$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/6UObzBAaWIuRc5tynDTs1NwbynQ.roa File: 6UObzBAaWIuRc5tynDTs1NwbynQ.roa (raw, json) Hash identifier: KdG9b7hEtC4dSghazJ/Jwd6i8KLL5kPpAKzYzlgOmXc= Subject key identifier: E9:43:9B:CC:10:1A:58:8B:91:73:9B:72:9C:34:EC:D4:DC:1B:CA:74 Certificate issuer: /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46 Certificate serial: 2A Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/6UObzBAaWIuRc5tynDTs1NwbynQ.roa Signing time: Sun 31 Mar 2024 01:32:22 +0000 ROA not before: Sun 31 Mar 2024 01:32:22 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 24271 IP address blocks: 202.177.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46 Validity Not Before: Mar 31 01:32:22 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=E9439BCC101A588B91739B729C34ECD4DC1BCA74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9a:99:04:5f:fc:02:7c:7f:82:f9:cd:8f:1d: 0d:c8:4c:cc:1b:6c:ce:a4:0c:90:37:bc:80:e2:1f: c3:12:63:43:5b:54:d5:08:aa:33:7c:b1:30:c9:3e: 4c:66:b2:5d:72:7e:9b:b8:21:3b:13:fd:f9:b3:b4: 26:96:ef:c8:25:5a:04:50:dd:17:5e:41:40:50:c4: 83:a5:eb:8d:36:58:f9:42:21:b3:17:eb:03:81:7d: 8d:c1:aa:27:c1:e2:bb:50:84:e5:59:6f:86:c4:fc: ff:6b:b6:ae:6f:f6:b1:4c:d6:4d:b8:6c:fd:12:09: 40:f6:f4:db:d7:38:f6:97:d9:ad:2b:39:b8:59:a1: 3d:5d:37:3c:6b:a5:2e:87:b3:9e:80:ed:7b:1c:f1: 70:38:33:60:b9:68:c9:d7:f0:dd:0a:9e:6e:b4:75: 66:f4:62:ef:a6:b1:c1:63:73:3f:72:c4:07:4c:83: e9:de:78:63:77:0a:e4:56:db:7b:7e:eb:70:89:6f: e2:23:e0:02:a5:d6:9d:67:9b:91:6c:13:02:8e:e0: 37:c0:cd:fb:39:04:58:34:50:d8:13:94:c7:fd:5c: 23:37:2d:8c:fc:9f:f4:c8:ce:1a:db:c8:e9:77:79: 0f:a4:68:05:e7:87:81:a6:ed:9b:e3:19:97:8a:3e: 83:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:43:9B:CC:10:1A:58:8B:91:73:9B:72:9C:34:EC:D4:DC:1B:CA:74 X509v3 Authority Key Identifier: keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/6UObzBAaWIuRc5tynDTs1NwbynQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.177.96.0/20 Signature Algorithm: sha256WithRSAEncryption 57:63:3d:76:d1:aa:81:1c:37:24:f9:86:89:ac:4d:95:36:61: 26:45:83:3f:d4:59:81:90:59:7e:01:2c:24:2d:07:b2:2c:76: f1:5e:b3:ac:dc:db:e4:f1:49:14:da:f4:5d:c5:d9:eb:a5:71: 22:bf:a6:60:e8:fa:11:63:e2:1b:a9:be:ce:8a:f2:d4:12:1d: a3:a6:f7:61:2f:34:d6:3e:3e:fd:0d:fc:5f:a7:27:44:e8:18: 0e:25:7c:cf:3a:f6:e3:4e:fd:55:fb:59:74:fe:d0:80:a1:2c: e5:02:fb:cd:0b:39:8f:f8:ba:ac:88:e4:86:d9:f1:ef:20:25: 56:f7:8e:f9:2b:0c:e2:64:c8:eb:df:77:d4:8e:c5:50:6a:54: bb:b8:07:ec:c4:af:4a:69:68:72:7d:41:39:81:88:56:c6:ef: b8:aa:cf:99:d9:cb:f4:b8:1b:c2:17:92:92:e6:3a:4c:ce:9a: e6:ee:35:65:a1:72:5a:bd:74:db:db:06:55:34:9f:70:18:b9: 5a:d5:3b:b2:30:1e:21:e4:15:e0:2c:33:9f:2b:9f:82:32:09: 92:d6:52:89:a6:5b:69:1c:8a:48:ec:96:5d:3f:97:e3:d7:a8: 6e:bd:61:0b:c5:51:f8:88:39:76:d8:78:26:d7:98:65:69:e4: e6:10:28:b4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDA5 NjJFREUwRjVFMjFBN0U4RjlFMUFCMDA2RkY5NDBFMDRFRDQ2MB4XDTI0MDMzMTAx MzIyMloXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTk0MzlCQ0MxMDFBNTg4 QjkxNzM5QjcyOUMzNEVDRDREQzFCQ0E3NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL+amQRf/AJ8f4L5zY8dDchMzBtszqQMkDe8gOIfwxJjQ1tU1Qiq M3yxMMk+TGayXXJ+m7ghOxP9+bO0JpbvyCVaBFDdF15BQFDEg6XrjTZY+UIhsxfr A4F9jcGqJ8Hiu1CE5VlvhsT8/2u2rm/2sUzWTbhs/RIJQPb029c49pfZrSs5uFmh PV03PGulLoeznoDtexzxcDgzYLloydfw3QqebrR1ZvRi76axwWNzP3LEB0yD6d54 Y3cK5Fbbe37rcIlv4iPgAqXWnWebkWwTAo7gN8DN+zkEWDRQ2BOUx/1cIzctjPyf 9MjOGtvI6Xd5D6RoBeeHgabtm+MZl4o+gysCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTpQ5vMEBpYi5Fzm3KcNOzU3BvKdDAfBgNVHSMEGDAWgBSNCWLt4PXiGn6Pnhqw Bv+UDgTtRjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODY4L2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0RTdVWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0 RTdVWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NjgvNlVPYnpCQWFXSXVSYzV0eW5EVHMxTndieW5RLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMqxYDANBgkqhkiG9w0BAQsFAAOCAQEAV2M9dtGqgRw3JPmGiaxNlTZhJkWD P9RZgZBZfgEsJC0Hsix28V6zrNzb5PFJFNr0XcXZ66VxIr+mYOj6EWPiG6m+zory 1BIdo6b3YS801j4+/Q38X6cnROgYDiV8zzr24079VftZdP7QgKEs5QL7zQs5j/i6 rIjkhtnx7yAlVveO+SsM4mTI69931I7FUGpUu7gH7MSvSmlocn1BOYGIVsbvuKrP mdnL9LgbwheSkuY6TM6a5u41ZaFyWr1029sGVTSfcBi5WtU7sjAeIeQV4Cwznyuf gjIJktZSiaZbaRyKSOyWXT+X49eobr1hC8VR+Ig5dth4JteYZWnk5hAotA== -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:49 2024 by rpki-client on console-ams.rpki-client.org