$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/jLHiPhRrPKlAt73EHv5ghpnKQrw.roa File: jLHiPhRrPKlAt73EHv5ghpnKQrw.roa (raw, json) Hash identifier: D04ppkTFiXbd0hGCf3EKFW8nhGGeaz3SQ7bI8l3t44g= Subject key identifier: 8C:B1:E2:3E:14:6B:3C:A9:40:B7:BD:C4:1E:FE:60:86:99:CA:42:BC Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 016A Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jLHiPhRrPKlAt73EHv5ghpnKQrw.roa Signing time: Wed 31 Jul 2024 01:34:13 +0000 ROA not before: Wed 31 Jul 2024 01:34:13 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 2497 IP address blocks: 218.42.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Jul 31 01:34:13 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=8CB1E23E146B3CA940B7BDC41EFE608699CA42BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:41:4d:75:db:6a:bb:1d:85:4d:5f:e5:65:b2: 6d:6f:ef:c8:86:7d:8f:e7:23:38:d4:df:c8:d5:a6: 63:d7:90:1d:5e:32:d5:0f:1d:0b:8e:8c:a5:d2:df: 4a:be:21:73:8a:33:8c:49:9d:77:7d:1b:6b:e1:0c: 29:5e:9d:fa:3e:76:a1:70:27:28:81:86:3b:c2:20: 15:1d:05:bb:d7:4f:fe:dc:dc:38:f5:a3:9d:6b:30: 48:dc:29:ee:4f:4a:33:28:7e:65:65:15:2c:73:02: ec:f7:e7:a7:4c:b4:04:9b:c2:fa:7b:7a:cf:01:bf: 84:17:03:b8:92:51:8a:14:a3:20:8a:76:b5:90:33: 29:23:16:06:9a:60:4d:f6:36:83:45:98:e0:f9:bf: 1d:47:c0:2a:9b:ba:b4:94:de:d0:80:a0:18:53:b2: 80:46:3c:f2:cf:74:2a:56:c7:33:a2:c1:a3:39:08: af:df:2b:f0:80:73:44:b6:fe:5d:73:e0:bf:0f:f4: 04:14:97:dd:e5:df:ee:b4:06:88:cc:43:67:8b:5f: 71:e7:43:88:c6:86:4d:24:fa:91:bd:e2:35:4f:f2: 9c:f1:72:ff:a9:fd:18:71:a3:dd:8e:de:f2:81:1e: 48:6c:0b:fd:73:19:d9:aa:80:2c:cb:59:d4:14:0b: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B1:E2:3E:14:6B:3C:A9:40:B7:BD:C4:1E:FE:60:86:99:CA:42:BC X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jLHiPhRrPKlAt73EHv5ghpnKQrw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.42.160.0/19 Signature Algorithm: sha256WithRSAEncryption 43:23:e8:ee:7d:27:2d:cd:a3:da:c8:37:d6:bf:87:0a:c3:ad: ed:3e:38:36:6d:40:8f:8c:db:91:2c:03:e1:ae:c2:53:14:22: 62:fe:4b:27:7f:4c:c5:2c:fd:93:30:40:25:07:cf:63:05:e6: db:c3:fc:81:6f:77:fa:0a:63:9f:f3:ba:7a:bc:18:67:ba:56: 3e:5e:db:36:90:0a:b5:73:95:00:9b:5b:fe:34:29:9e:2d:65: 72:b5:83:18:d5:66:fa:60:3b:49:86:94:d8:64:31:46:a4:69: 40:c3:d5:42:a2:b8:49:29:b6:c1:3a:de:c4:8b:30:09:cb:ad: e9:30:ce:83:e7:12:b0:11:db:f5:1d:f4:a1:76:b7:92:c6:54: b7:ee:6c:51:d4:8d:c4:3a:3b:c8:fc:f4:f1:2b:21:2a:a9:a9: 20:23:b4:e8:72:51:ec:10:ee:b9:e2:39:27:e9:3c:2c:98:40: b4:45:1c:1d:d1:9c:82:c1:c6:86:94:d3:91:e3:2e:18:64:89: f8:d1:f5:95:ec:5e:37:c9:30:05:b1:bf:e8:78:d6:8b:45:fb: b9:d5:d3:51:3d:df:d2:de:37:e4:4c:aa:8a:e9:40:ea:8d:d3: fa:36:90:4b:25:5f:13:47:8f:39:69:f2:7c:d7:2e:44:ee:20: c3:f3:4c:88 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA3MzEw MTM0MTNaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhDQjFFMjNFMTQ2QjND QTk0MEI3QkRDNDFFRkU2MDg2OTlDQTQyQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVQU1122q7HYVNX+Vlsm1v78iGfY/nIzjU38jVpmPXkB1eMtUP HQuOjKXS30q+IXOKM4xJnXd9G2vhDClenfo+dqFwJyiBhjvCIBUdBbvXT/7c3Dj1 o51rMEjcKe5PSjMofmVlFSxzAuz356dMtASbwvp7es8Bv4QXA7iSUYoUoyCKdrWQ MykjFgaaYE32NoNFmOD5vx1HwCqburSU3tCAoBhTsoBGPPLPdCpWxzOiwaM5CK/f K/CAc0S2/l1z4L8P9AQUl93l3+60BojMQ2eLX3HnQ4jGhk0k+pG94jVP8pzxcv+p /Rhxo92O3vKBHkhsC/1zGdmqgCzLWdQUC4UDAgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUjLHiPhRrPKlAt73EHv5ghpnKQrwwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvakxIaVBoUnJQS2xBdDczRUh2NWdocG5LUXJ3LnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdoqoDANBgkqhkiG9w0BAQsFAAOCAQEAQyPo7n0nLc2j2sg31r+HCsOt7T44Nm1A j4zbkSwD4a7CUxQiYv5LJ39MxSz9kzBAJQfPYwXm28P8gW93+gpjn/O6erwYZ7pW Pl7bNpAKtXOVAJtb/jQpni1lcrWDGNVm+mA7SYaU2GQxRqRpQMPVQqK4SSm2wTre xIswCcut6TDOg+cSsBHb9R30oXa3ksZUt+5sUdSNxDo7yPz08SshKqmpICO06HJR 7BDuueI5J+k8LJhAtEUcHdGcgsHGhpTTkeMuGGSJ+NH1lexeN8kwBbG/6HjWi0X7 udXTUT3f0t435EyqiulA6o3T+jaQSyVfE0ePOWnyfNcuRO4gw/NMiA== -----END CERTIFICATE-----Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org