$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/2hMgC-01o7HePNVEi_s8eAl7Byc.roa File: 2hMgC-01o7HePNVEi_s8eAl7Byc.roa (raw, json) Hash identifier: JqdE8H4yBItigsOdEGQ6SqkkVknHE1vHN4zQCkO4zYk= Subject key identifier: DA:13:20:0B:ED:35:A3:B1:DE:3C:D5:44:8B:FB:3C:78:09:7B:07:27 Certificate issuer: /CN=B7187C4D4BDDD435728B412888E0655334208E0B Certificate serial: 49 Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/2hMgC-01o7HePNVEi_s8eAl7Byc.roa Signing time: Wed 31 Jul 2024 01:28:37 +0000 ROA not before: Wed 31 Jul 2024 01:28:37 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 17707 IP address blocks: 218.223.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B Validity Not Before: Jul 31 01:28:37 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=DA13200BED35A3B1DE3CD5448BFB3C78097B0727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:47:3b:a4:29:39:93:75:be:ad:e1:43:c3: 49:56:9b:33:17:68:98:3c:67:f9:d2:03:f9:c4:6f: a3:6a:b8:9f:f5:08:d2:02:39:38:ec:d6:4e:b5:83: bd:f7:15:a2:72:2d:7c:4d:03:c5:34:ea:25:3a:55: da:af:2a:0f:22:d4:b6:10:63:b3:9d:77:ca:ef:9d: 2f:31:88:2e:06:fc:b0:7b:1c:44:d1:f8:79:92:0d: ed:62:d2:45:54:fe:de:cf:49:de:cc:e8:78:a1:bb: 58:df:bc:5c:4c:5d:a4:c4:89:e3:3c:61:66:d7:53: c4:46:f1:bc:b1:1a:be:db:2e:a1:1c:4a:83:58:7b: f2:f9:ef:88:69:51:15:44:2f:df:e9:2c:b5:a4:42: 48:47:b2:66:47:0e:cb:21:1d:7e:a1:b7:2e:50:9c: b8:9b:39:91:27:d7:cc:5b:da:89:15:79:b5:2d:bf: de:96:36:fc:a8:2a:33:76:a4:99:dd:04:9c:51:08: 29:3d:92:78:ee:02:b9:47:67:61:5c:ed:53:dc:9e: f9:a6:4d:fe:b7:d4:db:2c:3d:59:dc:3d:0e:01:10: 60:4b:74:40:d3:e3:fd:0d:42:7c:8b:a2:00:23:4b: 2b:b2:48:83:23:29:f7:37:be:8e:3d:d9:5f:1f:7a: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:13:20:0B:ED:35:A3:B1:DE:3C:D5:44:8B:FB:3C:78:09:7B:07:27 X509v3 Authority Key Identifier: keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/2hMgC-01o7HePNVEi_s8eAl7Byc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.223.16.0/20 Signature Algorithm: sha256WithRSAEncryption b8:39:4b:71:63:0f:a8:21:c8:5c:fc:86:97:f8:26:ae:b3:8e: 70:21:78:4a:fd:32:20:0d:96:aa:44:7c:68:1e:f5:f7:5d:47: 47:2e:b8:f2:63:60:3a:d4:e1:4a:b0:fa:d3:a5:91:48:b9:91: de:39:33:2e:03:f2:5d:4b:1a:f7:eb:99:0b:f1:39:69:fe:2a: e0:b3:3d:f8:af:44:ee:29:ec:61:12:68:16:a3:c1:ed:f8:d5: 52:d8:ef:bf:c9:9c:23:d5:9d:cf:65:4a:9d:86:cf:36:ac:e4: bf:ab:b1:d6:c9:57:1b:29:db:bf:2c:c1:dd:88:b1:8a:1f:bf: 70:bf:bf:26:50:31:8d:7f:bc:b9:7f:73:a3:2a:f5:1b:53:24: 6d:b9:92:24:52:aa:e2:94:55:76:77:8b:cd:39:5c:2d:a7:e1: bd:1b:e7:c9:42:c6:8a:1f:a2:b9:a1:35:cc:e3:cf:f9:6c:4c: 41:7e:11:be:df:7a:16:1d:40:be:89:87:be:d3:71:58:b8:bd: 43:66:95:c0:79:dc:08:01:64:79:55:6e:56:f7:6b:d2:89:ee: e3:b3:5e:f9:53:27:0f:a4:ed:da:75:fc:82:6a:2d:70:2c:04: 92:84:52:16:89:ea:29:81:50:29:0b:8e:73:f3:1c:00:7d:c2: d7:a5:5d:41 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNzE4 N0M0RDRCRERENDM1NzI4QjQxMjg4OEUwNjU1MzM0MjA4RTBCMB4XDTI0MDczMTAx MjgzN1oXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoREExMzIwMEJFRDM1QTNC MURFM0NENTQ0OEJGQjNDNzgwOTdCMDcyNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANwwRzukKTmTdb6t4UPDSVabMxdomDxn+dID+cRvo2q4n/UI0gI5 OOzWTrWDvfcVonItfE0DxTTqJTpV2q8qDyLUthBjs513yu+dLzGILgb8sHscRNH4 eZIN7WLSRVT+3s9J3szoeKG7WN+8XExdpMSJ4zxhZtdTxEbxvLEavtsuoRxKg1h7 8vnviGlRFUQv3+kstaRCSEeyZkcOyyEdfqG3LlCcuJs5kSfXzFvaiRV5tS2/3pY2 /KgqM3akmd0EnFEIKT2SeO4CuUdnYVztU9ye+aZN/rfU2yw9Wdw9DgEQYEt0QNPj /Q1CfIuiACNLK7JIgyMp9ze+jj3ZXx96U/kCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTaEyAL7TWjsd481USL+zx4CXsHJzAfBgNVHSMEGDAWgBS3GHxNS93UNXKLQSiI 4GVTNCCOCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk3L3R4aDhUVXZkMURWeWkwRW9pT0JsVXpRZ2pncy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3R4aDhUVXZkMURWeWkwRW9pT0JsVXpR Z2pncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTcvMmhNZ0MtMDFvN0hlUE5WRWlfczhlQWw3QnljLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNrfEDANBgkqhkiG9w0BAQsFAAOCAQEAuDlLcWMPqCHIXPyGl/gmrrOOcCF4 Sv0yIA2WqkR8aB71911HRy648mNgOtThSrD606WRSLmR3jkzLgPyXUsa9+uZC/E5 af4q4LM9+K9E7insYRJoFqPB7fjVUtjvv8mcI9Wdz2VKnYbPNqzkv6ux1slXGynb vyzB3Yixih+/cL+/JlAxjX+8uX9zoyr1G1MkbbmSJFKq4pRVdneLzTlcLafhvRvn yULGih+iuaE1zOPP+WxMQX4Rvt96Fh1AvomHvtNxWLi9Q2aVwHncCAFkeVVuVvdr 0onu47Ne+VMnD6Tt2nX8gmotcCwEkoRSFonqKYFQKQuOc/McAH3C16VdQQ== -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:50 2024 by rpki-client on console-ams.rpki-client.org