$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/GBZDpBDFsMvFkKNr8OglDeW0-xI.roa File: GBZDpBDFsMvFkKNr8OglDeW0-xI.roa (raw, json) Hash identifier: oa24dBFsXavTXwL7zvItk7PH3hg3HrfstcX2ZpE5yos= Subject key identifier: 18:16:43:A4:10:C5:B0:CB:C5:90:A3:6B:F0:E8:25:0D:E5:B4:FB:12 Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Certificate serial: 12 Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/GBZDpBDFsMvFkKNr8OglDeW0-xI.roa Signing time: Mon 21 Oct 2024 02:14:59 +0000 ROA not before: Mon 21 Oct 2024 02:14:59 +0000 ROA not after: Tue 21 Oct 2025 01:23:02 +0000 asID: 9354 IP address blocks: 27.113.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Validity Not Before: Oct 21 02:14:59 2024 GMT Not After : Oct 21 01:23:02 2025 GMT Subject: CN=181643A410C5B0CBC590A36BF0E8250DE5B4FB12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:90:30:e9:13:30:ca:9d:3b:11:ba:8e:08: a6:c8:f2:14:11:24:33:25:91:43:9c:c6:c3:1a:25: 07:14:24:3c:5f:a2:00:fd:7d:e4:fc:98:42:8f:da: b6:14:4f:3c:33:51:da:4d:ad:66:c9:00:49:94:83: a1:df:30:d4:9d:fe:56:c8:21:41:c5:6b:38:44:03: c3:91:50:66:33:57:25:a0:6e:6f:fe:36:20:a0:fb: 98:93:e1:21:48:bc:d9:f4:c5:6f:6f:e5:3c:ba:5e: fa:ad:6d:c1:41:45:80:26:f1:41:da:46:e8:52:a7: 1c:ce:79:81:57:f8:37:10:ea:5c:ef:60:33:2f:71: 24:31:2a:34:b4:0f:00:ea:57:f9:c3:49:84:15:eb: 21:6c:f1:4f:ab:63:5a:75:3e:f7:05:d0:34:0b:a2: 92:7a:6d:ee:1b:8f:ec:29:40:21:85:41:2c:59:b5: 53:0a:69:c6:8d:f9:6c:2d:65:17:92:ef:3f:43:db: 9e:47:2f:a7:f1:c2:a4:db:cc:32:b4:a4:8d:95:88: 10:a3:5b:c7:91:dc:c7:f7:88:16:e0:69:a0:ac:94: 5e:a6:48:c8:31:62:ad:98:13:c6:70:33:1b:f9:57: 8b:00:ed:13:04:3d:23:37:f0:9d:41:28:c9:dd:a8: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:16:43:A4:10:C5:B0:CB:C5:90:A3:6B:F0:E8:25:0D:E5:B4:FB:12 X509v3 Authority Key Identifier: keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/GBZDpBDFsMvFkKNr8OglDeW0-xI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.113.224.0/20 Signature Algorithm: sha256WithRSAEncryption 2f:2d:a1:ec:58:09:9b:9b:53:c5:64:cb:7a:4b:67:f0:ba:16: 52:e0:bd:83:77:2c:eb:9b:b2:61:64:70:80:90:6c:8e:11:b9: 67:76:d8:f6:d6:88:b9:b1:4c:16:b8:03:4b:ce:ec:58:a1:33: 88:d6:49:d8:70:21:91:4e:ac:a1:0b:bc:ee:a4:22:ac:3d:3c: e0:13:af:a1:82:e0:a5:f4:1f:36:41:d3:37:c0:c6:59:89:38: a0:26:80:36:5d:e1:aa:5d:36:30:5a:e5:d7:7a:51:c1:a8:0d: 2e:e2:17:e5:43:06:6f:e8:5f:a7:1c:6f:75:76:1c:49:9a:45: d7:d5:51:2a:4e:e5:0e:c6:dd:cc:b3:7f:9c:6b:1a:ea:59:95: 05:63:45:d1:e6:78:eb:ba:9e:6c:7d:e5:b2:f6:b5:ee:69:8b: d1:d0:1e:d7:32:19:95:af:7f:6b:bc:00:f2:5e:77:9a:98:27: 36:e9:4c:20:4a:85:3f:b7:22:58:db:7c:28:b0:a3:d6:04:00: 92:09:ef:04:03:b9:10:5e:c8:98:e2:70:b2:9f:71:97:48:0c: 6f:1d:98:87:24:f2:30:fc:19:a8:98:e0:bf:1e:80:69:d1:32: b2:1b:0c:05:f3:b4:da:22:d2:59:8e:74:bf:f2:39:c3:77:b6: af:31:62:ba -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4 NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI0MTAyMTAy MTQ1OVoXDTI1MTAyMTAxMjMwMlowMzExMC8GA1UEAxMoMTgxNjQzQTQxMEM1QjBD QkM1OTBBMzZCRjBFODI1MERFNUI0RkIxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL63kDDpEzDKnTsRuo4IpsjyFBEkMyWRQ5zGwxolBxQkPF+iAP19 5PyYQo/athRPPDNR2k2tZskASZSDod8w1J3+VsghQcVrOEQDw5FQZjNXJaBub/42 IKD7mJPhIUi82fTFb2/lPLpe+q1twUFFgCbxQdpG6FKnHM55gVf4NxDqXO9gMy9x JDEqNLQPAOpX+cNJhBXrIWzxT6tjWnU+9wXQNAuiknpt7huP7ClAIYVBLFm1Uwpp xo35bC1lF5LvP0Pbnkcvp/HCpNvMMrSkjZWIEKNbx5Hcx/eIFuBpoKyUXqZIyDFi rZgTxnAzG/lXiwDtEwQ9IzfwnUEoyd2oQnMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQYFkOkEMWwy8WQo2vw6CUN5bT7EjAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80ODQvR0JaRHBCREZzTXZGa0tOcjhPZ2xEZVcwLXhJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBBtx4DANBgkqhkiG9w0BAQsFAAOCAQEALy2h7FgJm5tTxWTLektn8LoWUuC9 g3cs65uyYWRwgJBsjhG5Z3bY9taIubFMFrgDS87sWKEziNZJ2HAhkU6soQu87qQi rD084BOvoYLgpfQfNkHTN8DGWYk4oCaANl3hql02MFrl13pRwagNLuIX5UMGb+hf pxxvdXYcSZpF19VRKk7lDsbdzLN/nGsa6lmVBWNF0eZ467qebH3lsva17mmL0dAe 1zIZla9/a7wA8l53mpgnNulMIEqFP7ciWNt8KLCj1gQAkgnvBAO5EF7ImOJwsp9x l0gMbx2YhyTyMPwZqJjgvx6AadEyshsMBfO02iLSWY50v/I5w3e2rzFiug== -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org