$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/AoJQ8G2KbuRJNVgQASKgumVdAog.roa File: AoJQ8G2KbuRJNVgQASKgumVdAog.roa (raw, json) Hash identifier: 8pPwDLOPIuYk83KuE9r1fqpAqNzglL5G50wLM1O3XZE= Subject key identifier: 02:82:50:F0:6D:8A:6E:E4:49:35:58:10:01:22:A0:BA:65:5D:02:88 Certificate issuer: /CN=70124EAB896039E137736AA7022F934D797F5684 Certificate serial: 28 Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/AoJQ8G2KbuRJNVgQASKgumVdAog.roa Signing time: Thu 29 Feb 2024 01:34:23 +0000 ROA not before: Thu 29 Feb 2024 01:34:23 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 18094 IP address blocks: 219.109.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70124EAB896039E137736AA7022F934D797F5684 Validity Not Before: Feb 29 01:34:23 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=028250F06D8A6EE4493558100122A0BA655D0288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2e:4b:f8:32:fa:a7:6e:a1:be:19:57:8e:fa: 1a:37:1a:97:a0:27:6c:6f:04:fd:15:65:c5:48:9a: 0c:3c:e0:b4:72:1d:08:cb:e3:ab:fb:12:28:50:45: 70:c7:14:8c:5e:46:33:ba:d8:32:79:fb:07:c7:e7: 37:a9:8b:0a:ff:0e:05:96:3b:d0:17:ad:30:af:09: 95:b8:fb:ac:10:7b:76:8b:e1:fc:b8:ed:0e:4f:96: 5c:49:d3:69:52:68:5b:f5:7f:a2:94:5c:d4:7f:02: bf:49:e5:8e:f2:30:24:98:ff:13:5e:f1:b4:80:c6: d5:3b:25:11:35:b0:d5:d3:e8:c5:4d:b8:9c:85:8b: f3:cd:94:93:1c:5c:8c:46:86:82:9f:33:af:9a:37: ae:62:5f:0d:f4:03:b4:46:21:a3:04:88:be:87:ec: 81:36:2e:25:bd:19:3d:c8:18:60:49:a2:3b:50:3f: 7a:5c:e2:b1:34:1c:ab:fa:00:e7:92:bd:f9:0d:7f: b8:84:da:e1:49:48:e5:be:d0:42:5d:48:49:67:52: 3c:62:fa:d7:83:16:95:9e:29:aa:17:f6:da:35:49: cf:c3:5e:f0:f6:bb:14:b0:9d:a5:66:ce:cd:0b:e3: 23:c6:40:1f:b0:89:e5:49:f8:78:d2:ba:d7:42:91: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:82:50:F0:6D:8A:6E:E4:49:35:58:10:01:22:A0:BA:65:5D:02:88 X509v3 Authority Key Identifier: keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/AoJQ8G2KbuRJNVgQASKgumVdAog.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.109.192.0/20 Signature Algorithm: sha256WithRSAEncryption 64:d9:f4:0d:ff:9c:a4:a6:1d:07:fc:08:10:c8:18:d3:75:a9: 30:52:71:7f:c0:17:f6:03:b7:82:c2:ce:ad:ef:2d:70:dd:a6: fb:aa:6b:c8:ff:2e:c0:98:cb:cd:d8:25:1d:40:73:a9:f7:cd: 73:ca:2b:91:37:5f:c6:fc:5b:37:b0:dc:09:e4:7e:b1:e9:13: 44:ce:e8:71:cf:7d:f3:b5:55:77:46:26:35:c7:29:f9:89:ba: 31:0a:e8:c6:64:cd:95:f2:f8:5b:14:80:da:d2:25:00:39:25: 85:1e:d9:a1:ba:bd:77:8b:eb:51:fc:1b:04:e5:39:e7:e6:ed: 3f:f9:97:ca:38:1c:4e:45:ce:a9:22:8b:09:d9:8a:45:04:5c: 39:20:0c:e6:5d:39:5a:ee:ad:5f:84:27:d9:21:3f:7f:fe:85: 0b:0b:31:27:24:d5:23:a9:c3:3c:ca:0a:eb:15:17:46:3d:76: a2:16:72:e0:2f:88:93:dc:64:83:2b:91:ec:51:1d:cc:df:b9: 64:13:cb:e8:74:ea:ee:a7:7a:cd:8e:4d:c4:99:c0:66:65:84: 04:2a:ca:cd:0d:1c:d0:67:a5:22:f2:96:a6:5c:43:98:80:07: 18:1a:8d:1b:8c:9d:54:55:bb:3f:4b:8d:3a:fa:57:49:16:03: b8:e5:f3:64 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MDEy NEVBQjg5NjAzOUUxMzc3MzZBQTcwMjJGOTM0RDc5N0Y1Njg0MB4XDTI0MDIyOTAx MzQyM1oXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMDI4MjUwRjA2RDhBNkVF NDQ5MzU1ODEwMDEyMkEwQkE2NTVEMDI4ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANouS/gy+qduob4ZV476Gjcal6AnbG8E/RVlxUiaDDzgtHIdCMvj q/sSKFBFcMcUjF5GM7rYMnn7B8fnN6mLCv8OBZY70BetMK8Jlbj7rBB7dovh/Ljt Dk+WXEnTaVJoW/V/opRc1H8Cv0nljvIwJJj/E17xtIDG1TslETWw1dPoxU24nIWL 882UkxxcjEaGgp8zr5o3rmJfDfQDtEYhowSIvofsgTYuJb0ZPcgYYEmiO1A/elzi sTQcq/oA55K9+Q1/uITa4UlI5b7QQl1ISWdSPGL614MWlZ4pqhf22jVJz8Ne8Pa7 FLCdpWbOzQvjI8ZAH7CJ5Un4eNK610KRt6cCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQCglDwbYpu5Ek1WBABIqC6ZV0CiDAfBgNVHSMEGDAWgBRwEk6riWA54TdzaqcC L5NNeX9WhDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzE4L2NCSk9xNGxnT2VFM2MycW5BaS1UVFhsX1ZvUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NCSk9xNGxnT2VFM2MycW5BaS1UVFhs X1ZvUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MTgvQW9KUThHMktidVJKTlZnUUFTS2d1bVZkQW9nLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNttwDANBgkqhkiG9w0BAQsFAAOCAQEAZNn0Df+cpKYdB/wIEMgY03WpMFJx f8AX9gO3gsLOre8tcN2m+6pryP8uwJjLzdglHUBzqffNc8orkTdfxvxbN7DcCeR+ sekTRM7occ9987VVd0YmNccp+Ym6MQroxmTNlfL4WxSA2tIlADklhR7Zobq9d4vr UfwbBOU55+btP/mXyjgcTkXOqSKLCdmKRQRcOSAM5l05Wu6tX4Qn2SE/f/6FCwsx JyTVI6nDPMoK6xUXRj12ohZy4C+Ik9xkgyuR7FEdzN+5ZBPL6HTq7qd6zY5NxJnA ZmWEBCrKzQ0c0GelIvKWplxDmIAHGBqNG4ydVFW7P0uNOvpXSRYDuOXzZA== -----END CERTIFICATE-----Generated at Thu May 30 03:38:53 2024 by rpki-client on console-ams.rpki-client.org