$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/1l3naGgIBQD7FaFoAoKG6_oZ0rA.roa File: 1l3naGgIBQD7FaFoAoKG6_oZ0rA.roa (raw, json) Hash identifier: +ra9TG5rIqBl24Iw12oXmv3a+tNvejf0N5isVU3yKf0= Subject key identifier: D6:5D:E7:68:68:08:05:00:FB:15:A1:68:02:82:86:EB:FA:19:D2:B0 Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB Certificate serial: 5D Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/1l3naGgIBQD7FaFoAoKG6_oZ0rA.roa Signing time: Thu 29 Feb 2024 01:31:13 +0000 ROA not before: Thu 29 Feb 2024 01:31:13 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 37892 IP address blocks: 124.247.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB Validity Not Before: Feb 29 01:31:13 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=D65DE76868080500FB15A168028286EBFA19D2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:74:45:bf:b4:07:f8:9a:05:bf:b0:1c:0b: 61:84:30:d8:f4:b7:e8:4b:20:b8:51:c0:28:7b:93: ac:8a:85:4b:03:91:7d:63:7e:f8:f2:a2:46:30:b2: 5c:d5:b6:32:04:d1:a3:4f:87:65:53:d9:6d:60:38: 1f:eb:83:37:46:4c:03:64:31:51:dd:c5:45:55:b6: e3:6f:1c:c1:4d:74:85:de:5a:1a:60:05:d6:26:f0: d3:ef:8e:77:c4:21:03:ef:d5:c5:75:c5:58:19:ce: 94:45:63:ac:3c:62:7b:22:89:78:d0:f3:a2:b9:e4: f3:50:92:8a:2d:e8:a6:e6:72:36:d5:97:be:e9:6c: 69:f3:e6:93:f7:2f:27:83:42:b4:78:f0:0a:b1:23: 3f:eb:7e:16:0a:da:00:2d:55:30:c8:10:d2:cd:79: 39:be:2b:ff:c6:fc:a6:2c:92:ec:1e:23:a5:30:d7: 62:ad:cc:15:c5:a0:6c:45:fc:e9:d3:2a:da:45:cf: 4b:e4:58:b8:93:bf:fb:6d:a5:39:4c:a6:53:a0:d0: 47:96:00:dd:12:d2:c4:b2:6c:46:77:be:f9:d8:ad: 2d:8b:a6:67:d8:4a:bb:3b:e0:f7:30:38:6c:e5:99: d6:cc:05:7e:fa:1f:fa:5e:93:4d:36:96:3f:3e:88: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5D:E7:68:68:08:05:00:FB:15:A1:68:02:82:86:EB:FA:19:D2:B0 X509v3 Authority Key Identifier: keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/1l3naGgIBQD7FaFoAoKG6_oZ0rA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.247.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1a:38:71:f4:bb:6d:e7:fe:1c:79:a5:0a:4c:aa:e0:1d:48:69: 8f:46:a6:3e:19:82:70:d3:f9:9f:71:44:f4:29:30:54:ab:e2: 51:e1:ba:39:93:1e:db:3a:5c:13:7b:ff:7e:bf:be:04:ff:17: d6:82:32:03:d8:7b:a8:ce:ae:8d:54:d1:ce:c0:a1:5b:71:9b: 48:94:4d:17:f3:31:c4:12:e1:58:ff:8d:ac:c9:a6:8a:cd:aa: 65:86:55:49:32:a7:0f:f2:b8:ce:09:2b:d0:77:3a:29:c8:3a: 18:dc:ed:01:fc:5d:f7:34:dd:82:00:51:f4:69:a3:76:58:92: 7e:2e:78:03:42:4d:9b:67:90:e0:77:b7:d2:5c:77:d1:4e:9b: 67:dc:52:8f:37:be:35:70:93:0f:75:75:ec:90:94:5f:88:b8: fb:30:fe:df:60:4d:51:fe:02:5c:16:2e:05:64:38:d6:f3:b7: 90:f0:1e:fd:65:5a:76:90:44:eb:3a:a5:93:75:68:bc:a7:51: fb:10:bd:56:2b:e9:33:e3:f9:5f:ee:d8:6d:6b:ec:12:24:73: ab:47:3f:80:f1:83:62:6b:d0:fa:4d:7c:27:ba:de:e9:a3:f7: 43:ee:09:2e:24:f5:0f:73:a0:af:e3:03:83:01:5b:19:22:be: ec:da:3c:e5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQTRD RkU5MDlDQTU4MzA3RTdDQTg3MzVBRjI0NUQ3MThEOTlGN0ZCMB4XDTI0MDIyOTAx MzExM1oXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoRDY1REU3Njg2ODA4MDUw MEZCMTVBMTY4MDI4Mjg2RUJGQTE5RDJCMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM79dEW/tAf4mgW/sBwLYYQw2PS36EsguFHAKHuTrIqFSwORfWN+ +PKiRjCyXNW2MgTRo0+HZVPZbWA4H+uDN0ZMA2QxUd3FRVW2428cwU10hd5aGmAF 1ibw0++Od8QhA+/VxXXFWBnOlEVjrDxieyKJeNDzornk81CSii3opuZyNtWXvuls afPmk/cvJ4NCtHjwCrEjP+t+FgraAC1VMMgQ0s15Ob4r/8b8piyS7B4jpTDXYq3M FcWgbEX86dMq2kXPS+RYuJO/+22lOUymU6DQR5YA3RLSxLJsRne++ditLYumZ9hK uzvg9zA4bOWZ1swFfvof+l6TTTaWPz6IS5ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTWXedoaAgFAPsVoWgCgobr+hnSsDAfBgNVHSMEGDAWgBQqTP6QnKWDB+fKhzWv JF1xjZn3+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTM0L0trei1rSnlsZ3dmbnlvYzFyeVJkY1kyWjlfcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0trei1rSnlsZ3dmbnlvYzFyeVJkY1ky Wjlfcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MzQvMWwzbmFHZ0lCUUQ3RmFGb0FvS0c2X29aMHJBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB3z3ADANBgkqhkiG9w0BAQsFAAOCAQEAGjhx9Ltt5/4ceaUKTKrgHUhpj0am PhmCcNP5n3FE9CkwVKviUeG6OZMe2zpcE3v/fr++BP8X1oIyA9h7qM6ujVTRzsCh W3GbSJRNF/MxxBLhWP+NrMmmis2qZYZVSTKnD/K4zgkr0Hc6Kcg6GNztAfxd9zTd ggBR9GmjdliSfi54A0JNm2eQ4He30lx30U6bZ9xSjze+NXCTD3V17JCUX4i4+zD+ 32BNUf4CXBYuBWQ41vO3kPAe/WVadpBE6zqlk3VovKdR+xC9VivpM+P5X+7YbWvs EiRzq0c/gPGDYmvQ+k18J7re6aP3Q+4JLiT1D3Ogr+MDgwFbGSK+7No85Q== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:50 2024 by rpki-client on console-ams.rpki-client.org