$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/gr0EDlB4WP6qOvdVIV8IJkUvx2s.roa File: gr0EDlB4WP6qOvdVIV8IJkUvx2s.roa (raw, json) Hash identifier: xrIqOfJXN9d10zzZ9JiBp9UgNfTv9f3nIaCqAO1/Bww= Subject key identifier: 82:BD:04:0E:50:78:58:FE:AA:3A:F7:55:21:5F:08:26:45:2F:C7:6B Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02E1 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gr0EDlB4WP6qOvdVIV8IJkUvx2s.roa Signing time: Thu 10 Oct 2024 01:16:21 +0000 ROA not before: Thu 10 Oct 2024 01:16:21 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 10013 IP address blocks: 27.132.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 10 01:16:21 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=82BD040E507858FEAA3AF755215F0826452FC76B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:00:4c:ac:f4:55:e6:8d:a3:39:62:06:b4: 6e:0c:d9:12:91:fc:b6:02:bd:f6:85:d7:07:3f:82: fe:94:e3:eb:71:6d:e9:63:32:ba:82:ad:46:b8:17: 4a:42:84:fe:ec:4f:4b:78:56:e4:ba:f5:10:86:82: 66:03:42:59:dd:61:aa:77:d3:7e:72:01:82:1c:d3: 3d:02:35:c0:15:99:db:fc:fc:90:57:cd:89:1a:48: c8:6f:78:a4:42:c0:62:4a:54:ba:f3:58:92:a2:92: 09:55:53:1b:b0:da:d9:cd:cc:11:26:4d:63:cb:d4: 74:e0:0b:07:e9:e0:fc:37:4b:d9:75:31:23:46:2f: 57:64:f5:60:b1:ed:8f:ac:cd:70:10:4b:e1:cf:9d: dc:2a:28:66:67:e0:af:ce:6f:64:70:8f:8e:f5:33: ff:d9:3f:49:11:b2:26:a3:06:1a:fa:b0:31:5c:12: bf:48:96:9b:11:67:2b:81:a9:06:08:a4:51:56:69: 12:3d:c0:70:59:85:b9:41:d0:6f:e6:ee:64:c7:3c: 31:3f:4d:dd:c2:f1:68:3e:9e:9b:dd:21:e2:14:27: a6:2d:ec:cc:d4:d9:bb:dd:8b:ea:26:df:ea:20:66: 28:3e:a2:b9:55:67:51:39:df:70:37:ef:26:16:b1: 49:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BD:04:0E:50:78:58:FE:AA:3A:F7:55:21:5F:08:26:45:2F:C7:6B X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gr0EDlB4WP6qOvdVIV8IJkUvx2s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.132.12.0/22 Signature Algorithm: sha256WithRSAEncryption 25:f9:2d:dc:a3:5f:bc:4e:c5:b5:f0:08:e2:81:56:fe:d0:6f: bd:3d:62:d9:25:5e:59:67:e3:7b:ed:99:e7:f8:24:21:05:77: 4c:e5:5f:c3:e4:fb:76:93:7e:d5:90:35:59:c3:33:fe:2f:df: e1:c9:54:1a:23:e6:b8:c8:85:f1:36:33:28:32:be:90:50:20: a1:06:a8:d7:0e:bb:bc:28:37:37:ec:42:bf:6b:0c:86:d7:c9: e2:f6:d8:7d:55:4a:a5:c6:1d:8d:29:54:17:54:49:4a:14:3d: 5c:b8:57:bf:3e:dd:29:a4:9b:35:d9:25:48:0c:58:12:da:58: 7e:a9:5e:48:ed:30:97:16:c5:9d:14:85:19:26:d3:30:c9:1a: 60:fe:0f:1a:eb:b4:18:3d:2f:ae:0e:0b:6c:dd:fb:c1:9e:29: e5:e7:a9:9d:2b:3a:13:e4:42:6d:fc:cc:90:1f:30:1c:0c:3c: df:bd:a9:9d:95:9a:ad:51:99:ae:4c:82:c3:b3:a6:79:37:2d: aa:eb:08:99:9c:06:10:e8:7c:15:aa:8d:6b:73:46:af:e7:8f: c8:ec:55:24:4d:15:b2:69:75:85:fd:67:45:42:1e:f3:cd:2a: 4a:23:70:ef:26:f5:44:50:54:15:fa:d9:7b:6e:a0:b8:c3:98: a0:6b:52:51 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMTAw MTE2MjFaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgyQkQwNDBFNTA3ODU4 RkVBQTNBRjc1NTIxNUYwODI2NDUyRkM3NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+eQBMrPRV5o2jOWIGtG4M2RKR/LYCvfaF1wc/gv6U4+txbelj MrqCrUa4F0pChP7sT0t4VuS69RCGgmYDQlndYap3035yAYIc0z0CNcAVmdv8/JBX zYkaSMhveKRCwGJKVLrzWJKikglVUxuw2tnNzBEmTWPL1HTgCwfp4Pw3S9l1MSNG L1dk9WCx7Y+szXAQS+HPndwqKGZn4K/Ob2Rwj471M//ZP0kRsiajBhr6sDFcEr9I lpsRZyuBqQYIpFFWaRI9wHBZhblB0G/m7mTHPDE/Td3C8Wg+npvdIeIUJ6Yt7MzU 2bvdi+om3+ogZig+orlVZ1E533A37yYWsUlBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgr0EDlB4WP6qOvdVIV8IJkUvx2swHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2dyMEVEbEI0V1A2cU92ZFZJVjhJSmtVdngycy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIbhAwwDQYJKoZIhvcNAQELBQADggEBACX5LdyjX7xOxbXwCOKBVv7Qb709 YtklXlln43vtmef4JCEFd0zlX8Pk+3aTftWQNVnDM/4v3+HJVBoj5rjIhfE2Mygy vpBQIKEGqNcOu7woNzfsQr9rDIbXyeL22H1VSqXGHY0pVBdUSUoUPVy4V78+3Smk mzXZJUgMWBLaWH6pXkjtMJcWxZ0UhRkm0zDJGmD+DxrrtBg9L64OC2zd+8GeKeXn qZ0rOhPkQm38zJAfMBwMPN+9qZ2Vmq1Rma5MgsOzpnk3LarrCJmcBhDofBWqjWtz Rq/nj8jsVSRNFbJpdYX9Z0VCHvPNKkojcO8m9URQVBX62XtuoLjDmKBrUlE= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org