$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/p9TKr128jSPls1T7iDuHcLPhpfA.roa File: p9TKr128jSPls1T7iDuHcLPhpfA.roa (raw, json) Hash identifier: nj9uwTdis8nVRpsn5HjeXq9wB/JsBX+KnNBlfG1z9BY= Subject key identifier: A7:D4:CA:AF:5D:BC:8D:23:E5:B3:54:FB:88:3B:87:70:B3:E1:A5:F0 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0137 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/p9TKr128jSPls1T7iDuHcLPhpfA.roa Signing time: Tue 30 Apr 2024 01:29:11 +0000 ROA not before: Tue 30 Apr 2024 01:29:11 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 2527 IP address blocks: 36.2.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Apr 30 01:29:11 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=A7D4CAAF5DBC8D23E5B354FB883B8770B3E1A5F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:63:9c:09:e7:12:42:fe:82:e4:d5:8b:dc:8b: 40:06:2c:38:74:62:0d:21:f2:56:fd:5e:ca:9e:67: 1d:d8:51:08:6b:df:3c:73:83:c2:fe:61:ea:86:f8: c7:c6:3a:ab:34:9c:00:41:93:18:d2:7a:ec:13:3f: cc:e9:61:7b:c8:d4:e8:14:4e:c6:94:23:62:5a:69: a5:74:3c:60:39:1d:4d:46:f8:62:2e:e5:c3:f0:ab: 0c:2b:96:cb:8a:19:52:af:cb:6a:54:30:30:c9:32: eb:fb:dc:44:d1:15:6c:07:9a:13:7e:0e:f6:d2:57: 82:ef:45:e7:11:51:1f:30:b1:f9:43:6e:28:d8:bc: 15:aa:c3:87:83:43:1c:77:bd:5f:5a:c7:1a:36:08: c7:f3:4f:4c:3a:9a:5a:99:fd:38:ff:11:fd:65:b7: 36:a4:cc:e0:9a:f3:cd:7e:1e:a9:98:54:e7:1b:b2: fe:29:bf:e5:f5:52:af:42:ef:28:35:fa:44:69:63: fd:5e:fe:f7:32:91:6a:fa:46:0d:fb:d3:f5:86:fe: a3:b2:db:56:fe:b8:92:89:03:e3:21:7d:11:ab:00: 65:01:be:dd:c0:ea:47:10:42:d0:89:05:72:85:ec: af:b3:75:b8:21:f1:9d:cf:72:56:2e:ec:2b:00:4c: 6d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D4:CA:AF:5D:BC:8D:23:E5:B3:54:FB:88:3B:87:70:B3:E1:A5:F0 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/p9TKr128jSPls1T7iDuHcLPhpfA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.2.0.0/19 Signature Algorithm: sha256WithRSAEncryption 35:15:76:a4:12:c1:29:39:c2:51:d7:99:34:9a:1f:3a:6d:75: a6:fc:d5:27:bd:b4:03:52:31:ef:4c:59:6f:4a:8a:0e:cc:8f: 5b:33:c9:29:02:56:8e:3b:e2:23:b8:3d:eb:35:32:cc:35:9d: 98:be:94:e6:85:0f:df:6c:dd:80:12:0e:fd:02:83:3c:a9:2f: 39:49:be:81:e4:24:fd:3e:d0:8d:71:d5:ef:37:1f:e1:06:5d: 0d:c3:5d:13:6b:d8:40:b5:36:f9:ee:d3:75:7c:66:18:9d:5d: 95:a8:52:7f:6c:7b:8d:f8:19:2a:12:18:51:02:11:69:f9:1d: 22:35:ca:59:6d:b6:3f:5a:bb:47:04:0f:8d:aa:ba:57:19:43: 42:91:be:80:5d:6c:4d:ac:f9:7a:09:54:2c:56:3b:ad:69:7f: 86:e1:5e:b9:54:cd:18:76:ef:0e:f2:26:bd:01:52:42:9f:42: 56:22:67:fc:96:7c:4b:13:e0:28:e4:56:5e:cb:33:bd:fe:85: 37:21:46:c5:f9:48:c2:05:67:a4:2e:8f:31:95:4e:76:b2:bb: eb:66:b7:3e:f3:7a:b4:82:55:4a:e5:90:91:6c:a1:11:e6:17: a0:50:90:42:e1:ab:8b:ab:10:35:5d:40:b5:f8:ee:8e:c9:48: 32:d7:02:a8 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICATcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNDA0MzAw MTI5MTFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE3RDRDQUFGNURCQzhE MjNFNUIzNTRGQjg4M0I4NzcwQjNFMUE1RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOY5wJ5xJC/oLk1Yvci0AGLDh0Yg0h8lb9XsqeZx3YUQhr3zxz g8L+YeqG+MfGOqs0nABBkxjSeuwTP8zpYXvI1OgUTsaUI2JaaaV0PGA5HU1G+GIu 5cPwqwwrlsuKGVKvy2pUMDDJMuv73ETRFWwHmhN+DvbSV4LvRecRUR8wsflDbijY vBWqw4eDQxx3vV9axxo2CMfzT0w6mlqZ/Tj/Ef1ltzakzOCa881+HqmYVOcbsv4p v+X1Uq9C7yg1+kRpY/1e/vcykWr6Rg370/WG/qOy21b+uJKJA+MhfRGrAGUBvt3A 6kcQQtCJBXKF7K+zdbgh8Z3PclYu7CsATG2rAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUp9TKr128jSPls1T7iDuHcLPhpfAwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9wOVRLcjEyOGpTUGxzMVQ3aUR1SGNMUGhwZkEucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFJAIAMA0GCSqGSIb3DQEBCwUAA4IBAQA1FXakEsEpOcJR15k0mh86bXWm/NUn vbQDUjHvTFlvSooOzI9bM8kpAlaOO+IjuD3rNTLMNZ2YvpTmhQ/fbN2AEg79AoM8 qS85Sb6B5CT9PtCNcdXvNx/hBl0Nw10Ta9hAtTb57tN1fGYYnV2VqFJ/bHuN+Bkq EhhRAhFp+R0iNcpZbbY/WrtHBA+NqrpXGUNCkb6AXWxNrPl6CVQsVjutaX+G4V65 VM0Ydu8O8ia9AVJCn0JWImf8lnxLE+Ao5FZeyzO9/oU3IUbF+UjCBWekLo8xlU52 srvrZrc+83q0glVK5ZCRbKER5hegUJBC4auLqxA1XUC1+O6OyUgy1wKo -----END CERTIFICATE-----Generated at Sun Feb 16 22:06:27 2025 by rpki-client