$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/loyi-LrzLq3NwzuvmkwVvaDoKXI.roa File: loyi-LrzLq3NwzuvmkwVvaDoKXI.roa (raw, json) Hash identifier: kukWXdc6sGMMS7aDn6UC9ct/pIauh778aKSlOvHp9wQ= Subject key identifier: 96:8C:A2:F8:BA:F3:2E:AD:CD:C3:3B:AF:9A:4C:15:BD:A0:E8:29:72 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0122 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/loyi-LrzLq3NwzuvmkwVvaDoKXI.roa Signing time: Fri 01 Sep 2023 01:30:28 +0000 ROA not before: Fri 01 Sep 2023 01:30:28 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 9824 IP address blocks: 111.125.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Sep 1 01:30:28 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=968CA2F8BAF32EADCDC33BAF9A4C15BDA0E82972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:44:9f:de:38:a1:7c:bc:dd:3e:ce:2a:69: 7a:49:f0:99:44:04:f4:5b:5b:b4:b3:51:f8:54:7b: 1a:ed:7f:de:2f:27:86:49:87:85:16:e8:7a:cb:56: cf:3a:6c:3c:92:5a:d2:c8:38:ca:83:e2:2a:04:d6: e8:8b:22:55:ec:35:c7:82:a5:86:36:c9:d1:af:09: 54:0a:39:3f:66:ab:67:10:87:95:5b:c4:88:2d:a4: 37:d5:2e:68:84:26:b5:f1:39:24:e0:96:1c:05:a5: 8f:58:d7:6c:ca:fd:a4:c6:b4:13:e0:02:da:9e:7a: 6f:0e:7c:11:64:fb:59:65:08:f6:94:f6:dd:73:d2: 8e:78:04:fc:87:d8:fa:eb:89:13:d4:85:2b:d1:e5: 00:a3:c4:70:ad:b6:32:97:52:c6:40:30:b3:ca:0d: 1a:6c:28:b9:40:da:8d:95:21:90:74:24:c1:b4:df: 09:c6:9f:bd:34:a9:76:a9:c9:47:c7:8f:a9:d3:62: 64:74:66:f6:4e:3c:b8:b0:1d:57:b2:cc:75:fc:28: f4:73:e2:a7:1e:bc:a7:66:03:2f:c1:88:14:3c:a2: 8a:ff:23:f5:b5:fc:5f:05:c4:84:d2:55:e5:51:fa: 02:36:a2:9e:dd:c4:01:c6:97:d7:d4:69:72:f1:77: 57:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8C:A2:F8:BA:F3:2E:AD:CD:C3:3B:AF:9A:4C:15:BD:A0:E8:29:72 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/loyi-LrzLq3NwzuvmkwVvaDoKXI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.125.144.0/21 Signature Algorithm: sha256WithRSAEncryption a5:cf:fb:94:46:9e:18:c4:9a:1f:11:75:54:f2:e9:43:ae:ee: a4:f0:f6:0b:20:9c:ec:45:2c:4c:3c:95:c8:6c:5f:7c:17:ee: e7:5d:71:31:f2:3f:a2:1f:09:d8:dd:ac:d3:ce:d2:41:3b:98: 89:14:d0:0b:43:8c:32:a8:9d:57:5a:9b:33:9d:ab:3f:9b:ca: 40:78:82:28:0c:15:e4:2e:dd:6c:b1:1d:36:36:01:bf:df:84: b8:c3:19:25:9e:e4:6f:39:d4:f2:37:bc:f3:bf:cb:40:f2:d0: 6e:a2:ff:aa:53:db:07:3e:28:73:6f:68:8a:97:c7:53:41:08: 0b:1a:9f:dd:3f:e1:67:21:40:35:b3:62:1e:9b:d7:f2:53:bc: 68:ee:ea:93:87:e7:d5:c5:5e:9d:1f:b3:99:0c:52:cb:48:7a: 94:1b:7b:41:f2:e9:73:ba:93:63:73:7c:6f:5f:73:a4:12:e7: 72:18:9b:fb:37:ca:53:cf:c7:49:3e:ba:a4:e5:e5:12:09:8d: 3f:76:28:12:12:55:3e:13:ef:16:9f:6b:ca:92:ba:3e:1e:5f: 2f:53:08:b3:67:45:46:64:c0:dc:fd:3a:a6:9d:7b:57:65:50: 15:6c:7d:20:53:2e:1d:2f:2d:41:91:42:18:bf:81:1c:f4:a3: ac:48:23:c3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICASIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzA5MDEw MTMwMjhaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDk2OENBMkY4QkFGMzJF QURDREMzM0JBRjlBNEMxNUJEQTBFODI5NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCngkSf3jihfLzdPs4qaXpJ8JlEBPRbW7SzUfhUexrtf94vJ4ZJ h4UW6HrLVs86bDySWtLIOMqD4ioE1uiLIlXsNceCpYY2ydGvCVQKOT9mq2cQh5Vb xIgtpDfVLmiEJrXxOSTglhwFpY9Y12zK/aTGtBPgAtqeem8OfBFk+1llCPaU9t1z 0o54BPyH2PrriRPUhSvR5QCjxHCttjKXUsZAMLPKDRpsKLlA2o2VIZB0JMG03wnG n700qXapyUfHj6nTYmR0ZvZOPLiwHVeyzHX8KPRz4qcevKdmAy/BiBQ8oor/I/W1 /F8FxITSVeVR+gI2op7dxAHGl9fUaXLxd1etAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUloyi+LrzLq3NwzuvmkwVvaDoKXIwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2xveWktTHJ6THEzTnd6dXZta3dWdmFEb0tYSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANvfZAwDQYJKoZIhvcNAQELBQADggEBAKXP+5RGnhjEmh8RdVTy6UOu7qTw 9gsgnOxFLEw8lchsX3wX7uddcTHyP6IfCdjdrNPO0kE7mIkU0AtDjDKonVdamzOd qz+bykB4gigMFeQu3WyxHTY2Ab/fhLjDGSWe5G851PI3vPO/y0Dy0G6i/6pT2wc+ KHNvaIqXx1NBCAsan90/4WchQDWzYh6b1/JTvGju6pOH59XFXp0fs5kMUstIepQb e0Hy6XO6k2NzfG9fc6QS53IYm/s3ylPPx0k+uqTl5RIJjT92KBISVT4T7xafa8qS uj4eXy9TCLNnRUZkwNz9Oqade1dlUBVsfSBTLh0vLUGRQhi/gRz0o6xII8M= -----END CERTIFICATE-----Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org