VGerHOPMUp5xaLtVugzz0H0TEk5lMA23aQyFNKGRbMNkz Z0cY059pUn3xfvAO1fg7j5RDjndi4XRwxPN0DmRo6WaumswyiBG9kBMv9GqFa1H2 lcR0c2o76hcCz1Bdn+Jxh7LKytZDNhcigQSVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDVBDliGvCKiBaEVkvYvzYgYuOWwwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTczL0RWQkRsaUd2Q0tpQmFFVmt2WXZ6WWdZdU9Xdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATLgXAwDQYJKoZIhvcNAQELBQADggEBABfU8IX9MwwfXJChTi0bp9lxuoTH 6lPRZ6qn67hxtdzs0+h6/V/2vdinalCN40TzSFgE0Ow77r+QcgENQsKBHvtz+tSO lmyQ+/xqwsVXpO/6Gngtg81ZkMyYLtws5iMWfA3O3dFp4N9hj13Es+7szzzGa6ru AHarodbG5qhZ+qrDGTd79GLaCt9qzujdTJd+UCSEeDjvCGc8ACHPpJpN2bGt0xw2 5wxzYQ0/cvmo9FDeHIaqeC3TBcPTxoVG8tsR1UOrgnqAVzvQYjq8ZotHbtXOSERh djirPxmlcDPtKBD4EMqObHCdtbVL1Zws66IPw1/fWezbRgnUzUKpQoa1qHI= -----END CERTIFICATE-----Generated at Sat Sep 7 13:02:57 2024 by rpki-client on console-ams.rpki-client.org