$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/EYoTMMWpcGHA8fwQaTgN9btqrSc.roa File: EYoTMMWpcGHA8fwQaTgN9btqrSc.roa (raw, json) Hash identifier: pDsgP7deeIZ/D5byBQT/X736+/PZAcKj9i2tuvLYhUQ= Subject key identifier: 11:8A:13:30:C5:A9:70:61:C0:F1:FC:10:69:38:0D:F5:BB:6A:AD:27 Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Certificate serial: 37 Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/EYoTMMWpcGHA8fwQaTgN9btqrSc.roa Signing time: Fri 01 Dec 2023 08:37:42 +0000 ROA not before: Fri 01 Dec 2023 08:37:42 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 131925 IP address blocks: 160.237.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Validity Not Before: Dec 1 08:37:42 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=118A1330C5A97061C0F1FC1069380DF5BB6AAD27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a5:49:1d:4c:02:c2:a4:57:55:cd:15:f8:77: 26:e8:e7:3a:ad:89:43:d6:8b:1e:f1:44:81:89:e5: a8:ff:84:06:01:b2:80:8d:71:c6:8e:93:bf:a9:ac: fd:99:06:3b:23:b5:c6:d9:da:21:d6:2c:fe:92:38: cb:0f:d1:9f:71:3a:67:9c:8d:ab:d2:83:d7:c3:29: d8:61:08:f4:fa:54:0c:95:5d:3c:58:32:d9:95:09: ea:a2:66:2c:60:27:67:b1:0d:cb:60:ef:ab:22:74: 82:12:ad:9b:55:79:32:0f:01:5e:b5:79:28:e0:23: e7:8d:80:4f:8b:b0:cc:eb:c2:d0:10:12:b1:fe:d0: 1c:26:d0:0d:2f:55:b9:76:d9:da:a2:b4:ab:72:11: 49:c1:3e:e3:fe:42:c9:32:37:8e:2f:50:ae:2e:c6: 57:5a:b4:79:02:6a:ad:a2:fb:aa:7d:69:23:06:54: 14:aa:d9:d8:f6:dc:73:48:9a:96:04:62:f2:38:de: ee:29:fc:0b:65:f1:60:26:78:a7:92:3a:f3:01:e3: 84:cd:45:83:96:87:5e:c1:be:c0:40:94:8e:41:10: 81:34:1a:7e:68:c9:f7:96:1c:3a:18:df:7a:b1:1f: 9c:66:11:1b:43:ac:cf:44:1c:e8:e5:75:c0:04:76: f6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8A:13:30:C5:A9:70:61:C0:F1:FC:10:69:38:0D:F5:BB:6A:AD:27 X509v3 Authority Key Identifier: keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/EYoTMMWpcGHA8fwQaTgN9btqrSc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.237.176.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:d7:8d:a6:b9:cf:8c:64:37:7d:29:f2:18:5d:8c:26:e9:fa: b1:76:e4:52:a1:f3:a4:fb:4b:b6:26:a3:07:d0:48:84:58:1b: b2:62:02:5d:db:c2:e4:dc:b9:51:33:7c:6a:e8:80:ea:91:9a: ec:ec:38:cc:ce:e4:ea:01:27:5d:94:e6:55:8d:88:14:49:52: d4:4a:a7:7e:55:52:50:5d:ad:07:80:30:8e:09:bd:1d:c5:48: e6:35:a5:9b:b6:19:ad:53:aa:4e:27:8b:87:19:dc:d9:a0:9c: 84:b9:3a:55:37:00:7d:fa:eb:fa:99:04:11:37:8b:04:fd:bf: 2c:a6:c2:cf:56:54:4e:fa:f3:10:a1:58:a3:62:62:d9:cb:6d: 67:cc:01:12:ea:21:61:64:9f:9f:79:1f:62:62:b6:7a:d0:dd: f4:c8:70:9d:91:6e:6c:c8:08:08:aa:1f:e4:15:4f:66:8b:73: 28:bb:db:3c:fc:5e:c4:90:14:d6:9f:69:b9:96:ff:ed:53:f0: b1:70:0f:d2:f8:c1:e6:0c:1a:9b:67:16:4f:e8:e0:f4:98:49: 0e:94:3b:c5:1b:18:48:4f:8f:1d:06:9f:c7:11:dd:2e:86:eb: 48:e5:cb:a8:c4:0b:bd:a1:20:ca:62:35:f1:a0:4c:21:5e:ba: d1:e4:4e:ec -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MEQy MjBCOUU0QTYzNThFMDNDRDQ3ODY0NTE3RDlEMzAwQjA2RkYwMB4XDTIzMTIwMTA4 Mzc0MloXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoMTE4QTEzMzBDNUE5NzA2 MUMwRjFGQzEwNjkzODBERjVCQjZBQUQyNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMulSR1MAsKkV1XNFfh3JujnOq2JQ9aLHvFEgYnlqP+EBgGygI1x xo6Tv6ms/ZkGOyO1xtnaIdYs/pI4yw/Rn3E6Z5yNq9KD18Mp2GEI9PpUDJVdPFgy 2ZUJ6qJmLGAnZ7ENy2DvqyJ0ghKtm1V5Mg8BXrV5KOAj542AT4uwzOvC0BASsf7Q HCbQDS9VuXbZ2qK0q3IRScE+4/5CyTI3ji9Qri7GV1q0eQJqraL7qn1pIwZUFKrZ 2Pbcc0ialgRi8jje7in8C2XxYCZ4p5I68wHjhM1Fg5aHXsG+wECUjkEQgTQafmjJ 95YcOhjferEfnGYRG0Osz0Qc6OV1wAR29kMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQRihMwxalwYcDx/BBpOA31u2qtJzAfBgNVHSMEGDAWgBRA0iC55KY1jgPNR4ZF F9nTALBv8DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdDd2JfQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdD d2JfQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvRVlvVE1NV3BjR0hBOGZ3UWFUZ045YnRxclNjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA6DtsDANBgkqhkiG9w0BAQsFAAOCAQEAXNeNprnPjGQ3fSnyGF2MJun6sXbk UqHzpPtLtiajB9BIhFgbsmICXdvC5Ny5UTN8auiA6pGa7Ow4zM7k6gEnXZTmVY2I FElS1EqnflVSUF2tB4Awjgm9HcVI5jWlm7YZrVOqTieLhxnc2aCchLk6VTcAffrr +pkEETeLBP2/LKbCz1ZUTvrzEKFYo2Ji2cttZ8wBEuohYWSfn3kfYmK2etDd9Mhw nZFubMgICKof5BVPZotzKLvbPPxexJAU1p9puZb/7VPwsXAP0vjB5gwam2cWT+jg 9JhJDpQ7xRsYSE+PHQafxxHdLobrSOXLqMQLvaEgymI18aBMIV660eRO7A== -----END CERTIFICATE-----Generated at Thu May 30 03:38:47 2024 by rpki-client on console-ams.rpki-client.org