$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20217/xdiZ1NeuTaVg-JYRhNjyZ7K7_f4.roa File: xdiZ1NeuTaVg-JYRhNjyZ7K7_f4.roa (raw, json) Hash identifier: DR0VUU8ux7/XPN3l/p80IEsH+Mxe8Odp9unnPiddIJc= Subject key identifier: C5:D8:99:D4:D7:AE:4D:A5:60:F8:96:11:84:D8:F2:67:B2:BB:FD:FE Certificate issuer: /CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D Certificate serial: 0C Authority key identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/xdiZ1NeuTaVg-JYRhNjyZ7K7_f4.roa Signing time: Tue 19 Mar 2024 15:38:10 +0000 ROA not before: Tue 19 Mar 2024 15:38:10 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 59098 IP address blocks: 103.149.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D Validity Not Before: Mar 19 15:38:10 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=C5D899D4D7AE4DA560F8961184D8F267B2BBFDFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:2d:b8:b4:b9:f4:56:7c:2f:25:e1:3b:96: f6:21:45:32:95:5c:52:5b:0f:66:fd:d1:a8:71:20: 62:9e:80:45:c1:c2:1a:29:65:84:7b:41:1d:b7:a3: fe:f6:ce:34:e9:15:67:be:b0:ae:0d:09:b3:ba:21: 16:b2:f6:c5:4d:9e:a9:56:bb:c5:0f:42:67:29:73: d7:2c:72:56:cb:2e:aa:61:e1:79:fe:73:d8:36:1f: 9b:c7:db:be:3b:ca:c3:8b:c4:68:35:fb:25:9e:83: e5:c3:b8:1b:48:72:f2:a3:77:b7:30:46:54:be:10: 7c:5d:2a:94:dc:2c:e9:4c:16:e8:ca:0d:4f:8c:69: 2b:00:48:52:c9:08:5e:75:4b:98:68:26:b5:da:dd: 23:d9:32:bd:a6:9b:6b:0a:76:f8:b5:d3:93:ef:74: d2:a7:39:4e:46:81:b9:3b:b5:3e:4d:44:27:92:cf: d4:12:c0:e7:32:d7:82:29:8d:1b:e1:06:fd:a3:b1: 1d:d9:10:61:2c:2c:29:50:47:13:4b:30:98:a0:7c: 5d:5f:c0:48:c9:64:45:10:ff:1c:8d:ef:7e:e5:91: c1:b2:5f:b5:a6:a0:0d:3c:13:97:28:ff:a7:96:88: 2f:04:05:fe:d0:0e:ba:cb:11:3c:de:82:3b:ab:81: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D8:99:D4:D7:AE:4D:A5:60:F8:96:11:84:D8:F2:67:B2:BB:FD:FE X509v3 Authority Key Identifier: keyid:44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/xdiZ1NeuTaVg-JYRhNjyZ7K7_f4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.4.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:a9:d6:41:ac:45:84:0f:c3:22:2d:18:5b:ea:99:a2:a2:5b: 55:b1:07:52:96:22:c2:45:41:81:07:6f:58:13:79:65:dd:41: b9:b8:92:53:dc:c1:6d:64:b1:33:ac:a7:3c:21:ac:63:68:bf: 62:76:2e:11:5f:bb:69:04:1e:1e:41:a7:07:2f:b9:8a:61:9b: 86:d5:5f:f5:6c:7f:ef:86:e4:10:58:51:72:54:3d:00:80:76: 07:db:f9:dd:65:4a:77:d8:23:87:7e:76:78:ab:9c:4f:90:ec: b6:f2:89:0e:ed:32:d6:6d:81:c4:6f:a3:fd:bf:33:eb:76:8b: 38:e8:71:cc:42:1b:35:ee:f4:79:b9:d7:c9:d4:df:fa:6c:a1: 22:1f:e2:7c:2b:73:4f:dc:a0:35:d1:03:3a:7a:19:a1:ed:1f: 36:65:ed:ad:87:78:74:92:1e:2a:f7:4a:25:d1:74:83:b7:14: 0c:fc:5e:8b:11:d1:b0:af:2c:b3:a8:19:69:98:36:e7:32:af: 93:0d:4f:4b:7b:7b:30:3c:cb:16:06:a4:00:f9:bb:7d:78:e6: 99:ad:01:ac:72:6e:f1:02:c6:ac:10:90:94:b3:d7:02:ca:06: 0b:02:e4:1e:55:b8:f1:3a:62:de:34:6f:7d:10:ca:63:7e:1f: 66:82:9e:31 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NDZD NjVCN0FGOTE3QUZGQTc0RjZCMDlFNDM3QUMwRjM2NTM3NDFEMB4XDTI0MDMxOTE1 MzgxMFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQzVEODk5RDREN0FFNERB NTYwRjg5NjExODREOEYyNjdCMkJCRkRGRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANFmLbi0ufRWfC8l4TuW9iFFMpVcUlsPZv3RqHEgYp6ARcHCGill hHtBHbej/vbONOkVZ76wrg0Js7ohFrL2xU2eqVa7xQ9CZylz1yxyVssuqmHhef5z 2DYfm8fbvjvKw4vEaDX7JZ6D5cO4G0hy8qN3tzBGVL4QfF0qlNws6UwW6MoNT4xp KwBIUskIXnVLmGgmtdrdI9kyvaabawp2+LXTk+900qc5TkaBuTu1Pk1EJ5LP1BLA 5zLXgimNG+EG/aOxHdkQYSwsKVBHE0swmKB8XV/ASMlkRRD/HI3vfuWRwbJftaag DTwTlyj/p5aILwQF/tAOussRPN6CO6uB3yUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTF2JnU165NpWD4lhGE2PJnsrv9/jAfBgNVHSMEGDAWgBREbGW3r5F6/6dPawnk N6wPNlN0HTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMTcvUkd4bHQ2LVJldi1uVDJzSjVEZXNEelpUZEIwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUkd4bHQ2LVJldi1uVDJzSjVEZXNE elpUZEIwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjE3L3hkaVoxTmV1VGFWZy1KWVJoTmp5WjdLN19mNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnlQQwDQYJKoZIhvcNAQELBQADggEBAGyp1kGsRYQPwyItGFvqmaKi W1WxB1KWIsJFQYEHb1gTeWXdQbm4klPcwW1ksTOspzwhrGNov2J2LhFfu2kEHh5B pwcvuYphm4bVX/Vsf++G5BBYUXJUPQCAdgfb+d1lSnfYI4d+dnirnE+Q7LbyiQ7t MtZtgcRvo/2/M+t2izjoccxCGzXu9Hm518nU3/psoSIf4nwrc0/coDXRAzp6GaHt HzZl7a2HeHSSHir3SiXRdIO3FAz8XosR0bCvLLOoGWmYNucyr5MNT0t7ezA8yxYG pAD5u3145pmtAaxybvECxqwQkJSz1wLKBgsC5B5VuPE6Yt40b30QymN+H2aCnjE= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:14 2024 by rpki-client on console-fra.rpki-client.org