$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/hdHPC2FhkcrSFUNIpYzR1pzI2TI.roa File: hdHPC2FhkcrSFUNIpYzR1pzI2TI.roa (raw, json) Hash identifier: D1IfhwI+Gbcb6j0Dn9uGcNP0sv4Ay2fMdZobabqZ/Zg= Subject key identifier: 85:D1:CF:0B:61:61:91:CA:D2:15:43:48:A5:8C:D1:D6:9C:C8:D9:32 Certificate issuer: /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B Certificate serial: 0A Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/hdHPC2FhkcrSFUNIpYzR1pzI2TI.roa Signing time: Fri 17 Nov 2023 07:33:10 +0000 ROA not before: Fri 17 Nov 2023 07:33:10 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 18278 IP address blocks: 210.251.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B Validity Not Before: Nov 17 07:33:10 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=85D1CF0B616191CAD2154348A58CD1D69CC8D932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ca:7f:c9:7b:28:be:29:60:68:ae:e1:2e:16: d4:bc:95:00:e3:37:21:15:ba:3f:0c:5a:22:53:a5: db:1e:5a:a4:3f:4c:dd:ef:aa:52:5e:77:e2:3c:a7: 04:72:21:2c:5c:54:66:df:ae:f0:93:b7:c9:39:1f: 22:f7:31:d6:c7:34:89:62:ff:9d:06:78:c4:0c:26: 6a:b5:e2:9b:a2:cc:43:c8:7a:5d:26:a8:1f:8d:a8: 37:cf:d3:52:60:45:ab:46:d0:56:ca:53:03:b3:77: 09:11:63:88:fc:b9:a1:84:e9:d3:bd:87:c9:ee:97: 18:73:b5:ae:5b:5e:76:62:56:d9:f2:1f:0f:87:cd: 27:f6:1c:22:6e:d0:97:6a:1c:03:3b:79:5b:b5:96: 37:3c:96:0f:68:95:7c:be:82:d2:15:00:29:b7:9f: 61:aa:1c:b2:11:2f:bf:74:5c:8f:d2:30:86:38:b1: f1:ed:3a:09:87:69:d1:da:22:75:5d:44:ec:04:5f: 3f:ed:e3:e8:1f:d2:0e:ae:70:3f:cd:de:bd:aa:c1: 34:78:58:a6:df:82:65:30:6b:b7:7d:e0:53:a9:bd: 9d:51:3c:84:2d:c0:71:db:c0:70:a8:4c:08:09:71: de:60:a6:2a:11:5c:f8:31:f1:ac:8d:08:de:a8:bb: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D1:CF:0B:61:61:91:CA:D2:15:43:48:A5:8C:D1:D6:9C:C8:D9:32 X509v3 Authority Key Identifier: keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/hdHPC2FhkcrSFUNIpYzR1pzI2TI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.251.176.0/20 Signature Algorithm: sha256WithRSAEncryption 68:8a:87:af:7b:88:f5:84:f8:61:c2:5d:84:3c:06:ac:bd:80: ab:ce:3d:82:90:94:50:ec:dc:15:ed:71:19:5a:ed:6a:ae:c1: c5:01:45:d7:95:f0:03:1f:12:ac:ca:75:b4:3a:32:00:84:ad: 03:c3:a3:bf:7f:7a:42:28:95:67:1a:6c:3f:e4:4f:fb:8a:9e: de:e2:79:9a:95:4c:0f:fc:8f:92:c2:12:4e:9b:5d:30:a0:30: 59:93:40:43:0e:34:23:dd:53:c0:fc:d2:26:f7:3a:4e:b9:9b: bc:fc:1a:83:a6:e4:3a:76:46:91:b9:0a:c2:70:ec:8e:42:6b: eb:53:d7:4b:7e:2e:bf:66:29:fc:fe:53:2e:c8:47:da:ce:d4: d9:ff:1e:f8:45:71:54:c3:3c:f7:36:db:9c:2a:71:e3:19:e5: 27:75:ba:e4:ff:f0:7f:00:fb:d6:bb:93:32:4b:8a:aa:00:68: 9a:3f:95:36:97:6e:92:f6:a7:cb:ac:9f:5f:b1:8e:2a:21:71: 75:f1:01:5b:11:f0:04:ed:f9:f3:42:b6:3c:fb:89:71:b5:31: 1b:ae:60:71:71:4f:df:e6:79:ea:00:c5:1c:fa:48:3c:7c:f9: 00:d6:81:32:fa:85:c9:f5:bd:19:03:a0:fa:8d:d2:4a:32:77: 57:42:5b:7c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwODRG ODhEODM3QTJBMjEzMkVBOEY2RjhGMkRCODJDMUMxRTkwQThCMB4XDTIzMTExNzA3 MzMxMFoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoODVEMUNGMEI2MTYxOTFD QUQyMTU0MzQ4QTU4Q0QxRDY5Q0M4RDkzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMnKf8l7KL4pYGiu4S4W1LyVAOM3IRW6PwxaIlOl2x5apD9M3e+q Ul534jynBHIhLFxUZt+u8JO3yTkfIvcx1sc0iWL/nQZ4xAwmarXim6LMQ8h6XSao H42oN8/TUmBFq0bQVspTA7N3CRFjiPy5oYTp072Hye6XGHO1rltedmJW2fIfD4fN J/YcIm7Ql2ocAzt5W7WWNzyWD2iVfL6C0hUAKbefYaocshEvv3Rcj9Iwhjix8e06 CYdp0doidV1E7ARfP+3j6B/SDq5wP83evarBNHhYpt+CZTBrt33gU6m9nVE8hC3A cdvAcKhMCAlx3mCmKhFc+DHxrI0I3qi7mUkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSF0c8LYWGRytIVQ0iljNHWnMjZMjAfBgNVHSMEGDAWgBQIT4jYN6KiEy6o9vjy 24LBwekKizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NIcENvcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NI cENvcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MDAvaGRIUEMyRmhrY3JTRlVOSXBZelIxcHpJMlRJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNL7sDANBgkqhkiG9w0BAQsFAAOCAQEAaIqHr3uI9YT4YcJdhDwGrL2Aq849 gpCUUOzcFe1xGVrtaq7BxQFF15XwAx8SrMp1tDoyAIStA8Ojv396QiiVZxpsP+RP +4qe3uJ5mpVMD/yPksISTptdMKAwWZNAQw40I91TwPzSJvc6TrmbvPwag6bkOnZG kbkKwnDsjkJr61PXS34uv2Yp/P5TLshH2s7U2f8e+EVxVMM89zbbnCpx4xnlJ3W6 5P/wfwD71ruTMkuKqgBomj+VNpdukvany6yfX7GOKiFxdfEBWxHwBO3580K2PPuJ cbUxG65gcXFP3+Z56gDFHPpIPHz5ANaBMvqFyfW9GQOg+o3SSjJ3V0JbfA== -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:24 2024 by rpki-client on console-fra.rpki-client.org