$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/Fo_w_cE0dEYmS0p0zt2d0mYEilA.roa File: Fo_w_cE0dEYmS0p0zt2d0mYEilA.roa (raw, json) Hash identifier: 6gdoo6K4/bfGsY+tMX2P4ALjAOcTSW882xTo9j5S/CM= Subject key identifier: 16:8F:F0:FD:C1:34:74:46:26:4B:4A:74:CE:DD:9D:D2:66:04:8A:50 Certificate issuer: /CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10 Certificate serial: 10 Authority key identifier: 49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/Fo_w_cE0dEYmS0p0zt2d0mYEilA.roa Signing time: Sun 01 Oct 2023 01:29:50 +0000 ROA not before: Sun 01 Oct 2023 01:29:50 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 19905 IP address blocks: 133.250.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 13:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10 Validity Not Before: Oct 1 01:29:50 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=168FF0FDC1347446264B4A74CEDD9DD266048A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:2a:02:b3:0a:d5:d6:0b:5b:b6:23:dc:e9: 8d:b6:b7:9a:f8:65:2d:0f:25:36:e7:5e:1a:b7:d7: 26:4e:27:a1:c8:77:33:21:34:4d:54:19:a3:3c:8e: ef:a1:bf:52:eb:60:59:5c:67:48:f2:95:33:95:8c: e7:b7:88:8f:ba:1b:e2:f4:ee:a7:86:0b:39:36:a4: b9:21:53:31:6d:56:af:6a:a7:db:6a:55:52:20:7e: 92:5b:7a:70:83:55:4d:58:cd:28:0f:74:27:7f:c4: 76:dc:69:8c:c7:91:18:f4:43:af:51:e9:ea:36:46: 76:1a:26:3c:a1:4b:3e:dc:35:a3:a0:85:64:c8:1e: f4:e1:38:c4:e6:30:af:a9:c4:1b:0d:12:63:b7:10: 91:33:ba:54:22:1f:4d:62:5d:41:a4:4b:ec:1d:5f: 53:65:ab:0e:78:4e:f4:aa:4e:7a:a8:39:98:87:a6: ef:4d:cc:c5:32:7f:af:6c:3e:2a:01:26:d6:88:8c: c2:ae:6b:6c:76:93:ad:db:94:4b:0f:c9:e9:c7:76: 05:ae:9b:f1:2c:46:ad:88:c7:0e:40:08:da:e0:8d: 7d:85:cf:29:4c:14:60:98:64:38:8c:5d:8b:38:e2: 02:68:a8:ba:34:1f:33:97:ef:a7:ce:c9:67:e1:8d: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8F:F0:FD:C1:34:74:46:26:4B:4A:74:CE:DD:9D:D2:66:04:8A:50 X509v3 Authority Key Identifier: keyid:49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/Fo_w_cE0dEYmS0p0zt2d0mYEilA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.250.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4e:66:f0:da:65:6d:dd:69:cd:08:2c:4f:0a:d4:df:b5:36:37: a2:52:04:08:72:c5:41:32:19:c9:04:d1:70:7e:1e:19:fb:84: 80:a1:47:98:3e:fb:61:e0:a9:ba:4e:21:ae:81:d7:f8:80:c3: 88:45:e6:1a:0b:b8:72:88:76:d2:de:a3:f7:78:2b:ce:df:e3: 2c:1e:fc:dc:17:25:5a:f2:2e:67:ec:55:bb:64:e4:c7:d6:1f: c3:30:ed:dc:a5:01:dd:43:f4:9f:b2:be:e0:b3:8b:b3:fb:f7: 3e:60:4b:58:51:57:1e:ca:79:bd:d0:f0:c8:cc:bc:d6:10:32: ca:d4:e8:8a:c0:68:0e:f1:7e:64:96:e0:ad:4e:35:da:89:88: 95:c0:44:1b:8d:06:ae:86:9f:93:19:44:c9:99:bf:44:73:6c: 39:ad:93:d1:55:f0:9e:a9:36:06:bc:85:a2:26:63:6d:ef:06: b5:a0:71:de:24:f0:b9:04:f9:b5:78:bf:16:6f:17:64:c5:06: 34:c4:42:05:a3:71:92:8a:b3:7a:ed:a1:f4:56:86:8a:ec:32: ad:5b:9f:52:5b:2d:a2:6d:bd:9f:6f:1f:7b:34:33:08:b9:fb: 33:8f:97:46:c9:55:85:79:09:bf:a1:e5:86:74:e4:39:cf:f5: 26:bb:29:8f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0OUQ3 QUFBNDcwNTdCQzUwQUJERDQxMEE4RkEzOUFCREExMDAzRTEwMB4XDTIzMTAwMTAx Mjk1MFoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMTY4RkYwRkRDMTM0NzQ0 NjI2NEI0QTc0Q0VERDlERDI2NjA0OEE1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMBCKgKzCtXWC1u2I9zpjba3mvhlLQ8lNudeGrfXJk4noch3MyE0 TVQZozyO76G/UutgWVxnSPKVM5WM57eIj7ob4vTup4YLOTakuSFTMW1Wr2qn22pV UiB+klt6cINVTVjNKA90J3/EdtxpjMeRGPRDr1Hp6jZGdhomPKFLPtw1o6CFZMge 9OE4xOYwr6nEGw0SY7cQkTO6VCIfTWJdQaRL7B1fU2WrDnhO9KpOeqg5mIem703M xTJ/r2w+KgEm1oiMwq5rbHaTrduUSw/J6cd2Ba6b8SxGrYjHDkAI2uCNfYXPKUwU YJhkOIxdizjiAmioujQfM5fvp87JZ+GNrQUCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQWj/D9wTR0RiZLSnTO3Z3SZgSKUDAfBgNVHSMEGDAWgBRJ16qkcFe8UKvdQQqP o5q9oQA+EDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM3MC9TZGVxcEhCWHZGQ3IzVUVLajZPYXZhRUFQaEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9TZGVxcEhCWHZGQ3IzVUVLajZPYXZh RUFQaEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM3MC9Gb193X2NFMGRFWW1TMHAwenQyZDBtWUVpbEEucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQHhfqAMA0GCSqGSIb3DQEBCwUAA4IBAQBOZvDaZW3dac0ILE8K1N+1Njei UgQIcsVBMhnJBNFwfh4Z+4SAoUeYPvth4Km6TiGugdf4gMOIReYaC7hyiHbS3qP3 eCvO3+MsHvzcFyVa8i5n7FW7ZOTH1h/DMO3cpQHdQ/Sfsr7gs4uz+/c+YEtYUVce ynm90PDIzLzWEDLK1OiKwGgO8X5kluCtTjXaiYiVwEQbjQauhp+TGUTJmb9Ec2w5 rZPRVfCeqTYGvIWiJmNt7wa1oHHeJPC5BPm1eL8WbxdkxQY0xEIFo3GSirN67aH0 VoaK7DKtW59SWy2ibb2fbx97NDMIufszj5dGyVWFeQm/oeWGdOQ5z/UmuymP -----END CERTIFICATE-----Generated at Thu May 2 14:32:28 2024 by rpki-client on console-fra.rpki-client.org