$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/KLUGZLWC2PV_qT8uBQ4vTmDlpXU.roa File: KLUGZLWC2PV_qT8uBQ4vTmDlpXU.roa (raw, json) Hash identifier: QDc3vxfNapgq5F3JGOdJmUsftwnZDHLG3bRt4HSTqxE= Subject key identifier: 28:B5:06:64:B5:82:D8:F5:7F:A9:3F:2E:05:0E:2F:4E:60:E5:A5:75 Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D Certificate serial: 48 Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/KLUGZLWC2PV_qT8uBQ4vTmDlpXU.roa Signing time: Fri 01 Sep 2023 01:29:46 +0000 ROA not before: Fri 01 Sep 2023 01:29:46 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 131896 IP address blocks: 103.239.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D Validity Not Before: Sep 1 01:29:46 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=28B50664B582D8F57FA93F2E050E2F4E60E5A575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:1f:bc:58:d9:ea:49:a4:40:e0:c7:bd:29: 99:e1:3e:12:76:a2:93:91:a3:d8:15:e4:2f:12:16: c4:ef:20:0a:6b:5c:cf:2f:76:db:14:df:09:37:bb: e0:34:bb:3a:15:cf:56:dd:ab:b5:37:27:ea:79:36: f0:89:a9:44:43:43:04:81:a6:ef:3c:e0:af:ad:f9: 64:9c:bb:c1:c2:ab:ca:9e:38:02:da:e8:94:4a:f0: fa:e1:8f:17:de:84:92:da:4d:e2:6a:4d:84:55:25: 03:ca:65:26:99:73:ad:de:63:76:87:b1:55:bd:12: ef:99:4c:61:d6:c1:56:44:98:8f:db:24:13:be:b2: a1:bf:a2:2e:51:06:27:e6:83:98:fe:37:4f:b7:7f: 0a:89:73:cd:a1:49:b7:a8:bd:e8:67:36:66:7e:b7: 6a:dd:10:33:32:87:47:64:8c:a5:25:dd:0c:75:64: 27:49:76:a1:95:b3:6c:b7:bb:a6:ec:43:89:7a:f4: f6:9a:ba:5c:ae:30:ac:fd:b0:28:46:a0:83:65:e4: d4:0c:ee:40:86:67:e8:bb:87:ee:9b:88:90:8a:d0: a9:d2:fa:90:34:0d:c9:8d:85:14:59:25:1b:f3:f0: 54:f6:fe:32:f4:9c:32:f0:11:71:f0:4c:d4:e6:11: 58:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B5:06:64:B5:82:D8:F5:7F:A9:3F:2E:05:0E:2F:4E:60:E5:A5:75 X509v3 Authority Key Identifier: keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/KLUGZLWC2PV_qT8uBQ4vTmDlpXU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.239.18.0/24 Signature Algorithm: sha256WithRSAEncryption 43:09:39:52:53:33:62:1b:b5:2c:42:fb:6a:f6:77:3b:19:85: 2b:1c:f7:26:61:90:1d:73:16:b5:6a:58:2b:06:31:13:00:48: 2e:ba:c2:ea:a5:93:7c:14:d8:2d:0d:40:3f:c8:2b:49:1c:aa: 72:9d:1c:2e:06:d0:a7:d2:ea:9a:93:2d:71:6f:02:e1:b1:66: d3:c5:61:07:52:02:2a:2d:e5:5b:be:c0:b6:8a:f3:4f:7f:24: 65:72:16:71:6b:0e:fe:15:a3:ca:d7:69:4c:b2:92:55:19:21: 04:a2:01:1d:10:ef:ae:a2:1e:21:59:01:fb:63:94:50:4d:af: 3d:f2:7e:5e:c4:81:1b:af:b3:23:bb:a1:fb:e2:37:23:18:96: b5:db:84:05:09:78:08:40:28:d8:04:b6:3f:fc:bc:53:7a:20: 76:e5:be:94:f0:22:23:6a:3e:33:fa:c9:83:24:62:4e:68:0b: 61:6d:35:4f:9e:27:29:ea:d7:b4:05:81:ed:9c:fd:37:e3:2c: c1:93:6b:06:33:43:60:51:dd:d8:24:e7:0a:07:51:54:84:d7: 91:b1:c0:c4:2b:2b:97:f3:76:c1:bc:bb:43:9e:ec:43:59:0a: c8:cf:17:99:de:8e:29:c8:83:80:9a:5a:14:25:ca:e4:e8:c6: e2:82:7a:53 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODE0 RDg1QkQ0ODM2MEE2NUQ5RDQxNDRFQzZEMjA3NTJDMUVEQzdEMB4XDTIzMDkwMTAx Mjk0NloXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoMjhCNTA2NjRCNTgyRDhG NTdGQTkzRjJFMDUwRTJGNEU2MEU1QTU3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK3sH7xY2epJpEDgx70pmeE+Enaik5Gj2BXkLxIWxO8gCmtczy92 2xTfCTe74DS7OhXPVt2rtTcn6nk28ImpRENDBIGm7zzgr635ZJy7wcKryp44Atro lErw+uGPF96EktpN4mpNhFUlA8plJplzrd5jdoexVb0S75lMYdbBVkSYj9skE76y ob+iLlEGJ+aDmP43T7d/ColzzaFJt6i96Gc2Zn63at0QMzKHR2SMpSXdDHVkJ0l2 oZWzbLe7puxDiXr09pq6XK4wrP2wKEagg2Xk1AzuQIZn6LuH7puIkIrQqdL6kDQN yY2FFFklG/PwVPb+MvScMvARcfBM1OYRWPMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQotQZktYLY9X+pPy4FDi9OYOWldTAfBgNVHSMEGDAWgBTIFNhb1INgpl2dQUTs bSB1LB7cfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTczL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3ZTNIMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3 ZTNIMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81NzMvS0xVR1pMV0MyUFZfcVQ4dUJRNHZUbURscFhVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfvEjANBgkqhkiG9w0BAQsFAAOCAQEAQwk5UlMzYhu1LEL7avZ3OxmFKxz3 JmGQHXMWtWpYKwYxEwBILrrC6qWTfBTYLQ1AP8grSRyqcp0cLgbQp9LqmpMtcW8C 4bFm08VhB1ICKi3lW77AtorzT38kZXIWcWsO/hWjytdpTLKSVRkhBKIBHRDvrqIe IVkB+2OUUE2vPfJ+XsSBG6+zI7uh++I3IxiWtduEBQl4CEAo2AS2P/y8U3ogduW+ lPAiI2o+M/rJgyRiTmgLYW01T54nKerXtAWB7Zz9N+MswZNrBjNDYFHd2CTnCgdR VITXkbHAxCsrl/N2wby7Q57sQ1kKyM8Xmd6OKciDgJpaFCXK5OjG4oJ6Uw== -----END CERTIFICATE-----Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org