$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/hTFYSxX6zmTdCMdm8l_q_ouaOHA.roa File: hTFYSxX6zmTdCMdm8l_q_ouaOHA.roa (raw, json) Hash identifier: e/ra4DFd8TabGrEdOXqNDJBNLmhcJAQegGRJHnWq9t4= Subject key identifier: 85:31:58:4B:15:FA:CE:64:DD:08:C7:66:F2:5F:EA:FE:8B:9A:38:70 Certificate issuer: /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Certificate serial: 2F Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/hTFYSxX6zmTdCMdm8l_q_ouaOHA.roa Signing time: Fri 15 Sep 2023 07:20:47 +0000 ROA not before: Fri 15 Sep 2023 07:20:47 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 7670 IP address blocks: 211.12.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Validity Not Before: Sep 15 07:20:47 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=8531584B15FACE64DD08C766F25FEAFE8B9A3870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:03:ce:3e:83:82:25:9c:b1:d9:fd:51:b0: 76:e8:19:e2:27:f8:cd:92:84:fa:04:d7:e9:a3:c5: fb:5d:58:0a:39:98:fc:e2:2f:28:dc:82:ac:5c:fc: 1c:f6:f6:a0:eb:10:ff:01:16:dd:c2:2c:7d:8a:da: 02:98:02:f5:9f:df:f6:90:b3:cb:34:db:df:a4:fe: 2f:da:6e:2e:13:96:96:1a:53:ff:e6:8f:c7:4e:86: 0b:1d:5f:b2:c0:2d:c3:dc:7a:97:2c:cb:0a:89:f3: d3:e2:8d:93:bd:f5:f1:e1:62:a5:09:00:0d:9d:43: 9e:28:e7:e0:ca:3d:6d:14:75:92:8d:c1:e5:31:5d: 4c:57:4f:3c:57:40:a0:8e:3d:33:28:77:ad:e0:fb: 47:bf:17:49:69:9a:6a:51:d0:13:9a:13:8c:e0:f0: 8d:8e:cc:12:5b:e8:39:bf:7c:e3:ec:12:95:f0:3b: 4a:d1:f4:80:b6:9b:74:5a:cf:2b:c5:1d:f8:fb:7c: 25:01:6c:9c:73:21:ac:71:15:1c:a9:66:cd:ad:83: 48:81:90:03:45:11:fd:b1:46:65:ae:bb:fa:02:ee: 0a:77:2f:22:b6:d2:d1:8a:f5:e6:6b:42:7e:4a:27: ea:b1:d7:94:52:89:39:cb:d9:95:b0:82:30:01:ca: 6e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:31:58:4B:15:FA:CE:64:DD:08:C7:66:F2:5F:EA:FE:8B:9A:38:70 X509v3 Authority Key Identifier: keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/hTFYSxX6zmTdCMdm8l_q_ouaOHA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.12.224.0/19 Signature Algorithm: sha256WithRSAEncryption 91:fd:7b:88:af:70:b2:d4:99:84:7c:f1:3b:5b:62:be:01:5a: bd:d0:a7:3f:67:21:24:af:3e:b0:bc:a0:d9:af:a7:a8:8c:45: ec:c0:09:85:ab:43:6e:13:ce:29:5f:f0:10:3d:d6:50:d6:0a: 84:08:00:7c:2a:03:65:95:a3:c8:bb:8d:1d:e2:cc:95:86:df: 46:97:50:cb:27:2a:07:13:08:9d:e3:db:f7:d4:18:1c:bc:c3: 07:77:04:80:ef:e5:c7:55:72:82:14:57:c1:ef:ef:4b:2c:42: 4b:1d:34:84:71:be:51:5a:14:e3:34:cb:20:af:0e:af:96:8e: 31:57:be:87:b7:ad:5c:01:b6:86:02:61:8e:9a:f8:f1:94:2c: 55:5e:ab:f1:a0:65:ca:58:50:6c:10:43:fc:b1:a2:8c:ab:62: 56:69:64:7a:ee:6c:82:a0:41:f4:db:48:1c:40:3d:eb:8d:4a: e7:c6:91:83:1b:bb:66:f1:57:b8:61:02:aa:34:c6:de:f7:da: 1d:eb:e7:72:e8:74:d3:2e:00:23:45:8a:48:89:03:45:04:fa: be:2c:91:f7:0a:e6:24:89:47:ce:ea:f3:45:23:f6:6a:94:7c: 36:c8:f2:82:a2:66:43:2f:c6:db:69:2a:ed:c9:cd:bb:1d:04: da:d2:9f:8d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzg4 Njc4RTY0RDI5MTg0QzIzREFBQURCNTk0QkZEOUJBRTI0MDVDMB4XDTIzMDkxNTA3 MjA0N1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoODUzMTU4NEIxNUZBQ0U2 NEREMDhDNzY2RjI1RkVBRkU4QjlBMzg3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANPUA84+g4IlnLHZ/VGwdugZ4if4zZKE+gTX6aPF+11YCjmY/OIv KNyCrFz8HPb2oOsQ/wEW3cIsfYraApgC9Z/f9pCzyzTb36T+L9puLhOWlhpT/+aP x06GCx1fssAtw9x6lyzLConz0+KNk7318eFipQkADZ1Dnijn4Mo9bRR1ko3B5TFd TFdPPFdAoI49Myh3reD7R78XSWmaalHQE5oTjODwjY7MElvoOb984+wSlfA7StH0 gLabdFrPK8Ud+Pt8JQFsnHMhrHEVHKlmza2DSIGQA0UR/bFGZa67+gLuCncvIrbS 0Yr15mtCfkon6rHXlFKJOcvZlbCCMAHKbgkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSFMVhLFfrOZN0Ix2byX+r+i5o4cDAfBgNVHSMEGDAWgBTXiGeOZNKRhMI9qq21 lL/ZuuJAXDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMzLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJyaVFGdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJy aVFGdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzMvaFRGWVN4WDZ6bVRkQ01kbThsX3Ffb3VhT0hBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdMM4DANBgkqhkiG9w0BAQsFAAOCAQEAkf17iK9wstSZhHzxO1tivgFavdCn P2chJK8+sLyg2a+nqIxF7MAJhatDbhPOKV/wED3WUNYKhAgAfCoDZZWjyLuNHeLM lYbfRpdQyycqBxMInePb99QYHLzDB3cEgO/lx1VyghRXwe/vSyxCSx00hHG+UVoU 4zTLIK8Or5aOMVe+h7etXAG2hgJhjpr48ZQsVV6r8aBlylhQbBBD/LGijKtiVmlk eu5sgqBB9NtIHEA9641K58aRgxu7ZvFXuGECqjTG3vfaHevncuh00y4AI0WKSIkD RQT6viyR9wrmJIlHzurzRSP2apR8NsjygqJmQy/G22kq7cnNux0E2tKfjQ== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org