$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/oiwawvL7X3ScShAYfH-xkFiQRZQ.roa File: oiwawvL7X3ScShAYfH-xkFiQRZQ.roa (raw, json) Hash identifier: hKRb+bu3Q1UuzYCHymjXdRBhAO2Qtuiiox8/2pvD+tI= Subject key identifier: A2:2C:1A:C2:F2:FB:5F:74:9C:4A:10:18:7C:7F:B1:90:58:90:45:94 Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Certificate serial: 1B Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/oiwawvL7X3ScShAYfH-xkFiQRZQ.roa Signing time: Wed 18 Sep 2024 07:50:59 +0000 ROA not before: Wed 18 Sep 2024 07:50:59 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 0 IP address blocks: 133.88.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Validity Not Before: Sep 18 07:50:59 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=A22C1AC2F2FB5F749C4A10187C7FB19058904594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:42:97:4f:cb:75:14:39:5b:e6:2b:14:7a: 27:bf:36:20:f4:8e:fe:58:18:4f:a5:45:41:a7:a5: c2:7c:0c:2b:5a:99:d7:08:2a:49:7b:eb:14:ff:23: 6d:df:6d:a5:47:0a:0e:7c:d2:bd:9e:79:cd:4a:d0: e2:92:37:3c:77:78:85:97:0e:b1:85:aa:f5:e9:41: b1:d2:f3:9d:42:bd:4c:fb:cf:7b:be:41:69:36:f8: 8d:11:b5:bc:32:81:db:54:c1:5d:13:47:22:51:62: 4f:02:a1:0e:11:b6:49:6c:36:74:d8:6f:5e:c6:22: b3:67:07:38:5c:9b:88:23:14:5e:4d:1f:dd:a2:b8: a8:94:50:76:fc:99:8d:fd:95:27:4b:a5:ef:74:02: 67:55:0c:19:37:41:3f:2b:de:7f:52:3b:30:c8:89: 79:47:f1:02:01:7e:95:17:56:ba:5b:d4:51:ec:da: 5d:84:a5:86:74:b5:60:4c:1e:04:b1:3b:4f:c0:8a: 8c:c0:36:38:cf:f5:2b:f5:6c:dd:a5:a5:07:82:22: a2:ca:51:a8:fb:30:91:f7:4a:a3:e2:71:68:7d:56: a6:14:4b:67:96:38:e1:e5:3b:bd:8e:8f:42:37:d9: 67:c9:19:8a:1f:be:16:1d:53:93:96:b8:7d:3b:49: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2C:1A:C2:F2:FB:5F:74:9C:4A:10:18:7C:7F:B1:90:58:90:45:94 X509v3 Authority Key Identifier: keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/oiwawvL7X3ScShAYfH-xkFiQRZQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.16.0/22 Signature Algorithm: sha256WithRSAEncryption a2:31:0d:f7:5a:74:1c:11:a3:0e:53:b1:90:e2:27:d5:93:23: 11:61:eb:2f:dc:ba:6e:34:2a:d9:46:0a:da:ca:e2:6f:80:98: ef:f0:26:f3:b2:6a:62:92:01:c2:fa:b3:90:7b:61:83:ec:b2: 68:1b:61:e6:36:55:3c:2c:a8:50:4a:f9:9c:50:b2:be:5a:ff: 45:49:d8:44:a5:5d:55:0d:49:1e:93:80:29:51:b7:c2:38:ed: 4e:56:3a:10:8e:b2:22:4d:19:c8:3c:93:fa:8c:6a:16:8d:50: b4:bd:e4:02:0e:f7:6d:dc:8f:81:13:59:77:61:2f:b5:65:97: 5a:f9:bb:22:c3:3d:0c:17:25:bc:73:03:f0:df:52:cc:89:42: 55:30:dc:cd:c3:bf:87:13:cf:52:4b:08:bf:13:2f:eb:bb:6c: 96:4d:17:ca:77:f2:3c:f8:f7:35:16:c9:41:23:9d:2a:4e:33: 90:ce:db:c0:78:33:e3:64:62:cf:59:2f:4a:60:74:32:82:94: f2:7d:af:c1:24:e1:c7:f7:c5:9b:34:95:d6:04:92:02:94:fb: 45:66:e0:66:85:d7:de:38:a2:d5:1a:a2:32:2a:cb:fe:05:9b: a9:10:12:6a:22:00:95:d3:66:dd:4e:1e:b0:3c:d1:91:8f:6a: be:61:64:e2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI0MDkxODA3 NTA1OVoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoQTIyQzFBQzJGMkZCNUY3 NDlDNEExMDE4N0M3RkIxOTA1ODkwNDU5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN4BQpdPy3UUOVvmKxR6J782IPSO/lgYT6VFQaelwnwMK1qZ1wgq SXvrFP8jbd9tpUcKDnzSvZ55zUrQ4pI3PHd4hZcOsYWq9elBsdLznUK9TPvPe75B aTb4jRG1vDKB21TBXRNHIlFiTwKhDhG2SWw2dNhvXsYis2cHOFybiCMUXk0f3aK4 qJRQdvyZjf2VJ0ul73QCZ1UMGTdBPyvef1I7MMiJeUfxAgF+lRdWulvUUezaXYSl hnS1YEweBLE7T8CKjMA2OM/1K/Vs3aWlB4IiospRqPswkfdKo+JxaH1WphRLZ5Y4 4eU7vY6PQjfZZ8kZih++Fh1Tk5a4fTtJxKkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSiLBrC8vtfdJxKEBh8f7GQWJBFlDAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0 fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDc1L29pd2F3dkw3WDNTY1NoQVlmSC14a0ZpUVJaUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAKFWBAwDQYJKoZIhvcNAQELBQADggEBAKIxDfdadBwRow5TsZDiJ9WT IxFh6y/cum40KtlGCtrK4m+AmO/wJvOyamKSAcL6s5B7YYPssmgbYeY2VTwsqFBK +ZxQsr5a/0VJ2ESlXVUNSR6TgClRt8I47U5WOhCOsiJNGcg8k/qMahaNULS95AIO 923cj4ETWXdhL7Vll1r5uyLDPQwXJbxzA/DfUsyJQlUw3M3Dv4cTz1JLCL8TL+u7 bJZNF8p38jz49zUWyUEjnSpOM5DO28B4M+NkYs9ZL0pgdDKClPJ9r8Ek4cf3xZs0 ldYEkgKU+0Vm4GaF1944otUaojIqy/4Fm6kQEmoiAJXTZt1OHrA80ZGPar5hZOI= -----END CERTIFICATE-----Generated at Tue Oct 22 15:30:30 2024 by rpki-client on console-ams.rpki-client.org