$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GckQ5m5MrRtUSjLpk08aYtxMgfM.roa File: GckQ5m5MrRtUSjLpk08aYtxMgfM.roa (raw, json) Hash identifier: a75FBmkF2xx8d2VGYw5U0s7TduVyJMHcC24H80DD56s= Subject key identifier: 19:C9:10:E6:6E:4C:AD:1B:54:4A:32:E9:93:4F:1A:62:DC:4C:81:F3 Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 3B Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GckQ5m5MrRtUSjLpk08aYtxMgfM.roa Signing time: Tue 30 Apr 2024 01:55:51 +0000 ROA not before: Tue 30 Apr 2024 01:55:51 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 158.199.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Apr 30 01:55:51 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=19C910E66E4CAD1B544A32E9934F1A62DC4C81F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:4e:50:0e:07:fe:58:c0:d0:a5:ea:e2:0b: dc:68:49:84:3d:46:a1:7e:da:ba:19:f0:0d:c9:07: 16:01:bf:b2:0b:9f:4d:85:0e:b5:f8:31:9e:74:08: b1:fa:c3:6d:8c:aa:bb:73:ea:f6:55:d1:15:c9:be: 53:b5:6f:42:ce:c4:1a:96:9b:17:a5:f1:32:16:26: c1:c9:7b:8a:d4:20:2c:23:5a:4c:7a:3c:bc:ae:da: 47:0f:a3:10:86:5a:b5:9e:dc:6c:97:29:7e:81:22: fe:b2:49:6a:8c:a5:b6:be:d5:34:4d:61:a7:ae:95: 5f:3a:70:f8:d9:97:ce:bf:63:63:4d:84:f6:67:2d: 3e:c8:01:90:42:c0:18:91:1e:1d:fc:83:ea:e6:70: 96:17:3d:6b:4d:97:e2:9e:b5:dd:5f:72:60:1a:15: 53:ec:b3:3b:80:0c:a9:9f:82:21:2f:a7:53:f1:d1: 2d:e6:11:12:c6:62:eb:4d:66:8d:0a:51:54:64:46: d8:b8:6d:bf:97:4b:b8:88:07:65:86:ec:c3:55:6a: 26:ee:4a:4c:3e:fe:56:ac:9c:ed:e6:62:41:ff:de: bd:93:ff:21:24:bc:35:ca:0d:e3:24:fe:54:a1:0d: 39:91:99:2d:7e:d0:4f:43:a5:71:17:cf:10:42:d9: 0c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C9:10:E6:6E:4C:AD:1B:54:4A:32:E9:93:4F:1A:62:DC:4C:81:F3 X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GckQ5m5MrRtUSjLpk08aYtxMgfM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 158.199.32.0/19 Signature Algorithm: sha256WithRSAEncryption 19:7b:da:00:3c:6d:79:2d:6e:2c:d5:15:dd:ac:d4:6b:8c:a8: bc:ed:6e:3f:e5:b7:ad:7d:af:f2:4e:6b:cb:de:66:88:2d:85: 71:82:9c:8b:61:f9:38:a2:22:c9:88:70:98:13:68:b2:a3:46: a0:48:78:ea:5a:4e:63:49:05:7e:6a:36:ee:72:4e:3a:ce:e9: 9e:f0:88:3e:61:f6:b8:07:e3:31:59:91:63:bf:3e:f7:48:62: 6e:e0:9c:1c:63:b9:fb:4c:07:1e:4f:a8:68:ec:b3:24:4a:05: cc:10:7a:78:30:8d:f7:cb:81:11:66:be:dc:ca:a6:98:97:4e: a2:2b:d3:26:41:55:e4:c1:f9:34:3e:3f:52:a0:32:ba:ba:56: e7:bb:45:91:9c:d0:8e:e5:d2:02:34:6c:e8:70:3c:e5:eb:53: 6b:3f:fc:b6:77:52:e2:52:c3:5b:c1:f2:c1:1f:64:55:ec:6f: 8a:a7:21:cc:79:9d:62:77:94:84:6b:13:a1:8e:08:6d:62:47: a2:8f:15:af:37:a1:1f:8c:d3:a0:20:35:27:94:f2:c0:7a:45: 95:78:42:4b:04:61:3d:71:b5:8d:0b:2d:11:03:be:04:e2:ba: cd:a0:b2:8c:84:d7:40:7d:9b:f3:74:ef:62:e8:0f:79:36:ef: 08:e7:ef:85 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI0MDQzMDAx NTU1MVoXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMTlDOTEwRTY2RTRDQUQx QjU0NEEzMkU5OTM0RjFBNjJEQzRDODFGMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALFhTlAOB/5YwNCl6uIL3GhJhD1GoX7auhnwDckHFgG/sgufTYUO tfgxnnQIsfrDbYyqu3Pq9lXRFcm+U7VvQs7EGpabF6XxMhYmwcl7itQgLCNaTHo8 vK7aRw+jEIZatZ7cbJcpfoEi/rJJaoyltr7VNE1hp66VXzpw+NmXzr9jY02E9mct PsgBkELAGJEeHfyD6uZwlhc9a02X4p613V9yYBoVU+yzO4AMqZ+CIS+nU/HRLeYR EsZi601mjQpRVGRG2Lhtv5dLuIgHZYbsw1VqJu5KTD7+Vqyc7eZiQf/evZP/ISS8 NcoN4yT+VKENOZGZLX7QT0OlcRfPEELZDNECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQZyRDmbkytG1RKMumTTxpi3EyB8zAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDkvR2NrUTVtNU1yUnRVU2pMcGswOGFZdHhNZ2ZNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBZ7HIDANBgkqhkiG9w0BAQsFAAOCAQEAGXvaADxteS1uLNUV3azUa4yovO1u P+W3rX2v8k5ry95miC2FcYKci2H5OKIiyYhwmBNosqNGoEh46lpOY0kFfmo27nJO Os7pnvCIPmH2uAfjMVmRY78+90hibuCcHGO5+0wHHk+oaOyzJEoFzBB6eDCN98uB EWa+3MqmmJdOoivTJkFV5MH5ND4/UqAyurpW57tFkZzQjuXSAjRs6HA85etTaz/8 tndS4lLDW8HywR9kVexviqchzHmdYneUhGsToY4IbWJHoo8VrzehH4zToCA1J5Ty wHpFlXhCSwRhPXG1jQstEQO+BOK6zaCyjITXQH2b83TvYugPeTbvCOfvhQ== -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:10 2024 by rpki-client on console-fra.rpki-client.org