$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/UIbSIFYDoaNefRO1lNk_Kej3sM8.roa File: UIbSIFYDoaNefRO1lNk_Kej3sM8.roa (raw, json) Hash identifier: Fk4GBg7ETeJWU8E59aPGKc+kO0BkmTnCRDnAT/JRWXw= Subject key identifier: 50:86:D2:20:56:03:A1:A3:5E:7D:13:B5:94:D9:3F:29:E8:F7:B0:CF Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0141 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/UIbSIFYDoaNefRO1lNk_Kej3sM8.roa Signing time: Sun 30 Jun 2024 01:29:22 +0000 ROA not before: Sun 30 Jun 2024 01:29:22 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 2527 IP address blocks: 133.165.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Jun 30 01:29:22 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=5086D2205603A1A35E7D13B594D93F29E8F7B0CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:e8:54:87:c4:ba:e4:f7:7e:ae:86:0a:da: 71:a1:4a:bd:b5:e8:e1:5d:89:7e:d4:74:d9:02:cb: 08:05:a6:f3:52:d9:6d:83:c5:44:04:a6:4b:f8:a2: cf:9d:1e:b9:ae:df:24:b6:08:c4:26:0d:1d:f7:5e: 3c:a9:30:55:31:24:d4:32:46:88:e0:d4:8c:f7:7c: 64:b8:02:d7:b3:65:50:89:04:be:8e:b8:4b:3a:90: 3b:48:12:d4:62:15:9f:40:e6:a8:54:9d:83:b5:ef: 7e:af:e6:5c:8f:f1:74:55:00:f4:1a:15:85:5b:41: f1:6a:1c:43:16:b3:1c:a1:e3:4f:52:c0:fc:cd:bf: 60:58:4d:d6:9e:02:75:c5:81:a6:08:7f:45:97:fb: 3a:4c:08:f6:40:3e:c1:5a:25:30:06:e2:36:64:cd: a7:de:d3:b1:67:1f:2f:bd:d9:e7:4b:83:dd:67:26: 96:62:79:04:3c:72:38:5b:12:02:bd:1b:35:34:3e: 7c:b0:5f:81:60:ed:fe:20:2e:bb:52:e1:5e:af:06: 61:e2:ce:d1:9d:9c:ac:fb:62:2f:56:f7:1b:77:25: 00:1a:8f:de:ce:ae:4e:d9:00:fd:49:34:f8:41:e2: 97:55:51:2b:40:03:47:69:8f:43:6c:8d:84:43:86: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:86:D2:20:56:03:A1:A3:5E:7D:13:B5:94:D9:3F:29:E8:F7:B0:CF X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/UIbSIFYDoaNefRO1lNk_Kej3sM8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.165.128.0/18 Signature Algorithm: sha256WithRSAEncryption 46:9c:6e:9f:a6:fe:83:8e:46:3f:aa:66:20:c5:08:6d:f9:b8: 56:52:66:8b:ef:5e:84:e7:b4:0d:66:74:c2:df:f1:20:54:63: 58:c4:e4:03:c6:75:ad:f4:62:1a:aa:63:7b:7e:14:f4:b4:2f: 7a:ed:70:5d:31:97:57:70:7f:13:ae:8a:c4:95:b6:c5:77:55: 66:ce:3a:39:84:9c:6f:a6:d7:9a:b3:f5:03:97:d1:c2:f3:2e: aa:df:b7:9f:d3:3c:e4:ce:e3:02:5b:b8:25:c3:99:49:d1:71: 24:95:69:8f:1a:21:0b:86:f1:d4:99:90:56:72:a6:d5:13:8b: 55:29:af:14:00:5b:ca:1a:bc:80:e1:dc:c9:e5:fe:2f:7f:36: 8b:90:d2:b8:2c:f4:c1:75:da:54:41:06:db:bd:a9:19:de:cf: e2:e1:ac:ef:41:a6:98:78:19:5d:b3:bf:0b:83:bb:48:d7:b7: d7:ff:4e:c7:21:10:f5:e9:3c:7d:71:64:6c:f8:4e:c2:c7:d8: 04:29:16:e1:a2:74:ac:49:13:dc:46:d7:03:a7:07:72:70:cc: 84:95:f8:aa:1d:ff:76:34:52:c6:5e:d0:dd:6b:ea:e8:8f:9c: 4a:29:55:4b:a1:8f:2c:50:e0:a2:04:fe:e1:f5:d2:4d:28:b7: c5:f1:2f:a5 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNDA2MzAw MTI5MjJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDUwODZEMjIwNTYwM0Ex QTM1RTdEMTNCNTk0RDkzRjI5RThGN0IwQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6V+hUh8S65Pd+roYK2nGhSr216OFdiX7UdNkCywgFpvNS2W2D xUQEpkv4os+dHrmu3yS2CMQmDR33XjypMFUxJNQyRojg1Iz3fGS4AtezZVCJBL6O uEs6kDtIEtRiFZ9A5qhUnYO1736v5lyP8XRVAPQaFYVbQfFqHEMWsxyh409SwPzN v2BYTdaeAnXFgaYIf0WX+zpMCPZAPsFaJTAG4jZkzafe07FnHy+92edLg91nJpZi eQQ8cjhbEgK9GzU0PnywX4Fg7f4gLrtS4V6vBmHiztGdnKz7Yi9W9xt3JQAaj97O rk7ZAP1JNPhB4pdVUStAA0dpj0NsjYRDhiCZAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUUIbSIFYDoaNefRO1lNk/Kej3sM8wHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9VSWJTSUZZRG9hTmVmUk8xbE5rX0tlajNzTTgucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQGhaWAMA0GCSqGSIb3DQEBCwUAA4IBAQBGnG6fpv6DjkY/qmYgxQht+bhWUmaL 716E57QNZnTC3/EgVGNYxOQDxnWt9GIaqmN7fhT0tC967XBdMZdXcH8TrorElbbF d1Vmzjo5hJxvpteas/UDl9HC8y6q37ef0zzkzuMCW7glw5lJ0XEklWmPGiELhvHU mZBWcqbVE4tVKa8UAFvKGryA4dzJ5f4vfzaLkNK4LPTBddpUQQbbvakZ3s/i4azv QaaYeBlds78Lg7tI17fX/07HIRD16Tx9cWRs+E7Cx9gEKRbhonSsSRPcRtcDpwdy cMyElfiqHf92NFLGXtDda+roj5xKKVVLoY8sUOCiBP7h9dJNKLfF8S+l -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org