$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/Ao1ZP7oN_BPygVzBmI93DVp4w1M.roa File: Ao1ZP7oN_BPygVzBmI93DVp4w1M.roa (raw, json) Hash identifier: e7QwoIK6wkxdu7MY5MegkZ8EvqSqwg3tLEX2UXgcS0Y= Subject key identifier: 02:8D:59:3F:BA:0D:FC:13:F2:81:5C:C1:98:8F:77:0D:5A:78:C3:53 Certificate issuer: /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B Certificate serial: 1E Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/Ao1ZP7oN_BPygVzBmI93DVp4w1M.roa Signing time: Fri 16 Aug 2024 02:53:18 +0000 ROA not before: Fri 16 Aug 2024 02:53:18 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 2519 IP address blocks: 219.121.249.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 18:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B Validity Not Before: Aug 16 02:53:18 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=028D593FBA0DFC13F2815CC1988F770D5A78C353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:f4:2f:cf:22:2b:a0:f5:41:9b:9e:41:1b: bc:50:63:7d:62:cc:02:9b:02:c7:06:3e:66:b2:3b: e8:21:26:86:ea:e0:4b:72:8b:00:50:94:f0:91:65: 9f:b6:79:ab:7c:7f:89:c6:57:93:89:9a:d7:66:eb: d1:dd:bf:af:70:3a:5f:be:f1:4d:cc:53:7a:19:e9: 55:53:a5:8a:b7:ea:86:b4:c9:45:42:f8:98:7c:1e: 9f:67:89:83:d7:3b:b5:fe:b3:d0:e4:d3:85:50:17: 7d:fa:1e:db:79:42:25:06:ef:32:61:29:93:56:fa: c5:5b:9b:f5:75:88:8f:e7:71:3d:77:de:a4:79:fb: ca:c1:be:59:6d:a6:75:9a:84:3b:3c:2c:bf:3e:e4: 66:6e:32:33:7a:d0:e5:d1:fe:06:cd:8a:33:f3:cb: 07:b9:08:59:f4:51:9c:ef:2f:0a:79:e9:24:cd:47: 43:33:43:f0:09:b4:2a:5f:5c:6d:92:80:ef:38:da: df:fe:93:73:4b:3b:0d:2a:c0:a4:fc:fe:88:27:a7: 5e:86:0b:ac:cf:7b:8f:8b:fb:83:57:fc:78:57:35: 21:0c:23:0e:b9:9e:fa:6e:5f:5f:57:33:e0:69:6e: d0:5b:cf:6c:27:89:c4:6a:9d:6c:2d:ff:57:fb:8d: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8D:59:3F:BA:0D:FC:13:F2:81:5C:C1:98:8F:77:0D:5A:78:C3:53 X509v3 Authority Key Identifier: keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/Ao1ZP7oN_BPygVzBmI93DVp4w1M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.121.249.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:4e:6c:a6:11:5a:2d:48:6f:a2:90:6c:b2:20:02:1c:05:11: 0d:c2:49:aa:de:28:53:28:63:e9:b4:aa:ce:00:ea:60:30:d7: 3c:0a:1d:84:51:01:e5:e0:f8:15:80:34:cb:68:fd:6f:04:bb: f6:38:c6:ed:4a:2f:a1:dd:c3:c8:6f:b6:64:91:cd:c7:5f:54: 83:92:17:07:18:4d:8a:15:57:db:3b:c5:e0:95:13:32:d2:27: 20:db:25:7b:c4:d7:c3:b8:85:57:2d:0c:45:fa:ff:cc:21:9d: d6:7e:27:40:de:f2:26:de:7c:e6:31:18:b0:5b:cc:9a:d4:21: 27:9b:d9:5d:77:f1:72:c7:0e:7d:46:0a:d9:c9:75:d5:cf:f6: c7:85:c0:60:ec:58:bb:20:ef:a6:1a:4c:b0:d9:b6:d3:cd:f0: 62:ce:5d:78:1e:ae:06:e5:c9:5a:3c:b8:55:73:19:d6:d1:8b: a0:96:96:8a:9a:9d:95:a0:a0:9a:d9:17:87:f4:e6:db:43:f8: d5:68:09:e8:88:26:aa:50:3c:96:cd:ff:65:81:fa:5d:e4:42: 34:9f:20:31:ee:96:7e:74:95:75:d7:10:37:29:03:48:fb:df: c1:ba:87:e7:d4:ba:bf:03:33:1c:2a:c4:75:89:88:99:37:a0: ca:aa:73:d3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4 OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI0MDgxNjAy NTMxOFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMDI4RDU5M0ZCQTBERkMx M0YyODE1Q0MxOTg4Rjc3MEQ1QTc4QzM1MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJwd9C/PIiug9UGbnkEbvFBjfWLMApsCxwY+ZrI76CEmhurgS3KL AFCU8JFln7Z5q3x/icZXk4ma12br0d2/r3A6X77xTcxTehnpVVOlirfqhrTJRUL4 mHwen2eJg9c7tf6z0OTThVAXffoe23lCJQbvMmEpk1b6xVub9XWIj+dxPXfepHn7 ysG+WW2mdZqEOzwsvz7kZm4yM3rQ5dH+Bs2KM/PLB7kIWfRRnO8vCnnpJM1HQzND 8Am0Kl9cbZKA7zja3/6Tc0s7DSrApPz+iCenXoYLrM97j4v7g1f8eFc1IQwjDrme +m5fX1cz4Glu0FvPbCeJxGqdbC3/V/uNmqcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQCjVk/ug38E/KBXMGYj3cNWnjDUzAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MTMvQW8xWlA3b05fQlB5Z1Z6Qm1JOTNEVnA0dzFNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANt5+TANBgkqhkiG9w0BAQsFAAOCAQEAbE5sphFaLUhvopBssiACHAURDcJJ qt4oUyhj6bSqzgDqYDDXPAodhFEB5eD4FYA0y2j9bwS79jjG7Uovod3DyG+2ZJHN x19Ug5IXBxhNihVX2zvF4JUTMtInINsle8TXw7iFVy0MRfr/zCGd1n4nQN7yJt58 5jEYsFvMmtQhJ5vZXXfxcscOfUYK2cl11c/2x4XAYOxYuyDvphpMsNm2083wYs5d eB6uBuXJWjy4VXMZ1tGLoJaWipqdlaCgmtkXh/Tm20P41WgJ6IgmqlA8ls3/ZYH6 XeRCNJ8gMe6WfnSVddcQNykDSPvfwbqH59S6vwMzHCrEdYmImTegyqpz0w== -----END CERTIFICATE-----Generated at Mon Nov 25 19:48:01 2024 by rpki-client on console-fra.rpki-client.org