$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/AX-rHMurakFMTGjFrHQfizuXVv4.roa File: AX-rHMurakFMTGjFrHQfizuXVv4.roa (raw, json) Hash identifier: JYYfpVecZpEOlFHmXMvb9jRBIyhu98mgzkh9CguJ23E= Subject key identifier: 01:7F:AB:1C:CB:AB:6A:41:4C:4C:68:C5:AC:74:1F:8B:3B:97:56:FE Certificate issuer: /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91 Certificate serial: 17 Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/AX-rHMurakFMTGjFrHQfizuXVv4.roa Signing time: Tue 30 May 2023 06:05:25 +0000 ROA not before: Tue 30 May 2023 06:05:25 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 17958 IP address blocks: 218.40.96.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91 Validity Not Before: May 30 06:05:25 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=017FAB1CCBAB6A414C4C68C5AC741F8B3B9756FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:eb:45:cf:b7:e7:91:1e:b1:8c:a9:93:68:fa: 22:30:58:d7:2a:48:a8:c5:af:52:5d:ba:a2:d1:f6: 1e:23:ce:40:07:90:c0:6d:76:6f:0a:a4:46:12:f2: 9a:16:51:49:df:6a:a4:a1:a6:3e:fc:bb:5c:9c:61: db:43:71:11:a9:f0:50:88:2c:e5:31:18:7e:91:52: ce:98:f7:eb:07:25:7b:bc:2e:bd:22:cc:13:a6:69: 2e:fb:8b:8c:49:82:2b:57:73:24:7b:91:09:9a:19: f9:3b:1c:8e:79:98:71:ab:48:39:e4:92:b7:1b:fc: fe:92:18:ab:11:4f:9c:d3:98:ba:8c:a8:3f:d6:82: 69:d2:00:3e:03:ea:b0:b0:09:53:bd:82:57:a1:0f: ca:ae:74:0d:40:b7:2a:f0:d4:2c:13:ae:79:13:5f: 2f:30:4b:b2:58:05:7a:38:6a:eb:e3:7c:57:20:23: 6b:b7:2f:c3:ec:e4:62:28:4f:14:2b:d1:1d:fa:20: 99:ef:a3:49:82:11:ea:a4:e0:9a:82:e3:ba:b8:12: c8:2b:37:2d:f9:85:84:76:b0:79:26:19:7c:f7:62: fd:42:41:07:a7:83:cf:d3:15:ac:d0:41:9b:7c:6e: 39:03:8d:74:5e:e8:0d:a9:87:e2:bb:25:81:96:c5: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7F:AB:1C:CB:AB:6A:41:4C:4C:68:C5:AC:74:1F:8B:3B:97:56:FE X509v3 Authority Key Identifier: keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/AX-rHMurakFMTGjFrHQfizuXVv4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.40.96.0/20 Signature Algorithm: sha256WithRSAEncryption 68:3d:c5:f2:92:f2:50:91:1c:ba:c6:de:42:69:8a:50:09:2f: 40:36:13:9f:d4:f7:8c:9a:15:72:14:46:5f:d9:18:d6:ba:fd: 85:06:ec:d3:3f:96:db:cb:56:38:b4:33:5e:bd:0d:5b:f5:00: ab:31:47:e0:3f:37:80:42:27:3e:a0:aa:89:0a:e2:00:5d:89: a8:fe:57:b1:0d:c1:01:c4:b1:74:ce:a5:ac:31:d4:5d:ef:a6: 72:c9:cf:92:74:67:7f:42:dc:de:6c:a7:69:d2:8f:93:0f:52: 7c:fc:61:c1:31:dc:1e:0d:3a:11:25:32:04:d4:5a:b1:ab:60: ec:4f:cb:ed:a8:00:cb:8c:8f:88:ad:59:3e:2e:f0:65:02:ce: 68:69:91:7d:76:61:08:30:c5:ae:7b:2d:28:9b:7a:aa:35:91: 65:c4:55:9b:fa:81:88:82:6c:d8:9d:2d:bf:ef:3a:e0:38:50: d4:c5:1f:d0:5e:53:78:39:40:69:d8:75:ad:d6:95:66:21:38: 3b:7a:20:3c:3a:7c:0b:4e:3d:c5:58:36:43:79:46:2e:bd:d7: cc:59:72:3f:87:c3:98:e3:5e:d1:26:d6:c6:9e:6b:01:0e:fd: ef:51:d0:80:e6:ba:bb:1e:c5:3f:b5:c5:59:7c:e3:26:92:f9: be:26:f5:d8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTIzMDUzMDA2 MDUyNVoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoMDE3RkFCMUNDQkFCNkE0 MTRDNEM2OEM1QUM3NDFGOEIzQjk3NTZGRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ7rRc+355EesYypk2j6IjBY1ypIqMWvUl26otH2HiPOQAeQwG12 bwqkRhLymhZRSd9qpKGmPvy7XJxh20NxEanwUIgs5TEYfpFSzpj36wcle7wuvSLM E6ZpLvuLjEmCK1dzJHuRCZoZ+TscjnmYcatIOeSStxv8/pIYqxFPnNOYuoyoP9aC adIAPgPqsLAJU72CV6EPyq50DUC3KvDULBOueRNfLzBLslgFejhq6+N8VyAja7cv w+zkYihPFCvRHfogme+jSYIR6qTgmoLjurgSyCs3LfmFhHaweSYZfPdi/UJBB6eD z9MVrNBBm3xuOQONdF7oDamH4rslgZbFTysCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQBf6scy6tqQUxMaMWsdB+LO5dW/jAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NzkvQVgtckhNdXJha0ZNVEdqRnJIUWZpenVYVnY0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNooYDANBgkqhkiG9w0BAQsFAAOCAQEAaD3F8pLyUJEcusbeQmmKUAkvQDYT n9T3jJoVchRGX9kY1rr9hQbs0z+W28tWOLQzXr0NW/UAqzFH4D83gEInPqCqiQri AF2JqP5XsQ3BAcSxdM6lrDHUXe+mcsnPknRnf0Lc3mynadKPkw9SfPxhwTHcHg06 ESUyBNRasatg7E/L7agAy4yPiK1ZPi7wZQLOaGmRfXZhCDDFrnstKJt6qjWRZcRV m/qBiIJs2J0tv+864DhQ1MUf0F5TeDlAadh1rdaVZiE4O3ogPDp8C049xVg2Q3lG Lr3XzFlyP4fDmONe0SbWxp5rAQ7971HQgOa6ux7FP7XFWXzjJpL5vib12A== -----END CERTIFICATE-----Generated at Sat Apr 27 10:16:03 2024 by rpki-client on console-ams.rpki-client.org