$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/bcCQnB0mexf7Bxw26ZezfQ4t9po.roa File: bcCQnB0mexf7Bxw26ZezfQ4t9po.roa (raw, json) Hash identifier: 5EywYwh2qfl9xfmniviy2L7/CVbsTWtuYndmbeNKAA4= Subject key identifier: 6D:C0:90:9C:1D:26:7B:17:FB:07:1C:36:E9:97:B3:7D:0E:2D:F6:9A Certificate issuer: /CN=D405A6909AB9956CF7393D0E312A269A804005EF Certificate serial: 20 Authority key identifier: D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/bcCQnB0mexf7Bxw26ZezfQ4t9po.roa Signing time: Sat 31 Aug 2024 01:34:04 +0000 ROA not before: Sat 31 Aug 2024 01:34:04 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 4685 IP address blocks: 131.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D405A6909AB9956CF7393D0E312A269A804005EF Validity Not Before: Aug 31 01:34:04 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=6DC0909C1D267B17FB071C36E997B37D0E2DF69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:7e:6c:87:e4:05:62:2c:1e:f6:18:25:98: 80:33:a2:b2:6d:81:5c:08:8e:0e:e2:db:2a:3d:47: 46:20:27:b5:85:27:9c:9b:e1:18:22:6f:c4:36:d5: 0e:25:6b:34:24:2c:3b:c2:92:6e:5a:77:5e:93:52: a7:10:58:78:4d:3e:fc:d1:f7:fa:cb:35:e5:7d:39: d3:cb:60:b6:8c:5a:e2:70:32:2c:be:19:f7:0e:92: f6:df:8c:55:e5:d5:f8:97:29:40:50:2c:99:43:29: c8:a5:40:34:d3:d7:d9:04:b3:90:16:7c:f8:64:85: 3b:27:68:25:60:e7:82:f4:f2:b1:c1:51:98:56:e1: 0f:ea:84:10:15:5d:6c:b5:54:3b:18:16:32:03:67: f9:1a:34:db:bc:01:ac:b3:7a:75:a7:4c:d2:43:13: 0a:b5:12:0e:db:39:1a:44:da:c8:5a:3d:9f:04:83: 04:c4:96:0d:47:f0:db:08:56:50:12:4e:45:f7:65: 5c:23:4c:b0:a3:cc:ab:c0:8a:bb:d2:76:13:fd:32: f2:ce:88:87:81:c4:54:a6:e4:9f:9f:75:49:c2:9b: 00:84:83:10:68:a5:9d:42:74:cf:d4:bb:04:ac:cf: dc:26:d9:ab:29:25:d2:7f:69:60:ad:de:e4:d7:05: d8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C0:90:9C:1D:26:7B:17:FB:07:1C:36:E9:97:B3:7D:0E:2D:F6:9A X509v3 Authority Key Identifier: keyid:D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/bcCQnB0mexf7Bxw26ZezfQ4t9po.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 131.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5d:8b:02:2c:05:06:17:eb:25:1a:27:de:78:49:e1:93:89:0c: f7:ea:e2:aa:17:dc:fb:ba:6c:86:7d:53:b5:a2:25:dd:83:77: ae:6b:2a:b8:6c:4f:e9:ff:7a:1d:36:40:cf:96:4c:37:62:fc: 8d:4b:ee:55:0b:16:23:36:82:6e:64:40:25:25:68:2c:c6:52: 5a:6a:e6:df:42:18:d7:b8:f1:28:72:70:51:5e:af:ef:9f:93: cb:63:4c:fa:01:86:f5:4c:aa:dc:70:17:1d:ff:7c:96:ee:18: 58:e8:b6:45:ac:80:c5:57:a2:82:59:ff:68:c4:b8:4a:3b:78: 40:da:85:cd:74:6f:7d:d9:08:10:57:66:d7:86:bb:5f:bb:1c: 16:79:71:ef:30:d2:ff:78:a7:6c:d6:b7:7a:65:52:14:6a:01: 23:b7:64:3d:97:e0:32:f0:9c:3c:2d:fc:2b:05:ec:42:31:31: 71:51:8d:8e:ea:1c:a7:e9:22:4c:00:a4:83:09:24:0b:04:13: b5:db:46:61:ec:c8:7f:58:64:90:05:ae:37:62:f9:78:d2:e3: 50:b0:cd:25:99:50:6a:8b:f6:c5:d2:96:5b:73:3d:73:23:28: de:05:aa:2a:3c:75:47:4b:b1:fe:a2:cf:2b:52:3f:65:90:c7: ab:39:93:2e -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENDA1 QTY5MDlBQjk5NTZDRjczOTNEMEUzMTJBMjY5QTgwNDAwNUVGMB4XDTI0MDgzMTAx MzQwNFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNkRDMDkwOUMxRDI2N0Ix N0ZCMDcxQzM2RTk5N0IzN0QwRTJERjY5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANChfmyH5AViLB72GCWYgDOism2BXAiODuLbKj1HRiAntYUnnJvh GCJvxDbVDiVrNCQsO8KSblp3XpNSpxBYeE0+/NH3+ss15X0508tgtoxa4nAyLL4Z 9w6S9t+MVeXV+JcpQFAsmUMpyKVANNPX2QSzkBZ8+GSFOydoJWDngvTyscFRmFbh D+qEEBVdbLVUOxgWMgNn+Ro027wBrLN6dadM0kMTCrUSDts5GkTayFo9nwSDBMSW DUfw2whWUBJORfdlXCNMsKPMq8CKu9J2E/0y8s6Ih4HEVKbkn591ScKbAISDEGil nUJ0z9S7BKzP3CbZqykl0n9pYK3e5NcF2PUCAwEAAaOCAiEwggIdMB0GA1UdDgQW BBRtwJCcHSZ7F/sHHDbpl7N9Di32mjAfBgNVHSMEGDAWgBTUBaaQmrmVbPc5PQ4x KiaagEAF7zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTAvMUFXbWtKcTVsV3ozT1QwT01Tb21tb0JBQmU4LmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMUFXbWtKcTVsV3ozT1QwT01Tb21tb0JB QmU4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzUwL2JjQ1FuQjBtZXhmN0J4dzI2WmV6ZlE0dDlwby5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwCDgTANBgkqhkiG9w0BAQsFAAOCAQEAXYsCLAUGF+slGifeeEnhk4kM9+riqhfc +7pshn1TtaIl3YN3rmsquGxP6f96HTZAz5ZMN2L8jUvuVQsWIzaCbmRAJSVoLMZS Wmrm30IY17jxKHJwUV6v75+Ty2NM+gGG9Uyq3HAXHf98lu4YWOi2RayAxVeigln/ aMS4Sjt4QNqFzXRvfdkIEFdm14a7X7scFnlx7zDS/3inbNa3emVSFGoBI7dkPZfg MvCcPC38KwXsQjExcVGNjuocp+kiTACkgwkkCwQTtdtGYezIf1hkkAWuN2L5eNLj ULDNJZlQaov2xdKWW3M9cyMo3gWqKjx1R0ux/qLPK1I/ZZDHqzmTLg== -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org