$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/U5_Kb-il_TzobwU2tiHsg1fg2JA.roa File: U5_Kb-il_TzobwU2tiHsg1fg2JA.roa (raw, json) Hash identifier: CavyKYxHxxGNI3ONZXinD1iEPAuxuTR0sb8Z1lBgXEw= Subject key identifier: 53:9F:CA:6F:E8:A5:FD:3C:E8:6F:05:36:B6:21:EC:83:57:E0:D8:90 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0303 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/U5_Kb-il_TzobwU2tiHsg1fg2JA.roa Signing time: Thu 17 Oct 2024 01:41:02 +0000 ROA not before: Thu 17 Oct 2024 01:41:02 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 111.235.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 17 01:41:02 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=539FCA6FE8A5FD3CE86F0536B621EC8357E0D890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:cf:32:df:b9:63:3e:03:36:58:c5:54:10: 27:51:15:8c:4c:20:dd:ad:a2:ce:47:52:e9:2f:ba: 5b:33:b1:67:d7:b3:29:b7:46:6d:2e:62:24:bc:68: 80:92:4d:88:01:38:ad:1d:03:e8:39:92:ce:05:4d: 97:37:9e:4d:53:9f:6f:b3:05:60:0a:d4:9a:d4:38: b2:de:41:6b:47:e0:18:df:9e:4e:8f:c0:81:1f:56: fb:31:48:96:53:f3:95:a1:89:52:5b:5b:e4:3d:b5: 49:4b:ed:0f:ca:a6:fc:24:4a:a9:80:ad:53:cf:71: 06:40:5f:60:4a:30:2d:02:cb:8d:6f:b7:f3:7d:ce: 57:cb:11:71:79:3a:50:ec:5f:c4:12:ab:e0:6f:6b: 08:4a:2e:7e:63:03:92:45:7f:a5:6a:e3:8a:58:99: d4:b5:d5:bf:a4:18:b8:dc:df:56:1d:61:11:df:b8: b6:39:67:f5:87:93:39:42:c1:30:8a:83:52:d0:4c: 52:57:13:94:53:c6:01:fa:ab:40:6c:9a:d1:df:ab: ac:b3:ba:a9:38:24:20:a3:f3:1e:b2:3c:0a:27:47: f0:1b:cc:ea:ce:63:22:35:a9:ae:35:bd:b0:5a:eb: 3b:71:ec:9d:22:c3:f8:4e:f0:c2:35:c6:0f:48:03: a3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9F:CA:6F:E8:A5:FD:3C:E8:6F:05:36:B6:21:EC:83:57:E0:D8:90 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/U5_Kb-il_TzobwU2tiHsg1fg2JA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.235.32.0/22 Signature Algorithm: sha256WithRSAEncryption 13:9b:2a:98:54:4d:7d:39:c3:7b:2c:7f:f3:ef:56:a0:16:72: 82:4e:93:42:14:4b:a7:c5:65:6c:50:58:54:d0:1f:76:d9:85: fc:4b:67:a5:9c:52:28:36:34:89:a3:28:43:01:8e:81:3d:fa: fc:63:69:67:34:e9:53:e5:fb:99:66:76:b1:ec:b1:41:ab:a9: 1a:fe:12:d3:f8:57:bf:b8:f4:6b:dd:ea:6b:00:d9:8a:ef:fe: 1b:31:e6:2b:5a:5a:a5:0f:32:cb:2c:2f:61:75:66:80:d8:b9: da:70:35:6c:88:f5:89:86:89:84:55:b2:2d:0c:6e:1f:af:77: 3f:be:81:01:ff:c5:79:7f:64:ee:91:78:54:3e:c1:c9:91:ab: 13:83:6d:6a:29:f7:a7:f9:49:b3:c5:80:ab:59:05:08:17:40: 57:c6:c9:e0:87:a7:c9:9e:98:73:ef:67:b7:48:c0:8b:23:f5: 57:71:ff:ae:d3:e4:b9:73:68:53:61:e9:3f:29:10:9a:ba:1d: 6b:c8:25:ac:b1:b6:3e:37:e6:5d:ee:2c:93:75:43:7c:44:16: 52:ba:a4:07:c0:82:74:0f:5e:4b:bc:b4:7b:f1:7f:6e:3a:39: d6:3e:f7:24:04:dc:5c:23:65:31:a2:27:4a:51:30:d6:14:4b: d1:98:95:2e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMTcw MTQxMDJaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUzOUZDQTZGRThBNUZE M0NFODZGMDUzNkI2MjFFQzgzNTdFMEQ4OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCops8y37ljPgM2WMVUECdRFYxMIN2tos5HUukvulszsWfXsym3 Rm0uYiS8aICSTYgBOK0dA+g5ks4FTZc3nk1Tn2+zBWAK1JrUOLLeQWtH4Bjfnk6P wIEfVvsxSJZT85WhiVJbW+Q9tUlL7Q/KpvwkSqmArVPPcQZAX2BKMC0Cy41vt/N9 zlfLEXF5OlDsX8QSq+BvawhKLn5jA5JFf6Vq44pYmdS11b+kGLjc31YdYRHfuLY5 Z/WHkzlCwTCKg1LQTFJXE5RTxgH6q0BsmtHfq6yzuqk4JCCj8x6yPAonR/AbzOrO YyI1qa41vbBa6ztx7J0iw/hO8MI1xg9IA6NFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUU5/Kb+il/TzobwU2tiHsg1fg2JAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1U1X0tiLWlsX1R6b2J3VTJ0aUhzZzFmZzJKQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJv6yAwDQYJKoZIhvcNAQELBQADggEBABObKphUTX05w3ssf/PvVqAWcoJO k0IUS6fFZWxQWFTQH3bZhfxLZ6WcUig2NImjKEMBjoE9+vxjaWc06VPl+5lmdrHs sUGrqRr+EtP4V7+49Gvd6msA2Yrv/hsx5itaWqUPMsssL2F1ZoDYudpwNWyI9YmG iYRVsi0Mbh+vdz++gQH/xXl/ZO6ReFQ+wcmRqxODbWop96f5SbPFgKtZBQgXQFfG yeCHp8memHPvZ7dIwIsj9Vdx/67T5LlzaFNh6T8pEJq6HWvIJayxtj435l3uLJN1 Q3xEFlK6pAfAgnQPXku8tHvxf246OdY+9yQE3FwjZTGiJ0pRMNYUS9GYlS4= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org