$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5IEA-tUzR_G33Ja2jSi1uMwH7Fk.roa File: 5IEA-tUzR_G33Ja2jSi1uMwH7Fk.roa (raw, json) Hash identifier: FiFKVAvFVbc0vv2IGHb1PNdzwzzlpZc8ar3fffYbjjw= Subject key identifier: E4:81:00:FA:D5:33:47:F1:B7:DC:96:B6:8D:28:B5:B8:CC:07:EC:59 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0850 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5IEA-tUzR_G33Ja2jSi1uMwH7Fk.roa Signing time: Tue 30 Apr 2024 02:16:28 +0000 ROA not before: Tue 30 Apr 2024 02:16:28 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:16:28 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=E48100FAD53347F1B7DC96B68D28B5B8CC07EC59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:01:18:01:a5:bc:ff:66:45:eb:f5:d7:8f: 5e:6c:62:bf:47:a6:48:22:ae:87:8d:43:2b:9d:af: 14:9a:bf:ed:0b:4b:6c:ee:a1:a7:39:26:36:5e:47: 23:1b:78:cb:e4:ec:74:f1:ee:cf:aa:2b:a5:a3:0b: 49:c1:33:8f:2a:64:b5:88:45:a2:2f:3f:0e:b6:8b: d1:04:18:69:46:3c:8c:cc:0b:1e:7a:0a:09:70:82: a1:49:97:b8:83:82:69:17:f4:e6:3d:4f:1a:16:99: 06:1e:4d:c8:e9:af:4d:b4:54:65:2e:1a:cd:ac:80: ca:78:7e:87:ef:ba:ed:0e:69:bc:4a:d1:cc:5b:d2: 4f:4b:22:31:bb:2e:ab:04:06:34:1b:5c:48:a4:70: 97:1a:bb:9c:97:b0:3b:d9:35:3e:02:14:27:6c:3b: 7c:76:72:63:db:b8:10:ec:77:ab:39:3d:0c:75:88: 2c:c8:49:3c:95:bb:f4:33:6a:a3:d2:f9:25:0f:89: 84:34:49:4d:a6:7d:69:a0:f1:fb:62:6d:04:c0:17: c5:3b:12:c5:a0:46:b7:cb:c2:e4:35:27:89:c6:12: 0e:10:99:f4:a9:2b:83:1f:67:d9:f6:36:91:de:84: 95:85:c3:9e:7f:1d:5e:fb:34:31:8d:2c:d6:5d:05: 1b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:81:00:FA:D5:33:47:F1:B7:DC:96:B6:8D:28:B5:B8:CC:07:EC:59 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5IEA-tUzR_G33Ja2jSi1uMwH7Fk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.128.0/19 Signature Algorithm: sha256WithRSAEncryption 8f:89:1a:ae:92:2b:ac:d4:26:97:a8:0a:15:a1:7b:1f:80:bf: ad:16:d7:98:9b:a4:fc:48:be:36:3c:5b:2b:ce:ad:2a:0e:2f: e3:de:e2:93:8a:07:fe:00:66:eb:f1:d4:b9:4b:d6:4f:0b:ad: fa:27:de:48:26:24:63:f1:f0:95:cf:ea:05:66:a3:84:0f:47: a3:ca:94:80:0d:67:93:be:67:73:81:3b:c8:ea:da:71:f4:4a: 35:60:ec:5e:00:76:69:ca:8a:95:5a:07:17:2a:c7:55:0e:24: 96:d6:be:67:11:3c:31:4c:b4:aa:31:a6:e8:dc:b6:e7:86:85: 38:51:29:1a:62:77:dd:b5:e4:0e:5d:d1:e8:fa:45:04:25:4a: 07:12:8d:e4:28:6d:80:98:9a:85:b6:56:8e:8e:a0:fa:c6:1c: 4f:56:8e:16:d9:6b:18:6f:33:7f:be:38:ca:83:c8:19:45:3a: 6c:91:b6:e1:65:79:43:3e:b0:5e:9b:89:40:90:31:16:0e:14: 9d:8b:7d:b6:2e:83:3f:96:a4:e0:ba:a4:27:72:e2:71:28:b4: bc:6d:65:d5:ba:60:3f:99:2f:9e:d4:58:ea:e1:80:44:97:d3: 44:d1:6b:24:09:72:e7:d6:a2:ab:14:52:1a:88:d5:30:82:63: 47:b6:92:ce -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE2MjhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU0ODEwMEZBRDUzMzQ3 RjFCN0RDOTZCNjhEMjhCNUI4Q0MwN0VDNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjXAEYAaW8/2ZF6/XXj15sYr9HpkgiroeNQyudrxSav+0LS2zu oac5JjZeRyMbeMvk7HTx7s+qK6WjC0nBM48qZLWIRaIvPw62i9EEGGlGPIzMCx56 CglwgqFJl7iDgmkX9OY9TxoWmQYeTcjpr020VGUuGs2sgMp4fofvuu0OabxK0cxb 0k9LIjG7LqsEBjQbXEikcJcau5yXsDvZNT4CFCdsO3x2cmPbuBDsd6s5PQx1iCzI STyVu/QzaqPS+SUPiYQ0SU2mfWmg8ftibQTAF8U7EsWgRrfLwuQ1J4nGEg4QmfSp K4MfZ9n2NpHehJWFw55/HV77NDGNLNZdBRs7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5IEA+tUzR/G33Ja2jSi1uMwH7FkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzVJRUEtdFV6Ul9HMzNKYTJqU2kxdU13SDdGay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBT4AwDQYJKoZIhvcNAQELBQADggEBAI+JGq6SK6zUJpeoChWhex+Av60W 15ibpPxIvjY8WyvOrSoOL+Pe4pOKB/4AZuvx1LlL1k8Lrfon3kgmJGPx8JXP6gVm o4QPR6PKlIANZ5O+Z3OBO8jq2nH0SjVg7F4AdmnKipVaBxcqx1UOJJbWvmcRPDFM tKoxpujctueGhThRKRpid9215A5d0ej6RQQlSgcSjeQobYCYmoW2Vo6OoPrGHE9W jhbZaxhvM3++OMqDyBlFOmyRtuFleUM+sF6biUCQMRYOFJ2LfbYugz+WpOC6pCdy 4nEotLxtZdW6YD+ZL57UWOrhgESX00TRayQJcufWoqsUUhqI1TCCY0e2ks4= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org