$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/uIY3pU6MKHJfteZEwdHxe9TKD9M.roa File: uIY3pU6MKHJfteZEwdHxe9TKD9M.roa (raw, json) Hash identifier: cDJsDvIVBRKbfiFU2O7+3ZhXwIVI/sDAP96eItEpqjc= Subject key identifier: B8:86:37:A5:4E:8C:28:72:5F:B5:E6:44:C1:D1:F1:7B:D4:CA:0F:D3 Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Certificate serial: 0D Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/uIY3pU6MKHJfteZEwdHxe9TKD9M.roa Signing time: Mon 21 Oct 2024 02:07:06 +0000 ROA not before: Mon 21 Oct 2024 02:07:06 +0000 ROA not after: Tue 21 Oct 2025 01:23:02 +0000 asID: 9354 IP address blocks: 202.157.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Validity Not Before: Oct 21 02:07:06 2024 GMT Not After : Oct 21 01:23:02 2025 GMT Subject: CN=B88637A54E8C28725FB5E644C1D1F17BD4CA0FD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:b1:7b:e4:85:b5:44:7c:fd:aa:f4:3e:fe: 75:af:f0:a8:bf:23:24:7f:e0:f2:05:2d:50:1c:49: 54:a5:25:77:a1:71:8c:60:f7:51:92:f3:d4:54:0e: 66:0e:58:59:7d:5d:82:aa:9d:0f:39:68:7d:03:67: f7:75:94:ad:24:d6:ba:7c:e5:1b:bb:b0:60:4e:99: 85:67:07:0b:c0:e2:cd:f0:c3:2d:3c:41:67:ea:6a: 72:60:df:33:4b:39:bf:6a:5a:60:5c:7d:b1:a9:95: 09:bf:ac:db:7e:4f:21:b2:77:68:2d:e1:7f:f8:81: 44:02:b6:62:5d:e8:ad:28:ee:85:f9:ae:d2:de:a6: 12:bf:aa:90:25:eb:3a:79:9f:67:a4:60:24:59:cd: cc:55:b7:12:17:80:97:20:7d:89:32:54:91:c0:82: 59:ac:44:0c:89:b6:c0:ea:72:f9:4b:bb:67:c3:e1: 80:10:a3:cb:df:77:e3:ae:71:43:bc:23:96:ff:72: 1b:14:9d:4b:bb:c5:62:5e:72:34:b8:be:d9:e1:60: c9:73:17:5a:c6:fd:3c:71:23:9d:36:07:a2:eb:28: 8f:65:c3:f4:e4:ff:80:9f:e8:99:54:8d:bc:b8:5c: 45:39:d9:fd:b8:89:f6:c6:39:d5:9b:60:94:cf:9d: 04:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:86:37:A5:4E:8C:28:72:5F:B5:E6:44:C1:D1:F1:7B:D4:CA:0F:D3 X509v3 Authority Key Identifier: keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/uIY3pU6MKHJfteZEwdHxe9TKD9M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.157.238.0/23 Signature Algorithm: sha256WithRSAEncryption e0:da:96:cd:ca:40:90:b1:68:f4:d6:be:e7:63:8a:4e:e3:0f: 2d:0d:ce:20:c9:a6:40:4f:c8:59:89:ed:39:c2:c1:48:26:9d: 27:a7:d1:b8:a2:b0:5d:d5:cf:d1:20:94:60:28:fa:81:03:b9: a0:72:bf:67:7f:c0:88:38:21:45:57:88:99:74:15:e0:05:9d: f0:58:ad:00:ef:aa:2d:2b:a7:f5:07:8e:12:12:ed:bb:3c:77: 0f:f8:a9:4b:cb:da:5e:08:64:37:3b:08:33:33:5a:61:fa:55: 50:65:c3:ae:4e:95:19:f5:d7:2c:84:38:23:f3:ff:ba:56:f2: 39:59:91:56:85:ff:ee:5a:b3:d9:a2:cd:b4:a2:9b:fe:cd:62: d3:e4:54:40:40:0d:f3:42:c1:8e:92:54:1e:e3:ba:01:c1:9b: c4:b0:27:43:ed:ef:61:13:1b:80:fc:86:3d:66:5f:c6:c5:59: 30:38:49:c9:d4:2f:e6:08:cf:24:07:2b:4a:3e:47:c5:b0:1f: 31:2e:c4:a9:24:f3:fc:0f:5e:3b:2b:47:af:4d:14:50:f6:4a: 7c:f0:fb:c8:7b:44:2f:8a:97:cf:fc:ac:fc:98:b6:d9:99:40: 63:b2:d1:4c:b0:04:54:74:4f:48:f4:97:20:95:06:b4:01:95: a1:06:78:e3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4 NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI0MTAyMTAy MDcwNloXDTI1MTAyMTAxMjMwMlowMzExMC8GA1UEAxMoQjg4NjM3QTU0RThDMjg3 MjVGQjVFNjQ0QzFEMUYxN0JENENBMEZEMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKGIsXvkhbVEfP2q9D7+da/wqL8jJH/g8gUtUBxJVKUld6FxjGD3 UZLz1FQOZg5YWX1dgqqdDzlofQNn93WUrSTWunzlG7uwYE6ZhWcHC8DizfDDLTxB Z+pqcmDfM0s5v2paYFx9samVCb+s235PIbJ3aC3hf/iBRAK2Yl3orSjuhfmu0t6m Er+qkCXrOnmfZ6RgJFnNzFW3EheAlyB9iTJUkcCCWaxEDIm2wOpy+Uu7Z8PhgBCj y993465xQ7wjlv9yGxSdS7vFYl5yNLi+2eFgyXMXWsb9PHEjnTYHousoj2XD9OT/ gJ/omVSNvLhcRTnZ/biJ9sY51ZtglM+dBCMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS4hjelTowocl+15kTB0fF71MoP0zAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80ODQvdUlZM3BVNk1LSEpmdGVaRXdkSHhlOVRLRDlNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcqd7jANBgkqhkiG9w0BAQsFAAOCAQEA4NqWzcpAkLFo9Na+52OKTuMPLQ3O IMmmQE/IWYntOcLBSCadJ6fRuKKwXdXP0SCUYCj6gQO5oHK/Z3/AiDghRVeImXQV 4AWd8FitAO+qLSun9QeOEhLtuzx3D/ipS8vaXghkNzsIMzNaYfpVUGXDrk6VGfXX LIQ4I/P/ulbyOVmRVoX/7lqz2aLNtKKb/s1i0+RUQEAN80LBjpJUHuO6AcGbxLAn Q+3vYRMbgPyGPWZfxsVZMDhJydQv5gjPJAcrSj5HxbAfMS7EqSTz/A9eOytHr00U UPZKfPD7yHtEL4qXz/ys/Ji22ZlAY7LRTLAEVHRPSPSXIJUGtAGVoQZ44w== -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org