$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/yf6cE3qy1w9QCDovH_S-hfeEvlg.roa File: yf6cE3qy1w9QCDovH_S-hfeEvlg.roa (raw, json) Hash identifier: uVmwIcLI/+WG1M/hbj7Qegorvul2m14jeU/2xpysSZY= Subject key identifier: C9:FE:9C:13:7A:B2:D7:0F:50:08:3A:2F:1F:F4:BE:85:F7:84:BE:58 Certificate issuer: /CN=381CEBD5718139418E2BA504374D52816234E9EB Certificate serial: 03 Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/yf6cE3qy1w9QCDovH_S-hfeEvlg.roa Signing time: Thu 11 Apr 2024 05:35:32 +0000 ROA not before: Thu 11 Apr 2024 05:35:32 +0000 ROA not after: Fri 11 Apr 2025 05:20:24 +0000 asID: 131943 IP address blocks: 133.226.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB Validity Not Before: Apr 11 05:35:32 2024 GMT Not After : Apr 11 05:20:24 2025 GMT Subject: CN=C9FE9C137AB2D70F50083A2F1FF4BE85F784BE58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:5a:d6:2c:39:de:e7:7e:1e:37:4b:7f:e5: 74:5c:70:df:95:19:91:bc:ad:f6:4f:7c:62:c6:c2: 66:08:d1:aa:a3:23:63:a7:25:e5:ff:a8:fd:ea:f0: a9:ba:34:79:5b:c9:20:c0:47:59:25:aa:94:31:a2: 02:bd:1b:92:12:92:75:03:9b:fe:64:aa:2d:ab:d7: 37:75:4b:14:67:7c:ec:20:50:64:23:3d:7f:e1:80: ee:e7:6a:c8:16:96:f1:c1:9f:05:6e:9a:51:7a:fa: 81:a0:b0:16:91:1f:ac:70:b3:53:17:f3:28:d3:e3: 72:50:59:b8:2c:85:62:4c:f2:0e:4e:41:f8:5c:76: e2:76:ca:2f:f7:02:ed:c2:6d:fe:c8:5e:33:5e:e6: cf:ae:d3:d5:5c:cb:86:f0:b0:af:30:03:b8:fe:fc: 22:ed:e5:b9:01:3f:5b:1f:25:3d:8d:ac:b1:89:be: 89:82:e3:3d:6c:34:7f:d6:c3:d0:c7:fe:b1:58:4e: cc:31:77:a5:0e:86:9b:91:cc:7b:d3:11:8d:00:78: e0:c0:5c:af:2f:b2:a5:21:c2:0a:56:97:c8:dc:43: 17:9f:73:04:62:64:2c:9f:2c:16:b1:81:eb:05:b8: 55:72:20:39:09:1b:d7:f8:f4:30:56:86:4f:fe:0b: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FE:9C:13:7A:B2:D7:0F:50:08:3A:2F:1F:F4:BE:85:F7:84:BE:58 X509v3 Authority Key Identifier: keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/yf6cE3qy1w9QCDovH_S-hfeEvlg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.226.132.0/22 Signature Algorithm: sha256WithRSAEncryption 62:ff:da:3a:08:48:0e:f1:ab:7e:56:e6:63:18:a5:33:8e:f5: fa:d1:c1:4f:81:4e:9a:82:8c:07:5e:e8:cc:f5:32:26:3a:2f: 8f:5a:62:b0:6f:1e:2f:b9:44:53:bd:42:c9:02:71:fe:9a:40: 3d:90:7d:c3:e5:39:78:17:26:84:b5:6d:8c:9d:95:6f:d0:0e: 8a:7b:2e:bf:32:85:49:b3:b0:3a:c1:07:c4:b9:17:1c:c5:39: a0:c2:82:6e:89:01:ec:ca:03:03:01:71:d6:74:dd:77:85:91: 65:b3:68:83:7e:8f:7b:3f:09:91:5f:b0:77:48:7e:15:38:0b: 79:56:93:64:46:fb:52:e4:b1:04:f0:5a:0f:90:f3:22:43:f0: 30:7f:f1:5c:8b:77:4f:25:3a:2a:6a:53:b9:8e:04:aa:e1:c1: cd:70:ef:12:b0:86:f1:99:6c:1d:5a:9a:85:73:e6:cd:b4:f8: ea:63:55:16:da:10:8e:ca:79:c0:ec:7b:30:72:a6:41:e6:44: 16:7b:9a:e9:c9:7d:ff:bf:6a:1a:2a:9f:18:98:22:fc:97:5f: 92:ea:63:98:93:f7:65:51:11:1c:79:4b:b4:b4:64:56:25:86: 8d:11:c7:64:ff:2a:98:91:13:e5:2d:66:f7:d5:89:39:97:3a: 8a:e4:70:08 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzODFD RUJENTcxODEzOTQxOEUyQkE1MDQzNzRENTI4MTYyMzRFOUVCMB4XDTI0MDQxMTA1 MzUzMloXDTI1MDQxMTA1MjAyNFowMzExMC8GA1UEAxMoQzlGRTlDMTM3QUIyRDcw RjUwMDgzQTJGMUZGNEJFODVGNzg0QkU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKQfWtYsOd7nfh43S3/ldFxw35UZkbyt9k98YsbCZgjRqqMjY6cl 5f+o/erwqbo0eVvJIMBHWSWqlDGiAr0bkhKSdQOb/mSqLavXN3VLFGd87CBQZCM9 f+GA7udqyBaW8cGfBW6aUXr6gaCwFpEfrHCzUxfzKNPjclBZuCyFYkzyDk5B+Fx2 4nbKL/cC7cJt/sheM17mz67T1VzLhvCwrzADuP78Iu3luQE/Wx8lPY2ssYm+iYLj PWw0f9bD0Mf+sVhOzDF3pQ6Gm5HMe9MRjQB44MBcry+ypSHCClaXyNxDF59zBGJk LJ8sFrGB6wW4VXIgOQkb1/j0MFaGT/4LYLkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTJ/pwTerLXD1AIOi8f9L6F94S+WDAfBgNVHSMEGDAWgBQ4HOvVcYE5QY4rpQQ3 TVKBYjTp6zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwODQvT0J6cjFYR0JPVUdPSzZVRU4wMVNnV0kwNmVzLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT0J6cjFYR0JPVUdPSzZVRU4wMVNn V0kwNmVzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDg0L3lmNmNFM3F5MXc5UUNEb3ZIX1MtaGZlRXZsZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAKF4oQwDQYJKoZIhvcNAQELBQADggEBAGL/2joISA7xq35W5mMYpTOO 9frRwU+BTpqCjAde6Mz1MiY6L49aYrBvHi+5RFO9QskCcf6aQD2QfcPlOXgXJoS1 bYydlW/QDop7Lr8yhUmzsDrBB8S5FxzFOaDCgm6JAezKAwMBcdZ03XeFkWWzaIN+ j3s/CZFfsHdIfhU4C3lWk2RG+1LksQTwWg+Q8yJD8DB/8VyLd08lOipqU7mOBKrh wc1w7xKwhvGZbB1amoVz5s20+OpjVRbaEI7KecDsezBypkHmRBZ7munJff+/ahoq nxiYIvyXX5LqY5iT92VRERx5S7S0ZFYlho0Rx2T/KpiRE+UtZvfViTmXOorkcAg= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org