$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/KBR2Y3l4xZDaSaMidgI14bQrLrc.roa File: KBR2Y3l4xZDaSaMidgI14bQrLrc.roa (raw, json) Hash identifier: nM08MasLAsaPXYOTBfPDLfLxTIdAu51NVEA8AcE399o= Subject key identifier: 28:14:76:63:79:78:C5:90:DA:49:A3:22:76:02:35:E1:B4:2B:2E:B7 Certificate issuer: /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Certificate serial: 2B Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/KBR2Y3l4xZDaSaMidgI14bQrLrc.roa Signing time: Fri 15 Sep 2023 07:18:39 +0000 ROA not before: Fri 15 Sep 2023 07:18:39 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 7670 IP address blocks: 210.166.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Validity Not Before: Sep 15 07:18:39 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=281476637978C590DA49A322760235E1B42B2EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:25:97:f2:4e:b0:56:75:f0:b5:46:1b:33: dd:d1:4f:28:8b:10:a7:cc:81:bc:48:24:a5:f6:23: 08:6f:96:8d:ae:5a:d8:dc:1e:bc:92:2f:7e:7a:cd: 2e:8e:d7:b9:a6:8a:e1:e1:fc:67:f2:5e:bc:96:55: 85:29:d9:01:09:d0:e3:b1:11:31:21:a1:7d:8a:90: fa:d1:3a:e0:5a:7c:80:d6:ff:28:1d:74:44:fe:0b: 92:6d:ea:7c:b0:25:3f:2a:96:2a:26:70:74:be:6e: 5e:b2:e9:4b:bf:71:df:ff:b4:ae:18:ea:ee:2f:88: 4d:c4:2b:2b:1b:36:ce:24:75:a2:0a:c0:90:4b:ed: 88:96:6b:ae:79:d1:c6:2b:a5:b8:0f:67:22:80:d7: 99:ef:f4:15:c3:cd:fe:3b:87:12:db:6d:ea:48:0e: 82:68:fe:d3:ba:9a:77:b4:df:f4:f4:91:52:b3:20: e7:ee:69:ab:03:51:41:3e:e3:d0:14:79:ff:b7:ca: b0:d6:38:8c:50:e0:e4:cd:fa:bb:5f:48:58:68:f1: e7:b9:4b:6e:18:ac:a4:23:75:29:b7:71:87:b2:85: e9:4e:f3:4c:f9:11:85:94:01:13:5a:fb:66:bd:2c: ae:23:52:aa:1e:81:ea:26:ed:77:c5:3e:e6:0f:b6: 81:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:14:76:63:79:78:C5:90:DA:49:A3:22:76:02:35:E1:B4:2B:2E:B7 X509v3 Authority Key Identifier: keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/KBR2Y3l4xZDaSaMidgI14bQrLrc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.166.32.0/19 Signature Algorithm: sha256WithRSAEncryption 55:42:c8:0f:12:4f:a9:56:d3:92:31:1c:28:c1:58:db:89:0a: 7a:df:91:59:c5:97:e0:80:a1:70:ca:c7:87:f0:80:81:3b:65: 91:46:4f:52:99:99:77:e5:7b:25:b5:02:20:e0:38:56:f2:a5: 4c:b4:c7:13:f6:0b:d1:d9:ad:a2:64:bc:5f:13:92:29:5c:45: 67:b6:49:17:50:33:26:31:30:7e:d1:c5:78:8b:48:35:46:5b: 61:4c:53:1c:fd:1b:ae:19:b9:79:19:71:16:7e:fb:3f:ff:c9: 10:ec:59:f4:ad:4d:bb:35:f6:ac:c3:90:3f:54:96:7d:e7:8f: 8b:8c:54:2d:82:24:e5:cd:03:fb:d6:d3:06:3e:9f:16:cf:12: dc:8a:5d:5f:50:f6:88:25:54:b1:9e:fa:96:e3:d1:b9:78:d4: 28:a7:66:0f:d2:a7:60:4f:bc:ee:bc:b1:6a:e2:3d:7f:7a:8d: 2d:04:0d:fb:6c:dd:94:a0:4a:22:23:1c:b8:74:f6:00:2f:3f: b5:f9:a4:d0:35:07:21:74:c7:5f:7a:80:e1:0d:34:44:4d:3d: aa:99:9e:38:06:8e:1c:1e:b7:fb:db:df:1c:82:bb:ac:93:bb: 26:f4:43:b8:a8:4f:0d:43:fc:14:c3:c3:90:21:a8:b2:69:f0: 61:3c:1b:fa -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzg4 Njc4RTY0RDI5MTg0QzIzREFBQURCNTk0QkZEOUJBRTI0MDVDMB4XDTIzMDkxNTA3 MTgzOVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMjgxNDc2NjM3OTc4QzU5 MERBNDlBMzIyNzYwMjM1RTFCNDJCMkVCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK6CJZfyTrBWdfC1Rhsz3dFPKIsQp8yBvEgkpfYjCG+Wja5a2Nwe vJIvfnrNLo7XuaaK4eH8Z/JevJZVhSnZAQnQ47ERMSGhfYqQ+tE64Fp8gNb/KB10 RP4Lkm3qfLAlPyqWKiZwdL5uXrLpS79x3/+0rhjq7i+ITcQrKxs2ziR1ogrAkEvt iJZrrnnRxiuluA9nIoDXme/0FcPN/juHEttt6kgOgmj+07qad7Tf9PSRUrMg5+5p qwNRQT7j0BR5/7fKsNY4jFDg5M36u19IWGjx57lLbhispCN1Kbdxh7KF6U7zTPkR hZQBE1r7Zr0sriNSqh6B6ibtd8U+5g+2gVUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQoFHZjeXjFkNpJoyJ2AjXhtCsutzAfBgNVHSMEGDAWgBTXiGeOZNKRhMI9qq21 lL/ZuuJAXDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMzLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJyaVFGdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJy aVFGdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzMvS0JSMlkzbDR4WkRhU2FNaWRnSTE0YlFyTHJjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdKmIDANBgkqhkiG9w0BAQsFAAOCAQEAVULIDxJPqVbTkjEcKMFY24kKet+R WcWX4IChcMrHh/CAgTtlkUZPUpmZd+V7JbUCIOA4VvKlTLTHE/YL0dmtomS8XxOS KVxFZ7ZJF1AzJjEwftHFeItINUZbYUxTHP0brhm5eRlxFn77P//JEOxZ9K1NuzX2 rMOQP1SWfeePi4xULYIk5c0D+9bTBj6fFs8S3IpdX1D2iCVUsZ76luPRuXjUKKdm D9KnYE+87ryxauI9f3qNLQQN+2zdlKBKIiMcuHT2AC8/tfmk0DUHIXTHX3qA4Q00 RE09qpmeOAaOHB63+9vfHIK7rJO7JvRDuKhPDUP8FMPDkCGosmnwYTwb+g== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org