$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/eIZ5kPXgHp5V5Ud0rY4i1S0ZUZg.roa File: eIZ5kPXgHp5V5Ud0rY4i1S0ZUZg.roa (raw, json) Hash identifier: asXnbcvXNuIQSszQ5hTLtQOA8AB0LrUVQOShL1cUqzQ= Subject key identifier: 78:86:79:90:F5:E0:1E:9E:55:E5:47:74:AD:8E:22:D5:2D:19:51:98 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0211 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eIZ5kPXgHp5V5Ud0rY4i1S0ZUZg.roa Signing time: Wed 31 Jul 2024 01:29:09 +0000 ROA not before: Wed 31 Jul 2024 01:29:09 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 9824 IP address blocks: 203.153.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Jul 31 01:29:09 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=78867990F5E01E9E55E54774AD8E22D52D195198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:ea:a1:82:ec:16:5a:9a:7f:91:c8:a3:6e: 9c:bd:e3:63:9f:50:97:19:11:88:77:d4:41:f4:0c: 6e:cb:4a:ba:13:ae:69:91:ee:99:b3:a4:50:6a:ca: 79:4f:b9:37:78:67:b8:39:ca:ff:c3:fc:ad:df:4b: 35:8d:10:1e:ee:a1:73:d6:d8:88:32:cc:83:a7:f6: d4:2e:f7:22:aa:d0:65:37:2a:a3:47:91:81:a1:f8: a2:c7:65:f5:90:16:d1:f3:e4:92:ae:d1:63:5f:0a: 80:79:40:38:e0:a4:fb:2c:19:3a:87:e9:bf:38:e6: 24:84:7a:55:98:eb:ed:bf:15:52:ce:9c:a5:a1:b1: 2f:15:d9:54:d5:01:a6:e7:31:be:23:05:42:1b:8b: 4e:a6:87:3d:d4:c2:a4:57:13:ab:54:48:40:26:cc: 9f:94:fa:b5:60:9f:19:9a:f7:d6:6b:ff:67:15:29: 2b:7a:15:fa:4a:17:d7:2a:9a:0d:5f:95:be:e3:42: f8:31:36:5c:69:d2:dc:c9:6e:b1:74:97:1d:bc:29: ba:bc:31:69:22:0e:88:cc:e1:99:07:03:2b:46:35: 1f:38:6c:7a:ca:a5:7b:1e:86:aa:7a:fb:b9:35:ad: 71:24:4f:6f:19:a3:97:0a:7a:0e:d3:e1:e2:ee:53: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:86:79:90:F5:E0:1E:9E:55:E5:47:74:AD:8E:22:D5:2D:19:51:98 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eIZ5kPXgHp5V5Ud0rY4i1S0ZUZg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.153.56.0/22 Signature Algorithm: sha256WithRSAEncryption 06:68:c7:09:68:27:d2:31:5d:95:b2:94:68:47:ab:d6:ab:5f: ab:4a:de:61:ab:ff:e5:00:c0:20:22:81:8a:22:bc:ab:09:21: b2:be:40:b4:dd:35:a8:0c:d9:fe:05:c1:3e:89:59:b9:49:1d: 60:ce:ff:b1:e4:8d:ff:97:4a:f9:9d:7a:bc:81:31:6e:f6:ea: 37:37:5a:a6:74:2e:60:ad:52:46:9f:81:eb:e4:7d:52:d0:d2: 1e:db:18:6e:5c:7d:d6:d5:e0:77:6c:d9:93:9f:56:cc:de:8c: 9d:ec:df:a5:64:85:d4:75:45:a3:fc:c8:86:35:77:b4:97:10: 5f:8d:c7:37:97:87:45:01:62:a1:46:d6:12:1f:c7:6c:ae:6a: 15:56:6f:79:23:22:10:34:fb:58:fb:00:e3:89:1b:a7:9f:fa: c4:2a:fe:05:2e:23:e1:55:b6:91:0d:4c:09:7d:d7:04:6e:14: 5e:81:d1:35:55:c0:6e:c6:0d:40:5d:34:2f:bd:44:55:bf:58: 98:12:7c:32:1c:29:42:4a:77:5b:ef:70:56:32:2e:5f:ef:2a: 5c:d1:a8:dd:9d:7d:59:30:7c:e4:80:c0:29:f8:7f:86:83:06: 61:b4:68:d5:f7:35:a8:51:84:e9:87:eb:ba:81:02:75:b6:7c: cd:f6:2f:13 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA3MzEw MTI5MDlaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc4ODY3OTkwRjVFMDFF OUU1NUU1NDc3NEFEOEUyMkQ1MkQxOTUxOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7+eqhguwWWpp/kcijbpy942OfUJcZEYh31EH0DG7LSroTrmmR 7pmzpFBqynlPuTd4Z7g5yv/D/K3fSzWNEB7uoXPW2IgyzIOn9tQu9yKq0GU3KqNH kYGh+KLHZfWQFtHz5JKu0WNfCoB5QDjgpPssGTqH6b845iSEelWY6+2/FVLOnKWh sS8V2VTVAabnMb4jBUIbi06mhz3UwqRXE6tUSEAmzJ+U+rVgnxma99Zr/2cVKSt6 FfpKF9cqmg1flb7jQvgxNlxp0tzJbrF0lx28Kbq8MWkiDojM4ZkHAytGNR84bHrK pXsehqp6+7k1rXEkT28Zo5cKeg7T4eLuU5J5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUeIZ5kPXgHp5V5Ud0rY4i1S0ZUZgwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2VJWjVrUFhnSHA1VjVVZDByWTRpMVMwWlVaZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALLmTgwDQYJKoZIhvcNAQELBQADggEBAAZoxwloJ9IxXZWylGhHq9arX6tK 3mGr/+UAwCAigYoivKsJIbK+QLTdNagM2f4FwT6JWblJHWDO/7Hkjf+XSvmderyB MW726jc3WqZ0LmCtUkafgevkfVLQ0h7bGG5cfdbV4Hds2ZOfVszejJ3s36VkhdR1 RaP8yIY1d7SXEF+NxzeXh0UBYqFG1hIfx2yuahVWb3kjIhA0+1j7AOOJG6ef+sQq /gUuI+FVtpENTAl91wRuFF6B0TVVwG7GDUBdNC+9RFW/WJgSfDIcKUJKd1vvcFYy Ll/vKlzRqN2dfVkwfOSAwCn4f4aDBmG0aNX3NahRhOmH67qBAnW2fM32LxM= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org