$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/2W6juEi2vT3-FTFwxuenguwzu78.roa File: 2W6juEi2vT3-FTFwxuenguwzu78.roa (raw, json) Hash identifier: nXYUfCCOrY2CFEK/xMmnczlgOJrSTsamk9IzcBR4Dp8= Subject key identifier: D9:6E:A3:B8:48:B6:BD:3D:FE:15:31:70:C6:E7:A7:82:EC:33:BB:BF Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Certificate serial: 21 Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/2W6juEi2vT3-FTFwxuenguwzu78.roa Signing time: Fri 02 Feb 2024 07:37:00 +0000 ROA not before: Fri 02 Feb 2024 07:37:00 +0000 ROA not after: Tue 14 Jan 2025 01:30:02 +0000 asID: 9619 IP address blocks: 211.125.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Validity Not Before: Feb 2 07:37:00 2024 GMT Not After : Jan 14 01:30:02 2025 GMT Subject: CN=D96EA3B848B6BD3DFE153170C6E7A782EC33BBBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:58:77:e4:82:c9:ae:e5:d2:23:66:ec:db:09: 11:00:be:0d:e0:17:7a:13:80:c0:8b:fc:0e:16:51: 26:5d:46:fa:ce:61:fe:55:64:89:b4:36:a6:17:2d: f4:26:6b:a3:42:a9:4e:1f:e9:77:d0:08:77:29:e8: 2c:46:e5:21:c3:c5:04:d8:56:46:f2:3e:e5:dc:97: a6:b5:1d:73:2f:67:e0:94:e4:e3:c2:d0:bd:60:5e: a7:08:63:53:0e:7b:d7:6e:0f:1d:d2:75:4f:a8:21: ac:92:1d:8e:08:e8:b8:ec:72:ad:0f:e0:7f:f6:3a: 1d:7d:eb:c3:51:21:03:4d:db:16:2d:0b:0e:0f:c0: 7d:97:1a:df:82:85:1a:99:01:48:c1:17:54:61:d1: 60:1f:51:78:ac:15:49:61:6e:92:50:9a:bb:3c:32: 4b:58:1f:d4:57:fc:5d:26:9c:0e:c4:bd:b5:17:2c: db:54:2f:54:0a:d0:9c:45:f8:e9:51:ff:9f:59:6b: f3:6e:e6:41:68:18:2e:b7:92:10:f9:2e:fe:38:b4: bf:6f:6d:a7:07:03:e3:bb:93:b3:ae:4a:0d:39:e6: 07:e9:79:ad:db:04:61:61:19:30:4a:47:32:ec:1a: 83:f4:af:82:a5:02:f0:dd:4a:f2:6f:1e:31:42:77: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6E:A3:B8:48:B6:BD:3D:FE:15:31:70:C6:E7:A7:82:EC:33:BB:BF X509v3 Authority Key Identifier: keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/2W6juEi2vT3-FTFwxuenguwzu78.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.125.128.0/24 Signature Algorithm: sha256WithRSAEncryption 95:ac:95:e4:2e:e9:4c:a1:52:ff:b5:db:ff:fa:03:25:ed:f7: c3:9a:6f:3f:41:2c:15:4c:bb:98:d8:9c:24:cd:dc:16:b1:e1: 81:47:76:34:a9:42:3e:4d:65:69:ff:bd:34:6d:d4:ba:e7:dc: 19:50:f4:61:ef:60:7b:24:a7:79:10:60:d1:85:8b:28:71:30: 2a:be:4b:a2:1a:59:43:71:b0:f8:64:d5:da:09:d5:ab:48:41: 75:61:26:61:f7:ac:15:33:6c:b6:5f:96:fd:8d:e1:dd:4d:80: 26:20:bc:34:af:5c:1d:9e:6b:93:cb:c3:b1:82:5c:a8:63:b9: 00:bb:f5:27:66:c1:8e:9e:c0:55:d8:da:0e:53:41:e6:5f:01: 41:26:85:a8:7d:6c:9c:0d:64:16:c4:1d:bf:16:2e:c8:51:dd: 61:f4:d0:e6:fc:9b:23:cc:60:15:40:57:3e:a2:1b:b7:e9:d6: c8:97:9a:4b:8a:20:11:15:95:36:be:d8:16:fe:4d:63:ea:f3: 84:5e:c4:e3:4c:6c:67:a8:8d:5d:7b:79:43:cf:d0:97:53:8a: c3:c7:f8:1f:db:06:24:1e:6d:81:c4:28:94:f2:1e:29:fe:28: 10:f2:0e:f3:62:5f:c1:09:ca:23:75:31:40:49:e8:af:09:1b: d1:0e:98:72 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI0MDIwMjA3 MzcwMFoXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoRDk2RUEzQjg0OEI2QkQz REZFMTUzMTcwQzZFN0E3ODJFQzMzQkJCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOpYd+SCya7l0iNm7NsJEQC+DeAXehOAwIv8DhZRJl1G+s5h/lVk ibQ2phct9CZro0KpTh/pd9AIdynoLEblIcPFBNhWRvI+5dyXprUdcy9n4JTk48LQ vWBepwhjUw57124PHdJ1T6ghrJIdjgjouOxyrQ/gf/Y6HX3rw1EhA03bFi0LDg/A fZca34KFGpkBSMEXVGHRYB9ReKwVSWFuklCauzwyS1gf1Ff8XSacDsS9tRcs21Qv VArQnEX46VH/n1lr827mQWgYLreSEPku/ji0v29tpwcD47uTs65KDTnmB+l5rdsE YWEZMEpHMuwag/SvgqUC8N1K8m8eMUJ3bqECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTZbqO4SLa9Pf4VMXDG56eC7DO7vzAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zOTUvMlc2anVFaTJ2VDMtRlRGd3h1ZW5ndXd6dTc4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANN9gDANBgkqhkiG9w0BAQsFAAOCAQEAlayV5C7pTKFS/7Xb//oDJe33w5pv P0EsFUy7mNicJM3cFrHhgUd2NKlCPk1laf+9NG3UuufcGVD0Ye9geySneRBg0YWL KHEwKr5LohpZQ3Gw+GTV2gnVq0hBdWEmYfesFTNstl+W/Y3h3U2AJiC8NK9cHZ5r k8vDsYJcqGO5ALv1J2bBjp7AVdjaDlNB5l8BQSaFqH1snA1kFsQdvxYuyFHdYfTQ 5vybI8xgFUBXPqIbt+nWyJeaS4ogERWVNr7YFv5NY+rzhF7E40xsZ6iNXXt5Q8/Q l1OKw8f4H9sGJB5tgcQolPIeKf4oEPIO82JfwQnKI3UxQEnorwkb0Q6Ycg== -----END CERTIFICATE-----Generated at Thu May 30 03:38:46 2024 by rpki-client on console-ams.rpki-client.org