$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/hFY0oN0kir99P4i2FcwgR7XNWk8.roa File: hFY0oN0kir99P4i2FcwgR7XNWk8.roa (raw, json) Hash identifier: +NPjl5/KHQWQG3dEEke3Fas5cJ411Mu8qTqGBImFzrQ= Subject key identifier: 84:56:34:A0:DD:24:8A:BF:7D:3F:88:B6:15:CC:20:47:B5:CD:5A:4F Certificate issuer: /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816 Certificate serial: 8E Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/hFY0oN0kir99P4i2FcwgR7XNWk8.roa Signing time: Thu 29 Feb 2024 01:30:37 +0000 ROA not before: Thu 29 Feb 2024 01:30:37 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 38631 IP address blocks: 203.104.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816 Validity Not Before: Feb 29 01:30:37 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=845634A0DD248ABF7D3F88B615CC2047B5CD5A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:47:c1:9d:94:6e:d4:85:8d:f7:9b:4f:cf:08: 92:5d:24:92:c5:16:c6:c7:ac:0f:34:8b:09:70:c4: 38:62:f0:9f:f3:a9:47:94:ae:00:34:d5:d2:26:bb: fc:71:5a:ff:38:03:a6:bb:00:96:76:d3:f2:a7:30: 02:f5:88:99:59:fe:47:30:fa:8e:b0:8e:3a:d7:4a: b9:18:79:5f:d0:17:16:c0:2e:13:d7:20:1a:47:54: b2:2b:02:7e:f3:0c:c1:f4:d3:fa:7a:32:48:28:26: 24:94:45:9c:ab:e3:47:4c:6e:db:b7:eb:b7:53:59: e5:77:7d:bd:71:e0:5b:f0:d8:2f:6f:10:70:21:cb: ed:f8:ec:96:a1:69:ae:4f:86:c4:25:2e:b5:d3:47: 88:29:2b:ad:05:38:14:93:7c:80:04:72:14:be:bd: 3c:20:27:69:8a:4a:ea:6b:c5:58:9e:f1:e3:12:88: 3a:33:c6:6b:55:49:68:55:23:03:67:5e:58:2d:1b: 32:81:84:a2:d1:55:40:bb:98:fa:4e:7e:6c:b1:7b: ea:72:a8:b7:1f:b7:8c:29:e8:b1:da:fa:df:b7:71: 9f:5c:dc:11:1d:73:e4:81:30:97:c0:7c:62:e6:f7: 43:db:a1:55:f5:8b:cc:32:a6:f3:82:fa:8d:6f:d2: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:56:34:A0:DD:24:8A:BF:7D:3F:88:B6:15:CC:20:47:B5:CD:5A:4F X509v3 Authority Key Identifier: keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/hFY0oN0kir99P4i2FcwgR7XNWk8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.104.128.0/20 Signature Algorithm: sha256WithRSAEncryption 52:52:52:b5:f4:66:19:d3:f2:f4:d1:8b:f3:17:82:5a:f5:21: 74:07:10:eb:98:67:3f:ae:f6:77:77:f2:93:d2:f4:2d:10:dc: d1:f1:29:ec:69:a4:be:86:db:88:e9:bc:02:c4:18:eb:af:43: fe:64:37:c7:15:f1:f6:15:85:14:44:c4:53:ea:09:40:b8:74: b7:ec:4e:4e:45:66:33:1e:69:0a:ca:92:62:b6:94:40:f0:f2: 7e:25:7e:59:23:75:ac:b4:5f:10:48:5f:2f:94:47:fd:3b:e0: b9:4c:5e:1f:48:41:5a:6e:42:4f:b3:fa:dd:20:6e:e4:b3:a0: 56:e8:99:ee:07:03:9d:64:f9:c8:32:d2:1b:d6:14:88:39:b5: b0:3c:66:3f:c7:e4:36:4c:7c:e2:80:15:66:6b:97:e9:2c:b2: 7b:d7:99:5b:4d:fb:48:9f:8c:c1:f6:86:c5:0f:ad:50:a0:e6: 46:39:33:29:e3:1f:73:ab:36:34:92:03:17:ad:7c:3f:94:1f: 00:a6:95:0d:0f:80:95:ae:4c:50:4d:19:24:d9:2f:6d:c0:b1: b4:4a:e2:22:f7:dd:7a:15:aa:8b:4e:8d:85:77:da:e7:84:d5: f5:87:ab:ad:3c:96:cc:f8:1a:04:c3:54:27:69:f7:99:18:49: 4d:33:e2:73 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkw NEVDQkNEODVGMjJBMkU4QUU3RTFGOTkxRTgzNDVEMDZBOTgxNjAeFw0yNDAyMjkw MTMwMzdaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDg0NTYzNEEwREQyNDhB QkY3RDNGODhCNjE1Q0MyMDQ3QjVDRDVBNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAR8GdlG7UhY33m0/PCJJdJJLFFsbHrA80iwlwxDhi8J/zqUeU rgA01dImu/xxWv84A6a7AJZ20/KnMAL1iJlZ/kcw+o6wjjrXSrkYeV/QFxbALhPX IBpHVLIrAn7zDMH00/p6MkgoJiSURZyr40dMbtu367dTWeV3fb1x4Fvw2C9vEHAh y+347Jahaa5PhsQlLrXTR4gpK60FOBSTfIAEchS+vTwgJ2mKSuprxVie8eMSiDoz xmtVSWhVIwNnXlgtGzKBhKLRVUC7mPpOfmyxe+pyqLcft4wp6LHa+t+3cZ9c3BEd c+SBMJfAfGLm90PboVX1i8wypvOC+o1v0kHLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhFY0oN0kir99P4i2FcwgR7XNWk8wHwYDVR0jBBgwFoAUmQTsvNhfIqLorn4f mR6DRdBqmBYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzk1OC9tUVRzdk5oZklxTG9ybjRmbVI2RFJkQnFtQlkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9tUVRzdk5oZklxTG9ybjRmbVI2RFJk QnFtQlkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTU4L2hGWTBvTjBraXI5OVA0aTJGY3dnUjdYTldrOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATLaIAwDQYJKoZIhvcNAQELBQADggEBAFJSUrX0ZhnT8vTRi/MXglr1IXQH EOuYZz+u9nd38pPS9C0Q3NHxKexppL6G24jpvALEGOuvQ/5kN8cV8fYVhRRExFPq CUC4dLfsTk5FZjMeaQrKkmK2lEDw8n4lflkjday0XxBIXy+UR/074LlMXh9IQVpu Qk+z+t0gbuSzoFbome4HA51k+cgy0hvWFIg5tbA8Zj/H5DZMfOKAFWZrl+kssnvX mVtN+0ifjMH2hsUPrVCg5kY5MynjH3OrNjSSAxetfD+UHwCmlQ0PgJWuTFBNGSTZ L23AsbRK4iL33XoVqotOjYV32ueE1fWHq608lsz4GgTDVCdp95kYSU0z4nM= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:32 2024 by rpki-client on console.sobornost.net