$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/ch36sL1CU_DJxJYjrlUt0V4vcDE.roa File: ch36sL1CU_DJxJYjrlUt0V4vcDE.roa (raw, json) Hash identifier: dtoHJftx1zJbZLcwEsiCpaeBHcoj3RUGY9ING2LAZiE= Subject key identifier: 72:1D:FA:B0:BD:42:53:F0:C9:C4:96:23:AE:55:2D:D1:5E:2F:70:31 Certificate issuer: /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840 Certificate serial: 23 Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/ch36sL1CU_DJxJYjrlUt0V4vcDE.roa Signing time: Sun 31 Mar 2024 01:32:27 +0000 ROA not before: Sun 31 Mar 2024 01:32:27 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 131954 IP address blocks: 103.212.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840 Validity Not Before: Mar 31 01:32:27 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=721DFAB0BD4253F0C9C49623AE552DD15E2F7031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:32:e3:c9:8d:f8:49:c7:3e:81:7d:bd:42:90: 98:3b:80:d8:1d:4e:a3:a3:79:8d:17:54:27:65:7f: b9:7d:3e:73:f4:f6:2b:64:bf:34:41:5a:c3:97:c8: 67:49:cc:9a:89:44:6a:d4:ef:75:d3:78:c5:59:6f: 4b:09:9f:0b:84:1a:33:fe:ff:50:97:41:22:0d:5c: b9:d6:6f:ef:7d:e0:02:22:b3:be:fc:17:58:f0:2a: f9:c5:b3:21:b8:1e:74:12:cb:39:d3:f0:6d:8b:29: 07:13:c7:32:0d:0e:e9:b1:d9:0c:fc:11:4f:a1:11: 5a:26:cb:7b:0d:6c:89:3e:fb:8a:8d:01:3a:ae:f7: 6c:89:26:aa:5c:64:1a:eb:78:d1:d0:83:c6:bc:5a: 93:f8:99:ad:b8:8e:33:cb:b0:c4:3e:c3:5d:be:99: bc:4d:a6:16:c8:32:a4:cf:ab:6c:28:06:50:4e:9f: a9:df:bf:ef:d2:2b:ff:c8:06:b9:33:7d:90:30:06: 78:19:c3:59:b6:e7:dd:9c:83:2c:aa:11:e4:cf:3b: 98:79:fa:08:3a:fa:9e:8f:38:32:91:51:a1:14:5d: b0:bd:9d:00:22:16:0c:64:ea:13:6d:ec:5a:28:88: 6b:88:ef:df:52:62:d9:06:35:39:2e:d4:31:72:06: 68:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:FA:B0:BD:42:53:F0:C9:C4:96:23:AE:55:2D:D1:5E:2F:70:31 X509v3 Authority Key Identifier: keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/ch36sL1CU_DJxJYjrlUt0V4vcDE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.76.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:1d:1d:de:fb:26:32:fb:ba:3a:07:80:71:a6:ed:33:8b:61: be:a1:60:79:31:87:0f:b2:e0:d5:be:88:13:eb:dc:90:60:d0: b7:e6:5f:a0:7b:86:6f:a4:38:d7:db:97:8e:af:16:84:93:19: 86:e3:ad:fb:07:9e:f8:d7:ef:f4:e7:9b:6f:15:08:db:73:89: ea:af:eb:71:8d:4a:fd:35:32:31:13:4c:4b:5d:05:b2:73:bd: 73:73:fc:5d:20:64:b8:de:c7:3c:5f:77:43:ba:bf:8a:58:ac: 71:df:e0:67:0c:aa:76:96:0a:53:5f:eb:d4:10:9b:eb:75:1d: df:4f:f4:aa:8d:c9:dd:cf:16:14:4d:fa:9d:ed:23:3d:c3:a7: ff:a2:6d:f1:81:1a:15:47:61:a7:de:0c:65:2d:a0:d1:bd:0d: a3:eb:bb:4a:ef:6b:a4:26:1c:80:0f:60:62:c5:2a:0e:02:b5: ff:bb:41:ee:c8:d3:90:45:20:44:7c:26:26:2d:3f:3a:0d:4c: 36:8a:c8:bd:f3:4d:72:26:b6:27:da:89:40:73:17:53:62:51: a0:95:36:27:c8:c7:86:e1:58:33:9e:3b:08:66:2d:5d:ff:f4: 6d:87:78:d0:cd:05:fe:b8:d1:58:2b:de:34:8c:9d:ee:e5:cd: 00:2a:da:45 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjc4 REQ2QjYxQ0I2NzNCQTQ0MjNDODFCRjYzQTYxREQ3MjRFODQwMB4XDTI0MDMzMTAx MzIyN1oXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzIxREZBQjBCRDQyNTNG MEM5QzQ5NjIzQUU1NTJERDE1RTJGNzAzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANcy48mN+EnHPoF9vUKQmDuA2B1Oo6N5jRdUJ2V/uX0+c/T2K2S/ NEFaw5fIZ0nMmolEatTvddN4xVlvSwmfC4QaM/7/UJdBIg1cudZv733gAiKzvvwX WPAq+cWzIbgedBLLOdPwbYspBxPHMg0O6bHZDPwRT6ERWibLew1siT77io0BOq73 bIkmqlxkGut40dCDxrxak/iZrbiOM8uwxD7DXb6ZvE2mFsgypM+rbCgGUE6fqd+/ 79Ir/8gGuTN9kDAGeBnDWbbn3ZyDLKoR5M87mHn6CDr6no84MpFRoRRdsL2dACIW DGTqE23sWiiIa4jv31Ji2QY1OS7UMXIGaJ0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRyHfqwvUJT8MnEliOuVS3RXi9wMTAfBgNVHSMEGDAWgBQWeN1rYctnO6RCPIG/ Y6Yd1yToQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTU0L0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRjazZFQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRj azZFQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NTQvY2gzNnNMMUNVX0RKeEpZanJsVXQwVjR2Y0RFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfUTDANBgkqhkiG9w0BAQsFAAOCAQEALh0d3vsmMvu6OgeAcabtM4thvqFg eTGHD7Lg1b6IE+vckGDQt+ZfoHuGb6Q419uXjq8WhJMZhuOt+wee+Nfv9OebbxUI 23OJ6q/rcY1K/TUyMRNMS10FsnO9c3P8XSBkuN7HPF93Q7q/iliscd/gZwyqdpYK U1/r1BCb63Ud30/0qo3J3c8WFE36ne0jPcOn/6Jt8YEaFUdhp94MZS2g0b0No+u7 Su9rpCYcgA9gYsUqDgK1/7tB7sjTkEUgRHwmJi0/Og1MNorIvfNNcia2J9qJQHMX U2JRoJU2J8jHhuFYM547CGYtXf/0bYd40M0F/rjRWCveNIyd7uXNACraRQ== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:52 2024 by rpki-client on console-ams.rpki-client.org