$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/NnkTy5yxvIDCJyxV28V9ebVHovA.roa File: NnkTy5yxvIDCJyxV28V9ebVHovA.roa (raw, json) Hash identifier: SNe/ArmWAhAfL6faNbGEPGoTBBTg0yu02csmA8h78pQ= Subject key identifier: 36:79:13:CB:9C:B1:BC:80:C2:27:2C:55:DB:C5:7D:79:B5:47:A2:F0 Certificate issuer: /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Certificate serial: 46 Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/NnkTy5yxvIDCJyxV28V9ebVHovA.roa Signing time: Tue 14 May 2024 10:08:40 +0000 ROA not before: Tue 14 May 2024 10:08:40 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 7687 IP address blocks: 160.246.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Validity Not Before: May 14 10:08:40 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=367913CB9CB1BC80C2272C55DBC57D79B547A2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:a3:3a:10:ce:75:bf:94:a1:74:30:c1:7e: 53:d2:e5:db:41:6c:e9:0a:a5:0e:dc:84:0c:1a:ee: c6:69:6c:ef:02:78:33:d0:4b:7a:f6:7d:81:fb:b6: 43:9a:4b:64:83:8f:51:64:f6:de:ff:ad:e3:a8:ab: 11:fc:3b:db:78:30:f5:61:77:bc:18:e0:4b:75:6c: a0:f2:b8:f9:34:5f:f2:cb:ff:3d:00:ad:2c:a1:9f: 56:9d:cc:71:7b:e5:12:1e:c7:6d:0c:85:09:63:3e: 4b:6a:eb:60:74:57:80:8e:86:5b:1a:30:33:55:32: d9:29:05:38:d9:e8:26:8a:e5:4e:61:35:51:6e:7e: 32:f5:9a:a7:a8:83:fb:8a:cc:dc:e0:9e:a7:f9:84: 82:04:ce:0a:12:07:36:d3:d1:68:76:9d:c0:92:42: 3f:42:46:6e:d7:dd:ab:c3:9b:4a:dd:a5:db:8a:40: e0:d7:71:e7:98:72:2f:a2:4a:01:3c:47:08:5c:59: ab:55:79:d5:72:02:67:a0:96:56:c4:6e:19:b5:50: 14:2a:9e:d5:37:e0:98:f9:00:5e:c4:87:86:61:ef: ed:50:15:fd:57:a7:10:fb:73:13:55:31:ab:f0:80: e4:62:43:17:17:8e:c3:da:ce:ac:c0:e6:ad:78:41: a7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:79:13:CB:9C:B1:BC:80:C2:27:2C:55:DB:C5:7D:79:B5:47:A2:F0 X509v3 Authority Key Identifier: keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/NnkTy5yxvIDCJyxV28V9ebVHovA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.246.0.0/17 Signature Algorithm: sha256WithRSAEncryption 96:63:0b:32:58:af:0d:9c:54:fe:8e:da:97:2d:fe:15:41:00: d7:5f:8e:65:a0:06:1b:01:07:1f:5c:e8:9f:ec:5c:20:1d:75: 54:bd:3b:13:66:c0:af:37:6a:96:1e:f3:70:2b:68:78:07:ae: ed:99:9d:3b:46:33:66:fc:6f:08:36:96:a6:81:49:14:06:ce: 29:82:b3:51:f3:e1:90:76:ee:40:58:44:d1:8e:ef:29:be:cf: fb:f8:5d:62:e2:4c:54:f1:f9:1b:b9:4c:fa:02:5b:a8:af:4c: 74:8e:c3:dd:00:33:17:a5:26:0a:5c:fe:75:4c:53:cf:77:f9: 92:4d:46:7d:dc:7a:4e:e6:b6:b9:ed:6e:67:57:56:4d:f3:7a: 67:79:ce:68:a0:7a:95:0f:c5:8b:d0:e1:ad:29:80:f8:a4:58: 01:bf:af:23:c7:48:ac:ef:af:dd:44:6c:b0:89:d6:c5:75:f1: 78:30:cb:08:e3:05:59:bf:28:4e:8a:b8:04:93:77:12:cf:d2: fa:a8:f0:e6:a1:e7:4d:ec:22:29:19:2a:4a:0b:3e:ba:f4:a8: 4a:da:af:50:48:a5:50:61:39:63:3c:dc:03:c1:4f:97:1b:b1: 2e:53:e9:72:67:d3:19:69:e0:f5:74:f6:76:b6:63:b6:da:f0: f3:da:d5:a3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEU1 M0M1MjQ0QjdGOUE3NkQ1RjlERjlGQkFGNjFFNTdCMkVBOTNCMB4XDTI0MDUxNDEw MDg0MFoXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMzY3OTEzQ0I5Q0IxQkM4 MEMyMjcyQzU1REJDNTdENzlCNTQ3QTJGMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMnZozoQznW/lKF0MMF+U9Ll20Fs6QqlDtyEDBruxmls7wJ4M9BL evZ9gfu2Q5pLZIOPUWT23v+t46irEfw723gw9WF3vBjgS3VsoPK4+TRf8sv/PQCt LKGfVp3McXvlEh7HbQyFCWM+S2rrYHRXgI6GWxowM1Uy2SkFONnoJorlTmE1UW5+ MvWap6iD+4rM3OCep/mEggTOChIHNtPRaHadwJJCP0JGbtfdq8ObSt2l24pA4Ndx 55hyL6JKATxHCFxZq1V51XICZ6CWVsRuGbVQFCqe1TfgmPkAXsSHhmHv7VAV/Ven EPtzE1Uxq/CA5GJDFxeOw9rOrMDmrXhBp20CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQ2eRPLnLG8gMInLFXbxX15tUei8DAfBgNVHSMEGDAWgBS45TxSRLf5p21fnfn7 r2Hley6pOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91T1U4VWtTMy1hZHRYNTM1LTY5aDVY c3VxVHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ5MC9ObmtUeTV5eHZJRENKeXhWMjhWOWViVkhvdkEucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQHoPYAMA0GCSqGSIb3DQEBCwUAA4IBAQCWYwsyWK8NnFT+jtqXLf4VQQDX X45loAYbAQcfXOif7FwgHXVUvTsTZsCvN2qWHvNwK2h4B67tmZ07RjNm/G8INpam gUkUBs4pgrNR8+GQdu5AWETRju8pvs/7+F1i4kxU8fkbuUz6Aluor0x0jsPdADMX pSYKXP51TFPPd/mSTUZ93HpO5ra57W5nV1ZN83pnec5ooHqVD8WL0OGtKYD4pFgB v68jx0is76/dRGywidbFdfF4MMsI4wVZvyhOirgEk3cSz9L6qPDmoedN7CIpGSpK Cz669KhK2q9QSKVQYTljPNwDwU+XG7EuU+lyZ9MZaeD1dPZ2tmO22vDz2tWj -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org