$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/cdOf_I9n6i_Ki2He_DKjB-WIafY.roa File: cdOf_I9n6i_Ki2He_DKjB-WIafY.roa (raw, json) Hash identifier: 8LeHaAR5khTOCgMMBKFjJN6OxWZnqBRX+ceDAOWFupY= Subject key identifier: 71:D3:9F:FC:8F:67:EA:2F:CA:8B:61:DE:FC:32:A3:07:E5:88:69:F6 Certificate issuer: /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D Certificate serial: 04 Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/cdOf_I9n6i_Ki2He_DKjB-WIafY.roa Signing time: Mon 28 Aug 2023 02:00:26 +0000 ROA not before: Mon 28 Aug 2023 02:00:26 +0000 ROA not after: Wed 21 Aug 2024 06:10:04 +0000 asID: 23784 IP address blocks: 124.150.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D Validity Not Before: Aug 28 02:00:26 2023 GMT Not After : Aug 21 06:10:04 2024 GMT Subject: CN=71D39FFC8F67EA2FCA8B61DEFC32A307E58869F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:04:14:22:f0:41:39:ca:82:58:eb:c7:3a: 45:77:2a:37:d3:22:f6:cd:f4:34:b3:ee:fb:a4:70: 22:32:58:20:a1:55:8f:65:e2:57:ba:1f:c8:f8:fb: 23:a2:39:55:4e:e6:24:56:6a:ee:a7:c6:26:9c:30: 61:22:ab:9a:bc:5e:cd:34:82:dd:09:f8:8e:85:4a: 46:c8:0c:45:20:38:91:d7:31:c2:47:bf:64:03:be: 71:1b:5d:34:3e:69:dc:6b:8e:be:ab:ef:40:4b:be: cc:98:de:d6:8b:af:36:88:64:ba:82:c3:3e:5d:ab: 23:bd:ef:84:7f:1e:46:88:ea:0b:bc:a7:a2:7a:cb: 95:56:20:d9:57:b1:a8:19:56:96:1c:4f:8f:5b:cd: 42:25:1c:65:96:43:58:29:80:23:79:1d:42:bd:fd: 1c:29:82:35:a4:6d:11:d2:b8:26:c4:7e:ad:16:03: 29:07:81:2c:45:4b:07:b2:7a:6e:99:ac:6b:86:2d: c2:fe:3a:42:09:7d:f6:26:4b:9c:29:a5:bd:a9:b9: 68:b3:87:fd:ff:ce:e4:a2:94:43:7f:94:e6:e3:65: ab:21:70:ca:9c:da:5f:dc:c9:8f:51:17:3c:89:22: f2:01:66:4d:4b:c3:ac:fc:82:34:0d:e5:82:05:df: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D3:9F:FC:8F:67:EA:2F:CA:8B:61:DE:FC:32:A3:07:E5:88:69:F6 X509v3 Authority Key Identifier: keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/cdOf_I9n6i_Ki2He_DKjB-WIafY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.150.152.0/21 Signature Algorithm: sha256WithRSAEncryption 61:32:3b:3e:a2:f6:04:06:03:ac:f5:46:49:97:03:7f:ce:a9: 29:91:95:d5:c2:65:b9:36:da:07:02:6d:24:a9:1c:21:9b:68: fc:94:dd:ef:56:e5:b6:ff:22:93:ba:6e:c1:0e:5c:da:79:33: 1c:bc:79:c7:4a:64:a7:7d:19:fe:66:a8:c4:06:84:76:27:66: 36:a5:7a:ba:cf:db:89:f7:16:87:7f:48:fd:12:79:0a:0b:cc: d9:51:a2:21:e5:ce:bd:46:f4:00:47:bf:07:e2:22:c6:b9:bd: 78:56:48:4c:18:0a:10:53:aa:3e:0b:20:c1:1a:5f:6a:ac:1a: fd:4d:6a:c4:13:ef:37:49:3e:37:d0:a7:f3:9a:c9:a0:9d:f0: bf:0d:a7:32:55:0a:f4:96:9f:36:7d:5f:f6:7b:8f:cd:fb:23: d6:64:80:4e:7d:81:5f:c0:00:1b:b5:4d:4c:c7:af:7f:ed:5b: ba:c6:32:cc:cf:9b:e1:82:2a:04:de:28:5a:6d:36:dc:4f:ee: 6b:07:f7:c4:6c:50:29:ec:ae:f0:38:8f:df:7b:0e:57:81:38: f5:2f:49:77:d7:3a:eb:76:08:17:c2:ba:5a:3a:2e:83:68:3f: d4:03:45:43:5c:0d:55:61:5f:61:9f:4e:12:c0:1c:4c:55:4c: aa:bd:7a:2f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCRDY5 MDAyRDBFOEI3RUQyQzNEMUQ1RDA3QUU2OTIyQzc0OTdGMDJEMB4XDTIzMDgyODAy MDAyNloXDTI0MDgyMTA2MTAwNFowMzExMC8GA1UEAxMoNzFEMzlGRkM4RjY3RUEy RkNBOEI2MURFRkMzMkEzMDdFNTg4NjlGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKwpBBQi8EE5yoJY68c6RXcqN9Mi9s30NLPu+6RwIjJYIKFVj2Xi V7ofyPj7I6I5VU7mJFZq7qfGJpwwYSKrmrxezTSC3Qn4joVKRsgMRSA4kdcxwke/ ZAO+cRtdND5p3GuOvqvvQEu+zJje1ouvNohkuoLDPl2rI73vhH8eRojqC7ynonrL lVYg2VexqBlWlhxPj1vNQiUcZZZDWCmAI3kdQr39HCmCNaRtEdK4JsR+rRYDKQeB LEVLB7J6bpmsa4Ytwv46Qgl99iZLnCmlvam5aLOH/f/O5KKUQ3+U5uNlqyFwypza X9zJj1EXPIki8gFmTUvDrPyCNA3lggXfuI0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRx05/8j2fqL8qLYd78MqMH5Yhp9jAfBgNVHSMEGDAWgBS9aQAtDot+0sPR1dB6 5pIsdJfwLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTc3L3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhTWDhDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhT WDhDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NzcvY2RPZl9JOW42aV9LaTJIZV9ES2pCLVdJYWZZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3yWmDANBgkqhkiG9w0BAQsFAAOCAQEAYTI7PqL2BAYDrPVGSZcDf86pKZGV 1cJluTbaBwJtJKkcIZto/JTd71bltv8ik7puwQ5c2nkzHLx5x0pkp30Z/maoxAaE didmNqV6us/bifcWh39I/RJ5CgvM2VGiIeXOvUb0AEe/B+Iixrm9eFZITBgKEFOq PgsgwRpfaqwa/U1qxBPvN0k+N9Cn85rJoJ3wvw2nMlUK9JafNn1f9nuPzfsj1mSA Tn2BX8AAG7VNTMevf+1busYyzM+b4YIqBN4oWm023E/uawf3xGxQKeyu8DiP33sO V4E49S9Jd9c663YIF8K6Wjoug2g/1ANFQ1wNVWFfYZ9OEsAcTFVMqr16Lw== -----END CERTIFICATE-----Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org