$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/VMa-p6Dq2BBPKJQ4wlU0wDR-oP4.roa File: VMa-p6Dq2BBPKJQ4wlU0wDR-oP4.roa (raw, json) Hash identifier: 4UkA72fjmJ8JPMFaDVD1O7LtdgfY9SJu10+DPgu/YuI= Subject key identifier: 54:C6:BE:A7:A0:EA:D8:10:4F:28:94:38:C2:55:34:C0:34:7E:A0:FE Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: B1 Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/VMa-p6Dq2BBPKJQ4wlU0wDR-oP4.roa Signing time: Thu 29 Feb 2024 01:29:56 +0000 ROA not before: Thu 29 Feb 2024 01:29:56 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 18126 IP address blocks: 202.41.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Feb 29 01:29:56 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=54C6BEA7A0EAD8104F289438C25534C0347EA0FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:49:ae:a1:6b:d6:73:8d:93:56:27:7b:15:10: f4:8f:6f:29:4e:9e:65:25:53:e3:a2:03:93:87:f7: 75:c4:02:7c:01:fa:37:21:6a:b9:69:0c:7c:d2:e5: 52:d6:ce:f9:74:a3:75:26:e9:15:95:6d:55:85:13: 51:cd:51:86:07:05:18:ed:da:c9:13:d0:e9:68:a2: 12:f2:fb:b2:74:bd:43:03:aa:f8:7b:93:c2:79:42: 72:fd:6d:e1:e9:a7:24:2e:66:0e:7d:65:e2:ce:34: 7e:4b:8c:1f:23:00:41:51:43:05:64:39:92:18:fe: a8:8e:ea:4d:2c:d5:1f:d9:a4:d7:67:b0:dc:73:72: 92:82:0d:8a:ab:b7:10:b0:3d:89:7b:bf:0d:e4:b6: f0:79:5c:1e:7c:00:43:a3:ae:b6:80:40:f4:8b:5e: 35:c8:81:32:b9:81:c9:08:27:c9:d7:02:b7:37:54: 32:bf:22:38:f8:94:3f:fe:88:d3:7e:a1:41:20:49: 6f:56:02:a8:6f:5e:ca:54:97:40:f9:82:6e:29:86: 8b:3a:21:12:ac:8d:42:ae:9a:f3:86:2a:a3:24:19: 2e:6e:58:4a:a0:d3:ce:c7:d9:f8:8a:35:b1:6a:6c: e0:c9:2e:bd:4f:84:5e:f8:be:6c:8c:4f:5c:b8:bc: 87:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C6:BE:A7:A0:EA:D8:10:4F:28:94:38:C2:55:34:C0:34:7E:A0:FE X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/VMa-p6Dq2BBPKJQ4wlU0wDR-oP4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.41.208.0/20 Signature Algorithm: sha256WithRSAEncryption a9:51:f5:40:b3:02:ef:8b:47:22:50:96:5a:f7:48:33:df:d4: a3:91:cb:7f:fe:67:83:2b:58:da:08:07:e8:13:f0:b2:f7:84: c2:3d:0f:2a:e2:b2:e7:47:f9:53:6a:9e:f9:ab:fe:0b:2b:7e: a7:d6:bb:1c:45:c5:8c:56:9d:e8:12:a4:9b:41:5b:8b:68:84: b3:91:c5:74:f5:d3:34:f4:00:3c:6b:49:7a:7e:3d:a7:89:e0: d6:25:03:78:27:d9:94:1e:60:c9:a0:5b:a0:b7:6d:8c:bf:7d: c4:97:df:ed:02:50:ae:80:8c:18:22:c6:82:80:a6:0a:c2:2b: df:82:e3:e2:6d:c5:c6:b0:fc:bf:9f:d0:47:6c:e8:2c:69:95: 7b:f2:61:fa:eb:01:2d:8b:50:32:59:2e:2d:49:f9:4e:6b:e1: 1c:cb:5c:96:91:92:52:9e:01:b7:07:48:dd:ed:5d:b9:de:e7: 45:43:52:e1:e2:e0:02:fe:8a:8d:86:21:0f:7a:00:92:82:b4: 52:f4:d7:31:02:70:d4:fc:93:f0:cc:6d:28:0a:dd:21:e5:09: e8:4b:5a:4e:60:86:b1:3e:87:59:0e:b6:cc:c3:cc:d4:bd:6b: 25:33:e7:ca:26:96:23:c1:77:c6:35:4e:55:40:74:6f:61:34: 35:bb:ff:b4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNDAyMjkw MTI5NTZaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDU0QzZCRUE3QTBFQUQ4 MTA0RjI4OTQzOEMyNTUzNEMwMzQ3RUEwRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDESa6ha9ZzjZNWJ3sVEPSPbylOnmUlU+OiA5OH93XEAnwB+jch arlpDHzS5VLWzvl0o3Um6RWVbVWFE1HNUYYHBRjt2skT0OloohLy+7J0vUMDqvh7 k8J5QnL9beHppyQuZg59ZeLONH5LjB8jAEFRQwVkOZIY/qiO6k0s1R/ZpNdnsNxz cpKCDYqrtxCwPYl7vw3ktvB5XB58AEOjrraAQPSLXjXIgTK5gckIJ8nXArc3VDK/ Ijj4lD/+iNN+oUEgSW9WAqhvXspUl0D5gm4phos6IRKsjUKumvOGKqMkGS5uWEqg 087H2fiKNbFqbODJLr1PhF74vmyMT1y4vIe3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVMa+p6Dq2BBPKJQ4wlU0wDR+oP4wHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTczL1ZNYS1wNkRxMkJCUEtKUTR3bFUwd0RSLW9QNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKKdAwDQYJKoZIhvcNAQELBQADggEBAKlR9UCzAu+LRyJQllr3SDPf1KOR y3/+Z4MrWNoIB+gT8LL3hMI9DyrisudH+VNqnvmr/gsrfqfWuxxFxYxWnegSpJtB W4tohLORxXT10zT0ADxrSXp+PaeJ4NYlA3gn2ZQeYMmgW6C3bYy/fcSX3+0CUK6A jBgixoKApgrCK9+C4+Jtxcaw/L+f0Eds6CxplXvyYfrrAS2LUDJZLi1J+U5r4RzL XJaRklKeAbcHSN3tXbne50VDUuHi4AL+io2GIQ96AJKCtFL01zECcNT8k/DMbSgK 3SHlCehLWk5ghrE+h1kOtszDzNS9ayUz58omliPBd8Y1TlVAdG9hNDW7/7Q= -----END CERTIFICATE-----Generated at Fri Nov 22 14:21:10 2024 by rpki-client on console-ams.rpki-client.org