$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/nS-ND6iFFSCFTBSDn3uGLSMftIo.roa File: nS-ND6iFFSCFTBSDn3uGLSMftIo.roa (raw, json) Hash identifier: s71c14XHgOgRW16y/PT4r/BgOEU4Wljxo6SjxWqCjDw= Subject key identifier: 9D:2F:8D:0F:A8:85:15:20:85:4C:14:83:9F:7B:86:2D:23:1F:B4:8A Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: D4 Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/nS-ND6iFFSCFTBSDn3uGLSMftIo.roa Signing time: Fri 31 May 2024 01:31:18 +0000 ROA not before: Fri 31 May 2024 01:31:18 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 9370 IP address blocks: 153.121.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: May 31 01:31:18 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=9D2F8D0FA8851520854C14839F7B862D231FB48A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:3e:8f:6c:99:4f:32:e4:07:01:77:b6:bf: 19:cd:57:77:a5:06:7d:fa:db:65:1b:e4:95:19:86: b2:58:06:ef:09:04:43:28:c0:09:86:62:96:40:7d: fc:b3:86:db:93:77:90:57:6f:a4:bd:89:f1:fd:d5: 2d:09:b5:2e:4c:f7:7c:bf:12:d1:e0:1e:54:04:f0: 10:81:2d:b3:bf:58:32:cd:c0:44:f2:da:66:59:1d: f0:83:8c:c8:c6:0f:60:4b:7c:56:58:b6:00:16:ea: 5f:96:65:f3:10:89:98:40:0a:0e:6b:9d:58:23:c8: 34:10:5c:3f:cd:9e:de:3e:ad:01:d5:6f:ea:0a:75: dc:dd:67:23:20:1a:84:84:03:2c:52:01:8c:f6:47: a1:e6:41:11:67:43:72:d2:b1:cb:c8:27:d4:3b:bb: 10:b8:cb:47:6a:63:0c:04:f2:74:b7:9f:e7:e9:fe: e5:5c:de:a2:cd:44:9c:d6:b5:a0:ba:07:cc:10:bc: 4b:2a:6d:fd:71:a2:8e:a0:e3:3f:46:0a:78:b9:cd: 70:ba:31:5a:ab:90:bc:73:bb:c2:28:49:5c:f7:1d: e4:ea:18:fb:44:45:bd:05:70:1e:e4:83:a6:8f:cb: c9:86:24:5b:6f:63:52:12:36:6e:9d:8a:bc:12:df: 4f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2F:8D:0F:A8:85:15:20:85:4C:14:83:9F:7B:86:2D:23:1F:B4:8A X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/nS-ND6iFFSCFTBSDn3uGLSMftIo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.121.64.0/19 Signature Algorithm: sha256WithRSAEncryption 52:9d:fc:d4:88:7f:23:c7:dc:5b:02:3e:5a:6d:3b:e0:fa:aa: 69:18:5a:67:21:59:03:5b:48:0e:34:66:e1:ae:e7:70:7e:3b: 72:e8:1d:5a:18:44:c8:5c:b0:3e:d1:8b:6c:ce:0c:a6:73:6e: 23:94:17:52:92:b2:43:ab:8f:18:a9:2c:6c:62:a2:25:4d:9c: c6:20:e9:fc:46:d0:08:90:1f:20:fd:31:97:0b:d5:3a:08:65: 3b:38:24:1e:24:2e:4c:11:4b:33:9b:db:af:16:7a:f7:7c:ba: 18:7a:61:de:1a:36:59:82:ce:b1:79:9f:6f:39:0a:3b:9d:4a: 8e:dd:a1:3e:16:6e:15:c9:4c:44:1a:7f:b6:86:66:92:08:93: d4:09:fe:88:fb:79:ed:28:3b:b9:08:a9:4f:e5:23:07:49:27: 9f:ba:b5:05:3a:af:05:52:b0:15:23:69:70:05:93:e4:a0:c8: 2c:47:77:ed:a7:d8:80:d2:eb:b8:30:05:00:e6:10:0d:ab:7f: 19:ba:50:47:69:6e:58:74:7f:c3:6a:80:a7:b2:ed:18:fd:6c: ed:c5:f0:f5:92:b4:18:93:e7:44:8e:d8:e4:37:60:20:eb:69: 5b:e0:1d:e9:7f:5e:e1:a2:9e:2c:36:e2:41:ce:80:92:fe:47: 77:86:14:70 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNDA1MzEw MTMxMThaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlEMkY4RDBGQTg4NTE1 MjA4NTRDMTQ4MzlGN0I4NjJEMjMxRkI0OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZfD6PbJlPMuQHAXe2vxnNV3elBn3622Ub5JUZhrJYBu8JBEMo wAmGYpZAffyzhtuTd5BXb6S9ifH91S0JtS5M93y/EtHgHlQE8BCBLbO/WDLNwETy 2mZZHfCDjMjGD2BLfFZYtgAW6l+WZfMQiZhACg5rnVgjyDQQXD/Nnt4+rQHVb+oK ddzdZyMgGoSEAyxSAYz2R6HmQRFnQ3LSscvIJ9Q7uxC4y0dqYwwE8nS3n+fp/uVc 3qLNRJzWtaC6B8wQvEsqbf1xoo6g4z9GCni5zXC6MVqrkLxzu8IoSVz3HeTqGPtE Rb0FcB7kg6aPy8mGJFtvY1ISNm6dirwS30+VAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnS+ND6iFFSCFTBSDn3uGLSMftIowHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ3L25TLU5ENmlGRlNDRlRCU0RuM3VHTFNNZnRJby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWZeUAwDQYJKoZIhvcNAQELBQADggEBAFKd/NSIfyPH3FsCPlptO+D6qmkY WmchWQNbSA40ZuGu53B+O3LoHVoYRMhcsD7Ri2zODKZzbiOUF1KSskOrjxipLGxi oiVNnMYg6fxG0AiQHyD9MZcL1ToIZTs4JB4kLkwRSzOb268Wevd8uhh6Yd4aNlmC zrF5n285CjudSo7doT4WbhXJTEQaf7aGZpIIk9QJ/oj7ee0oO7kIqU/lIwdJJ5+6 tQU6rwVSsBUjaXAFk+SgyCxHd+2n2IDS67gwBQDmEA2rfxm6UEdpblh0f8NqgKey 7Rj9bO3F8PWStBiT50SO2OQ3YCDraVvgHel/XuGiniw24kHOgJL+R3eGFHA= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org