$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/2-GN4OOLg_bqBb-9d5L37favtbU.roa File: 2-GN4OOLg_bqBb-9d5L37favtbU.roa (raw, json) Hash identifier: 1PwDgwfK5CetV/29wLFa1zo/EfVkdRKKicEU/AuvZ2A= Subject key identifier: DB:E1:8D:E0:E3:8B:83:F6:EA:05:BF:BD:77:92:F7:ED:F6:AF:B5:B5 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0167 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/2-GN4OOLg_bqBb-9d5L37favtbU.roa Signing time: Thu 31 Oct 2024 01:34:19 +0000 ROA not before: Thu 31 Oct 2024 01:34:19 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 2527 IP address blocks: 121.101.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Oct 31 01:34:19 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=DBE18DE0E38B83F6EA05BFBD7792F7EDF6AFB5B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:05:14:9f:0e:fc:58:5b:3b:3c:86:1f:fa: 50:b0:eb:fc:9d:61:25:ac:6b:b1:93:34:1f:17:f4: fa:98:06:44:3d:4a:e3:c6:c3:a6:18:e0:0c:8c:dd: a7:c2:bf:56:fb:e4:d0:21:18:9c:c7:21:7e:c6:21: bb:94:90:37:6e:d1:dc:48:db:bd:73:83:2f:23:8a: 5f:7e:b7:71:6e:f6:2b:0e:63:e9:53:d2:01:fd:2e: 4f:21:60:76:9d:d7:bf:2c:75:ce:3c:a8:7a:64:ab: 61:d7:fc:cc:30:ed:c3:f5:ab:a8:6e:83:b8:28:e8: 19:fb:8f:b4:d4:2d:07:60:b1:69:5a:3e:39:ce:c1: 05:7d:13:a3:02:76:79:38:51:1d:fc:db:7f:97:a9: 8b:ee:d9:a9:dc:98:a9:2c:85:2d:82:82:f2:78:33: 35:bb:dd:4e:72:80:c0:6f:c6:4f:3d:d8:af:6e:ba: 5d:bb:e9:63:32:ca:1b:23:38:6f:b6:63:7a:0a:84: b3:72:7b:f5:57:1c:24:1e:9f:39:a2:f7:6c:18:e9: 89:6f:f6:5d:5f:b1:cc:ec:14:75:1e:cb:5e:17:31: 0e:14:e3:6e:b4:db:68:cf:a0:14:05:7e:ad:fd:68: d0:b6:d0:9c:38:71:2d:b4:a7:45:a1:71:37:a0:e0: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E1:8D:E0:E3:8B:83:F6:EA:05:BF:BD:77:92:F7:ED:F6:AF:B5:B5 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/2-GN4OOLg_bqBb-9d5L37favtbU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.101.64.0/18 Signature Algorithm: sha256WithRSAEncryption 0c:c0:8d:8b:93:5a:8b:13:86:af:ec:6a:24:3c:02:05:41:81: 4c:ce:fb:18:08:92:36:72:1e:f9:57:16:e1:ef:86:c9:2d:4a: 0f:d2:ad:b7:2f:fb:56:27:3f:62:03:50:7f:48:3d:91:11:e9: ea:f1:fb:c2:50:6c:7d:69:d4:27:3a:54:14:04:cf:24:d9:6d: 11:a4:92:98:b1:cf:c7:de:9a:a0:30:dc:06:0c:14:46:88:16: 39:7d:01:d6:fc:1b:35:70:bc:ba:f4:52:a9:92:a6:e5:f1:5a: 32:35:6d:6c:a3:ef:11:45:6f:d1:78:ce:0d:f1:ad:59:4c:78: 07:67:b8:bd:eb:cf:07:4e:d0:41:f8:9b:f4:c0:27:16:25:c0: 9a:f3:77:a4:e3:1b:17:9c:e9:dc:f6:67:7e:b1:d9:66:10:33: 1c:0d:7a:3c:18:5f:11:1d:18:ee:26:ba:7b:5b:77:ff:c7:fe: 2d:04:09:4a:a5:ac:18:40:cd:20:de:70:b5:c0:91:1b:e5:ae: ac:ef:fc:b2:4e:bf:ee:9e:30:25:03:61:f6:0a:a0:c2:d2:7c: 1b:f1:0e:c5:3b:1d:43:32:52:0a:31:93:a0:da:7f:13:f1:65: a4:59:4e:41:e1:09:1c:76:ce:8b:a8:91:6a:75:1e:cf:e6:93: d5:94:db:bd -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNDEwMzEw MTM0MTlaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERCRTE4REUwRTM4Qjgz RjZFQTA1QkZCRDc3OTJGN0VERjZBRkI1QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCawUUnw78WFs7PIYf+lCw6/ydYSWsa7GTNB8X9PqYBkQ9SuPG w6YY4AyM3afCv1b75NAhGJzHIX7GIbuUkDdu0dxI271zgy8jil9+t3Fu9isOY+lT 0gH9Lk8hYHad178sdc48qHpkq2HX/Mww7cP1q6hug7go6Bn7j7TULQdgsWlaPjnO wQV9E6MCdnk4UR3823+XqYvu2ancmKkshS2CgvJ4MzW73U5ygMBvxk892K9uul27 6WMyyhsjOG+2Y3oKhLNye/VXHCQenzmi92wY6Ylv9l1fsczsFHUey14XMQ4U4260 22jPoBQFfq39aNC20Jw4cS20p0WhcTeg4OkjAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQU2+GN4OOLg/bqBb+9d5L37favtbUwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My8yLUdONE9PTGdfYnFCYi05ZDVMMzdmYXZ0YlUucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQGeWVAMA0GCSqGSIb3DQEBCwUAA4IBAQAMwI2Lk1qLE4av7GokPAIFQYFMzvsY CJI2ch75Vxbh74bJLUoP0q23L/tWJz9iA1B/SD2REenq8fvCUGx9adQnOlQUBM8k 2W0RpJKYsc/H3pqgMNwGDBRGiBY5fQHW/Bs1cLy69FKpkqbl8VoyNW1so+8RRW/R eM4N8a1ZTHgHZ7i9688HTtBB+Jv0wCcWJcCa83ek4xsXnOnc9md+sdlmEDMcDXo8 GF8RHRjuJrp7W3f/x/4tBAlKpawYQM0g3nC1wJEb5a6s7/yyTr/unjAlA2H2CqDC 0nwb8Q7FOx1DMlIKMZOg2n8T8WWkWU5B4Qkcds6LqJFqdR7P5pPVlNu9 -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org