$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Elq3q7O8fqlg5GrU6BqYHEBebZs.roa File: Elq3q7O8fqlg5GrU6BqYHEBebZs.roa (raw, json) Hash identifier: 52IHXL5vBtozNVu55OA+LKTRmA94LBLCdrPgfKSc7cI= Subject key identifier: 12:5A:B7:AB:B3:BC:7E:A9:60:E4:6A:D4:E8:1A:98:1C:40:5E:6D:9B Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 028E Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Elq3q7O8fqlg5GrU6BqYHEBebZs.roa Signing time: Sat 31 Aug 2024 01:38:58 +0000 ROA not before: Sat 31 Aug 2024 01:38:58 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 4721 IP address blocks: 182.50.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:38:58 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=125AB7ABB3BC7EA960E46AD4E81A981C405E6D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:10:56:6f:d2:53:f3:a8:36:33:98:f5:b2: e6:e4:d1:a4:8e:0b:b8:b8:a6:1a:e1:10:00:f6:7b: 38:7e:7b:c8:b2:87:df:a8:64:26:3e:f2:e9:ac:e8: 0a:f7:70:75:c2:b4:73:b6:a4:04:32:94:ce:1e:b8: 67:ec:5c:0f:bc:3a:56:0e:8c:03:bf:a6:64:3b:12: 8c:5f:46:5a:d1:59:ba:a8:15:fd:10:ce:8c:0d:3d: d5:06:35:48:e8:1f:d6:f1:1e:a8:e6:0b:f6:bb:36: 2d:98:4d:04:b8:27:88:bd:7a:86:66:78:c7:f8:a8: cf:2b:ca:b4:52:79:81:79:a2:d7:06:65:31:2b:cd: 65:3b:a0:30:b6:ad:dd:78:b8:9b:34:9f:f0:0c:24: 22:f9:21:d9:fb:11:60:13:9f:2a:35:e4:77:18:cb: a6:85:ed:e1:c3:b2:d4:62:62:3e:20:18:85:b6:03: 54:37:cf:21:38:a3:0a:ac:65:5c:f6:22:17:5b:b9: 45:8b:50:1c:ce:5b:e8:d2:d1:1e:d0:06:a0:87:73: ab:ab:fe:ff:e4:d8:09:e3:4d:76:fe:54:23:81:85: 39:97:cc:42:8e:2d:04:97:25:02:55:4d:41:0b:83: f7:a1:80:e8:b7:9b:3c:f9:73:d9:f6:85:2d:99:1a: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5A:B7:AB:B3:BC:7E:A9:60:E4:6A:D4:E8:1A:98:1C:40:5E:6D:9B X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Elq3q7O8fqlg5GrU6BqYHEBebZs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.50.192.0/19 Signature Algorithm: sha256WithRSAEncryption 6b:52:51:6a:4b:10:c0:9c:c7:14:bd:d7:b2:03:46:fd:d3:30: 2c:ba:b4:35:60:e6:ed:d5:7a:f2:dd:c6:42:51:28:84:5a:97: 0e:78:75:51:82:6e:35:4c:68:f3:e7:a6:04:21:fd:87:ab:60: 16:89:c2:ae:da:bd:62:20:76:56:19:83:d6:16:d2:a7:89:4f: 9d:8c:5f:aa:7e:08:a8:62:6f:46:b5:08:01:00:eb:91:71:f4: a1:2d:aa:bd:05:5d:06:39:5e:23:50:93:89:a7:84:3a:e9:c9: f5:da:6e:88:45:25:b9:e3:45:44:32:a8:30:af:4f:5e:9d:83: e1:b4:2a:16:64:a8:18:7a:9b:f6:b1:b8:43:d5:14:b2:05:4c: 06:bb:42:8f:7d:35:18:0d:0e:a8:46:e5:1f:c7:9e:06:66:55: 72:27:db:44:74:69:91:6e:fa:21:6a:93:51:d7:cc:7b:4d:9c: 8a:4d:c3:d7:d5:4a:77:6f:20:b9:ba:f3:7a:52:99:0a:a3:54: 18:b6:dd:2c:4f:30:54:6e:f1:41:bb:d5:d3:17:3f:13:38:11: 50:c9:e3:0e:fa:ba:f8:41:14:c0:9a:df:8c:51:da:9f:b0:65: 1b:fa:d8:1f:82:dd:92:fc:cb:87:88:60:40:1c:18:93:d2:8f: 1b:ce:5e:8a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTM4NThaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEyNUFCN0FCQjNCQzdF QTk2MEU0NkFENEU4MUE5ODFDNDA1RTZEOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+rhBWb9JT86g2M5j1subk0aSOC7i4phrhEAD2ezh+e8iyh9+o ZCY+8ums6Ar3cHXCtHO2pAQylM4euGfsXA+8OlYOjAO/pmQ7EoxfRlrRWbqoFf0Q zowNPdUGNUjoH9bxHqjmC/a7Ni2YTQS4J4i9eoZmeMf4qM8ryrRSeYF5otcGZTEr zWU7oDC2rd14uJs0n/AMJCL5Idn7EWATnyo15HcYy6aF7eHDstRiYj4gGIW2A1Q3 zyE4owqsZVz2IhdbuUWLUBzOW+jS0R7QBqCHc6ur/v/k2AnjTXb+VCOBhTmXzEKO LQSXJQJVTUELg/ehgOi3mzz5c9n2hS2ZGgLPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUElq3q7O8fqlg5GrU6BqYHEBebZswHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0VscTNxN084ZnFsZzVHclU2QnFZSEVCZWJacy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAW2MsAwDQYJKoZIhvcNAQELBQADggEBAGtSUWpLEMCcxxS917IDRv3TMCy6 tDVg5u3VevLdxkJRKIRalw54dVGCbjVMaPPnpgQh/YerYBaJwq7avWIgdlYZg9YW 0qeJT52MX6p+CKhib0a1CAEA65Fx9KEtqr0FXQY5XiNQk4mnhDrpyfXabohFJbnj RUQyqDCvT16dg+G0KhZkqBh6m/axuEPVFLIFTAa7Qo99NRgNDqhG5R/HngZmVXIn 20R0aZFu+iFqk1HXzHtNnIpNw9fVSndvILm683pSmQqjVBi23SxPMFRu8UG71dMX PxM4EVDJ4w76uvhBFMCa34xR2p+wZRv62B+C3ZL8y4eIYEAcGJPSjxvOXoo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org