$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/WMKJo8AmUyvFK9cK2fuU3VjOwoI.roa File: WMKJo8AmUyvFK9cK2fuU3VjOwoI.roa (raw, json) Hash identifier: O5ymqBwRtrnHPgr8HY8PEnl7CcIEUPqgulqyCXh7Yeo= Subject key identifier: 58:C2:89:A3:C0:26:53:2B:C5:2B:D7:0A:D9:FB:94:DD:58:CE:C2:82 Certificate issuer: /CN=87EE394CC8B1651B758F388F73A88E68BD27222F Certificate serial: 3B Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/WMKJo8AmUyvFK9cK2fuU3VjOwoI.roa Signing time: Thu 28 Mar 2024 08:35:41 +0000 ROA not before: Thu 28 Mar 2024 08:35:41 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2519 IP address blocks: 203.79.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F Validity Not Before: Mar 28 08:35:41 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=58C289A3C026532BC52BD70AD9FB94DD58CEC282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:f8:ae:87:6e:b6:dd:e1:29:21:d7:ab:00: c5:0b:59:02:91:ab:8b:ab:63:34:f1:1d:ef:4b:19: c9:19:b2:3e:31:38:28:e0:57:58:f7:2f:59:c5:3d: f2:bf:90:af:31:93:c4:16:05:3f:f7:20:ff:0f:a8: 82:93:05:1f:fa:ed:5d:dc:fc:61:2d:01:73:03:39: 8c:19:4f:46:6e:5b:c5:49:4e:8e:79:34:10:e3:6e: 40:f9:05:6e:d8:cb:11:b5:77:26:e7:22:71:45:fb: c9:cb:f6:fd:30:41:3a:9a:83:a7:a5:18:aa:da:c4: 58:b1:f0:57:9e:42:9f:0a:b2:bd:74:0a:00:b2:ea: 0d:34:33:e3:97:99:5e:d9:36:f0:11:e8:2f:eb:3c: c8:b7:12:c4:b2:d2:8e:50:1c:0e:b3:5c:c3:25:46: 98:93:de:b4:61:38:cf:7e:5b:49:a7:a1:1b:9c:3d: cf:fc:2e:80:b1:6a:a4:14:04:2f:4d:e4:8a:96:43: e3:ff:98:02:cb:60:60:25:f9:59:27:d0:8b:86:3c: 87:6e:6d:b5:45:bc:18:92:d4:0e:35:ce:a1:4a:53: 77:78:03:c9:e6:00:78:92:c2:27:3b:32:15:8e:d6: 92:8a:2f:78:9d:5f:0b:cc:cf:e8:94:74:9f:d8:65: 34:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C2:89:A3:C0:26:53:2B:C5:2B:D7:0A:D9:FB:94:DD:58:CE:C2:82 X509v3 Authority Key Identifier: keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/WMKJo8AmUyvFK9cK2fuU3VjOwoI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.79.56.0/22 Signature Algorithm: sha256WithRSAEncryption 39:57:b2:0f:35:68:79:7f:b8:6d:27:39:2a:d7:ad:66:6d:32: fc:5b:a7:df:b9:f2:b6:f8:b4:09:53:a4:02:19:ca:0c:0c:f8: e9:10:0b:b8:05:4a:ce:dc:23:3c:92:d1:c1:ac:08:b3:26:af: e7:d6:c8:dd:3f:b8:75:e7:75:6b:f3:15:4c:18:3e:eb:2d:68: e8:2a:14:ec:63:16:c2:a0:ad:e9:47:84:c2:ec:1a:a6:88:f3: 93:bb:52:1e:fd:62:91:62:61:52:68:f3:08:25:2e:7c:fd:af: 3d:a0:80:7c:83:d7:27:ea:84:8d:47:c5:f7:9c:af:17:a9:c0: a8:f2:6c:7e:97:70:e5:df:c2:d7:e1:17:e3:2d:ad:23:99:a3: bc:7b:a9:65:01:8a:da:b1:29:22:0b:ef:2d:e3:86:6a:9d:3b: 9a:d2:52:a1:f1:fe:f5:47:58:81:34:40:cc:30:79:62:32:3f: 5b:a9:2b:fc:93:7d:f6:ed:08:4c:50:e5:10:13:20:7b:88:c7: 94:7b:f7:fb:95:4b:82:6e:73:53:85:06:2c:15:c8:d4:f7:b9: ec:32:d2:a1:24:69:b1:91:16:b4:d3:c6:40:d8:2c:ba:13:bc: a0:7b:11:ce:f5:aa:26:93:97:32:8d:01:13:fb:c3:43:43:d7: 73:dd:a1:d1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0VF Mzk0Q0M4QjE2NTFCNzU4RjM4OEY3M0E4OEU2OEJEMjcyMjJGMB4XDTI0MDMyODA4 MzU0MVoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNThDMjg5QTNDMDI2NTMy QkM1MkJENzBBRDlGQjk0REQ1OENFQzI4MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMmb+K6Hbrbd4Skh16sAxQtZApGri6tjNPEd70sZyRmyPjE4KOBX WPcvWcU98r+QrzGTxBYFP/cg/w+ogpMFH/rtXdz8YS0BcwM5jBlPRm5bxUlOjnk0 EONuQPkFbtjLEbV3JucicUX7ycv2/TBBOpqDp6UYqtrEWLHwV55CnwqyvXQKALLq DTQz45eZXtk28BHoL+s8yLcSxLLSjlAcDrNcwyVGmJPetGE4z35bSaehG5w9z/wu gLFqpBQEL03kipZD4/+YAstgYCX5WSfQi4Y8h25ttUW8GJLUDjXOoUpTd3gDyeYA eJLCJzsyFY7WkooveJ1fC8zP6JR0n9hlNAUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRYwomjwCZTK8Ur1wrZ+5TdWM7CgjAfBgNVHSMEGDAWgBSH7jlMyLFlG3WPOI9z qI5ovSciLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgzL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUwwbklpOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUww bklpOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODMvV01LSm84QW1VeXZGSzljSzJmdVUzVmpPd29JLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAstPODANBgkqhkiG9w0BAQsFAAOCAQEAOVeyDzVoeX+4bSc5KtetZm0y/Fun 37nytvi0CVOkAhnKDAz46RALuAVKztwjPJLRwawIsyav59bI3T+4ded1a/MVTBg+ 6y1o6CoU7GMWwqCt6UeEwuwapojzk7tSHv1ikWJhUmjzCCUufP2vPaCAfIPXJ+qE jUfF95yvF6nAqPJsfpdw5d/C1+EX4y2tI5mjvHupZQGK2rEpIgvvLeOGap07mtJS ofH+9UdYgTRAzDB5YjI/W6kr/JN99u0ITFDlEBMge4jHlHv3+5VLgm5zU4UGLBXI 1Pe57DLSoSRpsZEWtNPGQNgsuhO8oHsRzvWqJpOXMo0BE/vDQ0PXc92h0Q== -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:13 2024 by rpki-client on console-ams.rpki-client.org