$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/oosyxbk017s4LS750QdniWReEVI.roa File: oosyxbk017s4LS750QdniWReEVI.roa (raw, json) Hash identifier: 2uOlHFZxU5Q86kcl/Y3altskeUnhy5d73kvH3GyprvU= Subject key identifier: A2:8B:32:C5:B9:34:D7:BB:38:2D:2E:F9:D1:07:67:89:64:5E:11:52 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0109 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/oosyxbk017s4LS750QdniWReEVI.roa Signing time: Fri 01 Dec 2023 01:30:09 +0000 ROA not before: Fri 01 Dec 2023 01:30:09 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 2527 IP address blocks: 219.111.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Dec 1 01:30:09 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=A28B32C5B934D7BB382D2EF9D1076789645E1152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b9:cd:b7:f2:9d:6b:cb:e5:89:b8:bb:af:a4: d3:1d:87:8a:33:7a:09:b5:6e:59:42:f1:1a:aa:5e: 96:d1:c7:19:4b:b4:f5:eb:2d:73:a5:a4:7a:b7:7e: b0:00:e8:7e:52:8b:95:7a:1c:42:b5:2c:1f:b3:b4: 19:43:9a:d6:b9:34:62:3e:97:18:fb:a9:b4:23:e1: 14:a1:f3:17:c1:66:f4:55:a2:5f:0d:91:45:90:76: 28:c9:5a:e3:2c:3f:cb:a5:42:7a:c4:8b:73:cf:46: 5e:f9:f0:ad:a9:27:49:52:7f:49:14:a6:e9:ae:63: 77:af:41:2d:6e:32:2a:38:09:8b:a3:50:7a:d7:5d: 1e:6a:a2:e8:22:d9:9e:5f:9c:ed:d3:8a:bb:0d:e5: a3:7c:a6:59:12:06:1b:1a:40:72:f2:eb:09:81:1c: ad:32:fa:af:06:14:d9:98:d4:8c:50:2d:f7:f9:0e: 9d:da:07:be:d8:bb:90:61:13:c3:1f:56:e4:37:85: e4:4a:63:46:63:66:13:a6:27:02:9b:46:30:59:ff: aa:c3:0b:b2:41:2e:d9:20:4e:b7:66:da:8e:9a:dc: e6:fb:03:3f:85:70:ac:d9:1b:7c:21:a1:b5:04:45: 8b:51:ef:f6:56:74:4c:a3:6e:51:8b:ef:3c:3b:66: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8B:32:C5:B9:34:D7:BB:38:2D:2E:F9:D1:07:67:89:64:5E:11:52 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/oosyxbk017s4LS750QdniWReEVI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.111.128.0/18 Signature Algorithm: sha256WithRSAEncryption 1f:56:33:1d:90:2d:a1:08:ae:a0:4f:96:80:c8:46:aa:fc:a1: 78:4f:6f:4d:a6:f0:eb:45:62:16:80:60:09:13:0e:09:b5:01: ad:94:6f:b0:0d:d6:92:2c:7a:3b:51:5d:2a:91:35:05:4b:b8: 0a:ca:e5:53:3c:33:15:ea:87:88:d8:45:b6:b3:50:5f:3e:ae: 1a:ae:75:86:e2:de:88:d1:7e:ef:16:69:37:c1:18:3b:b2:69: 11:9f:03:d9:3e:ee:71:b9:cc:ac:1a:77:5d:e9:fc:cb:1a:70: 97:48:a0:e2:92:01:f2:3c:b9:57:2b:d0:c7:8e:f7:03:ed:f8: 78:7d:31:f5:b7:81:04:96:21:4b:5c:d8:98:e5:80:b2:33:5a: 64:38:90:f4:ce:24:b0:bb:e1:f5:c1:6b:70:fa:90:0d:59:f1: 18:56:f3:50:86:47:2d:ec:80:96:e4:b2:d2:a7:78:d9:61:c8: 69:ff:59:5d:b9:46:b6:7e:51:e2:f1:b1:18:b1:b0:7b:bb:ca: a4:78:24:de:db:06:32:be:0b:54:6f:81:5d:0a:3d:47:eb:cd: 36:ce:c3:d1:85:dc:d4:6c:1b:93:04:c8:d6:79:05:29:f2:9c: 4d:9c:97:fa:f9:57:7a:66:f8:41:be:0a:0f:4b:91:1d:86:c9: 58:88:4b:a4 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzEyMDEw MTMwMDlaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEEyOEIzMkM1QjkzNEQ3 QkIzODJEMkVGOUQxMDc2Nzg5NjQ1RTExNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfuc238p1ry+WJuLuvpNMdh4ozegm1bllC8RqqXpbRxxlLtPXr LXOlpHq3frAA6H5Si5V6HEK1LB+ztBlDmta5NGI+lxj7qbQj4RSh8xfBZvRVol8N kUWQdijJWuMsP8ulQnrEi3PPRl758K2pJ0lSf0kUpumuY3evQS1uMio4CYujUHrX XR5qougi2Z5fnO3TirsN5aN8plkSBhsaQHLy6wmBHK0y+q8GFNmY1IxQLff5Dp3a B77Yu5BhE8MfVuQ3heRKY0ZjZhOmJwKbRjBZ/6rDC7JBLtkgTrdm2o6a3Ob7Az+F cKzZG3whobUERYtR7/ZWdEyjblGL7zw7Zr03AgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUoosyxbk017s4LS750QdniWReEVIwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9vb3N5eGJrMDE3czRMUzc1MFFkbmlXUmVFVkkucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQG22+AMA0GCSqGSIb3DQEBCwUAA4IBAQAfVjMdkC2hCK6gT5aAyEaq/KF4T29N pvDrRWIWgGAJEw4JtQGtlG+wDdaSLHo7UV0qkTUFS7gKyuVTPDMV6oeI2EW2s1Bf Pq4arnWG4t6I0X7vFmk3wRg7smkRnwPZPu5xucysGndd6fzLGnCXSKDikgHyPLlX K9DHjvcD7fh4fTH1t4EEliFLXNiY5YCyM1pkOJD0ziSwu+H1wWtw+pANWfEYVvNQ hkct7ICW5LLSp3jZYchp/1lduUa2flHi8bEYsbB7u8qkeCTe2wYyvgtUb4FdCj1H 6802zsPRhdzUbBuTBMjWeQUp8pxNnJf6+Vd6ZvhBvgoPS5EdhslYiEuk -----END CERTIFICATE-----Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org