$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/oRMFtiktmQd0zSPp5xkmwxrVFRM.roa File: oRMFtiktmQd0zSPp5xkmwxrVFRM.roa (raw, json) Hash identifier: 70G/gxFpHtpo0m7ndw+j9Fmp2V7SHviMccBRBaAZbvE= Subject key identifier: A1:13:05:B6:29:2D:99:07:74:CD:23:E9:E7:19:26:C3:1A:D5:15:13 Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Certificate serial: 5A Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/oRMFtiktmQd0zSPp5xkmwxrVFRM.roa Signing time: Thu 29 Feb 2024 01:30:51 +0000 ROA not before: Thu 29 Feb 2024 01:30:51 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 18260 IP address blocks: 103.2.64.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 07:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Validity Not Before: Feb 29 01:30:51 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=A11305B6292D990774CD23E9E71926C31AD51513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a4:8a:dc:20:f0:71:a8:4e:ac:ee:02:28:34: b8:28:7c:91:05:c3:1b:06:e4:f0:d6:b7:a4:cd:e8: 38:e5:66:5c:82:79:95:5a:97:48:cf:97:14:3b:f9: 14:fb:28:ca:2f:e6:6e:3f:6b:ec:fe:c4:11:db:2f: ce:4d:d5:8b:d8:1f:98:5b:e5:0e:35:4b:03:86:0b: aa:bc:ab:e8:3e:b5:64:f5:bd:d2:2a:c8:ed:65:74: 97:0a:22:d6:90:29:39:82:f1:7b:3e:91:cf:f9:d8: 85:6f:86:f4:cf:3e:80:ca:74:5b:f5:8a:35:0b:83: d2:d2:11:bb:ae:3b:8a:15:7b:f4:dd:15:40:8e:43: 23:4c:26:e6:8e:90:10:c2:39:bc:ac:6a:99:9e:83: 2e:62:c8:a9:38:0f:cc:cc:1b:70:9c:c5:b3:0f:de: c5:b5:75:03:a0:e0:41:1a:fc:0c:1e:32:c8:e8:c8: 3a:2b:4f:52:39:09:df:d9:f1:45:c6:a5:d1:70:8f: 96:9b:a5:ed:2a:7f:2f:85:77:56:2e:7f:24:90:1d: c3:78:c9:51:aa:8c:b7:6f:b7:35:75:8e:8f:ba:b0: d4:05:cf:45:e1:b0:8c:96:5b:7b:1b:b2:23:cb:f2: a9:91:f6:f6:cd:07:a1:2a:62:9e:dc:54:88:e8:4d: d0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:13:05:B6:29:2D:99:07:74:CD:23:E9:E7:19:26:C3:1A:D5:15:13 X509v3 Authority Key Identifier: keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/oRMFtiktmQd0zSPp5xkmwxrVFRM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.2.64.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:9c:cf:f5:a8:32:92:90:4e:a0:13:6a:a0:f3:96:af:d3:59: ac:75:f8:92:e7:78:ea:1d:cc:fc:af:d1:5a:6b:c1:de:24:8d: e1:ae:bf:f0:ba:93:08:77:28:ec:e0:a9:82:dc:33:b0:91:1f: a2:81:6e:e6:f8:04:ff:f2:0a:6e:b3:7c:23:c8:ea:15:a3:6a: 6b:91:62:eb:b3:1f:5d:91:b8:44:d9:3f:82:dd:ec:38:8b:6a: 86:2b:4a:67:af:4a:d3:53:59:fd:16:ca:a8:1d:25:1f:e8:4f: ba:c9:5a:d9:35:f2:da:10:56:7a:f5:d4:a7:02:8f:7d:48:1f: da:db:3f:ab:5c:90:31:4f:c3:53:ae:6c:f0:8d:56:82:e9:da: c1:4d:bf:38:15:12:b8:53:bb:27:4d:77:e6:69:42:4c:89:2c: 65:93:49:7c:c6:cb:ec:73:bf:ab:58:65:56:19:a3:35:64:25: d3:ec:e1:7e:20:98:05:1f:64:65:09:aa:59:2c:9e:f6:11:21: 9c:a2:d3:40:06:76:6f:3a:21:4c:9b:d1:9d:b6:a8:af:84:89: 7f:5d:01:14:99:2d:61:73:80:6e:ac:81:15:59:49:e1:dc:ef: 7d:56:52:8c:4e:15:71:b4:07:98:ba:74:fb:5b:fc:b6:12:c4: df:a3:b1:20 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTI0MDIyOTAx MzA1MVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoQTExMzA1QjYyOTJEOTkw Nzc0Q0QyM0U5RTcxOTI2QzMxQUQ1MTUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOykitwg8HGoTqzuAig0uCh8kQXDGwbk8Na3pM3oOOVmXIJ5lVqX SM+XFDv5FPsoyi/mbj9r7P7EEdsvzk3Vi9gfmFvlDjVLA4YLqryr6D61ZPW90irI 7WV0lwoi1pApOYLxez6Rz/nYhW+G9M8+gMp0W/WKNQuD0tIRu647ihV79N0VQI5D I0wm5o6QEMI5vKxqmZ6DLmLIqTgPzMwbcJzFsw/exbV1A6DgQRr8DB4yyOjIOitP UjkJ39nxRcal0XCPlpul7Sp/L4V3Vi5/JJAdw3jJUaqMt2+3NXWOj7qw1AXPReGw jJZbexuyI8vyqZH29s0HoSpintxUiOhN0CECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBShEwW2KS2ZB3TNI+nnGSbDGtUVEzAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MzEvb1JNRnRpa3RtUWQwelNQcDV4a213eHJWRlJNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcCQDANBgkqhkiG9w0BAQsFAAOCAQEAepzP9agykpBOoBNqoPOWr9NZrHX4 kud46h3M/K/RWmvB3iSN4a6/8LqTCHco7OCpgtwzsJEfooFu5vgE//IKbrN8I8jq FaNqa5Fi67MfXZG4RNk/gt3sOItqhitKZ69K01NZ/RbKqB0lH+hPusla2TXy2hBW evXUpwKPfUgf2ts/q1yQMU/DU65s8I1WgunawU2/OBUSuFO7J0135mlCTIksZZNJ fMbL7HO/q1hlVhmjNWQl0+zhfiCYBR9kZQmqWSye9hEhnKLTQAZ2bzohTJvRnbao r4SJf10BFJktYXOAbqyBFVlJ4dzvfVZSjE4VcbQHmLp0+1v8thLE36OxIA== -----END CERTIFICATE-----Generated at Wed Jun 26 09:28:48 2024 by rpki-client on console-fra.rpki-client.org