$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/GWsAPyL4T-R1DmKa8HgKqpL66Eo.roa File: GWsAPyL4T-R1DmKa8HgKqpL66Eo.roa (raw, json) Hash identifier: Bsp1iUh+SibT1kE7KkGwHNvfBNjztfsZBEwGUVh16Ps= Subject key identifier: 19:6B:00:3F:22:F8:4F:E4:75:0E:62:9A:F0:78:0A:AA:92:FA:E8:4A Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554 Certificate serial: 2E Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/GWsAPyL4T-R1DmKa8HgKqpL66Eo.roa Signing time: Thu 29 Feb 2024 01:34:14 +0000 ROA not before: Thu 29 Feb 2024 01:34:14 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 131934 IP address blocks: 221.132.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D79B3890C2DA3795148976B954C2024056797554 Validity Not Before: Feb 29 01:34:14 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=196B003F22F84FE4750E629AF0780AAA92FAE84A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:46:16:87:ae:e4:5a:fb:72:bc:5b:36:5d: 75:22:d1:7c:ff:1b:25:64:62:8d:d3:a6:a9:fc:2f: 68:d0:ac:5e:19:fb:92:a4:6a:e4:73:93:d6:47:d5: 79:18:2c:06:b9:1a:c2:7c:aa:33:e7:8d:e3:e4:f3: 0d:83:8d:1b:4c:85:eb:a4:65:e4:ed:63:e7:56:42: 08:71:61:d5:54:19:17:a7:8d:1a:a5:9d:19:66:43: aa:97:c9:37:76:63:19:ef:ae:2b:46:37:4d:cf:4d: 0d:19:19:73:16:dd:51:a9:37:a6:ee:42:00:9b:0a: 9b:3b:e7:85:be:1a:a9:0c:40:7c:90:1b:14:04:b6: 17:30:1a:a2:ba:be:b1:af:c0:25:47:af:c9:d4:a3: 1b:3c:37:c1:b6:fb:b5:2d:56:2a:66:03:ec:3f:a5: e1:69:88:64:94:42:b8:31:8a:3c:b0:3a:1c:22:36: 91:ac:05:ee:0e:30:55:d2:6f:6d:21:f1:9d:ec:5a: 37:62:9d:a7:ff:36:4d:fa:bd:6f:c5:82:4a:50:e4: 14:a8:a3:00:d4:a1:a0:d0:35:30:eb:f8:99:e9:d5: ac:95:a1:c9:18:45:e9:4b:10:e1:52:44:69:de:ce: c1:f7:8a:89:a1:a8:cd:21:d7:07:28:f2:2a:92:a9: 36:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6B:00:3F:22:F8:4F:E4:75:0E:62:9A:F0:78:0A:AA:92:FA:E8:4A X509v3 Authority Key Identifier: keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/GWsAPyL4T-R1DmKa8HgKqpL66Eo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 221.132.96.0/20 Signature Algorithm: sha256WithRSAEncryption 61:ef:e7:33:0f:98:30:f1:a6:52:f0:f5:ce:b0:77:c1:d1:f9: 27:fa:b4:58:c7:3e:6d:ce:00:6f:01:a0:fe:e3:9e:4b:66:64: d5:62:e1:1f:e0:a3:5e:2a:c1:a5:5f:05:fe:62:b9:13:9e:09: 32:21:30:65:70:b7:60:f4:6b:c2:ae:23:d6:03:48:b5:34:55: 83:27:10:25:41:0f:75:4f:62:6a:24:9c:06:90:19:b1:8d:fb: 68:9f:2e:2a:0b:26:d1:20:8e:03:4d:47:e4:3b:11:0e:61:d1: c8:50:05:6f:be:36:47:06:77:a6:38:59:bb:de:73:18:ab:da: d6:40:39:5c:70:4a:ad:4b:46:76:8d:38:10:c1:04:8a:df:49: 20:2e:eb:3e:d8:b6:f3:44:41:e3:1e:b2:ef:c2:a1:5c:05:35: 08:a1:f8:46:8a:b1:33:5d:c1:c4:01:73:16:72:0d:9d:a8:fc: 87:f7:8a:11:19:86:32:fa:8b:17:14:19:ad:66:4a:f3:03:68: 4f:4a:28:1d:c9:0b:b4:d4:6e:09:d3:1a:73:25:c7:30:83:c2: cf:07:6c:bb:de:e2:be:e2:3b:20:66:2f:42:35:bc:e4:4b:e9: 36:ab:34:af:91:27:05:92:4a:8d:7e:40:c4:ab:12:b1:26:c2: b9:cf:e4:f0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTI0MDIyOTAx MzQxNFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMTk2QjAwM0YyMkY4NEZF NDc1MEU2MjlBRjA3ODBBQUE5MkZBRTg0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALPERhaHruRa+3K8WzZddSLRfP8bJWRijdOmqfwvaNCsXhn7kqRq 5HOT1kfVeRgsBrkawnyqM+eN4+TzDYONG0yF66Rl5O1j51ZCCHFh1VQZF6eNGqWd GWZDqpfJN3ZjGe+uK0Y3Tc9NDRkZcxbdUak3pu5CAJsKmzvnhb4aqQxAfJAbFAS2 FzAaorq+sa/AJUevydSjGzw3wbb7tS1WKmYD7D+l4WmIZJRCuDGKPLA6HCI2kawF 7g4wVdJvbSHxnexaN2Kdp/82Tfq9b8WCSlDkFKijANShoNA1MOv4menVrJWhyRhF 6UsQ4VJEad7OwfeKiaGozSHXByjyKpKpNkkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQZawA/IvhP5HUOYprweAqqkvroSjAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NDAvR1dzQVB5TDRULVIxRG1LYThIZ0txcEw2NkVvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBN2EYDANBgkqhkiG9w0BAQsFAAOCAQEAYe/nMw+YMPGmUvD1zrB3wdH5J/q0 WMc+bc4AbwGg/uOeS2Zk1WLhH+CjXirBpV8F/mK5E54JMiEwZXC3YPRrwq4j1gNI tTRVgycQJUEPdU9iaiScBpAZsY37aJ8uKgsm0SCOA01H5DsRDmHRyFAFb742RwZ3 pjhZu95zGKva1kA5XHBKrUtGdo04EMEEit9JIC7rPti280RB4x6y78KhXAU1CKH4 RoqxM13BxAFzFnINnaj8h/eKERmGMvqLFxQZrWZK8wNoT0ooHckLtNRuCdMacyXH MIPCzwdsu97ivuI7IGYvQjW85EvpNqs0r5EnBZJKjX5AxKsSsSbCuc/k8A== -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:49 2024 by rpki-client on console-ams.rpki-client.org