$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/4ZJDnk6oxqXuWzdvIA7p2h5MRHY.roa File: 4ZJDnk6oxqXuWzdvIA7p2h5MRHY.roa (raw, json) Hash identifier: uj+YEXrjrcM2M6ORJjjpUE35hLnzVAAbjUqe3J507p0= Subject key identifier: E1:92:43:9E:4E:A8:C6:A5:EE:5B:37:6F:20:0E:E9:DA:1E:4C:44:76 Certificate issuer: /CN=D405A6909AB9956CF7393D0E312A269A804005EF Certificate serial: 17 Authority key identifier: D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/4ZJDnk6oxqXuWzdvIA7p2h5MRHY.roa Signing time: Sun 31 Mar 2024 01:32:52 +0000 ROA not before: Sun 31 Mar 2024 01:32:52 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 4685 IP address blocks: 157.14.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 05:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D405A6909AB9956CF7393D0E312A269A804005EF Validity Not Before: Mar 31 01:32:52 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=E192439E4EA8C6A5EE5B376F200EE9DA1E4C4476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7b:53:f4:e9:92:59:82:d8:d5:b2:24:b3:a0: 66:70:54:83:6c:47:18:1c:4d:61:d5:07:f5:5f:6e: 8c:fd:45:9a:9f:ca:0f:ff:9d:a2:af:d3:5a:02:03: 69:39:4d:04:0a:b6:28:9c:9c:12:10:d3:ee:2a:53: 70:03:0d:bd:c7:bc:17:3f:bc:78:c3:6d:27:cf:4d: 7d:68:3d:b1:9d:3c:8a:91:60:52:b3:2b:3d:a0:7b: bd:84:f2:30:7b:3b:d8:c4:99:f4:83:ee:fa:9e:ca: 64:1e:66:ce:b2:ba:e4:ef:c6:55:5e:60:bf:9f:13: 67:a3:2e:ea:a7:51:50:de:48:94:70:0d:93:ae:04: 8a:f7:23:96:3f:d1:8a:93:ff:8b:c9:40:2c:17:04: ec:e5:96:e3:98:0e:b0:82:cd:52:e3:0c:f5:8e:04: 5e:f3:2b:b8:08:dd:27:30:33:5f:c5:20:be:bc:49: 81:c0:3d:0f:78:0a:b7:be:b5:f3:f7:51:17:b8:72: 43:2d:d2:64:fd:74:4f:38:79:ef:07:0e:a1:76:99: b8:ab:ed:9c:ab:66:6e:0e:43:88:84:2b:c8:15:23: e2:cd:f8:0e:2b:59:46:71:07:f4:7f:6b:47:7d:b2: 76:a8:94:9e:b8:d6:f4:6d:ce:ad:2c:45:d5:8e:15: dd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:92:43:9E:4E:A8:C6:A5:EE:5B:37:6F:20:0E:E9:DA:1E:4C:44:76 X509v3 Authority Key Identifier: keyid:D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/4ZJDnk6oxqXuWzdvIA7p2h5MRHY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.14.160.0/19 Signature Algorithm: sha256WithRSAEncryption 00:45:62:55:0d:72:5d:bb:14:7c:56:12:54:cd:70:f2:ff:5d: 69:e9:20:98:5a:02:cc:47:0d:17:72:d5:74:8f:3c:8a:58:de: 82:dc:27:51:80:22:20:84:19:d7:d2:ee:38:13:f5:a7:da:1b: 0d:d8:f9:94:2e:fa:90:17:8b:13:0d:de:21:fd:d3:3f:90:ea: 3f:d3:ee:9e:59:bc:05:8c:9d:02:0a:b5:1b:fc:cd:8c:25:ce: 98:04:be:0e:d6:0c:fe:8f:b2:84:2a:68:64:40:06:ee:60:81: 89:26:fa:34:8f:e3:9e:43:27:ce:8c:8c:1a:2c:26:12:00:5c: f5:9e:81:3e:3f:50:dc:e0:3d:aa:8d:91:ff:ea:04:c6:b9:ec: d1:28:0f:b5:14:aa:85:07:2c:67:01:20:9a:92:44:de:1e:84: 3a:26:2d:dd:52:74:d2:82:8e:7f:8b:8b:f1:38:97:1a:7a:ae: c1:7e:c9:d8:85:16:fe:64:0b:d9:94:db:04:fd:bb:f0:de:7e: 0f:a1:8a:0c:fe:d4:10:64:2b:b4:15:52:7e:09:30:e3:be:5a: d2:cd:1a:56:88:b1:5e:41:53:71:d9:18:69:3f:c3:16:a3:e6: 67:21:8e:97:43:e2:73:8b:07:a6:78:5e:25:ae:e6:1a:e1:db: 0e:00:f4:cf -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENDA1 QTY5MDlBQjk5NTZDRjczOTNEMEUzMTJBMjY5QTgwNDAwNUVGMB4XDTI0MDMzMTAx MzI1MloXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTE5MjQzOUU0RUE4QzZB NUVFNUIzNzZGMjAwRUU5REExRTRDNDQ3NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANp7U/TpklmC2NWyJLOgZnBUg2xHGBxNYdUH9V9ujP1Fmp/KD/+d oq/TWgIDaTlNBAq2KJycEhDT7ipTcAMNvce8Fz+8eMNtJ89NfWg9sZ08ipFgUrMr PaB7vYTyMHs72MSZ9IPu+p7KZB5mzrK65O/GVV5gv58TZ6Mu6qdRUN5IlHANk64E ivcjlj/RipP/i8lALBcE7OWW45gOsILNUuMM9Y4EXvMruAjdJzAzX8UgvrxJgcA9 D3gKt7618/dRF7hyQy3SZP10Tzh57wcOoXaZuKvtnKtmbg5DiIQryBUj4s34DitZ RnEH9H9rR32ydqiUnrjW9G3OrSxF1Y4V3b8CAwEAAaOCAiIwggIeMB0GA1UdDgQW BBThkkOeTqjGpe5bN28gDunaHkxEdjAfBgNVHSMEGDAWgBTUBaaQmrmVbPc5PQ4x KiaagEAF7zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTAvMUFXbWtKcTVsV3ozT1QwT01Tb21tb0JBQmU4LmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMUFXbWtKcTVsV3ozT1QwT01Tb21tb0JB QmU4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzUwLzRaSkRuazZveHFYdVd6ZHZJQTdwMmg1TVJIWS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAWdDqAwDQYJKoZIhvcNAQELBQADggEBAABFYlUNcl27FHxWElTNcPL/XWnpIJha AsxHDRdy1XSPPIpY3oLcJ1GAIiCEGdfS7jgT9afaGw3Y+ZQu+pAXixMN3iH90z+Q 6j/T7p5ZvAWMnQIKtRv8zYwlzpgEvg7WDP6PsoQqaGRABu5ggYkm+jSP455DJ86M jBosJhIAXPWegT4/UNzgPaqNkf/qBMa57NEoD7UUqoUHLGcBIJqSRN4ehDomLd1S dNKCjn+Li/E4lxp6rsF+ydiFFv5kC9mU2wT9u/Defg+higz+1BBkK7QVUn4JMOO+ WtLNGlaIsV5BU3HZGGk/wxaj5mchjpdD4nOLB6Z4XiWu5hrh2w4A9M8= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org