$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/dRHwONdA0kpOMxz4HtibImleoQU.roa File: dRHwONdA0kpOMxz4HtibImleoQU.roa (raw, json) Hash identifier: 3Snpm1crruW4AheSS5lPNhrWl2PMIswMODbv05YSSSg= Subject key identifier: 75:11:F0:38:D7:40:D2:4A:4E:33:1C:F8:1E:D8:9B:22:69:5E:A1:05 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 04EA Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/dRHwONdA0kpOMxz4HtibImleoQU.roa Signing time: Thu 29 Feb 2024 01:36:02 +0000 ROA not before: Thu 29 Feb 2024 01:36:02 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 59.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 01:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:36:02 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=7511F038D740D24A4E331CF81ED89B22695EA105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:46:01:41:e3:76:28:bc:ff:e4:5d:f0:6e: ee:7a:b9:cb:aa:ca:3e:ee:c1:7b:e2:83:65:12:6b: d1:63:dd:34:2a:6a:89:f6:40:0e:b0:d8:99:02:4f: db:e9:9c:f8:0b:cc:09:c8:6d:8a:b3:57:a1:48:66: 8c:b3:76:e1:88:38:c2:95:f7:8d:21:4e:09:8a:fd: 03:2b:cb:53:8c:5a:86:b7:1f:f1:ba:18:e1:5c:7f: 22:6e:fe:71:68:d4:9e:35:33:7d:2b:4b:48:da:4e: ef:3d:1f:41:a2:f5:cb:e4:49:aa:aa:32:52:fa:dd: 5c:15:52:76:38:86:f4:0b:7c:21:3a:fe:3e:97:e1: a2:d8:17:1c:c1:8e:bd:11:46:65:4f:f3:e8:45:f2: 5e:58:b8:6a:20:4f:fb:a4:a0:02:f9:2e:0f:d5:20: 88:ea:4d:43:97:f6:bc:b6:cc:88:b7:41:cb:74:37: 15:fe:e5:a6:95:94:7c:0e:6e:cc:c5:3c:77:cc:80: e3:74:78:73:5e:0e:f3:b4:37:cc:8d:21:1d:b4:19: 4d:38:d3:56:09:74:db:e5:0b:32:ab:b8:8f:cb:fc: 61:c8:28:cf:67:76:db:89:4f:a4:e5:a3:64:0b:d2: 6d:29:d9:51:37:a2:f1:08:35:2b:41:c2:bb:b2:5f: d5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:11:F0:38:D7:40:D2:4A:4E:33:1C:F8:1E:D8:9B:22:69:5E:A1:05 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/dRHwONdA0kpOMxz4HtibImleoQU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:a5:9e:62:cd:fa:66:b9:07:e1:c0:8f:c3:c6:50:1e:89:cd: 34:de:a2:0e:c6:47:30:25:bd:50:ba:19:47:c9:80:e8:55:aa: e8:38:b1:53:1b:5e:0a:7e:ff:0e:ff:a9:eb:ed:3b:00:b5:79: 9f:24:43:b9:e6:3e:49:ce:26:ec:df:0d:29:b6:8c:34:0d:0c: 3c:1c:3a:56:8a:15:ea:1d:2b:eb:76:c9:dc:3d:86:fd:89:28: 7a:e9:8e:58:d8:79:b9:66:78:dc:ee:e0:37:38:54:34:3a:51: 3b:0f:32:90:1d:32:27:49:ae:d5:00:ee:f7:bf:62:ea:29:c7: 5e:09:7d:16:cd:d4:5c:42:98:df:ee:53:ae:d8:04:41:79:dc: dd:dc:20:f1:03:2d:17:6e:b3:f7:83:9f:76:a1:af:df:3f:e2: d8:67:bd:bb:bb:65:b1:81:0f:16:42:8a:85:70:9d:4f:5c:b2: b0:09:05:c1:32:7a:24:95:f1:a4:57:40:e4:42:1f:03:bb:49: 4e:dd:df:3f:8c:a4:c1:e8:24:03:a6:78:21:38:28:af:99:bc: f0:d5:a4:a4:e5:f3:de:e0:70:b7:46:cc:9f:2d:2b:ec:6e:a7: e9:a2:74:e9:97:25:c2:d9:5c:b9:6d:bc:9e:72:4d:20:7d:b7: bb:0c:bc:0e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTM2MDJaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDc1MTFGMDM4RDc0MEQy NEE0RTMzMUNGODFFRDg5QjIyNjk1RUExMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq1UYBQeN2KLz/5F3wbu56ucuqyj7uwXvig2USa9Fj3TQqaon2 QA6w2JkCT9vpnPgLzAnIbYqzV6FIZoyzduGIOMKV940hTgmK/QMry1OMWoa3H/G6 GOFcfyJu/nFo1J41M30rS0jaTu89H0Gi9cvkSaqqMlL63VwVUnY4hvQLfCE6/j6X 4aLYFxzBjr0RRmVP8+hF8l5YuGogT/ukoAL5Lg/VIIjqTUOX9ry2zIi3Qct0NxX+ 5aaVlHwObszFPHfMgON0eHNeDvO0N8yNIR20GU0401YJdNvlCzKruI/L/GHIKM9n dtuJT6Tlo2QL0m0p2VE3ovEINStBwruyX9W3AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUdRHwONdA0kpOMxz4HtibImleoQUwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L2RSSHdPTmRBMGtwT014ejRIdGliSW1sZW9RVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA7VTANBgkqhkiG9w0BAQsFAAOCAQEAfaWeYs36ZrkH4cCPw8ZQHonNNN6i DsZHMCW9ULoZR8mA6FWq6DixUxteCn7/Dv+p6+07ALV5nyRDueY+Sc4m7N8NKbaM NA0MPBw6VooV6h0r63bJ3D2G/YkoeumOWNh5uWZ43O7gNzhUNDpROw8ykB0yJ0mu 1QDu979i6inHXgl9Fs3UXEKY3+5TrtgEQXnc3dwg8QMtF26z94OfdqGv3z/i2Ge9 u7tlsYEPFkKKhXCdT1yysAkFwTJ6JJXxpFdA5EIfA7tJTt3fP4ykwegkA6Z4ITgo r5m88NWkpOXz3uBwt0bMny0r7G6n6aJ06ZclwtlcuW28nnJNIH23uwy8Dg== -----END CERTIFICATE-----Generated at Sat Jun 15 02:41:59 2024 by rpki-client on console-ams.rpki-client.org