$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/y0cAmHx7UjSIY0MAnugLfaf7AoM.roa File: y0cAmHx7UjSIY0MAnugLfaf7AoM.roa (raw, json) Hash identifier: MFhRMyjOzeoFLY/idJnm89YQvAdAkSdLIM2LmTOJS0E= Subject key identifier: CB:47:00:98:7C:7B:52:34:88:63:43:00:9E:E8:0B:7D:A7:FB:02:83 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 1A Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/y0cAmHx7UjSIY0MAnugLfaf7AoM.roa Signing time: Wed 10 Jan 2024 00:59:08 +0000 ROA not before: Wed 10 Jan 2024 00:59:08 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 2514 IP address blocks: 143.125.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jan 10 00:59:08 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=CB4700987C7B5234886343009EE80B7DA7FB0283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:48:da:26:32:9b:d8:74:01:00:6f:10:ee: f0:1d:d9:0e:ce:c4:15:c5:3d:3f:65:70:bc:ae:4e: 57:4e:db:df:f3:6f:8b:b5:06:2e:64:d7:22:54:77: ed:eb:a1:85:97:04:ea:c7:b4:20:9e:00:71:71:99: d9:fc:3c:6e:c3:d4:77:d2:10:b8:06:67:fc:be:bd: f0:e3:2a:13:52:17:ac:62:61:bc:7a:20:b6:7c:d3: d7:b4:a5:c4:bb:89:26:3a:23:b5:0a:7d:7a:e8:c8: df:b6:29:4f:21:22:43:81:13:93:87:45:bf:0b:f6: 28:54:73:23:ca:b4:8c:90:a1:da:c4:fe:20:b7:cc: c7:70:b5:5c:db:23:2a:67:49:cd:4b:17:02:d4:88: 1f:7d:0d:08:c0:b4:04:96:b8:1c:00:86:51:08:3c: 71:4f:33:9e:f8:ec:8b:54:79:27:7b:7d:1c:ae:f1: 16:3e:2b:8f:cc:72:57:75:d8:8e:3b:c4:8e:e0:e3: b9:16:d9:3c:ea:fe:45:b7:25:b2:8b:28:e5:e7:0e: 97:d6:22:0d:88:cb:55:e2:fb:7a:8b:5c:73:2f:18: f0:f1:dd:8f:df:a4:15:8e:82:5b:5b:e1:33:03:ae: ee:df:45:2e:96:41:6f:83:48:d9:1c:11:19:0c:7a: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:47:00:98:7C:7B:52:34:88:63:43:00:9E:E8:0B:7D:A7:FB:02:83 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/y0cAmHx7UjSIY0MAnugLfaf7AoM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.125.216.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:30:d2:4b:ff:4f:d7:02:6f:2d:7e:24:23:94:1f:82:a6:96: 29:22:77:73:f2:32:c8:6c:af:c8:95:ad:60:5b:0b:6d:c4:f8: 97:9f:d7:18:62:8b:ae:1e:89:43:58:d4:b0:89:16:a4:fb:63: 59:51:93:84:19:80:3a:a4:82:a4:6c:db:91:52:ea:9c:97:b6: d5:56:9f:ad:a6:a0:2a:4a:a5:a5:bb:8f:d8:e0:c2:e1:0c:4e: 8a:b4:23:4f:cb:80:60:63:89:72:9e:59:76:80:9a:f8:3d:dd: 3b:4c:7d:54:c2:ae:58:6f:10:d5:1c:41:da:77:06:e7:24:b2: 02:b8:f9:3d:82:3c:b9:7f:e9:28:7b:78:97:2d:fe:c5:78:b0: 50:02:ef:07:4a:c7:c1:99:47:11:fa:2a:0e:99:7b:a3:55:8c: eb:db:62:84:23:ab:28:87:a1:f1:0b:11:39:ed:b6:9c:f9:79: 0c:68:29:32:45:5f:0c:04:e0:ce:7d:64:41:1d:84:84:d8:92: 23:d0:46:7f:21:07:05:0e:40:08:75:40:aa:9b:62:bc:84:9a: 68:87:aa:09:1a:61:39:ec:69:02:43:0f:d9:f5:c8:3b:0a:5b: 8a:cf:6e:09:2b:e8:eb:9e:38:ad:e0:95:86:cf:cb:56:68:cc: 44:a1:b5:c3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAw NTkwOFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoQ0I0NzAwOTg3QzdCNTIz NDg4NjM0MzAwOUVFODBCN0RBN0ZCMDI4MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMh6SNomMpvYdAEAbxDu8B3ZDs7EFcU9P2VwvK5OV07b3/Nvi7UG LmTXIlR37euhhZcE6se0IJ4AcXGZ2fw8bsPUd9IQuAZn/L698OMqE1IXrGJhvHog tnzT17SlxLuJJjojtQp9eujI37YpTyEiQ4ETk4dFvwv2KFRzI8q0jJCh2sT+ILfM x3C1XNsjKmdJzUsXAtSIH30NCMC0BJa4HACGUQg8cU8znvjsi1R5J3t9HK7xFj4r j8xyV3XYjjvEjuDjuRbZPOr+Rbclsoso5ecOl9YiDYjLVeL7eotccy8Y8PHdj9+k FY6CW1vhMwOu7t9FLpZBb4NI2RwRGQx6XsUCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBTLRwCYfHtSNIhjQwCe6At9p/sCgzAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L3kwY0FtSHg3VWpTSVkwTUFudWdMZmFmN0FvTS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAOPfdgwDQYJKoZIhvcNAQELBQADggEBAAsw0kv/T9cCby1+JCOUH4Kmlikid3Py Mshsr8iVrWBbC23E+Jef1xhii64eiUNY1LCJFqT7Y1lRk4QZgDqkgqRs25FS6pyX ttVWn62moCpKpaW7j9jgwuEMToq0I0/LgGBjiXKeWXaAmvg93TtMfVTCrlhvENUc Qdp3BucksgK4+T2CPLl/6Sh7eJct/sV4sFAC7wdKx8GZRxH6Kg6Ze6NVjOvbYoQj qyiHofELETnttpz5eQxoKTJFXwwE4M59ZEEdhITYkiPQRn8hBwUOQAh1QKqbYryE mmiHqgkaYTnsaQJDD9n1yDsKW4rPbgkr6OueOK3glYbPy1ZozEShtcM= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org