$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Jr6IwRVutg7TvREhMnhuiOSx6-w.roa File: Jr6IwRVutg7TvREhMnhuiOSx6-w.roa (raw, json) Hash identifier: WVI8FTC+U7um3DdWNT/fbHvfTC5CUSFRLhrpTh8onCw= Subject key identifier: 26:BE:88:C1:15:6E:B6:0E:D3:BD:11:21:32:78:6E:88:E4:B1:EB:EC Certificate issuer: /CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008 Certificate serial: 0F Authority key identifier: 85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Jr6IwRVutg7TvREhMnhuiOSx6-w.roa Signing time: Sun 01 Oct 2023 01:29:05 +0000 ROA not before: Sun 01 Oct 2023 01:29:05 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 2518 IP address blocks: 133.208.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008 Validity Not Before: Oct 1 01:29:05 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=26BE88C1156EB60ED3BD112132786E88E4B1EBEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:2e:3d:85:0f:95:ef:b0:b7:e4:7f:be:b0: ae:8d:eb:2c:f6:53:e3:58:42:4d:34:30:43:79:fd: 54:29:3f:51:b8:88:bc:22:5f:4e:57:89:4a:0e:30: 99:92:74:5c:1f:92:82:b3:27:78:e4:9b:d2:b0:d3: 05:b8:ec:eb:5d:8e:cf:22:d9:de:2e:ac:b0:8e:d2: 17:86:47:2a:74:60:85:a7:90:f6:c0:cc:3d:4e:98: 5c:8e:91:0a:d6:aa:0d:70:00:93:b7:fe:1e:26:c0: 61:d3:4f:65:fa:8c:0b:5c:71:fe:c5:19:6f:30:aa: f5:47:ef:bc:19:ac:3c:31:53:e2:f2:f6:82:1c:42: dc:a7:da:08:55:28:7e:88:aa:58:3b:d8:17:44:f6: ac:75:1b:7d:7c:d5:67:68:38:6f:a2:0a:3b:4e:6f: 1b:10:96:c8:d3:27:d7:ee:a1:d7:6b:86:af:3c:f6: 15:18:72:ba:8d:6c:ee:39:d7:4f:9f:c9:c4:9a:7d: a1:60:53:e0:da:be:af:7f:ba:b0:00:e3:77:ae:ce: 56:b6:2c:1a:45:3d:aa:a2:67:c3:65:5b:35:12:85: f5:35:a2:a8:b1:bd:21:f3:e4:d2:bb:a7:a4:4b:f0: 9d:cb:96:63:b7:1b:69:15:4b:64:69:7b:40:2c:3d: 94:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BE:88:C1:15:6E:B6:0E:D3:BD:11:21:32:78:6E:88:E4:B1:EB:EC X509v3 Authority Key Identifier: keyid:85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Jr6IwRVutg7TvREhMnhuiOSx6-w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.208.0.0/15 Signature Algorithm: sha256WithRSAEncryption 95:e1:f9:85:05:da:18:9c:d1:99:a3:d3:0c:66:af:7e:09:a2: 1c:93:e9:59:e2:bb:ca:3e:0c:58:94:b6:8c:71:40:3f:51:fd: 82:01:bc:4a:27:a2:6b:b6:eb:52:27:f8:40:c4:49:ff:b6:22: 32:8d:fc:c5:69:c4:89:a5:df:e2:99:df:de:1c:49:42:d7:08: 37:6c:35:72:8c:b0:3a:d2:52:49:74:c9:52:d7:e8:63:fc:64: 93:52:03:d8:63:78:e0:85:28:53:73:fe:da:97:b9:30:2f:2c: 88:ac:03:2f:94:78:d7:6e:03:82:5b:07:54:7e:4a:2e:5c:9d: 53:89:d9:06:36:02:d3:ae:3a:9f:85:eb:2e:43:81:44:8c:04: 38:9e:86:92:e5:ee:a2:72:d5:95:32:c1:c3:25:b5:b4:0b:20: 2e:2f:7d:25:a7:11:de:20:98:a8:47:1c:86:50:83:ca:a4:b5: 4c:23:44:ae:64:ad:8b:d6:f4:7b:2a:5e:84:02:a2:28:bd:4b: 72:0f:aa:64:0f:aa:9d:0f:93:f5:32:51:47:24:51:9a:72:e4: 87:1a:30:25:e1:07:2f:a3:34:ee:34:28:da:7d:30:a6:47:e2: 0c:9b:8b:7d:ca:ad:b4:ed:71:92:28:34:8c:48:41:e9:f9:60: 91:0c:13:8f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUZF MEZBNzA0NDYwQUE0RkFFRjhGQThDQTYwOUYwMEM0Q0RFMDA4MB4XDTIzMTAwMTAx MjkwNVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMjZCRTg4QzExNTZFQjYw RUQzQkQxMTIxMzI3ODZFODhFNEIxRUJFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMCWLj2FD5XvsLfkf76wro3rLPZT41hCTTQwQ3n9VCk/UbiIvCJf TleJSg4wmZJ0XB+SgrMneOSb0rDTBbjs612OzyLZ3i6ssI7SF4ZHKnRghaeQ9sDM PU6YXI6RCtaqDXAAk7f+HibAYdNPZfqMC1xx/sUZbzCq9UfvvBmsPDFT4vL2ghxC 3KfaCFUofoiqWDvYF0T2rHUbfXzVZ2g4b6IKO05vGxCWyNMn1+6h12uGrzz2FRhy uo1s7jnXT5/JxJp9oWBT4Nq+r3+6sADjd67OVrYsGkU9qqJnw2VbNRKF9TWiqLG9 IfPk0runpEvwncuWY7cbaRVLZGl7QCw9lJ8CAwEAAaOCAiUwggIhMB0GA1UdDgQW BBQmvojBFW62DtO9ESEyeG6I5LHr7DAfBgNVHSMEGDAWgBSF/g+nBEYKpPrvj6jK YJ8AxM3gCDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjI1MS9oZjRQcHdSR0NxVDY3NC1veW1DZkFNVE40QWcuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oZjRQcHdSR0NxVDY3NC1veW1DZkFN VE40QWcuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjI1MS9KcjZJd1JWdXRnN1R2UkVoTW5odWlPU3g2LXcucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMBhdAwDQYJKoZIhvcNAQELBQADggEBAJXh+YUF2hic0Zmj0wxmr34JohyT 6Vniu8o+DFiUtoxxQD9R/YIBvEonomu261In+EDESf+2IjKN/MVpxIml3+KZ394c SULXCDdsNXKMsDrSUkl0yVLX6GP8ZJNSA9hjeOCFKFNz/tqXuTAvLIisAy+UeNdu A4JbB1R+Si5cnVOJ2QY2AtOuOp+F6y5DgUSMBDiehpLl7qJy1ZUywcMltbQLIC4v fSWnEd4gmKhHHIZQg8qktUwjRK5krYvW9HsqXoQCoii9S3IPqmQPqp0Pk/UyUUck UZpy5IcaMCXhBy+jNO40KNp9MKZH4gybi33KrbTtcZIoNIxIQen5YJEME48= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:18 2024 by rpki-client on console-ams.rpki-client.org