$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/OI24T5RmbolWiznpij4h7gQ9KAA.roa File: OI24T5RmbolWiznpij4h7gQ9KAA.roa (raw, json) Hash identifier: u7FFObC6+SmS7BoWaCAknJO8JPYW9iZKNaJmMlp5/qw= Subject key identifier: 38:8D:B8:4F:94:66:6E:89:56:8B:39:E9:8A:3E:21:EE:04:3D:28:00 Certificate issuer: /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91 Certificate serial: 31 Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/OI24T5RmbolWiznpij4h7gQ9KAA.roa Signing time: Sat 31 Aug 2024 01:31:07 +0000 ROA not before: Sat 31 Aug 2024 01:31:07 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 17958 IP address blocks: 133.226.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91 Validity Not Before: Aug 31 01:31:07 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=388DB84F94666E89568B39E98A3E21EE043D2800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:2d:2b:1e:d1:42:d9:61:7d:b5:6f:f8:e2: a0:92:22:91:db:3f:3f:63:d0:83:cc:ff:36:3d:e0: 1f:a2:9c:15:97:0b:53:79:59:a1:c6:22:d1:97:9f: 61:c5:9f:26:cc:e0:af:fe:0c:ca:d7:29:95:56:dc: 5e:75:b3:98:dd:5a:84:e2:46:1f:7d:a0:e9:66:3c: 9c:26:9b:92:8b:cd:67:20:53:a3:18:79:45:98:0d: 78:11:b4:f3:b9:f8:6c:69:5d:01:68:69:d9:c2:57: 6b:21:2b:95:4c:1d:5b:7e:0d:0c:bd:c0:12:34:a2: 9c:c6:8d:e2:a8:0d:6e:8f:39:15:ca:1e:a6:7a:e3: 8d:ce:ac:36:c6:c4:6d:1c:f9:e3:60:b0:ef:f6:6e: 1f:a7:5a:dc:85:8c:b3:7f:06:bd:c6:9c:74:54:6e: 27:0d:a3:e2:c2:10:1b:73:08:df:a8:8c:41:54:9d: fb:f2:c3:2a:6d:5b:c0:2e:b0:d5:9b:7e:c7:71:0b: 75:be:aa:e1:76:d5:21:77:9d:6b:37:69:98:ae:5d: 7b:ec:a3:2a:88:ab:42:3c:7c:8b:90:41:ac:9f:8c: 9e:ee:90:10:b3:9e:03:21:61:73:58:5e:85:7e:e6: eb:51:79:b6:5a:ce:96:68:48:75:e5:4f:4d:bf:ed: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8D:B8:4F:94:66:6E:89:56:8B:39:E9:8A:3E:21:EE:04:3D:28:00 X509v3 Authority Key Identifier: keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/OI24T5RmbolWiznpij4h7gQ9KAA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.226.160.0/20 Signature Algorithm: sha256WithRSAEncryption 31:da:99:58:fb:14:7c:0d:0d:67:ff:03:36:fb:bd:19:45:b4: 17:77:34:96:cd:2e:25:24:49:7b:47:40:f0:0f:17:9f:33:5d: ca:fe:49:19:f6:4f:8e:d7:c1:6a:dd:cf:f8:d0:60:fd:d8:aa: 5b:29:5f:d9:32:48:3f:82:26:9a:24:0a:4f:0f:fb:2e:2e:9b: fb:b9:76:90:f6:94:e2:ae:af:74:06:dd:73:5d:9f:b8:0e:0f: 0b:7a:71:5d:e3:de:37:eb:3f:b4:db:d3:0a:0c:0d:00:ae:59: 02:e0:2a:98:5b:81:9c:c7:c3:4f:1b:2b:99:40:d4:23:6d:69: 1b:b9:98:14:06:26:97:8f:35:42:c4:11:25:b4:a9:71:dc:5a: 39:c8:3b:7f:53:9f:40:eb:14:55:00:7f:49:e1:a9:fd:f3:17: 97:5f:ba:80:34:b2:b2:8b:28:ed:c6:96:59:20:43:6d:79:df: ef:52:fb:de:ba:d2:e0:0a:a4:7e:76:86:5f:42:ea:b5:0c:02: ef:bc:08:11:70:2d:0f:2b:10:df:b5:29:75:1a:78:81:0a:49: b4:73:1b:1f:63:d4:23:8a:a6:a7:74:e1:04:35:61:7a:4d:ff: 2f:25:ef:3a:9e:64:e8:85:8b:88:1b:4f:20:1e:f1:62:b8:cb: bf:e5:63:76 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTI0MDgzMTAx MzEwN1oXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMzg4REI4NEY5NDY2NkU4 OTU2OEIzOUU5OEEzRTIxRUUwNDNEMjgwMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANNeLSse0ULZYX21b/jioJIikds/P2PQg8z/Nj3gH6KcFZcLU3lZ ocYi0ZefYcWfJszgr/4MytcplVbcXnWzmN1ahOJGH32g6WY8nCabkovNZyBToxh5 RZgNeBG087n4bGldAWhp2cJXayErlUwdW34NDL3AEjSinMaN4qgNbo85Fcoepnrj jc6sNsbEbRz542Cw7/ZuH6da3IWMs38GvcacdFRuJw2j4sIQG3MI36iMQVSd+/LD Km1bwC6w1Zt+x3ELdb6q4XbVIXedazdpmK5de+yjKoirQjx8i5BBrJ+Mnu6QELOe AyFhc1hehX7m61F5tlrOlmhIdeVPTb/t1T8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ4jbhPlGZuiVaLOemKPiHuBD0oADAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NzkvT0kyNFQ1Um1ib2xXaXpucGlqNGg3Z1E5S0FBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBIXioDANBgkqhkiG9w0BAQsFAAOCAQEAMdqZWPsUfA0NZ/8DNvu9GUW0F3c0 ls0uJSRJe0dA8A8XnzNdyv5JGfZPjtfBat3P+NBg/diqWylf2TJIP4ImmiQKTw/7 Li6b+7l2kPaU4q6vdAbdc12fuA4PC3pxXePeN+s/tNvTCgwNAK5ZAuAqmFuBnMfD TxsrmUDUI21pG7mYFAYml481QsQRJbSpcdxaOcg7f1OfQOsUVQB/SeGp/fMXl1+6 gDSysoso7caWWSBDbXnf71L73rrS4AqkfnaGX0LqtQwC77wIEXAtDysQ37UpdRp4 gQpJtHMbH2PUI4qmp3ThBDVhek3/LyXvOp5k6IWLiBtPIB7xYrjLv+Vjdg== -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:47 2024 by rpki-client on console-ams.rpki-client.org