$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sBGFCQtOAjfvsWunUvWn9g1YQwE.roa File: sBGFCQtOAjfvsWunUvWn9g1YQwE.roa (raw, json) Hash identifier: Ee4nkPn2dZoRQOF3cdgHY9vYOtJ1n7HwXY4Hwi/PpKk= Subject key identifier: B0:11:85:09:0B:4E:02:37:EF:B1:6B:A7:52:F5:A7:F6:0D:58:43:01 Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 3C Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sBGFCQtOAjfvsWunUvWn9g1YQwE.roa Signing time: Tue 30 Apr 2024 01:56:01 +0000 ROA not before: Tue 30 Apr 2024 01:56:01 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 160.249.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Apr 30 01:56:01 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=B01185090B4E0237EFB16BA752F5A7F60D584301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:bb:71:49:d7:dc:13:b0:9e:e2:db:d0:59: 0b:29:c1:1e:bd:63:24:58:b2:de:32:21:b7:bc:40: 20:be:29:00:34:69:f1:7b:f8:31:41:b1:92:7f:82: 3a:4f:f7:e5:a2:04:bf:5f:14:3b:28:26:90:f8:1d: db:fa:1d:2d:00:a7:f1:5d:91:84:0a:a3:e2:03:60: 8e:bd:e0:92:ae:14:e2:b1:b2:82:0c:70:a0:64:6c: 79:4a:43:8d:44:68:e5:5f:8e:2c:9d:08:12:7e:f9: 72:0c:8f:62:3e:eb:c7:8b:e7:09:f9:d3:7a:cb:dc: 25:8a:f9:a9:46:c0:70:c1:c1:14:72:e2:02:6b:54: d9:23:f1:5d:ef:1c:3d:1f:9c:83:3c:25:1b:df:c0: da:65:73:0d:72:01:9e:c7:69:8c:2a:d4:b6:ad:72: b0:0b:06:75:ab:7e:72:a1:8d:1c:4a:de:d5:7d:3a: 60:14:5b:c0:a6:a1:80:51:97:bc:fd:19:0b:30:ff: 7e:78:77:02:4b:15:84:68:f0:5a:69:da:81:44:7f: 11:2e:5a:9a:4f:66:47:40:dc:32:4e:40:31:21:f6: ef:2f:15:4a:d0:92:3e:13:1c:46:ee:c4:01:e3:8d: 3a:ee:33:b3:38:b3:27:53:fe:0d:d0:84:f9:6f:f2: 6f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:11:85:09:0B:4E:02:37:EF:B1:6B:A7:52:F5:A7:F6:0D:58:43:01 X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sBGFCQtOAjfvsWunUvWn9g1YQwE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.249.112.0/20 Signature Algorithm: sha256WithRSAEncryption bd:c3:2e:07:c1:13:c2:6d:00:bd:73:be:eb:74:e9:6a:40:94: ed:84:1b:a4:2e:73:d0:59:cc:50:49:88:fd:6f:4a:42:34:79: b4:92:d6:37:37:45:8b:76:4a:83:00:25:8b:e9:55:08:da:d7: b2:97:09:f8:b4:13:d9:fc:af:4b:b5:a1:88:c9:76:a7:81:44: 23:8c:ef:37:d5:e8:bb:2c:e6:d0:e9:14:99:1e:cc:b7:6f:4a: f7:67:84:24:89:10:bb:10:33:23:25:40:cb:7e:8d:21:b9:2a: 38:a1:52:3b:3c:1d:45:51:64:cd:ca:98:52:4c:86:ec:9f:46: 78:33:c6:ac:ea:6a:de:86:12:e1:bc:df:bc:12:5f:d9:6a:68: 83:14:93:88:fa:dd:f4:2d:74:7c:b1:cc:d7:84:b4:26:57:42: 01:56:23:bb:2b:81:69:ea:92:ce:c5:1c:c5:da:03:96:30:5a: 40:e6:c9:d9:05:a5:06:47:29:bd:6d:20:5a:5e:63:5d:16:8d: ac:ef:bc:2e:e2:30:4e:05:5a:1f:a9:62:bf:17:d6:2b:5a:28: d5:ac:72:9f:6c:14:c2:a0:b9:81:01:1b:db:cc:b9:a2:b4:0d: 14:33:df:19:ef:32:5c:77:24:c6:81:20:20:40:9a:24:7e:ac: 07:3c:2d:b8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI0MDQzMDAx NTYwMVoXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQjAxMTg1MDkwQjRFMDIz N0VGQjE2QkE3NTJGNUE3RjYwRDU4NDMwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANGOu3FJ19wTsJ7i29BZCynBHr1jJFiy3jIht7xAIL4pADRp8Xv4 MUGxkn+COk/35aIEv18UOygmkPgd2/odLQCn8V2RhAqj4gNgjr3gkq4U4rGyggxw oGRseUpDjURo5V+OLJ0IEn75cgyPYj7rx4vnCfnTesvcJYr5qUbAcMHBFHLiAmtU 2SPxXe8cPR+cgzwlG9/A2mVzDXIBnsdpjCrUtq1ysAsGdat+cqGNHEre1X06YBRb wKahgFGXvP0ZCzD/fnh3AksVhGjwWmnagUR/ES5amk9mR0DcMk5AMSH27y8VStCS PhMcRu7EAeONOu4zszizJ1P+DdCE+W/yb5ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSwEYUJC04CN++xa6dS9af2DVhDATAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDkvc0JHRkNRdE9BamZ2c1d1blV2V245ZzFZUXdFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBKD5cDANBgkqhkiG9w0BAQsFAAOCAQEAvcMuB8ETwm0AvXO+63TpakCU7YQb pC5z0FnMUEmI/W9KQjR5tJLWNzdFi3ZKgwAli+lVCNrXspcJ+LQT2fyvS7WhiMl2 p4FEI4zvN9Xouyzm0OkUmR7Mt29K92eEJIkQuxAzIyVAy36NIbkqOKFSOzwdRVFk zcqYUkyG7J9GeDPGrOpq3oYS4bzfvBJf2WpogxSTiPrd9C10fLHM14S0JldCAVYj uyuBaeqSzsUcxdoDljBaQObJ2QWlBkcpvW0gWl5jXRaNrO+8LuIwTgVaH6livxfW K1oo1axyn2wUwqC5gQEb28y5orQNFDPfGe8yXHckxoEgIECaJH6sBzwtuA== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org