$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/N6fofKdxBqEaQ6PiKDuVcX1QYmc.roa File: N6fofKdxBqEaQ6PiKDuVcX1QYmc.roa (raw, json) Hash identifier: iBT4NNCYgIXEfw8Pg5XjNJ360sXQWXlfYeWsKCOa6q8= Subject key identifier: 37:A7:E8:7C:A7:71:06:A1:1A:43:A3:E2:28:3B:95:71:7D:50:62:67 Certificate issuer: /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Certificate serial: 2A Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/N6fofKdxBqEaQ6PiKDuVcX1QYmc.roa Signing time: Fri 15 Sep 2023 07:18:39 +0000 ROA not before: Fri 15 Sep 2023 07:18:39 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 7670 IP address blocks: 202.25.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Validity Not Before: Sep 15 07:18:39 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=37A7E87CA77106A11A43A3E2283B95717D506267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:f2:ba:6d:65:a0:27:07:75:29:56:45:8e: 0f:11:74:36:2d:c9:1c:8c:84:66:76:bf:70:f9:af: 5d:8f:8d:46:4a:7b:c0:93:15:e3:8d:59:97:45:75: 91:cb:c5:08:65:03:41:6c:1d:49:e4:17:51:e9:40: 76:cf:b3:c8:3b:e5:15:f2:8b:ce:eb:9c:cf:15:10: 07:3a:28:98:e7:58:78:d3:95:e5:ec:21:69:3d:b1: 50:6f:ae:66:24:d5:51:56:2c:3c:22:74:da:90:85: 43:7b:bb:3d:96:ae:b8:7e:26:26:8f:cd:43:e3:7b: a0:09:c5:a3:ef:75:11:cd:87:cc:4b:05:ee:a8:87: e9:33:54:9e:25:27:ae:58:cd:f4:3e:5f:b2:9d:15: d7:32:19:35:f2:35:8e:a2:24:41:08:98:78:af:fb: 2e:92:b8:28:94:f3:12:3c:c8:44:6a:13:c3:ac:3d: d7:b5:ef:70:d2:66:88:93:87:a6:2b:1e:de:b8:9f: ab:69:3b:7a:05:8e:56:35:6d:ba:19:40:38:9f:d0: 11:ce:fe:9e:2f:5b:7e:9e:66:f1:0d:78:ba:42:b0: fa:9d:ae:61:db:f0:f2:4a:0f:9e:77:e0:96:cf:f0: 5e:39:60:18:75:29:fe:e6:c2:a5:a3:f9:d2:e6:c1: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A7:E8:7C:A7:71:06:A1:1A:43:A3:E2:28:3B:95:71:7D:50:62:67 X509v3 Authority Key Identifier: keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/N6fofKdxBqEaQ6PiKDuVcX1QYmc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.25.192.0/20 Signature Algorithm: sha256WithRSAEncryption 2e:e8:24:e8:65:df:43:8b:74:33:2d:b4:a9:52:c0:a7:82:14: a0:ec:b7:01:ee:e8:17:0e:69:34:21:2c:77:94:75:d8:c9:ae: 35:f5:ef:58:19:6e:40:3a:11:80:ac:62:f8:5e:d5:c3:47:0b: 61:3a:00:8a:89:73:a9:af:a5:51:f5:6e:55:c3:a3:4c:7e:08: e2:48:b4:1c:ce:b1:50:12:1c:f9:a4:96:50:ba:68:2a:45:21: d0:c3:b8:5f:a2:14:d8:af:b7:93:2f:38:58:bf:b2:74:16:d0: fb:81:83:9f:52:a2:3a:0f:39:6a:d2:52:c6:7f:c4:f4:1c:75: 8c:55:ea:f9:93:10:44:af:db:4b:1b:82:a7:6f:48:cc:9f:e4: 97:c0:44:c1:f0:7d:0e:1c:10:09:74:92:22:50:c5:f9:57:fc: 63:a2:ea:00:5f:e5:e5:77:86:3b:8a:a8:7a:68:ae:80:47:51: 53:86:c3:3b:78:85:3d:e9:29:25:6e:48:35:3d:8a:bd:9f:71: 5f:c3:93:ba:83:21:7b:2c:fa:9c:40:94:fc:68:b5:c9:5e:6a: 9a:40:23:e7:69:00:70:2e:58:f9:9c:cb:6f:b7:79:08:90:27: e6:84:92:04:50:af:18:66:8f:c2:d7:06:82:40:95:90:2c:41: fa:83:38:5c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzg4 Njc4RTY0RDI5MTg0QzIzREFBQURCNTk0QkZEOUJBRTI0MDVDMB4XDTIzMDkxNTA3 MTgzOVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMzdBN0U4N0NBNzcxMDZB MTFBNDNBM0UyMjgzQjk1NzE3RDUwNjI2NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL+x8rptZaAnB3UpVkWODxF0Ni3JHIyEZna/cPmvXY+NRkp7wJMV 441Zl0V1kcvFCGUDQWwdSeQXUelAds+zyDvlFfKLzuuczxUQBzoomOdYeNOV5ewh aT2xUG+uZiTVUVYsPCJ02pCFQ3u7PZauuH4mJo/NQ+N7oAnFo+91Ec2HzEsF7qiH 6TNUniUnrljN9D5fsp0V1zIZNfI1jqIkQQiYeK/7LpK4KJTzEjzIRGoTw6w917Xv cNJmiJOHpise3rifq2k7egWOVjVtuhlAOJ/QEc7+ni9bfp5m8Q14ukKw+p2uYdvw 8koPnnfgls/wXjlgGHUp/ubCpaP50ubB1KECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ3p+h8p3EGoRpDo+IoO5VxfVBiZzAfBgNVHSMEGDAWgBTXiGeOZNKRhMI9qq21 lL/ZuuJAXDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMzLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJyaVFGdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJy aVFGdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzMvTjZmb2ZLZHhCcUVhUTZQaUtEdVZjWDFRWW1jLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMoZwDANBgkqhkiG9w0BAQsFAAOCAQEALugk6GXfQ4t0My20qVLAp4IUoOy3 Ae7oFw5pNCEsd5R12MmuNfXvWBluQDoRgKxi+F7Vw0cLYToAiolzqa+lUfVuVcOj TH4I4ki0HM6xUBIc+aSWULpoKkUh0MO4X6IU2K+3ky84WL+ydBbQ+4GDn1KiOg85 atJSxn/E9Bx1jFXq+ZMQRK/bSxuCp29IzJ/kl8BEwfB9DhwQCXSSIlDF+Vf8Y6Lq AF/l5XeGO4qoemiugEdRU4bDO3iFPekpJW5INT2KvZ9xX8OTuoMheyz6nECU/Gi1 yV5qmkAj52kAcC5Y+ZzLb7d5CJAn5oSSBFCvGGaPwtcGgkCVkCxB+oM4XA== -----END CERTIFICATE-----Generated at Thu May 30 03:08:52 2024 by rpki-client on console-fra.rpki-client.org