$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/fjFRdTIMP5gEvmhV0oTI-FXt8dU.roa File: fjFRdTIMP5gEvmhV0oTI-FXt8dU.roa (raw, json) Hash identifier: ObeXEH0I+FPZXwF76yUJ4ObMMnqTWUxeX175Q56tvsU= Subject key identifier: 7E:31:51:75:32:0C:3F:98:04:BE:68:55:D2:84:C8:F8:55:ED:F1:D5 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0120 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/fjFRdTIMP5gEvmhV0oTI-FXt8dU.roa Signing time: Fri 01 Dec 2023 01:31:56 +0000 ROA not before: Fri 01 Dec 2023 01:31:56 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 2527 IP address blocks: 121.2.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Dec 1 01:31:56 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=7E315175320C3F9804BE6855D284C8F855EDF1D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:db:c7:a9:6c:6b:b0:f7:5b:bc:33:52:be: a8:3d:32:a6:a6:f6:a0:b8:25:b8:a6:a3:ba:7a:ef: 8e:ad:b7:d9:d8:35:2a:02:bf:11:54:f8:93:8d:09: f7:97:7b:43:7e:28:bf:30:c4:1e:7f:d2:80:eb:00: fc:49:27:33:15:a5:86:63:57:24:3f:0a:a7:f8:5d: 49:d6:5b:39:e9:52:a2:34:a4:6a:83:41:e9:f6:2f: 30:49:24:5a:4c:98:0f:55:ec:36:cb:c3:4d:6e:0e: 33:e6:16:b2:8f:32:70:1a:e0:ba:63:8d:d9:da:b5: f6:04:07:09:06:0e:91:95:1a:47:a6:b7:03:7e:16: 45:f2:7a:5e:18:34:5a:be:71:c9:bd:4a:15:f3:95: 95:ba:98:82:d6:9d:fd:38:67:05:94:7e:e2:d0:ba: f8:e6:d8:86:6a:32:3a:fd:f0:12:d9:fd:f7:23:5a: d6:03:2a:a9:d6:5a:92:c1:5b:97:d0:b0:28:f7:29: 71:bb:97:cb:89:c7:a8:c0:4e:ed:d2:8d:8f:6b:36: 0a:a6:18:be:d5:40:b8:3b:cb:07:06:b6:42:74:5e: 54:92:88:57:5e:04:73:54:ae:cb:43:1a:05:ec:de: d2:9d:45:f4:5f:f6:ff:dd:6a:84:ed:05:cd:c0:9c: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:31:51:75:32:0C:3F:98:04:BE:68:55:D2:84:C8:F8:55:ED:F1:D5 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/fjFRdTIMP5gEvmhV0oTI-FXt8dU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.2.0.0/15 Signature Algorithm: sha256WithRSAEncryption 75:48:cc:13:22:35:9e:96:bb:75:bc:af:5a:77:fa:62:dc:ea: fd:69:25:d9:0a:43:07:5b:b5:54:8a:3d:2b:9b:99:63:db:24: c9:9f:dd:eb:fa:3c:81:43:0e:af:2c:a0:d7:a4:82:56:58:5a: 13:40:2a:68:95:f1:10:7f:d2:1a:6e:6f:e4:29:7f:ef:95:25: 31:ca:c8:7a:98:f6:0b:41:80:55:79:15:87:78:7b:1b:3f:e6: a9:90:5c:17:73:55:8a:89:eb:c7:fd:e7:71:ce:b4:f4:e8:bf: b7:0a:dd:b6:16:eb:71:0d:9f:33:d3:a2:6c:d6:8d:e8:3c:2d: 25:c5:29:da:f5:77:e6:7b:43:d6:6d:c0:c1:d2:59:e1:bf:f7: 10:cb:43:ed:77:37:b6:d4:54:14:5b:60:e1:59:74:2b:62:83: 55:8d:69:be:d4:94:f6:b2:86:be:0c:90:e6:72:b6:68:13:c1: 8a:82:23:05:d8:31:f9:ca:ce:20:d2:9e:d1:4f:91:ae:5a:75: 9f:30:50:b8:19:70:e3:cd:6f:13:30:d3:7f:6a:9f:25:74:2e: 5e:80:2e:0c:1c:35:b2:36:a2:13:c6:17:08:bb:2e:b6:44:6e: ae:31:2f:1f:4e:70:0d:43:6a:c2:dd:fc:56:11:57:d4:36:a9: 9d:82:f2:93 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgICASAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzEyMDEw MTMxNTZaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDdFMzE1MTc1MzIwQzNG OTgwNEJFNjg1NUQyODRDOEY4NTVFREYxRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8tdvHqWxrsPdbvDNSvqg9Mqam9qC4Jbimo7p6746tt9nYNSoC vxFU+JONCfeXe0N+KL8wxB5/0oDrAPxJJzMVpYZjVyQ/Cqf4XUnWWznpUqI0pGqD Qen2LzBJJFpMmA9V7DbLw01uDjPmFrKPMnAa4LpjjdnatfYEBwkGDpGVGkemtwN+ FkXyel4YNFq+ccm9ShXzlZW6mILWnf04ZwWUfuLQuvjm2IZqMjr98BLZ/fcjWtYD KqnWWpLBW5fQsCj3KXG7l8uJx6jATu3SjY9rNgqmGL7VQLg7ywcGtkJ0XlSSiFde BHNUrstDGgXs3tKdRfRf9v/daoTtBc3AnN3hAgMBAAGjggIhMIICHTAdBgNVHQ4E FgQUfjFRdTIMP5gEvmhV0oTI+FXt8dUwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9makZSZFRJTVA1Z0V2bWhWMG9USS1GWHQ4ZFUucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMBeQIwDQYJKoZIhvcNAQELBQADggEBAHVIzBMiNZ6Wu3W8r1p3+mLc6v1pJdkK QwdbtVSKPSubmWPbJMmf3ev6PIFDDq8soNekglZYWhNAKmiV8RB/0hpub+Qpf++V JTHKyHqY9gtBgFV5FYd4exs/5qmQXBdzVYqJ68f953HOtPTov7cK3bYW63ENnzPT omzWjeg8LSXFKdr1d+Z7Q9ZtwMHSWeG/9xDLQ+13N7bUVBRbYOFZdCtig1WNab7U lPayhr4MkOZytmgTwYqCIwXYMfnKziDSntFPka5adZ8wULgZcOPNbxMw039qnyV0 Ll6ALgwcNbI2ohPGFwi7LrZEbq4xLx9OcA1DasLd/FYRV9Q2qZ2C8pM= -----END CERTIFICATE-----Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org