$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/964/sR-6SF1eqLDvuas-W0nLY54Jr-o.roa File: sR-6SF1eqLDvuas-W0nLY54Jr-o.roa (raw, json) Hash identifier: Ut+Ldih25pzq1DxAG+HkR25zZBGVJHLpB0H96XGPfMA= Subject key identifier: B1:1F:BA:48:5D:5E:A8:B0:EF:B9:AB:3E:5B:49:CB:63:9E:09:AF:EA Certificate issuer: /CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D Certificate serial: 37 Authority key identifier: 66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/sR-6SF1eqLDvuas-W0nLY54Jr-o.roa Signing time: Thu 29 Feb 2024 01:31:27 +0000 ROA not before: Thu 29 Feb 2024 01:31:27 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 3491 IP address blocks: 203.170.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D Validity Not Before: Feb 29 01:31:27 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=B11FBA485D5EA8B0EFB9AB3E5B49CB639E09AFEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:af:92:dd:40:25:68:d6:c5:8e:77:16:e1: 54:38:d6:d7:f6:69:e0:ac:58:f3:7c:04:09:61:2e: 0c:91:65:86:c9:ef:51:ee:1a:10:ae:6b:4c:62:ae: b1:fc:f6:a0:59:0c:e3:ca:89:d8:9e:24:3d:32:ee: fd:69:2e:68:32:37:4f:47:60:9d:88:af:e5:40:9d: 50:2d:32:ac:86:e4:2d:3b:fd:10:05:00:03:8e:ec: 82:4e:e6:95:77:f1:f1:b2:56:0b:c6:ad:8a:38:69: be:95:72:33:07:9c:21:36:05:5d:6a:ac:5e:db:71: 3f:fa:bc:22:62:ae:7c:b5:5a:81:85:ef:6b:fc:27: a4:30:6c:f6:41:0c:63:3e:8e:b6:a7:5a:6b:69:f8: 07:a5:e0:a3:9d:a1:1f:52:ce:72:ca:79:cf:d4:51: 2c:e2:59:9d:95:11:15:1b:60:bd:d0:18:97:d7:b6: 3b:01:6a:09:46:d9:e0:1e:d9:1d:9b:be:ba:50:17: 7b:b9:ae:24:7c:7f:66:ae:2b:92:f2:d4:e4:29:b7: 06:4a:55:c8:4b:29:29:7b:28:13:65:de:c8:2c:b5: a5:10:0c:88:6f:8d:23:14:0e:05:0d:01:84:91:88: 57:88:d4:f3:e3:8a:c1:96:af:aa:e3:a5:11:f0:c7: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1F:BA:48:5D:5E:A8:B0:EF:B9:AB:3E:5B:49:CB:63:9E:09:AF:EA X509v3 Authority Key Identifier: keyid:66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/sR-6SF1eqLDvuas-W0nLY54Jr-o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.170.52.0/22 Signature Algorithm: sha256WithRSAEncryption aa:4f:d5:e3:1f:c6:92:af:9b:1b:4a:1b:a7:93:be:c3:0b:ee: 6f:ff:af:20:da:cb:6b:b6:97:af:0f:02:0f:63:10:d5:48:85: 3e:d2:af:f9:9e:0a:b7:dd:70:41:3d:0a:5f:6e:37:6f:76:47: 5c:3c:3f:43:2d:34:77:63:78:1d:69:b2:60:0c:bb:f4:3f:32: 66:6a:7c:af:97:65:fe:9c:bd:e5:bb:2c:43:42:9d:67:47:d3: 30:d2:29:4e:ed:93:12:a4:f2:a1:84:42:34:16:26:f5:9a:04: 78:da:56:a9:02:f0:a0:07:8f:81:18:76:e2:9b:93:e3:ab:73: ce:5e:9b:16:55:c6:a9:7d:9c:00:ff:59:1c:c8:35:ba:f6:c3: 75:5a:cb:29:dc:2b:9b:54:8b:61:57:4f:d4:c3:a3:1e:9c:cf: 18:ad:1e:7d:50:f4:91:9c:54:4f:7f:8a:60:c3:02:31:8a:e0: 04:eb:fb:1d:3a:cb:1b:3e:b5:86:23:10:24:fe:f5:10:83:17: 26:e5:49:46:73:b2:5c:68:d9:f0:4b:cc:0b:52:7e:4d:f5:7b: 50:77:0c:58:35:7f:5a:a2:17:f8:26:a6:83:5d:dd:4d:f1:ee: 4d:14:84:e7:12:d0:f9:98:cd:3b:d1:a2:01:c2:59:98:9a:95: b7:5a:3e:5d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Njc2 RjY5MTQwNjM1Q0Y0QUQyQTNBOUNGNUVGMjVCQUREMkRDNzJEMB4XDTI0MDIyOTAx MzEyN1oXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoQjExRkJBNDg1RDVFQThC MEVGQjlBQjNFNUI0OUNCNjM5RTA5QUZFQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL64r5LdQCVo1sWOdxbhVDjW1/Zp4KxY83wECWEuDJFlhsnvUe4a EK5rTGKusfz2oFkM48qJ2J4kPTLu/WkuaDI3T0dgnYiv5UCdUC0yrIbkLTv9EAUA A47sgk7mlXfx8bJWC8atijhpvpVyMwecITYFXWqsXttxP/q8ImKufLVagYXva/wn pDBs9kEMYz6Otqdaa2n4B6Xgo52hH1LOcsp5z9RRLOJZnZURFRtgvdAYl9e2OwFq CUbZ4B7ZHZu+ulAXe7muJHx/Zq4rkvLU5Cm3BkpVyEspKXsoE2XeyCy1pRAMiG+N IxQOBQ0BhJGIV4jU8+OKwZavquOlEfDHWpcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSxH7pIXV6osO+5qz5bSctjngmv6jAfBgNVHSMEGDAWgBRmdvaRQGNc9K0qOpz1 7yW63S3HLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTY0L1puYjJrVUJqWFBTdEtqcWM5ZThsdXQwdHh5MC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1puYjJrVUJqWFBTdEtqcWM5ZThsdXQw dHh5MC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NjQvc1ItNlNGMWVxTER2dWFzLVcwbkxZNTRKci1vLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsuqNDANBgkqhkiG9w0BAQsFAAOCAQEAqk/V4x/Gkq+bG0obp5O+wwvub/+v INrLa7aXrw8CD2MQ1UiFPtKv+Z4Kt91wQT0KX243b3ZHXDw/Qy00d2N4HWmyYAy7 9D8yZmp8r5dl/py95bssQ0KdZ0fTMNIpTu2TEqTyoYRCNBYm9ZoEeNpWqQLwoAeP gRh24puT46tzzl6bFlXGqX2cAP9ZHMg1uvbDdVrLKdwrm1SLYVdP1MOjHpzPGK0e fVD0kZxUT3+KYMMCMYrgBOv7HTrLGz61hiMQJP71EIMXJuVJRnOyXGjZ8EvMC1J+ TfV7UHcMWDV/WqIX+Camg13dTfHuTRSE5xLQ+ZjNO9GiAcJZmJqVt1o+XQ== -----END CERTIFICATE-----Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org