$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/G9r7j7wlcs81lVNQD3Gofacvrzk.roa File: G9r7j7wlcs81lVNQD3Gofacvrzk.roa (raw, json) Hash identifier: 6LCGocC204gHbgexALcjd1kMNLATczGi2+uX1gI8pFc= Subject key identifier: 1B:DA:FB:8F:BC:25:72:CF:35:95:53:50:0F:71:A8:7D:A7:2F:AF:39 Certificate issuer: /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542 Certificate serial: 56 Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/G9r7j7wlcs81lVNQD3Gofacvrzk.roa Signing time: Tue 30 Jan 2024 09:18:33 +0000 ROA not before: Tue 30 Jan 2024 09:18:33 +0000 ROA not after: Tue 14 Jan 2025 01:30:02 +0000 asID: 32787 IP address blocks: 203.169.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542 Validity Not Before: Jan 30 09:18:33 2024 GMT Not After : Jan 14 01:30:02 2025 GMT Subject: CN=1BDAFB8FBC2572CF359553500F71A87DA72FAF39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:6f:14:ce:88:08:4a:d4:4f:fe:44:89:19: 9b:01:4b:29:45:45:fb:c7:0b:69:26:3d:4b:c9:60: 26:88:31:9e:93:96:1b:e0:1b:4d:5f:f2:7d:29:94: 73:74:9b:f3:f5:3b:e4:95:73:28:7d:aa:54:6b:50: 79:c6:e4:7b:6b:fb:29:ff:4c:97:cb:6a:8d:a6:6e: dc:17:86:a7:a6:b4:9f:15:c8:e5:d2:04:0d:0e:2a: 4e:97:56:0b:57:53:d1:27:11:bc:e3:29:f1:a7:a9: 04:e5:ad:f0:05:9e:40:ce:c2:eb:53:6c:8c:b9:ca: c9:4e:68:3e:06:06:ee:a0:3a:95:c5:37:fd:c5:b5: 14:f5:df:f7:ef:2f:d0:ed:6c:c1:cf:9c:7e:34:86: 5c:21:8b:0f:58:21:b7:0e:40:15:e4:df:17:25:f9: 39:c3:23:b2:d4:70:a9:f6:39:f4:16:a4:0e:71:6f: 39:6f:3e:9f:2d:91:08:71:ef:b4:58:32:53:91:ac: f3:2a:c7:57:37:1d:16:92:18:04:ae:db:a0:fc:c9: 55:66:d9:67:e9:9d:5d:d7:62:dc:71:8a:4b:cd:83: e1:c0:3c:ea:f4:ea:ec:28:51:8e:20:33:20:12:51: 93:1c:53:f3:b1:a4:f1:3d:88:af:83:a7:60:56:f8: 04:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DA:FB:8F:BC:25:72:CF:35:95:53:50:0F:71:A8:7D:A7:2F:AF:39 X509v3 Authority Key Identifier: keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/G9r7j7wlcs81lVNQD3Gofacvrzk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.169.14.0/24 Signature Algorithm: sha256WithRSAEncryption 83:87:0b:dd:3d:af:05:84:69:6f:3c:17:dd:10:f9:37:81:e1: 23:ec:6b:e9:2f:46:c7:61:f1:6d:b2:82:17:41:24:2c:6c:3f: 01:c3:29:b1:47:ff:4d:46:61:0a:32:08:b5:d6:05:5a:67:54: d2:e6:da:60:8d:1f:11:37:f3:fc:47:6e:19:c2:ee:dd:ac:c2: e3:f4:13:26:28:eb:8f:3b:a0:69:c3:e4:a2:9c:7b:6b:3f:7c: 97:dc:44:07:da:e3:b5:33:9c:fb:d1:64:dc:4e:61:26:78:50: 54:88:3c:6c:b4:66:44:bf:e4:fc:c8:90:5a:39:97:8b:08:ac: bc:9b:fc:b5:57:84:6f:5a:c1:9e:63:59:77:70:8a:7a:c5:b3: 72:dc:73:db:82:51:da:7d:8c:09:72:81:d6:98:dc:78:1b:bd: 11:8a:fd:f6:7e:e9:83:f9:83:75:3c:00:82:47:b6:75:a2:41: b1:00:c6:01:7a:2a:4f:ac:6e:ea:8c:59:be:82:c4:ec:19:cf: 58:b3:fe:8c:d8:cb:43:99:62:f9:9e:44:dc:f7:66:53:48:c0: 63:14:fa:13:84:20:f8:e0:d9:b9:b2:1a:bf:08:5c:88:b5:2b: 0f:a6:1c:bf:1d:8d:93:f4:f1:7d:34:9f:41:cb:72:cd:91:a5: 9b:49:28:f1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTI0MDEzMDA5 MTgzM1oXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoMUJEQUZCOEZCQzI1NzJD RjM1OTU1MzUwMEY3MUE4N0RBNzJGQUYzOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMD+bxTOiAhK1E/+RIkZmwFLKUVF+8cLaSY9S8lgJogxnpOWG+Ab TV/yfSmUc3Sb8/U75JVzKH2qVGtQecbke2v7Kf9Ml8tqjaZu3BeGp6a0nxXI5dIE DQ4qTpdWC1dT0ScRvOMp8aepBOWt8AWeQM7C61NsjLnKyU5oPgYG7qA6lcU3/cW1 FPXf9+8v0O1swc+cfjSGXCGLD1ghtw5AFeTfFyX5OcMjstRwqfY59BakDnFvOW8+ ny2RCHHvtFgyU5Gs8yrHVzcdFpIYBK7boPzJVWbZZ+mdXddi3HGKS82D4cA86vTq 7ChRjiAzIBJRkxxT87Gk8T2Ir4OnYFb4BIcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQb2vuPvCVyzzWVU1APcah9py+vOTAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93 t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82MDIvRzlyN2o3d2xjczgxbFZOUUQzR29mYWN2cnprLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMupDjANBgkqhkiG9w0BAQsFAAOCAQEAg4cL3T2vBYRpbzwX3RD5N4HhI+xr 6S9Gx2HxbbKCF0EkLGw/AcMpsUf/TUZhCjIItdYFWmdU0ubaYI0fETfz/EduGcLu 3azC4/QTJijrjzugacPkopx7az98l9xEB9rjtTOc+9Fk3E5hJnhQVIg8bLRmRL/k /MiQWjmXiwisvJv8tVeEb1rBnmNZd3CKesWzctxz24JR2n2MCXKB1pjceBu9EYr9 9n7pg/mDdTwAgke2daJBsQDGAXoqT6xu6oxZvoLE7BnPWLP+jNjLQ5li+Z5E3Pdm U0jAYxT6E4Qg+ODZubIavwhciLUrD6Ycvx2Nk/TxfTSfQctyzZGlm0ko8Q== -----END CERTIFICATE-----Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org