$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/MOlP1BbHQreJ2fSJu6dn334W0es.roa File: MOlP1BbHQreJ2fSJu6dn334W0es.roa (raw, json) Hash identifier: bh2d/vMUKVeTG1+hBIT9KRhBeNR5XYwvdKDZxTgX/j4= Subject key identifier: 30:E9:4F:D4:16:C7:42:B7:89:D9:F4:89:BB:A7:67:DF:7E:16:D1:EB Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 018D Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/MOlP1BbHQreJ2fSJu6dn334W0es.roa Signing time: Sat 31 Aug 2024 01:29:14 +0000 ROA not before: Sat 31 Aug 2024 01:29:14 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 2497 IP address blocks: 133.238.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Aug 31 01:29:14 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=30E94FD416C742B789D9F489BBA767DF7E16D1EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:86:bb:82:70:5e:17:78:45:00:d3:e4:34: 86:9b:fb:2b:f9:4e:8d:dc:03:11:aa:b3:b9:c5:57: 98:33:52:dd:52:dd:07:4f:91:7b:6e:a7:b2:18:80: 13:40:fd:cd:60:fb:65:e8:be:56:33:81:6d:0c:6a: b9:66:b2:cc:f3:c8:49:6f:12:71:47:1f:46:e0:31: de:af:18:30:c6:e4:98:a7:e3:f9:b8:f0:9f:e9:9c: 9a:e8:3a:95:af:42:a7:0e:fd:1e:52:b3:76:6b:2d: 6f:50:19:82:e2:df:b4:be:3a:50:a0:7b:d7:8c:2f: fc:09:92:5b:53:cb:15:c6:48:03:ba:ce:df:83:b6: 18:bd:38:02:dc:5e:75:f8:d3:66:2d:8a:c7:71:15: 83:cc:0f:1f:0c:a1:c1:7c:3c:6e:df:78:4e:45:24: f6:2f:6a:b7:9f:4c:75:7e:0f:2c:29:e9:54:be:0c: 69:b0:ec:e6:97:a8:9a:f8:5a:f6:ba:62:9e:9b:86: ae:48:e9:05:27:56:93:87:7f:7d:19:3c:08:3a:1b: f2:57:0b:b8:4f:05:4e:35:9d:fe:65:4f:33:2e:10: 29:52:c1:34:33:dd:51:92:57:f1:2b:87:46:3a:d6: 23:67:3d:89:bc:6e:32:8c:23:ae:b5:c8:f4:46:f4: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E9:4F:D4:16:C7:42:B7:89:D9:F4:89:BB:A7:67:DF:7E:16:D1:EB X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/MOlP1BbHQreJ2fSJu6dn334W0es.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.238.128.0/17 Signature Algorithm: sha256WithRSAEncryption a1:ed:bc:38:99:9a:55:44:cd:09:c9:a9:95:4b:a4:0d:50:b6: bb:49:7f:fd:6e:2a:d8:8f:a6:c2:9c:9b:d9:79:3c:e6:5d:59: b5:9a:e1:c3:62:4e:a3:27:d8:39:b4:77:45:81:70:88:cd:db: 44:c8:ca:13:15:0e:0e:c4:b6:97:12:d4:d2:c6:b7:d2:a1:95: 93:a1:54:9e:39:a6:2c:56:2a:df:a7:c2:4c:45:21:96:ec:64: 5f:fc:ba:37:c4:3b:14:40:bc:d0:75:46:ad:6f:14:47:75:2b: ab:68:cd:28:f3:c9:2b:21:5d:c4:9c:7a:1b:a7:79:de:8f:66: 0f:70:7c:ca:48:99:86:cc:03:e2:cc:8e:ed:f7:d4:32:22:69: d6:09:12:6f:50:9a:08:df:ad:7c:0a:2c:cc:95:20:f1:b0:7a: 0b:cf:1d:9a:0e:74:5b:7c:27:5d:15:6b:51:61:d8:f7:0c:0b: 43:e6:b7:a8:67:a8:16:c7:90:1e:02:77:bf:a3:3a:e9:03:ce: 2d:e0:a1:b7:90:d5:12:b7:66:11:e0:19:81:0e:1e:45:e8:c3: d5:b9:59:f5:f8:c4:c8:5d:ef:7b:55:ef:9a:1d:86:a4:46:82: f6:e6:ef:d4:29:32:18:09:d8:24:0a:94:24:60:31:0c:99:da: 4b:7c:29:3b -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA4MzEw MTI5MTRaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMwRTk0RkQ0MTZDNzQy Qjc4OUQ5RjQ4OUJCQTc2N0RGN0UxNkQxRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKkIa7gnBeF3hFANPkNIab+yv5To3cAxGqs7nFV5gzUt1S3QdP kXtup7IYgBNA/c1g+2XovlYzgW0MarlmsszzyElvEnFHH0bgMd6vGDDG5Jin4/m4 8J/pnJroOpWvQqcO/R5Ss3ZrLW9QGYLi37S+OlCge9eML/wJkltTyxXGSAO6zt+D thi9OALcXnX402YtisdxFYPMDx8MocF8PG7feE5FJPYvarefTHV+Dywp6VS+DGmw 7OaXqJr4Wva6Yp6bhq5I6QUnVpOHf30ZPAg6G/JXC7hPBU41nf5lTzMuEClSwTQz 3VGSV/Erh0Y61iNnPYm8bjKMI661yPRG9IFzAgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUMOlP1BbHQreJ2fSJu6dn334W0eswHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvTU9sUDFCYkhRcmVKMmZTSnU2ZG4zMzRXMGVzLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME B4XugDANBgkqhkiG9w0BAQsFAAOCAQEAoe28OJmaVUTNCcmplUukDVC2u0l//W4q 2I+mwpyb2Xk85l1ZtZrhw2JOoyfYObR3RYFwiM3bRMjKExUODsS2lxLU0sa30qGV k6FUnjmmLFYq36fCTEUhluxkX/y6N8Q7FEC80HVGrW8UR3Urq2jNKPPJKyFdxJx6 G6d53o9mD3B8ykiZhswD4syO7ffUMiJp1gkSb1CaCN+tfAoszJUg8bB6C88dmg50 W3wnXRVrUWHY9wwLQ+a3qGeoFseQHgJ3v6M66QPOLeCht5DVErdmEeAZgQ4eRejD 1blZ9fjEyF3ve1Xvmh2GpEaC9ubv1CkyGAnYJAqUJGAxDJnaS3wpOw== -----END CERTIFICATE-----Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org