$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/xGB0iJhhPM2j04FYhvBNtNAa9HY.roa File: xGB0iJhhPM2j04FYhvBNtNAa9HY.roa (raw, json) Hash identifier: Z3VwsAj8kNq1p7nvOyabFlL1NzxG8e02cHdPtAiNzrQ= Subject key identifier: C4:60:74:88:98:61:3C:CD:A3:D3:81:58:86:F0:4D:B4:D0:1A:F4:76 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 018B Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/xGB0iJhhPM2j04FYhvBNtNAa9HY.roa Signing time: Sat 31 Aug 2024 01:29:14 +0000 ROA not before: Sat 31 Aug 2024 01:29:14 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 2497 IP address blocks: 133.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Aug 31 01:29:14 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=C460748898613CCDA3D3815886F04DB4D01AF476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:68:7b:e9:0f:6f:d6:9c:f0:1b:b2:11:27: 17:92:e7:75:2d:df:51:5c:de:e8:13:0e:5c:b1:fb: 00:40:31:fa:6f:ab:a7:bf:5c:c8:87:f6:10:7c:df: 06:88:a1:57:8f:57:8c:be:b6:81:4b:0e:77:2f:4f: d2:1d:16:cc:d5:26:9d:dc:ce:5a:d4:28:e4:40:17: d4:6a:58:78:84:d8:39:df:f8:3f:75:d7:35:33:d4: 16:22:4e:00:41:dc:b6:17:e9:24:c1:6d:42:7f:1c: 6c:37:10:36:fc:4a:22:6a:62:86:26:46:19:3b:c0: 91:17:89:24:4e:1a:fb:c0:8b:cd:72:51:75:1f:74: d7:ed:f9:d1:72:e4:e9:e6:9c:48:5c:25:ef:61:17: 78:d1:cd:b6:92:42:f9:50:a7:2f:41:2f:85:4a:68: 2f:41:3a:30:7f:f2:f0:15:6e:ac:50:7a:b8:cd:24: 44:19:56:72:2d:af:e3:e1:03:b5:0f:02:77:55:3e: 21:9c:82:63:8e:c9:24:c8:38:74:64:8b:f8:3e:4d: 96:ff:0e:7e:67:17:a3:bf:68:3b:7a:f8:c8:08:c5: 3e:a0:25:09:2e:ec:cd:e7:14:93:27:b3:fd:99:e2: 36:6f:7b:ed:0f:a4:79:4c:a6:fe:ac:47:d1:c8:ec: 25:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:60:74:88:98:61:3C:CD:A3:D3:81:58:86:F0:4D:B4:D0:1A:F4:76 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/xGB0iJhhPM2j04FYhvBNtNAa9HY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.238.16.0/20 Signature Algorithm: sha256WithRSAEncryption 19:0b:36:3c:e5:1d:87:9b:90:7f:93:13:d3:70:16:85:a3:3e: 05:43:e9:90:5b:87:9b:a7:ec:95:64:f3:66:1d:c6:78:ff:92: 26:2a:56:fc:6e:f4:57:12:7a:68:21:a1:08:cc:69:2a:8b:30: f8:7f:35:52:eb:3f:f3:dd:bb:16:42:0c:d6:67:4f:99:42:f2: 6e:d4:ac:67:e2:34:1c:ca:3b:62:86:d0:b0:a8:9f:e5:49:64: 56:0b:c9:1a:32:f8:8f:b8:17:4c:f2:00:61:c1:b6:a7:7f:b9: 6e:72:3b:8e:52:81:ef:45:aa:e7:ea:0e:ee:fa:fb:13:9c:99: a8:7b:50:ba:66:71:1f:9b:2e:94:44:f0:f7:4a:15:e5:68:23: 2f:1d:2a:22:94:cc:4a:ab:1b:64:c3:bd:8e:3d:41:02:cd:c8: 22:bd:e9:03:d9:7e:60:73:c0:44:36:c7:fd:b1:88:ce:8b:e7: 43:bc:ae:94:fc:74:9b:9d:06:dd:4b:ff:a5:fd:3d:90:b9:fc: 3a:67:82:19:d2:f9:d3:a2:29:5c:71:6d:69:75:51:24:98:37: b6:b2:62:df:34:74:bc:63:30:01:f5:36:1d:06:be:ce:ef:50: e9:e9:33:66:4d:30:c3:d6:b4:29:4f:70:d6:ad:14:23:c5:b0: b8:43:3a:60 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA4MzEw MTI5MTRaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM0NjA3NDg4OTg2MTND Q0RBM0QzODE1ODg2RjA0REI0RDAxQUY0NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC082h76Q9v1pzwG7IRJxeS53Ut31Fc3ugTDlyx+wBAMfpvq6e/ XMiH9hB83waIoVePV4y+toFLDncvT9IdFszVJp3czlrUKORAF9RqWHiE2Dnf+D91 1zUz1BYiTgBB3LYX6STBbUJ/HGw3EDb8SiJqYoYmRhk7wJEXiSROGvvAi81yUXUf dNft+dFy5OnmnEhcJe9hF3jRzbaSQvlQpy9BL4VKaC9BOjB/8vAVbqxQerjNJEQZ VnItr+PhA7UPAndVPiGcgmOOySTIOHRki/g+TZb/Dn5nF6O/aDt6+MgIxT6gJQku 7M3nFJMns/2Z4jZve+0PpHlMpv6sR9HI7CW7AgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUxGB0iJhhPM2j04FYhvBNtNAa9HYwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYveEdCMGlKaGhQTTJqMDRGWWh2Qk50TkFhOUhZLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BIXuEDANBgkqhkiG9w0BAQsFAAOCAQEAGQs2POUdh5uQf5MT03AWhaM+BUPpkFuH m6fslWTzZh3GeP+SJipW/G70VxJ6aCGhCMxpKosw+H81Uus/8927FkIM1mdPmULy btSsZ+I0HMo7YobQsKif5UlkVgvJGjL4j7gXTPIAYcG2p3+5bnI7jlKB70Wq5+oO 7vr7E5yZqHtQumZxH5sulETw90oV5WgjLx0qIpTMSqsbZMO9jj1BAs3IIr3pA9l+ YHPARDbH/bGIzovnQ7yulPx0m50G3Uv/pf09kLn8OmeCGdL506IpXHFtaXVRJJg3 trJi3zR0vGMwAfU2HQa+zu9Q6ekzZk0ww9a0KU9w1q0UI8WwuEM6YA== -----END CERTIFICATE-----Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org