$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/IDNNB1RC2gpdXiatdBbgRFD59uo.roa File: IDNNB1RC2gpdXiatdBbgRFD59uo.roa (raw, json) Hash identifier: oFsRZmCsbhHOBL4u9jp05QxTKZoj5azDKUTOC3IFXz4= Subject key identifier: 20:33:4D:07:54:42:DA:0A:5D:5E:26:AD:74:16:E0:44:50:F9:F6:EA Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Certificate serial: 43 Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/IDNNB1RC2gpdXiatdBbgRFD59uo.roa Signing time: Mon 01 Jan 2024 01:30:50 +0000 ROA not before: Mon 01 Jan 2024 01:30:50 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 17676 IP address blocks: 61.213.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Validity Not Before: Jan 1 01:30:50 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=20334D075442DA0A5D5E26AD7416E04450F9F6EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:c6:22:7d:c2:46:01:66:26:c1:77:c2:5a: 51:c3:bd:81:14:f2:6b:59:a2:a1:5b:1d:d8:f3:20: d1:31:4b:62:32:04:6a:de:d8:08:c0:ee:5b:8f:e8: 6c:c1:15:d2:40:2e:25:b0:19:3d:e7:dd:1a:23:79: b8:63:b5:b7:2f:d5:f1:10:53:6b:d6:11:52:b2:92: 92:25:43:0d:8d:18:fb:d9:80:d4:85:dc:e8:a1:3c: 8b:c9:38:fd:ca:32:c6:4e:7f:fe:4d:6d:5c:93:22: 8b:24:cd:68:49:ee:6a:18:9a:b4:1e:e9:62:07:5f: 94:40:99:45:ad:e1:d7:75:94:d2:43:6e:28:71:7e: 63:a7:25:0f:c9:00:dc:3c:b0:65:97:9f:70:21:9d: b5:58:ee:be:1f:b0:22:9a:de:e3:3a:1e:a4:f9:1c: 20:6d:1c:ce:df:85:24:9d:c6:54:6b:f9:6d:a6:4c: 00:de:99:83:f6:28:da:3b:d6:b0:02:f7:a9:6e:d2: 66:97:5d:91:f3:5b:b2:57:ab:ee:97:7a:ab:1c:ac: 4a:c5:02:47:9a:5f:e5:fe:64:a5:b3:1f:bf:d4:91: 30:ef:52:28:da:cc:4b:16:92:de:f6:20:5b:d3:ab: c6:c1:96:26:eb:c3:ce:14:7d:84:d3:00:1d:18:e3: cf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:33:4D:07:54:42:DA:0A:5D:5E:26:AD:74:16:E0:44:50:F9:F6:EA X509v3 Authority Key Identifier: keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/IDNNB1RC2gpdXiatdBbgRFD59uo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.213.0.0/20 Signature Algorithm: sha256WithRSAEncryption a4:42:58:21:26:5f:44:58:6c:7c:16:e2:0b:c0:95:c5:c8:2d: 84:86:48:ed:82:47:e2:c5:2e:d3:76:4e:ef:ad:f6:e1:ee:f3: 9e:7f:cc:4e:cc:be:cb:2c:ce:fa:36:c0:0a:30:1a:fa:7d:60: be:68:b9:4a:f7:1f:52:0d:3f:9f:3d:02:b0:bc:3c:b8:7f:37: 9a:a2:ea:ab:bf:3c:72:50:f1:45:ac:0c:1f:c6:b7:8c:34:2c: f8:33:09:80:87:86:a4:dd:79:40:c1:f4:08:17:13:54:1a:6e: 13:15:81:76:78:31:08:fc:96:e1:92:20:1b:47:9a:33:3e:de: a5:be:a2:03:79:18:dd:c1:9c:dc:e0:c4:71:2c:6d:0d:e4:61: ec:49:e8:ca:c9:43:57:e4:ed:4d:ca:93:dc:7c:a5:4c:ad:82: f8:cc:c9:a8:2e:25:13:cb:3f:ce:fa:03:bb:f8:36:5c:52:d2: e0:49:43:1c:e3:2a:06:24:38:a6:f9:ea:2e:1f:6b:48:3a:95: a2:7a:9a:88:63:44:f0:46:fb:75:ec:8c:9a:15:81:31:b9:1a: a7:b6:5b:04:a9:0d:ba:c2:fc:9b:07:96:31:16:a9:5d:d3:f7: 4e:ac:23:26:34:48:ac:f9:61:bf:9d:2f:ba:03:87:c0:f3:55: 81:75:95:d6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTI0MDEwMTAx MzA1MFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoMjAzMzREMDc1NDQyREEw QTVENUUyNkFENzQxNkUwNDQ1MEY5RjZFQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALk+xiJ9wkYBZibBd8JaUcO9gRTya1mioVsd2PMg0TFLYjIEat7Y CMDuW4/obMEV0kAuJbAZPefdGiN5uGO1ty/V8RBTa9YRUrKSkiVDDY0Y+9mA1IXc 6KE8i8k4/coyxk5//k1tXJMiiyTNaEnuahiatB7pYgdflECZRa3h13WU0kNuKHF+ Y6clD8kA3DywZZefcCGdtVjuvh+wIpre4zoepPkcIG0czt+FJJ3GVGv5baZMAN6Z g/Yo2jvWsAL3qW7SZpddkfNbsler7pd6qxysSsUCR5pf5f5kpbMfv9SRMO9SKNrM SxaS3vYgW9OrxsGWJuvDzhR9hNMAHRjjz6UCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQgM00HVELaCl1eJq10FuBEUPn26jAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3 LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDAvSUROTkIxUkMyZ3BkWGlhdGRCYmdSRkQ1OXVvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD3VADANBgkqhkiG9w0BAQsFAAOCAQEApEJYISZfRFhsfBbiC8CVxcgthIZI 7YJH4sUu03ZO76324e7znn/MTsy+yyzO+jbACjAa+n1gvmi5SvcfUg0/nz0CsLw8 uH83mqLqq788clDxRawMH8a3jDQs+DMJgIeGpN15QMH0CBcTVBpuExWBdngxCPyW 4ZIgG0eaMz7epb6iA3kY3cGc3ODEcSxtDeRh7EnoyslDV+TtTcqT3HylTK2C+MzJ qC4lE8s/zvoDu/g2XFLS4ElDHOMqBiQ4pvnqLh9rSDqVonqaiGNE8Eb7deyMmhWB Mbkap7ZbBKkNusL8mweWMRapXdP3TqwjJjRIrPlhv50vugOHwPNVgXWV1g== -----END CERTIFICATE-----Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org