$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/EFFbleVgO5TTDyXEzfjf6CEsxP4.roa File: EFFbleVgO5TTDyXEzfjf6CEsxP4.roa (raw, json) Hash identifier: IWMts76kP6A1s6q8/NO1tMMglpyAQJXLsj8r1rR4o6o= Subject key identifier: 10:51:5B:95:E5:60:3B:94:D3:0F:25:C4:CD:F8:DF:E8:21:2C:C4:FE Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Certificate serial: 1D Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/EFFbleVgO5TTDyXEzfjf6CEsxP4.roa Signing time: Sun 31 Mar 2024 01:33:03 +0000 ROA not before: Sun 31 Mar 2024 01:33:03 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 59127 IP address blocks: 113.213.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Validity Not Before: Mar 31 01:33:03 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=10515B95E5603B94D30F25C4CDF8DFE8212CC4FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:f3:10:58:e3:68:79:a8:46:97:db:fb:8b: ef:62:fe:c7:5e:ba:f2:31:86:f7:60:32:c3:08:f4: 86:8a:33:f2:51:05:be:15:ec:6c:18:1c:0d:de:66: 7f:9a:56:b0:02:26:39:76:1c:68:9f:bf:19:15:75: c3:df:b1:23:b8:9b:2a:20:73:1c:a0:48:32:ab:ff: 4b:75:2d:5b:93:53:f9:c8:7e:45:12:75:72:c4:08: 31:ae:7a:50:9b:32:13:9b:a8:3c:17:c2:1b:52:a1: 5b:00:94:e4:09:cc:4a:96:c4:e4:f6:29:77:fb:da: f3:3b:18:b9:19:ac:ed:65:7d:cf:c1:d2:76:cd:9e: 72:90:f3:6d:a4:98:4f:42:a5:b5:d8:d8:56:b7:e0: 79:4e:90:10:4e:45:8c:5b:a1:10:16:f6:86:69:ce: d6:c6:fe:80:fe:8b:93:fb:80:9c:54:cf:9f:78:4c: 30:85:99:e1:a5:16:62:e2:4a:89:fc:4c:f1:9b:f6: 28:57:e9:25:27:0a:b7:a9:ed:ca:0f:36:73:60:2f: 6e:ee:6a:01:e2:b0:d8:55:1b:2d:cd:39:e4:40:aa: 3e:47:96:ab:be:9e:9a:20:6e:45:a6:d0:3b:45:fa: 9a:0b:25:04:4d:f6:15:c3:6f:c3:63:a7:19:44:ca: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:51:5B:95:E5:60:3B:94:D3:0F:25:C4:CD:F8:DF:E8:21:2C:C4:FE X509v3 Authority Key Identifier: keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/EFFbleVgO5TTDyXEzfjf6CEsxP4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.213.224.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:3b:ea:bd:9a:6c:2a:b5:af:62:68:75:81:de:ca:11:e6:4c: 61:be:bb:9b:cc:24:2e:3d:93:07:46:65:6b:1b:34:81:1f:ee: c8:18:37:2a:5f:81:2e:e5:e7:39:b5:6f:a0:d4:e6:08:5b:29: 0e:fc:4e:91:af:61:fe:13:94:1e:42:c5:32:ad:fa:a3:21:09: 4f:ef:bb:10:f0:94:0d:b5:2a:36:a8:66:d1:ef:4f:d7:cd:3d: 94:21:ce:cd:29:01:55:e4:a2:4f:4f:90:b4:66:fb:2e:f3:21: 92:c7:ca:ab:47:42:32:69:56:41:42:3a:06:d5:88:9c:9f:8f: 5b:c4:10:03:86:9e:5c:e6:b9:be:fb:bb:1f:a4:0e:ca:b0:f3: 57:b9:bf:cb:59:71:d6:a5:0d:1b:d2:60:3d:2b:4a:83:11:04: 5c:13:a2:31:19:87:cc:88:c9:e3:33:a2:eb:40:e7:1c:6d:e7: 3d:83:d6:0e:38:22:f8:dc:0d:42:11:46:d1:1e:a0:e1:d6:10: 5b:b8:ee:f8:9e:c5:83:3a:8e:eb:5c:86:ef:b8:a3:d9:ac:99: 68:74:cb:65:da:24:72:03:c8:d4:cb:f8:db:d4:75:c5:03:c4: 62:ff:de:df:66:71:af:b9:be:76:bc:af:2e:2b:2e:f6:ab:a0: a6:d0:b6:84 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTI0MDMzMTAx MzMwM1oXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTA1MTVCOTVFNTYwM0I5 NEQzMEYyNUM0Q0RGOERGRTgyMTJDQzRGRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMMb8xBY42h5qEaX2/uL72L+x1668jGG92Aywwj0hooz8lEFvhXs bBgcDd5mf5pWsAImOXYcaJ+/GRV1w9+xI7ibKiBzHKBIMqv/S3UtW5NT+ch+RRJ1 csQIMa56UJsyE5uoPBfCG1KhWwCU5AnMSpbE5PYpd/va8zsYuRms7WV9z8HSds2e cpDzbaSYT0KltdjYVrfgeU6QEE5FjFuhEBb2hmnO1sb+gP6Lk/uAnFTPn3hMMIWZ 4aUWYuJKifxM8Zv2KFfpJScKt6ntyg82c2Avbu5qAeKw2FUbLc055ECqPkeWq76e miBuRabQO0X6mgslBE32FcNvw2OnGUTKj1cCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQQUVuV5WA7lNMPJcTN+N/oISzE/jAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40 am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODIvRUZGYmxlVmdPNVRURHlYRXpmamY2Q0VzeFA0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHHV4DANBgkqhkiG9w0BAQsFAAOCAQEAKjvqvZpsKrWvYmh1gd7KEeZMYb67 m8wkLj2TB0Zlaxs0gR/uyBg3Kl+BLuXnObVvoNTmCFspDvxOka9h/hOUHkLFMq36 oyEJT++7EPCUDbUqNqhm0e9P1809lCHOzSkBVeSiT0+QtGb7LvMhksfKq0dCMmlW QUI6BtWInJ+PW8QQA4aeXOa5vvu7H6QOyrDzV7m/y1lx1qUNG9JgPStKgxEEXBOi MRmHzIjJ4zOi60DnHG3nPYPWDjgi+NwNQhFG0R6g4dYQW7ju+J7FgzqO61yG77ij 2ayZaHTLZdokcgPI1Mv429R1xQPEYv/e32Zxr7m+dryvLisu9qugptC2hA== -----END CERTIFICATE-----Generated at Fri Nov 22 14:21:32 2024 by rpki-client on console-ams.rpki-client.org