$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/224/DIRaZQPfbyQGAWIvDBmPvEV4TsQ.roa File: DIRaZQPfbyQGAWIvDBmPvEV4TsQ.roa (raw, json) Hash identifier: /WyIwKbqN1uw322hDrC4pbH/HJGkS3pgalxHD3pLELU= Subject key identifier: 0C:84:5A:65:03:DF:6F:24:06:01:62:2F:0C:19:8F:BC:45:78:4E:C4 Certificate issuer: /CN=D623C38C2A127007F93E7C840DF875022E51C547 Certificate serial: 09 Authority key identifier: D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/DIRaZQPfbyQGAWIvDBmPvEV4TsQ.roa Signing time: Mon 17 Jun 2024 00:30:40 +0000 ROA not before: Mon 17 Jun 2024 00:30:40 +0000 ROA not after: Sun 15 Jun 2025 01:30:03 +0000 asID: 7668 IP address blocks: 211.120.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D623C38C2A127007F93E7C840DF875022E51C547 Validity Not Before: Jun 17 00:30:40 2024 GMT Not After : Jun 15 01:30:03 2025 GMT Subject: CN=0C845A6503DF6F240601622F0C198FBC45784EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b4:4c:65:98:f1:5f:ef:47:71:7f:a2:95:ad: 6c:7a:84:91:25:f3:05:02:1a:8f:44:0b:f9:b1:a3: 69:81:6a:57:e9:19:e0:e5:a4:17:66:18:f9:96:58: ff:5f:cc:56:57:06:46:63:1f:4e:72:3e:6b:51:e3: 58:a8:ac:06:b9:47:88:87:df:62:3d:0f:4a:a2:f6: 32:71:75:d3:4d:f4:d2:9b:7e:f1:8f:7e:3a:5b:51: a3:f1:ee:f1:ef:d1:65:c3:60:33:77:72:c2:8e:87: 99:7e:b5:9f:f5:81:9d:9c:d2:23:8f:c8:da:73:c7: 76:50:ae:51:3c:b7:c8:64:29:5b:31:5b:5d:40:4d: f4:e4:db:d8:7c:49:09:67:12:9f:d1:e8:d8:48:e0: 07:29:49:c2:00:d6:8b:06:4e:f8:21:ca:cf:88:8d: da:84:4d:75:a4:ab:52:bc:f2:d6:e9:bb:e5:65:81: 20:75:f9:57:cd:cd:a2:23:76:4f:cb:31:82:32:00: 51:30:3e:84:ef:55:3b:f5:6a:b9:15:31:5b:49:a0: a6:cb:43:5b:e1:f4:f2:a9:65:1d:a4:21:71:5e:51: a5:a1:de:d6:f4:5a:dd:bb:34:f2:fb:0a:47:4c:f6: b6:32:42:1f:86:f0:fe:83:cd:af:e9:62:0f:c5:b8: b5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:84:5A:65:03:DF:6F:24:06:01:62:2F:0C:19:8F:BC:45:78:4E:C4 X509v3 Authority Key Identifier: keyid:D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/DIRaZQPfbyQGAWIvDBmPvEV4TsQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.120.192.0/20 Signature Algorithm: sha256WithRSAEncryption 54:c6:88:9e:38:3b:4d:cc:a4:44:af:5e:06:ec:5a:bb:45:1b: 18:27:3f:f1:d4:e3:3b:74:d2:3f:79:4c:15:c9:ff:b8:a6:ed: 7d:c6:40:29:32:db:b4:06:b8:6d:e1:b9:96:d8:50:6f:a6:7c: f0:b8:d5:5b:5d:b4:ea:4c:b4:83:c5:fc:9f:fb:ea:bd:ce:68: 23:8b:b9:53:76:63:c9:7f:37:84:c4:cd:20:7b:9e:aa:1e:b6: 58:d3:bf:68:75:74:22:a0:cb:d0:db:33:2e:c0:8b:09:d4:24: 2f:84:2f:51:fd:fe:94:cc:6e:b1:61:00:4b:ce:ac:64:cf:6b: 11:86:0f:5c:2a:f5:b7:57:fe:39:02:d8:e6:1b:6d:3d:9a:85: 1f:ad:9d:45:62:c5:c6:c6:af:25:e8:36:bb:f5:f1:94:d7:28: f7:99:d9:04:e4:fb:6c:a9:a1:2e:da:32:58:f6:c2:46:4d:83: da:66:93:69:76:7c:bc:38:fa:5f:ff:24:98:94:9f:e4:56:9a: 20:71:77:b8:f5:3e:83:94:8c:32:2c:f9:44:bd:8b:a2:95:ba: 9f:05:b1:2f:73:d7:97:bd:9b:0b:48:4d:d8:c3:0d:02:61:da: 04:98:59:93:0d:11:d0:fc:78:f5:5c:63:8d:51:e1:1a:63:2e: a1:57:6b:a5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjIz QzM4QzJBMTI3MDA3RjkzRTdDODQwREY4NzUwMjJFNTFDNTQ3MB4XDTI0MDYxNzAw MzA0MFoXDTI1MDYxNTAxMzAwM1owMzExMC8GA1UEAxMoMEM4NDVBNjUwM0RGNkYy NDA2MDE2MjJGMEMxOThGQkM0NTc4NEVDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANG0TGWY8V/vR3F/opWtbHqEkSXzBQIaj0QL+bGjaYFqV+kZ4OWk F2YY+ZZY/1/MVlcGRmMfTnI+a1HjWKisBrlHiIffYj0PSqL2MnF100300pt+8Y9+ OltRo/Hu8e/RZcNgM3dywo6HmX61n/WBnZzSI4/I2nPHdlCuUTy3yGQpWzFbXUBN 9OTb2HxJCWcSn9Ho2EjgBylJwgDWiwZO+CHKz4iN2oRNdaSrUrzy1um75WWBIHX5 V83NoiN2T8sxgjIAUTA+hO9VO/VquRUxW0mgpstDW+H08qllHaQhcV5RpaHe1vRa 3bs08vsKR0z2tjJCH4bw/oPNr+liD8W4tcUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQMhFplA99vJAYBYi8MGY+8RXhOxDAfBgNVHSMEGDAWgBTWI8OMKhJwB/k+fIQN +HUCLlHFRzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjI0LzFpUERqQ29TY0FmNVBueUVEZmgxQWk1UnhVYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFpUERqQ29TY0FmNVBueUVEZmgxQWk1 UnhVYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMjQvRElSYVpRUGZieVFHQVdJdkRCbVB2RVY0VHNRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNN4wDANBgkqhkiG9w0BAQsFAAOCAQEAVMaInjg7TcykRK9eBuxau0UbGCc/ 8dTjO3TSP3lMFcn/uKbtfcZAKTLbtAa4beG5lthQb6Z88LjVW1206ky0g8X8n/vq vc5oI4u5U3ZjyX83hMTNIHueqh62WNO/aHV0IqDL0NszLsCLCdQkL4QvUf3+lMxu sWEAS86sZM9rEYYPXCr1t1f+OQLY5httPZqFH62dRWLFxsavJeg2u/XxlNco95nZ BOT7bKmhLtoyWPbCRk2D2maTaXZ8vDj6X/8kmJSf5FaaIHF3uPU+g5SMMiz5RL2L opW6nwWxL3PXl72bC0hN2MMNAmHaBJhZkw0R0Px49VxjjVHhGmMuoVdrpQ== -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:31 2024 by rpki-client on console-ams.rpki-client.org