$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/9RXS1yOq5up12Ly6LcAq8e2eIXU.roa File: 9RXS1yOq5up12Ly6LcAq8e2eIXU.roa (raw, json) Hash identifier: Up0D6fR8MfPrS8Yh41AXkQE1F+IgRA+nXv1dfSKmWO8= Subject key identifier: F5:15:D2:D7:23:AA:E6:EA:75:D8:BC:BA:2D:C0:2A:F1:ED:9E:21:75 Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D Certificate serial: 13 Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/9RXS1yOq5up12Ly6LcAq8e2eIXU.roa Signing time: Tue 02 Apr 2024 00:21:10 +0000 ROA not before: Tue 02 Apr 2024 00:21:10 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 18071 IP address blocks: 133.185.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D Validity Not Before: Apr 2 00:21:10 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=F515D2D723AAE6EA75D8BCBA2DC02AF1ED9E2175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:32:61:7c:8e:12:67:71:72:2d:02:10:80:90: 3e:f6:c0:f9:66:b8:e7:18:cc:cf:45:92:d2:d2:f1: 3f:60:ce:79:58:be:c2:71:47:29:bc:4c:0b:6b:9b: 79:4d:13:ff:37:3f:f6:94:52:ca:f7:9f:e0:73:36: e4:01:4c:12:9f:05:7d:c4:6e:53:42:ed:ba:68:a6: 30:a6:d8:a4:62:ef:f6:e3:ef:b5:75:91:08:42:5e: 79:2b:75:35:22:67:fa:c9:60:9c:85:63:2e:4d:b8: 5a:99:ae:b9:a3:3f:af:fd:08:e1:0d:9b:a8:62:fa: f5:92:11:6f:c9:6f:9e:c8:15:4d:af:e6:86:e3:f8: f7:5f:f6:cb:05:26:ae:8f:fc:ef:44:1d:df:66:6f: f3:83:57:11:f8:27:65:9b:bb:4d:45:c6:8e:d2:33: 22:ff:bb:d6:5a:fd:48:22:b6:63:0d:d0:a2:db:75: ee:bc:7b:55:33:14:98:b5:96:bc:5e:46:9c:5f:c4: 32:7c:99:ca:af:c6:5c:e5:93:65:b9:44:7e:a0:5f: 25:29:b3:56:23:fa:74:e4:54:6b:0b:67:4d:30:c9: 4e:35:f9:fb:22:10:78:aa:56:0d:40:bd:e0:84:e3: de:03:96:00:fe:cd:8b:a5:9f:86:f3:7c:19:d9:97: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:15:D2:D7:23:AA:E6:EA:75:D8:BC:BA:2D:C0:2A:F1:ED:9E:21:75 X509v3 Authority Key Identifier: keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/9RXS1yOq5up12Ly6LcAq8e2eIXU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.185.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1d:70:5f:90:31:ad:2d:b6:42:1a:e6:2a:d7:dc:20:6e:74:fe: f7:15:a4:54:f9:44:af:8b:71:f2:a1:6f:f6:1f:4a:41:8d:db: 9d:d6:d3:8a:5c:c7:44:b6:49:ab:a1:86:0c:2f:b6:67:5c:1d: 0f:8f:09:b1:2a:68:e9:c7:63:50:25:36:da:8e:1b:a9:61:47: 82:a0:55:0b:c5:54:88:ac:5d:c9:b3:62:f6:0f:ee:18:58:fb: 65:e2:bb:bb:a0:ce:84:bb:82:7c:51:b2:73:5d:f3:b7:47:86: 31:7a:bc:c4:f6:1d:62:b5:2f:94:56:97:53:ca:53:26:c3:56: 3a:fc:33:db:2e:72:95:aa:73:6d:b9:02:16:ff:bd:6f:a3:6b: 68:bc:52:1c:cf:bf:39:a5:cf:6d:b2:d5:03:77:39:52:ad:6e: de:79:96:6d:04:43:d2:95:05:11:e2:f8:28:53:82:67:2e:23: b4:38:7a:2f:d1:1b:3c:7d:f0:06:5f:7a:be:ec:4d:66:3f:b8: 02:ab:d6:b3:81:7d:39:74:8a:70:51:ba:8c:08:9e:02:f4:91: 09:5c:49:09:e4:b4:46:0b:f5:fe:b3:f0:88:12:eb:d7:23:21: 4d:4e:44:10:f6:1c:91:8d:a6:41:c0:66:84:dc:47:ec:e9:94: 64:52:08:60 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI0MDQwMjAw MjExMFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjUxNUQyRDcyM0FBRTZF QTc1RDhCQ0JBMkRDMDJBRjFFRDlFMjE3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANAyYXyOEmdxci0CEICQPvbA+Wa45xjMz0WS0tLxP2DOeVi+wnFH KbxMC2ubeU0T/zc/9pRSyvef4HM25AFMEp8FfcRuU0LtumimMKbYpGLv9uPvtXWR CEJeeSt1NSJn+slgnIVjLk24WpmuuaM/r/0I4Q2bqGL69ZIRb8lvnsgVTa/mhuP4 91/2ywUmro/870Qd32Zv84NXEfgnZZu7TUXGjtIzIv+71lr9SCK2Yw3Qott17rx7 VTMUmLWWvF5GnF/EMnyZyq/GXOWTZblEfqBfJSmzViP6dORUawtnTTDJTjX5+yIQ eKpWDUC94ITj3gOWAP7Ni6WfhvN8GdmXB2MCAwEAAaOCAiUwggIhMB0GA1UdDgQW BBT1FdLXI6rm6nXYvLotwCrx7Z4hdTAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTkzNy85UlhTMXlPcTV1cDEyTHk2TGNBcThlMmVJWFUucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAhbkwDQYJKoZIhvcNAQELBQADggEBAB1wX5AxrS22QhrmKtfcIG50/vcV pFT5RK+LcfKhb/YfSkGN253W04pcx0S2SauhhgwvtmdcHQ+PCbEqaOnHY1AlNtqO G6lhR4KgVQvFVIisXcmzYvYP7hhY+2Xiu7ugzoS7gnxRsnNd87dHhjF6vMT2HWK1 L5RWl1PKUybDVjr8M9sucpWqc225Ahb/vW+ja2i8UhzPvzmlz22y1QN3OVKtbt55 lm0EQ9KVBRHi+ChTgmcuI7Q4ei/RGzx98AZfer7sTWY/uAKr1rOBfTl0inBRuowI ngL0kQlcSQnktEYL9f6z8IgS69cjIU1ORBD2HJGNpkHAZoTcR+zplGRSCGA= -----END CERTIFICATE-----Generated at Mon May 20 02:37:13 2024 by rpki-client on console-fra.rpki-client.org