$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/HG9Lk6mHD1mSjGj9v0fZ41GeTNw.roa File: HG9Lk6mHD1mSjGj9v0fZ41GeTNw.roa (raw, json) Hash identifier: T86qjzRATkeWAIzgIIAR0+8mdJ6EPLUQGz87PNMnwIU= Subject key identifier: 1C:6F:4B:93:A9:87:0F:59:92:8C:68:FD:BF:47:D9:E3:51:9E:4C:DC Certificate issuer: /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D Certificate serial: 2F Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/HG9Lk6mHD1mSjGj9v0fZ41GeTNw.roa Signing time: Sat 03 Aug 2024 02:01:51 +0000 ROA not before: Sat 03 Aug 2024 02:01:51 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 9597 IP address blocks: 219.100.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D Validity Not Before: Aug 3 02:01:51 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=1C6F4B93A9870F59928C68FDBF47D9E3519E4CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:a0:5c:08:b0:d2:88:db:9e:93:8b:b8:04: 04:86:ef:e6:17:75:40:4c:8d:24:76:6b:cc:cf:85: f0:2f:31:33:b1:d4:e2:38:49:45:6f:f7:dd:eb:75: f3:0d:86:26:ed:ef:12:aa:eb:6e:c3:bd:36:29:94: 4f:db:73:99:ff:bd:e6:eb:07:d9:62:d2:32:7d:96: e6:22:df:0a:86:bd:c6:27:72:1f:5b:b7:b5:95:2c: 8c:5d:40:71:40:6f:70:3b:05:0f:80:30:7a:32:01: dc:26:47:6a:5f:93:2b:77:6d:f5:f2:29:25:82:88: b8:22:07:b7:25:03:42:03:dd:92:b8:1a:32:ee:06: 4b:da:d3:a0:35:b9:38:08:6d:84:8b:d7:40:bd:b7: 21:39:15:a1:78:90:08:94:d2:5b:a2:86:02:ac:aa: d3:3d:55:70:b5:4c:0d:80:54:66:ab:8d:cf:7c:e5: a9:29:3f:87:bd:61:3e:07:55:7f:98:4c:d6:f9:2a: c5:41:62:d0:ec:ad:11:da:93:00:e5:ca:07:a6:c1: b8:36:5d:46:65:bd:68:3d:d5:a6:6e:9b:cd:ae:b1: 03:f7:88:21:da:99:0d:5e:19:ed:21:a9:c1:e7:aa: 12:d8:8d:e2:63:57:d6:86:a6:89:73:1b:98:f5:8f: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6F:4B:93:A9:87:0F:59:92:8C:68:FD:BF:47:D9:E3:51:9E:4C:DC X509v3 Authority Key Identifier: keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/HG9Lk6mHD1mSjGj9v0fZ41GeTNw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.168.0/22 Signature Algorithm: sha256WithRSAEncryption 25:c3:ba:58:0e:05:39:1d:7b:f3:a5:95:4d:16:18:17:c7:d7: c5:cd:34:4e:70:48:5b:3c:2c:b7:32:59:67:60:81:34:e7:f3: 0a:bd:34:f3:3a:40:c5:47:54:e6:4e:1a:63:b2:05:09:30:35: 28:1c:bd:15:aa:71:9f:f4:43:ac:6c:12:3f:51:30:b8:9b:c5: 91:d6:ca:47:61:a2:af:a3:ce:24:fb:fa:fd:bf:95:0e:13:8a: f9:fc:bc:c7:f0:a5:2b:0b:0d:1b:fa:ff:b8:d5:03:75:03:b6: cc:22:cd:7f:17:d7:02:96:c0:ea:7a:ba:58:d9:f7:f2:04:77: 38:27:cf:06:04:e9:30:a7:a7:b2:ba:d3:9f:3e:f7:3e:46:56: e5:88:1c:21:54:d8:63:0b:d2:19:f7:93:ae:fc:8c:42:1e:f4: 6d:c2:3e:bd:b0:90:64:1b:dd:79:d7:5c:fb:49:47:e6:8b:23: b8:44:0a:1e:76:28:7c:58:bb:fa:1a:8e:93:36:a2:da:68:b5: 98:ad:54:86:89:4c:d9:75:a4:06:5e:da:95:57:20:2c:e0:4a: a2:80:5a:ad:44:a5:d9:83:df:46:ed:11:e3:f4:d8:9c:60:10: 68:ca:2c:4d:e7:a9:d0:f4:5d:5e:f9:b3:01:84:49:88:90:41: 1f:1a:bf:61 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5 NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTI0MDgwMzAy MDE1MVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMUM2RjRCOTNBOTg3MEY1 OTkyOEM2OEZEQkY0N0Q5RTM1MTlFNENEQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMvyoFwIsNKI256Ti7gEBIbv5hd1QEyNJHZrzM+F8C8xM7HU4jhJ RW/33et18w2GJu3vEqrrbsO9NimUT9tzmf+95usH2WLSMn2W5iLfCoa9xidyH1u3 tZUsjF1AcUBvcDsFD4AwejIB3CZHal+TK3dt9fIpJYKIuCIHtyUDQgPdkrgaMu4G S9rToDW5OAhthIvXQL23ITkVoXiQCJTSW6KGAqyq0z1VcLVMDYBUZquNz3zlqSk/ h71hPgdVf5hM1vkqxUFi0OytEdqTAOXKB6bBuDZdRmW9aD3Vpm6bza6xA/eIIdqZ DV4Z7SGpweeqEtiN4mNX1oamiXMbmPWPwDECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQcb0uTqYcPWZKMaP2/R9njUZ5M3DAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9 eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2 a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDAvSEc5TGs2bUhEMW1TakdqOXYwZlo0MUdlVE53LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAttkqDANBgkqhkiG9w0BAQsFAAOCAQEAJcO6WA4FOR1786WVTRYYF8fXxc00 TnBIWzwstzJZZ2CBNOfzCr008zpAxUdU5k4aY7IFCTA1KBy9Fapxn/RDrGwSP1Ew uJvFkdbKR2Gir6POJPv6/b+VDhOK+fy8x/ClKwsNG/r/uNUDdQO2zCLNfxfXApbA 6nq6WNn38gR3OCfPBgTpMKensrrTnz73PkZW5YgcIVTYYwvSGfeTrvyMQh70bcI+ vbCQZBvdeddc+0lH5osjuEQKHnYofFi7+hqOkzai2mi1mK1UholM2XWkBl7alVcg LOBKooBarUSl2YPfRu0R4/TYnGAQaMosTeep0PRdXvmzAYRJiJBBHxq/YQ== -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org