$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/qtKDip7UiNT0GS3hm2vksbEcpRs.roa File: qtKDip7UiNT0GS3hm2vksbEcpRs.roa (raw, json) Hash identifier: 7IGlKrji9O1xSFGPoRddXOFxqwt/n7OL+QLX0pCs2GE= Subject key identifier: AA:D2:83:8A:9E:D4:88:D4:F4:19:2D:E1:9B:6B:E4:B1:B1:1C:A5:1B Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 79 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/qtKDip7UiNT0GS3hm2vksbEcpRs.roa Signing time: Fri 15 Nov 2024 15:40:31 +0000 ROA not before: Fri 15 Nov 2024 15:40:31 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 140224 IP address blocks: 117.103.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 15 15:40:31 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=AAD2838A9ED488D4F4192DE19B6BE4B1B11CA51B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b6:b1:20:1d:99:5c:da:b6:1f:ea:d8:b6:93: c2:03:34:cf:23:4d:e5:7a:d5:d1:0e:b2:f5:62:16: 45:79:a7:7d:a9:a6:6b:f2:23:28:9a:bb:80:ff:6b: b7:9d:10:ea:f9:e6:03:99:7b:0f:ba:74:fb:c9:72: a7:3d:e1:e0:e7:31:7f:40:22:c6:ce:5b:93:bf:58: 3a:32:99:cb:94:b5:6f:01:aa:df:8e:d1:ae:c2:6d: f2:d7:42:9a:d2:4a:34:82:59:ba:f7:a5:a4:af:f6: 8d:f4:ce:a4:c9:ec:87:25:d2:56:0e:36:13:5d:aa: c7:c5:30:b0:81:24:12:e2:28:c6:8e:66:85:6f:bf: ae:51:dc:ae:5c:72:49:e2:dd:89:46:44:35:56:9f: 81:39:6a:ed:f8:2b:6d:c3:e4:fc:dc:85:c4:93:35: 52:d5:2f:f9:53:56:9c:5f:0c:38:7f:f9:ee:f0:ec: b7:93:b8:0c:99:82:28:f3:c6:8b:01:1a:77:68:0e: 53:41:fd:69:5d:4b:54:87:73:1b:d4:c7:60:77:4d: be:31:6d:fd:76:90:ea:0b:42:47:46:5c:05:72:71: 86:34:e2:f7:53:b9:8f:3d:21:d8:5e:64:c5:00:72: 22:72:41:73:68:52:31:99:07:65:c7:f2:05:06:46: 34:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D2:83:8A:9E:D4:88:D4:F4:19:2D:E1:9B:6B:E4:B1:B1:1C:A5:1B X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/qtKDip7UiNT0GS3hm2vksbEcpRs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.103.191.0/24 Signature Algorithm: sha256WithRSAEncryption 83:2d:9c:df:e0:bd:ad:4f:9c:b1:c5:3f:bc:02:d4:11:75:22: 1e:eb:69:44:12:55:5e:e3:99:94:34:7a:16:95:53:78:98:5d: c5:b1:16:51:f3:53:75:56:8b:03:21:1b:e4:d4:15:18:8a:a0: bb:46:2b:f4:26:58:b9:47:99:aa:d5:e0:30:d4:32:0d:18:04: 8e:2a:e0:fe:dd:ad:2f:24:db:d9:37:be:f4:21:2f:93:2e:a3: ae:1c:0d:9d:0b:a2:b8:0d:57:01:23:d4:ef:28:df:22:4a:a4: ff:d4:99:bf:82:0b:08:a2:9e:8c:4e:22:3e:5c:65:d5:6d:75: b1:7e:12:a9:6a:4f:a0:54:43:ac:ae:1b:17:29:87:f4:29:fe: 4a:9d:96:0a:4a:4c:80:2b:d8:ae:c6:c2:83:0d:c8:93:65:23: ed:07:6d:1e:9b:4e:d9:9a:1b:25:16:d5:83:1d:4c:d6:e1:7f: e8:35:d0:03:de:49:0f:3f:3e:d5:ae:a1:a6:7f:dd:70:80:b3: 88:d6:5f:4f:01:20:d6:34:77:c7:83:8c:a9:6b:8c:b4:af:ef: 62:fc:fc:94:db:3c:33:57:a7:30:69:a1:82:0f:31:2e:54:56: e7:f2:22:95:09:92:7c:1f:5a:3d:3a:ab:b3:de:22:b0:9e:68: 88:00:0d:c8 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDQ2 RERGODhBNDZFNEVDMkQ5QTlCQUI1RkYxMzA1RkQwNTdGMTM4MB4XDTI0MTExNTE1 NDAzMVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQUFEMjgzOEE5RUQ0ODhE NEY0MTkyREUxOUI2QkU0QjFCMTFDQTUxQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMy2sSAdmVzath/q2LaTwgM0zyNN5XrV0Q6y9WIWRXmnfamma/Ij KJq7gP9rt50Q6vnmA5l7D7p0+8lypz3h4Ocxf0Aixs5bk79YOjKZy5S1bwGq347R rsJt8tdCmtJKNIJZuvelpK/2jfTOpMnshyXSVg42E12qx8UwsIEkEuIoxo5mhW+/ rlHcrlxySeLdiUZENVafgTlq7fgrbcPk/NyFxJM1UtUv+VNWnF8MOH/57vDst5O4 DJmCKPPGiwEad2gOU0H9aV1LVIdzG9THYHdNvjFt/XaQ6gtCR0ZcBXJxhjTi91O5 jz0h2F5kxQByInJBc2hSMZkHZcfyBQZGNCECAwEAAaOCAigwggIkMB0GA1UdDgQW BBSq0oOKntSI1PQZLeGba+SxsRylGzAfBgNVHSMEGDAWgBSNRt34ikbk7C2am6tf 8TBf0FfxODAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMjgvalViZC1JcEc1T3d0bXB1clhfRXdYOUJYOFRnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalViZC1JcEc1T3d0bXB1clhfRXdY OUJYOFRnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTI4L3F0S0RpcDdVaU5UMEdTM2htMnZrc2JFY3BScy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAB1Z78wDQYJKoZIhvcNAQELBQADggEBAIMtnN/gva1PnLHFP7wC1BF1 Ih7raUQSVV7jmZQ0ehaVU3iYXcWxFlHzU3VWiwMhG+TUFRiKoLtGK/QmWLlHmarV 4DDUMg0YBI4q4P7drS8k29k3vvQhL5Muo64cDZ0LorgNVwEj1O8o3yJKpP/Umb+C CwiinoxOIj5cZdVtdbF+EqlqT6BUQ6yuGxcph/Qp/kqdlgpKTIAr2K7GwoMNyJNl I+0HbR6bTtmaGyUW1YMdTNbhf+g10APeSQ8/PtWuoaZ/3XCAs4jWX08BINY0d8eD jKlrjLSv72L8/JTbPDNXpzBpoYIPMS5UVufyIpUJknwfWj06q7PeIrCeaIgADcg= -----END CERTIFICATE-----Generated at Fri Nov 22 05:49:51 2024 by rpki-client on console-fra.rpki-client.org