$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/CDR2xbU79T08McljWCLbWLoNPxQ.roa File: CDR2xbU79T08McljWCLbWLoNPxQ.roa (raw, json) Hash identifier: kqQMQRUC8+Y3ZVfSxxHM4Hx7siMzlFj4QmMQXgVjk5w= Subject key identifier: 08:34:76:C5:B5:3B:F5:3D:3C:31:C9:63:58:22:DB:58:BA:0D:3F:14 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 04FC Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/CDR2xbU79T08McljWCLbWLoNPxQ.roa Signing time: Thu 29 Feb 2024 01:39:16 +0000 ROA not before: Thu 29 Feb 2024 01:39:16 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 42.127.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:39:16 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=083476C5B53BF53D3C31C9635822DB58BA0D3F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:6e:67:6a:76:cf:38:be:ef:e9:8f:22:58: eb:b9:7d:4a:2d:a4:23:63:c1:46:b3:df:37:5a:15: 8f:2c:68:9b:03:31:04:32:48:0f:d8:fa:81:dd:f9: ca:66:32:0c:50:69:6d:c3:ad:6c:16:9e:ac:05:f2: 62:15:ea:bd:ac:02:3c:d7:29:37:44:8c:07:46:62: 48:6c:9c:d3:b3:c1:50:a5:db:2c:fb:ef:ee:6f:2a: d7:e2:d6:a2:3f:05:15:ce:f5:6a:40:46:d2:bb:8f: 37:a8:8a:a2:bf:fe:bf:fa:62:1b:63:78:9b:2d:53: ce:16:2a:19:ef:b5:a3:34:b5:9e:43:cb:79:29:2a: 2d:9a:51:a3:25:6a:ca:28:19:31:40:1e:8b:ee:6c: ed:36:f1:5c:d2:ac:e3:26:e2:d4:23:5d:35:f8:81: b0:00:e2:22:25:a5:60:84:3b:44:b1:95:ed:08:fe: 7e:07:38:f0:bc:57:fe:14:2f:78:89:ac:29:ce:5b: f8:64:94:08:0b:71:a6:4f:54:3b:c1:97:79:2f:6f: 65:2d:53:18:3b:f1:3f:ad:e3:f7:3b:24:3b:3c:82: 6f:95:88:58:f4:f8:f3:66:f7:1f:d4:b9:36:9d:56: 2d:6d:ff:f9:90:60:19:e8:49:be:6a:44:ad:4c:bf: e2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:34:76:C5:B5:3B:F5:3D:3C:31:C9:63:58:22:DB:58:BA:0D:3F:14 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/CDR2xbU79T08McljWCLbWLoNPxQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 42.127.0.0/17 Signature Algorithm: sha256WithRSAEncryption 29:59:4a:2a:cb:27:2e:69:ff:ad:78:87:d7:d5:74:0e:f2:04: 25:fb:31:3f:8e:34:de:1d:6e:78:6e:22:af:80:30:70:65:38: 97:f9:73:3c:1c:52:b1:31:5c:61:02:f1:6e:c4:b7:60:ee:5b: 6e:58:99:c3:f8:90:c2:80:5b:e9:e5:9b:3c:ab:89:62:f2:e1: cb:0b:1e:25:1c:0d:45:a9:2f:28:d6:d2:1e:3d:aa:f9:23:4b: 57:8a:11:2a:4c:bd:91:24:f2:55:29:67:a4:4e:4d:7f:0d:c8: c6:1a:f0:ef:6c:db:e9:83:3b:d2:8c:96:93:b9:39:00:41:94: 04:97:f1:24:e5:ab:2a:34:5f:99:ba:1f:30:01:ad:68:1d:e7: d5:cb:9f:81:5a:af:81:7a:d6:b2:af:db:9d:1f:ac:e5:c2:50: ce:fc:c9:bf:5d:33:cf:c9:ef:8e:fd:dd:91:f4:c6:1f:e2:f5: a2:bc:15:95:18:9a:fd:59:b0:9b:f5:2d:96:4c:30:d6:64:00: a5:c8:08:78:03:5c:bd:e0:a4:1c:89:69:e2:7d:65:25:fb:87: 32:19:e5:87:a2:71:ec:96:41:c5:f2:c4:e4:a2:3e:93:1d:10: 38:3d:83:57:f6:9d:70:64:03:79:b2:a7:e5:b1:cf:c9:c5:21: 30:61:cf:34 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTM5MTZaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDA4MzQ3NkM1QjUzQkY1 M0QzQzMxQzk2MzU4MjJEQjU4QkEwRDNGMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzpm5nanbPOL7v6Y8iWOu5fUotpCNjwUaz3zdaFY8saJsDMQQy SA/Y+oHd+cpmMgxQaW3DrWwWnqwF8mIV6r2sAjzXKTdEjAdGYkhsnNOzwVCl2yz7 7+5vKtfi1qI/BRXO9WpARtK7jzeoiqK//r/6YhtjeJstU84WKhnvtaM0tZ5Dy3kp Ki2aUaMlasooGTFAHovubO028VzSrOMm4tQjXTX4gbAA4iIlpWCEO0Sxle0I/n4H OPC8V/4UL3iJrCnOW/hklAgLcaZPVDvBl3kvb2UtUxg78T+t4/c7JDs8gm+ViFj0 +PNm9x/UuTadVi1t//mQYBnoSb5qRK1Mv+J7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCDR2xbU79T08McljWCLbWLoNPxQwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L0NEUjJ4YlU3OVQwOE1jbGpXQ0xiV0xvTlB4US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcqfwAwDQYJKoZIhvcNAQELBQADggEBAClZSirLJy5p/614h9fVdA7yBCX7 MT+ONN4dbnhuIq+AMHBlOJf5czwcUrExXGEC8W7Et2DuW25YmcP4kMKAW+nlmzyr iWLy4csLHiUcDUWpLyjW0h49qvkjS1eKESpMvZEk8lUpZ6ROTX8NyMYa8O9s2+mD O9KMlpO5OQBBlASX8STlqyo0X5m6HzABrWgd59XLn4Far4F61rKv250frOXCUM78 yb9dM8/J74793ZH0xh/i9aK8FZUYmv1ZsJv1LZZMMNZkAKXICHgDXL3gpByJaeJ9 ZSX7hzIZ5YeiceyWQcXyxOSiPpMdEDg9g1f2nXBkA3myp+Wxz8nFITBhzzQ= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:15 2024 by rpki-client on console-fra.rpki-client.org