$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/t8hEtCKUL0DbpFxqAjt-kmeXuyM.roa File: t8hEtCKUL0DbpFxqAjt-kmeXuyM.roa (raw, json) Hash identifier: 38RLyj/CLlsymRFfZGjbIeKOiM70FvxQrVLhPL7IbU4= Subject key identifier: B7:C8:44:B4:22:94:2F:40:DB:A4:5C:6A:02:3B:7E:92:67:97:BB:23 Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Certificate serial: 48 Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/t8hEtCKUL0DbpFxqAjt-kmeXuyM.roa Signing time: Sat 31 Aug 2024 01:30:22 +0000 ROA not before: Sat 31 Aug 2024 01:30:22 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 23805 IP address blocks: 27.100.48.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Validity Not Before: Aug 31 01:30:22 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=B7C844B422942F40DBA45C6A023B7E926797BB23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:ec:06:1a:1d:8c:41:87:60:4c:e1:78:32: b2:8c:80:ac:ba:9f:1a:bc:e8:08:be:00:b9:30:80: 43:cb:28:45:c1:b8:90:c5:30:20:cb:26:db:a2:cc: 92:51:e5:fd:38:cb:45:11:65:5d:58:88:dd:d6:3b: 57:d2:66:51:15:3e:a2:7e:e3:ab:bc:07:35:7a:31: 41:35:5c:0f:9d:04:17:dd:6c:ca:fc:81:c0:12:4c: cd:39:8b:db:9b:eb:50:86:73:78:a4:c5:39:c8:d5: 6c:e8:97:4a:b5:98:0a:27:bf:ce:93:9f:bb:30:f0: 15:3e:b0:5c:05:6c:10:95:20:23:5e:6d:04:83:50: df:2f:3e:d4:cd:c0:54:08:6d:5d:2d:f1:8a:c7:c4: 5b:34:6a:ac:e7:ad:9f:88:a7:c5:cf:05:cb:87:38: 7b:3b:7d:46:f5:5d:13:68:b0:83:39:0e:b6:4e:d0: b1:df:8c:de:40:14:1d:36:ae:3f:1e:34:a0:64:a0: dd:87:d6:60:fe:02:08:09:9c:dd:52:4e:3a:a8:7a: 75:b2:d4:bf:2a:c8:3a:03:64:ab:f4:12:be:56:c3: 5d:6a:e8:e0:b5:c9:b9:b7:e9:5a:74:52:b4:31:2e: ae:e9:d2:24:2f:0b:35:a0:75:8f:91:87:29:31:a1: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C8:44:B4:22:94:2F:40:DB:A4:5C:6A:02:3B:7E:92:67:97:BB:23 X509v3 Authority Key Identifier: keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/t8hEtCKUL0DbpFxqAjt-kmeXuyM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.100.48.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:72:10:9c:b6:07:56:4c:68:0c:56:fb:b2:e5:11:7e:b9:96: 86:67:b4:d4:3e:35:3d:72:30:79:db:77:0b:8a:f5:f6:b8:4f: a8:00:fa:dc:a3:66:38:95:aa:f5:61:01:3a:d2:8b:77:e4:9e: ef:37:05:c7:4b:23:10:85:b2:a4:91:5b:8c:01:35:33:09:e0: 70:6d:9a:b8:91:44:f2:bd:c0:31:6f:18:8e:e1:fd:35:a9:07: ee:a9:8f:07:e6:16:5e:b7:ee:a8:9a:e4:66:4d:7f:22:a8:42: 7b:23:ee:ab:fe:b1:63:c1:14:e1:a5:42:27:2e:c4:d3:b4:24: ec:3c:2a:ed:d5:d9:29:c3:56:70:7e:88:14:17:1b:87:61:c8: eb:77:2c:97:f4:29:0c:42:6e:37:46:a7:6b:1c:f7:fb:d6:f1: 17:f9:3b:59:e6:04:85:d2:3e:08:f5:39:59:0c:d9:44:80:35: 28:4e:17:69:19:35:59:e7:6e:c7:5f:1e:8f:13:46:7c:37:99: 0f:cb:00:d1:3d:e5:8a:61:f0:92:c9:aa:5f:ab:ea:83:15:a3: c8:a0:c8:8b:5f:83:fb:7a:18:d8:d5:43:df:50:0c:8b:3a:82: 67:f4:a2:42:c8:c7:e8:b6:da:24:27:1e:94:3c:79:69:db:ab: e2:cb:a3:32 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDBF MDgzOTM2ODhCMDQ3Mzc4NzRFQ0Q2M0REOEJFNzhFNUVGMkQwMB4XDTI0MDgzMTAx MzAyMloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQjdDODQ0QjQyMjk0MkY0 MERCQTQ1QzZBMDIzQjdFOTI2Nzk3QkIyMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMu17AYaHYxBh2BM4XgysoyArLqfGrzoCL4AuTCAQ8soRcG4kMUw IMsm26LMklHl/TjLRRFlXViI3dY7V9JmURU+on7jq7wHNXoxQTVcD50EF91syvyB wBJMzTmL25vrUIZzeKTFOcjVbOiXSrWYCie/zpOfuzDwFT6wXAVsEJUgI15tBINQ 3y8+1M3AVAhtXS3xisfEWzRqrOetn4inxc8Fy4c4ezt9RvVdE2iwgzkOtk7Qsd+M 3kAUHTauPx40oGSg3YfWYP4CCAmc3VJOOqh6dbLUvyrIOgNkq/QSvlbDXWro4LXJ ubfpWnRStDEurunSJC8LNaB1j5GHKTGhVjcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS3yES0IpQvQNukXGoCO36SZ5e7IzAfBgNVHSMEGDAWgBTQDgg5NoiwRzeHTs1j 3Yvnjl7y0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgxLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1ZTh0QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1 ZTh0QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODEvdDhoRXRDS1VMMERicEZ4cUFqdC1rbWVYdXlNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBBtkMDANBgkqhkiG9w0BAQsFAAOCAQEALHIQnLYHVkxoDFb7suURfrmWhme0 1D41PXIwedt3C4r19rhPqAD63KNmOJWq9WEBOtKLd+Se7zcFx0sjEIWypJFbjAE1 MwngcG2auJFE8r3AMW8YjuH9NakH7qmPB+YWXrfuqJrkZk1/IqhCeyPuq/6xY8EU 4aVCJy7E07Qk7Dwq7dXZKcNWcH6IFBcbh2HI63csl/QpDEJuN0anaxz3+9bxF/k7 WeYEhdI+CPU5WQzZRIA1KE4XaRk1Wedux18ejxNGfDeZD8sA0T3limHwksmqX6vq gxWjyKDIi1+D+3oY2NVD31AMizqCZ/SiQsjH6LbaJCcelDx5adur4sujMg== -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:49 2024 by rpki-client on console-ams.rpki-client.org