$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2acTbhxKe9vUC3pQwI1iDWXBkeg.roa File: 2acTbhxKe9vUC3pQwI1iDWXBkeg.roa (raw, json) Hash identifier: tzcyI66dVl55SFw1daVWtsdL+L4E7M0QgN4HxQAYq30= Subject key identifier: D9:A7:13:6E:1C:4A:7B:DB:D4:0B:7A:50:C0:8D:62:0D:65:C1:91:E8 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 021D Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2acTbhxKe9vUC3pQwI1iDWXBkeg.roa Signing time: Wed 31 Jul 2024 01:29:15 +0000 ROA not before: Wed 31 Jul 2024 01:29:15 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 9824 IP address blocks: 219.100.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Jul 31 01:29:15 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=D9A7136E1C4A7BDBD40B7A50C08D620D65C191E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:cc:83:e2:fb:d3:37:e6:96:f2:a8:f3:9f: 70:90:d7:3c:7d:01:68:7b:2b:20:3f:dc:d7:e6:9b: 2a:d0:80:08:8b:ce:15:d2:b3:89:b5:17:2f:24:97: b8:6f:9c:12:47:fa:ed:c8:13:7d:29:9a:42:e7:91: 2b:1f:86:ef:47:92:7d:21:a8:68:23:d5:3d:18:1c: 28:af:ec:cb:01:6b:73:0f:00:72:09:41:05:0f:59: 47:b7:68:b0:f5:a6:c2:dc:47:40:b0:a2:96:45:62: b3:52:57:8e:c2:61:37:5f:cb:ec:5f:b6:bf:0f:6a: 5f:89:45:be:bc:d8:f5:36:81:f7:1c:6d:26:b9:dc: fe:4b:81:a8:82:2d:58:3e:78:17:33:a1:da:25:11: a4:b7:74:bb:cb:8c:93:df:12:17:0a:dc:ad:cc:79: 99:80:09:e0:0d:a9:59:37:d9:52:51:5e:de:10:f4: 0b:09:e9:20:73:48:fe:39:94:d4:21:f8:5f:c1:3f: 91:89:a3:e0:46:56:14:45:d6:20:fd:c1:dc:92:37: f9:cc:6e:d3:ff:d3:ee:ea:45:18:ae:d9:94:f0:ef: b8:fb:b5:b2:5f:09:fe:f8:eb:be:f4:ad:c9:81:5f: 45:be:27:f2:ab:b3:3e:17:83:b2:c7:b5:fd:e7:77: f2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A7:13:6E:1C:4A:7B:DB:D4:0B:7A:50:C0:8D:62:0D:65:C1:91:E8 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2acTbhxKe9vUC3pQwI1iDWXBkeg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.24.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:1a:5a:d2:70:4c:d1:dd:93:c2:8f:d5:ed:f5:66:68:73:63: 84:4b:ca:b6:bb:3c:6f:33:28:4c:42:a8:7d:88:b1:67:17:09: 49:75:8e:90:b8:be:be:69:52:4a:f9:46:ea:ec:8f:b0:15:74: fe:b4:d3:df:be:91:8c:54:2a:32:f5:e3:64:92:78:00:74:05: 7b:a9:62:fa:cf:d8:7c:f4:3c:e3:e1:a3:e8:38:0d:81:8e:a1: 73:0b:62:54:71:0c:b8:d9:93:89:fe:bc:e8:87:d1:bb:b4:cb: 30:c8:a4:3d:e9:1c:57:81:4f:c5:be:15:53:c7:60:cc:3e:c9: 6f:e3:52:0d:b3:e8:58:54:9c:12:81:0b:fb:e9:6e:f0:65:37: e0:a0:f6:79:3f:46:0f:83:c3:2a:27:16:0e:e0:b4:3b:3c:8f: de:8e:54:a5:d4:5f:df:3f:b5:6f:02:5f:5d:24:a8:dd:9d:bc: be:b0:e7:fe:a3:88:3f:d8:bd:9f:21:67:8e:8e:14:46:ba:77: 90:c7:34:51:52:a4:4f:c4:6f:75:b9:43:2b:5e:92:39:ea:7f: 64:46:19:c2:c2:0d:28:a5:0d:b7:f6:74:ba:47:84:fd:9a:39: 8a:9c:a8:a7:cd:84:3b:44:2a:3e:60:72:5c:ca:7a:ff:8a:30: 01:1a:e4:20 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA3MzEw MTI5MTVaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5QTcxMzZFMUM0QTdC REJENDBCN0E1MEMwOEQ2MjBENjVDMTkxRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuLMyD4vvTN+aW8qjzn3CQ1zx9AWh7KyA/3NfmmyrQgAiLzhXS s4m1Fy8kl7hvnBJH+u3IE30pmkLnkSsfhu9Hkn0hqGgj1T0YHCiv7MsBa3MPAHIJ QQUPWUe3aLD1psLcR0CwopZFYrNSV47CYTdfy+xftr8Pal+JRb682PU2gfccbSa5 3P5LgaiCLVg+eBczodolEaS3dLvLjJPfEhcK3K3MeZmACeANqVk32VJRXt4Q9AsJ 6SBzSP45lNQh+F/BP5GJo+BGVhRF1iD9wdySN/nMbtP/0+7qRRiu2ZTw77j7tbJf Cf746770rcmBX0W+J/Krsz4Xg7LHtf3nd/KjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2acTbhxKe9vUC3pQwI1iDWXBkegwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzJhY1RiaHhLZTl2VUMzcFF3STFpRFdYQmtlZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbZBgwDQYJKoZIhvcNAQELBQADggEBAEoaWtJwTNHdk8KP1e31ZmhzY4RL yra7PG8zKExCqH2IsWcXCUl1jpC4vr5pUkr5Rursj7AVdP6009++kYxUKjL142SS eAB0BXupYvrP2Hz0POPho+g4DYGOoXMLYlRxDLjZk4n+vOiH0bu0yzDIpD3pHFeB T8W+FVPHYMw+yW/jUg2z6FhUnBKBC/vpbvBlN+Cg9nk/Rg+DwyonFg7gtDs8j96O VKXUX98/tW8CX10kqN2dvL6w5/6jiD/YvZ8hZ46OFEa6d5DHNFFSpE/Eb3W5Qyte kjnqf2RGGcLCDSilDbf2dLpHhP2aOYqcqKfNhDtEKj5gclzKev+KMAEa5CA= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:33 2024 by rpki-client on console-fra.rpki-client.org