$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/P2A4nWtbnNp1u9iAhPnGkcydXWE.roa File: P2A4nWtbnNp1u9iAhPnGkcydXWE.roa (raw, json) Hash identifier: gff0ypz/a1BQCmt/A7sWNMJ4yWourciYSXVWtdw3wnE= Subject key identifier: 3F:60:38:9D:6B:5B:9C:DA:75:BB:D8:80:84:F9:C6:91:CC:9D:5D:61 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 01A6 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/P2A4nWtbnNp1u9iAhPnGkcydXWE.roa Signing time: Sun 01 Oct 2023 01:36:34 +0000 ROA not before: Sun 01 Oct 2023 01:36:34 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 4721 IP address blocks: 210.135.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:36:34 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=3F60389D6B5B9CDA75BBD88084F9C691CC9D5D61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:77:8f:f7:ab:05:44:a1:d7:37:cb:91:df: 81:e9:e6:c4:82:a5:e5:ad:a6:c7:8a:e2:e0:10:13: 92:83:37:29:1b:04:c2:f5:b3:5b:33:ef:f5:e0:15: f0:45:cb:d5:6e:54:96:1d:92:a4:fd:5a:f3:1a:77: 09:ec:ef:8d:3b:16:54:26:c1:c6:ab:50:6e:c0:b6: 5c:1f:32:d8:05:af:58:93:5b:91:99:24:75:69:b6: d1:1d:9b:1f:c1:3e:f9:bb:24:65:13:76:be:b4:e1: b5:dd:04:85:39:d8:5b:85:80:09:73:6b:b3:e6:be: 54:b1:0f:8c:4a:d1:78:2c:eb:6e:42:06:a9:0c:49: a3:04:e9:58:8c:f0:a7:9c:a0:fa:bc:98:7d:fc:47: ad:e3:36:19:b3:c2:e4:79:64:8e:82:c5:82:a9:fc: bd:3a:3a:e1:a6:19:76:48:28:08:6f:45:f7:58:f8: 16:34:e4:ad:27:1e:15:07:1e:98:3f:4c:82:0a:e8: e9:8f:f3:37:3c:b9:df:32:2f:90:76:27:87:4e:17: f3:13:b3:7b:e3:5a:2c:79:d0:37:f2:54:1c:17:e6: 8c:1a:96:21:a1:d0:4a:6e:2a:b1:d9:45:26:59:3c: 0e:36:d1:da:18:44:4b:51:42:d1:3d:a3:5e:05:fc: 5a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:60:38:9D:6B:5B:9C:DA:75:BB:D8:80:84:F9:C6:91:CC:9D:5D:61 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/P2A4nWtbnNp1u9iAhPnGkcydXWE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.135.192.0/19 Signature Algorithm: sha256WithRSAEncryption 58:3d:dc:da:d7:d9:be:15:99:4b:8a:15:65:f2:f7:5a:21:91: 13:fd:d2:92:0a:f9:57:d1:26:c2:e6:5c:4a:7d:19:b0:fa:8d: 7d:c4:3c:d8:86:29:c9:1b:f8:a6:02:cd:47:59:97:e7:66:d4: e0:a5:5e:0c:0a:8f:d6:58:15:5d:ea:63:a4:96:e1:7f:66:6a: 22:66:06:30:56:1b:c7:86:ec:b3:0e:bc:02:14:62:ba:dd:03: 27:47:0e:31:24:f9:8c:a6:d1:77:56:90:a8:3f:40:d3:fa:9e: d8:4f:a9:da:98:e3:36:e9:53:e8:3c:02:35:bc:8f:28:f0:35: 62:2f:2f:62:9a:66:d8:dc:94:77:46:72:e7:1d:20:d3:94:fb: ca:07:08:05:47:c1:a9:72:99:e1:47:31:84:b2:a0:ae:7e:1f: ed:70:3e:6b:cf:30:e5:56:6e:84:fb:04:43:4f:06:38:c4:9c: 7e:dd:68:ce:47:b7:76:b6:87:b9:ef:53:cb:56:4b:c1:3d:bf: 61:f2:c5:cc:a9:ab:c5:a0:4e:55:ff:00:31:ba:ac:0f:08:87: b8:14:94:95:40:5d:4f:cf:00:c4:4f:3d:52:10:84:07:cb:45: 58:86:35:bd:38:b9:c3:33:e1:bc:ba:01:71:2f:ef:88:0e:55: b2:92:f9:34 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTM2MzRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDNGNjAzODlENkI1QjlD REE3NUJCRDg4MDg0RjlDNjkxQ0M5RDVENjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu6neP96sFRKHXN8uR34Hp5sSCpeWtpseK4uAQE5KDNykbBML1 s1sz7/XgFfBFy9VuVJYdkqT9WvMadwns7407FlQmwcarUG7AtlwfMtgFr1iTW5GZ JHVpttEdmx/BPvm7JGUTdr604bXdBIU52FuFgAlza7PmvlSxD4xK0Xgs625CBqkM SaME6ViM8KecoPq8mH38R63jNhmzwuR5ZI6CxYKp/L06OuGmGXZIKAhvRfdY+BY0 5K0nHhUHHpg/TIIK6OmP8zc8ud8yL5B2J4dOF/MTs3vjWix50DfyVBwX5owaliGh 0EpuKrHZRSZZPA420doYREtRQtE9o14F/FoZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUP2A4nWtbnNp1u9iAhPnGkcydXWEwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1AyQTRuV3Ribk5wMXU5aUFoUG5Ha2N5ZFhXRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXSh8AwDQYJKoZIhvcNAQELBQADggEBAFg93NrX2b4VmUuKFWXy91ohkRP9 0pIK+VfRJsLmXEp9GbD6jX3EPNiGKckb+KYCzUdZl+dm1OClXgwKj9ZYFV3qY6SW 4X9maiJmBjBWG8eG7LMOvAIUYrrdAydHDjEk+Yym0XdWkKg/QNP6nthPqdqY4zbp U+g8AjW8jyjwNWIvL2KaZtjclHdGcucdINOU+8oHCAVHwalymeFHMYSyoK5+H+1w PmvPMOVWboT7BENPBjjEnH7daM5Ht3a2h7nvU8tWS8E9v2Hyxcypq8WgTlX/ADG6 rA8Ih7gUlJVAXU/PAMRPPVIQhAfLRViGNb04ucMz4by6AXEv74gOVbKS+TQ= -----END CERTIFICATE-----Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org