$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Or5xG3l5sUHkuKCbCMU0fEPySe8.roa File: Or5xG3l5sUHkuKCbCMU0fEPySe8.roa (raw, json) Hash identifier: AsZVeJ7B5uLdxpeaLce1eKnyh2yHkEiQLw7rImPE34U= Subject key identifier: 3A:BE:71:1B:79:79:B1:41:E4:B8:A0:9B:08:C5:34:7C:43:F2:49:EF Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Certificate serial: 21 Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Or5xG3l5sUHkuKCbCMU0fEPySe8.roa Signing time: Wed 28 Feb 2024 05:03:56 +0000 ROA not before: Wed 28 Feb 2024 05:03:56 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 7679 IP address blocks: 211.132.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Validity Not Before: Feb 28 05:03:56 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=3ABE711B7979B141E4B8A09B08C5347C43F249EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:94:dc:7e:55:14:f7:ec:88:9d:01:c6:d2: 23:45:4f:18:c3:29:7e:ff:0d:52:d8:8f:8f:c0:71: 4f:f6:2e:9d:52:58:12:f7:ad:c6:6d:65:ec:d3:a7: 5e:e1:c8:04:ed:7d:14:9d:69:37:36:5b:b7:fe:3a: f8:47:b0:b2:95:be:c3:b4:0e:d6:35:de:c7:83:61: 5b:14:f6:2d:b6:38:b9:da:0b:d1:b2:25:5a:83:25: 02:b1:eb:d4:02:74:65:dd:48:b9:b3:35:d7:fd:02: 5f:c6:dd:16:52:16:9c:c1:d1:43:6f:bb:ad:09:1f: 08:c3:ec:c9:7f:16:66:01:a9:1f:bd:25:1a:d3:0b: 07:46:be:ce:bb:f0:5f:9c:4d:15:2e:67:97:d4:9b: f2:d9:a8:46:6e:69:5f:db:46:0b:79:21:4b:91:a2: 2c:f2:c6:26:e9:19:84:ed:ea:8a:0f:31:db:01:d3: a0:ed:42:a9:cc:13:45:f7:f4:7f:ee:3c:47:b0:90: ce:98:7e:80:4a:fd:d3:bd:e6:d5:f4:1a:fe:50:ab: a0:ba:89:ab:7d:19:fe:3e:c9:98:25:43:04:c3:88: 75:e9:1f:0c:04:67:e9:fc:42:9b:3b:79:10:05:67: c7:2d:ca:c1:8b:67:61:51:b7:57:71:6b:a1:08:e0: ea:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BE:71:1B:79:79:B1:41:E4:B8:A0:9B:08:C5:34:7C:43:F2:49:EF X509v3 Authority Key Identifier: keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Or5xG3l5sUHkuKCbCMU0fEPySe8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.132.96.0/19 Signature Algorithm: sha256WithRSAEncryption bd:8e:e7:a7:cd:fd:88:9a:74:32:f6:cc:6f:3a:d8:94:b4:24: 13:19:9e:1c:a1:eb:78:a1:9f:dd:cc:d4:3d:32:a6:d2:fa:85: d3:77:53:fc:4b:56:23:8b:9b:5b:bd:5d:87:f1:88:4a:b5:6b: 7a:98:57:14:f8:a3:4d:c5:5a:a0:b2:1a:16:5a:a4:54:fe:02: 6e:40:48:ea:3b:7d:78:a4:e3:16:a9:05:44:34:86:ac:41:c6: f0:43:06:28:81:e0:47:dd:a1:30:d2:d5:45:37:8a:ac:88:e6: 3e:fd:66:d4:c6:c2:34:d6:70:aa:b2:18:a4:18:a8:0c:8b:ed: 3d:54:f2:ed:e0:8d:9a:a1:54:50:1a:91:30:39:bc:5f:67:2b: d2:bb:39:79:43:ab:3d:07:8b:05:9f:bf:3a:cd:e2:bf:45:00: bb:5e:34:21:bd:6f:7f:0c:22:0b:a6:f2:68:84:ae:58:93:22: f9:65:48:02:7c:24:3c:33:15:20:08:a8:50:d5:0a:c5:78:49: 48:0c:be:f4:d4:18:6e:8c:5c:69:20:22:77:ca:a1:20:f7:42: 9e:cf:24:ae:d4:cb:c9:7e:ce:e6:58:9f:47:da:ef:d6:bd:81: f8:dc:de:0f:c2:83:13:4e:5b:bd:64:70:38:8f:6f:e4:64:33: c1:8f:18:3b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI0MDIyODA1 MDM1NloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoM0FCRTcxMUI3OTc5QjE0 MUU0QjhBMDlCMDhDNTM0N0M0M0YyNDlFRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ6ilNx+VRT37IidAcbSI0VPGMMpfv8NUtiPj8BxT/YunVJYEvet xm1l7NOnXuHIBO19FJ1pNzZbt/46+EewspW+w7QO1jXex4NhWxT2LbY4udoL0bIl WoMlArHr1AJ0Zd1IubM11/0CX8bdFlIWnMHRQ2+7rQkfCMPsyX8WZgGpH70lGtML B0a+zrvwX5xNFS5nl9Sb8tmoRm5pX9tGC3khS5GiLPLGJukZhO3qig8x2wHToO1C qcwTRff0f+48R7CQzph+gEr9073m1fQa/lCroLqJq30Z/j7JmCVDBMOIdekfDARn 6fxCmzt5EAVnxy3KwYtnYVG3V3FroQjg6qcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ6vnEbeXmxQeS4oJsIxTR8Q/JJ7zAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDkvT3I1eEczbDVzVUhrdUtDYkNNVTBmRVB5U2U4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdOEYDANBgkqhkiG9w0BAQsFAAOCAQEAvY7np839iJp0MvbMbzrYlLQkExme HKHreKGf3czUPTKm0vqF03dT/EtWI4ubW71dh/GISrVrephXFPijTcVaoLIaFlqk VP4CbkBI6jt9eKTjFqkFRDSGrEHG8EMGKIHgR92hMNLVRTeKrIjmPv1m1MbCNNZw qrIYpBioDIvtPVTy7eCNmqFUUBqRMDm8X2cr0rs5eUOrPQeLBZ+/Os3iv0UAu140 Ib1vfwwiC6byaISuWJMi+WVIAnwkPDMVIAioUNUKxXhJSAy+9NQYboxcaSAid8qh IPdCns8krtTLyX7O5lifR9rv1r2B+NzeD8KDE05bvWRwOI9v5GQzwY8YOw== -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org