$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/RpbhK_zdBw4YO1yPhY-oTR4q7ss.roa File: RpbhK_zdBw4YO1yPhY-oTR4q7ss.roa (raw, json) Hash identifier: ixKg3Zjfpwi1+MC7v7Y2YfF+jJdXklrOIv1Y3nbos0Q= Subject key identifier: 46:96:E1:2B:FC:DD:07:0E:18:3B:5C:8F:85:8F:A8:4D:1E:2A:EE:CB Certificate issuer: /CN=87EE394CC8B1651B758F388F73A88E68BD27222F Certificate serial: 38 Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/RpbhK_zdBw4YO1yPhY-oTR4q7ss.roa Signing time: Thu 28 Mar 2024 08:33:50 +0000 ROA not before: Thu 28 Mar 2024 08:33:50 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 23818 IP address blocks: 122.200.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F Validity Not Before: Mar 28 08:33:50 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=4696E12BFCDD070E183B5C8F858FA84D1E2AEECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:89:55:82:d0:34:38:76:52:d5:3a:72:b5: d1:1b:a9:ab:64:0e:fa:39:a9:10:bc:7e:a4:a7:d0: d1:ca:f6:75:c6:30:1b:93:aa:e8:bf:65:40:89:8e: 09:5a:ef:e0:96:53:94:9a:27:a6:e8:11:ed:6e:a9: 5f:17:b2:fb:d8:c2:dd:a8:72:46:16:4a:9d:fc:66: 25:b9:1c:83:04:a4:c1:c5:e2:ef:7a:43:f1:e6:0f: e4:64:7d:78:20:f3:c8:1b:51:9b:d5:2a:cb:1c:95: 7f:28:40:7a:00:92:37:0a:5e:e7:28:8b:75:7b:0b: 69:61:26:71:5d:08:35:0b:0b:55:04:8c:76:1a:83: e3:15:08:c7:b5:8f:8f:d2:d6:d8:d0:af:b8:8e:f2: 75:0a:40:c7:d8:a8:b7:16:9e:87:49:eb:94:a0:f0: c8:72:34:92:42:0a:da:81:73:53:ec:b8:24:2c:be: 5a:73:26:27:16:9f:95:9c:23:07:ab:f0:b9:98:4f: 10:25:46:cb:23:e9:14:be:4c:56:5a:9e:24:50:56: 43:55:c0:a7:9c:5b:d6:b3:1c:03:79:87:60:00:f7: 12:3a:9c:e7:19:62:e2:76:c6:3e:2c:cd:bc:e4:3d: 24:9a:98:9e:c7:e4:05:97:d1:bc:69:6a:ec:b0:4a: 04:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:96:E1:2B:FC:DD:07:0E:18:3B:5C:8F:85:8F:A8:4D:1E:2A:EE:CB X509v3 Authority Key Identifier: keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/RpbhK_zdBw4YO1yPhY-oTR4q7ss.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.200.128.0/22 Signature Algorithm: sha256WithRSAEncryption 70:80:d7:bc:c6:0d:e0:f9:cb:03:24:50:32:8a:cb:b7:95:35: 5b:8a:0c:56:60:c6:b1:40:78:c6:8b:3d:de:56:cf:6f:72:12: 7d:8b:19:7e:0d:ad:d7:5d:50:af:43:dd:0d:f8:60:2d:ba:4f: ab:74:42:fc:0b:02:00:7f:69:5c:9b:9d:c3:31:08:ca:0e:83: 83:82:b6:34:d1:2e:21:c5:b1:75:8d:cd:27:ea:bf:bc:4e:a8: 37:b6:4f:25:75:c4:13:f4:15:22:6c:77:59:8a:52:fa:f0:8b: f3:ec:5d:77:be:b4:37:8e:ad:c9:dd:b7:ec:d5:9c:32:0c:f5: 49:35:b0:dc:74:08:7d:2c:b3:33:85:66:6a:b8:d7:bc:e2:ce: 8e:a5:39:50:0d:0e:a6:6e:83:f3:a1:60:76:08:b5:ef:b5:0b: 77:6d:90:40:69:7a:79:ab:14:21:23:9d:4d:45:fa:97:81:60: cb:8a:ab:c6:c4:8d:69:96:12:d7:36:62:f5:2f:fc:3c:86:25: 10:c9:fd:54:8a:25:40:d3:96:84:4b:45:ca:a0:3e:e1:99:48: 61:fa:11:00:98:2f:82:bc:5b:1b:52:d4:66:a3:b9:5b:ed:ae: b9:4f:c5:1d:55:c3:b3:f5:2e:5c:3c:cc:44:91:b2:ef:65:d1: 77:87:8e:54 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0VF Mzk0Q0M4QjE2NTFCNzU4RjM4OEY3M0E4OEU2OEJEMjcyMjJGMB4XDTI0MDMyODA4 MzM1MFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDY5NkUxMkJGQ0REMDcw RTE4M0I1QzhGODU4RkE4NEQxRTJBRUVDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL2viVWC0DQ4dlLVOnK10Rupq2QO+jmpELx+pKfQ0cr2dcYwG5Oq 6L9lQImOCVrv4JZTlJonpugR7W6pXxey+9jC3ahyRhZKnfxmJbkcgwSkwcXi73pD 8eYP5GR9eCDzyBtRm9UqyxyVfyhAegCSNwpe5yiLdXsLaWEmcV0INQsLVQSMdhqD 4xUIx7WPj9LW2NCvuI7ydQpAx9iotxaeh0nrlKDwyHI0kkIK2oFzU+y4JCy+WnMm JxaflZwjB6vwuZhPECVGyyPpFL5MVlqeJFBWQ1XAp5xb1rMcA3mHYAD3Ejqc5xli 4nbGPizNvOQ9JJqYnsfkBZfRvGlq7LBKBIUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRGluEr/N0HDhg7XI+Fj6hNHiruyzAfBgNVHSMEGDAWgBSH7jlMyLFlG3WPOI9z qI5ovSciLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgzL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUwwbklpOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUww bklpOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODMvUnBiaEtfemRCdzRZTzF5UGhZLW9UUjRxN3NzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnrIgDANBgkqhkiG9w0BAQsFAAOCAQEAcIDXvMYN4PnLAyRQMorLt5U1W4oM VmDGsUB4xos93lbPb3ISfYsZfg2t111Qr0PdDfhgLbpPq3RC/AsCAH9pXJudwzEI yg6Dg4K2NNEuIcWxdY3NJ+q/vE6oN7ZPJXXEE/QVImx3WYpS+vCL8+xdd760N46t yd237NWcMgz1STWw3HQIfSyzM4VmarjXvOLOjqU5UA0Opm6D86Fgdgi177ULd22Q QGl6easUISOdTUX6l4Fgy4qrxsSNaZYS1zZi9S/8PIYlEMn9VIolQNOWhEtFyqA+ 4ZlIYfoRAJgvgrxbG1LUZqO5W+2uuU/FHVXDs/UuXDzMRJGy72XRd4eOVA== -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org