$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20093/Ec9R5MTzawymbbsiUSJEBGoIQ_s.roa File: Ec9R5MTzawymbbsiUSJEBGoIQ_s.roa (raw, json) Hash identifier: oiLGwQzu55W+MT9Cx2wDRR66FWYVZgCtzfY5uNOwlss= Subject key identifier: 11:CF:51:E4:C4:F3:6B:0C:A6:6D:BB:22:51:22:44:04:6A:08:43:FB Certificate issuer: /CN=711F626595BDEABE9334C61D729C4DA254CED91C Certificate serial: 3E Authority key identifier: 71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/Ec9R5MTzawymbbsiUSJEBGoIQ_s.roa Signing time: Tue 04 Jun 2024 01:15:47 +0000 ROA not before: Tue 04 Jun 2024 01:15:47 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 131949 IP address blocks: 133.247.144.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=711F626595BDEABE9334C61D729C4DA254CED91C Validity Not Before: Jun 4 01:15:47 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=11CF51E4C4F36B0CA66DBB22512244046A0843FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:96:49:1b:1d:c2:96:d4:d5:b3:ec:73:af:38: 7e:76:a9:07:c2:76:91:e4:5d:b6:78:32:29:6c:ff: 60:b4:b9:ae:69:0c:a1:4e:c2:3d:68:97:ff:78:b3: a6:12:64:28:33:64:07:f6:67:28:a8:c6:69:8a:2d: f4:30:ca:bd:a3:e1:62:46:8f:94:60:54:b0:9e:ae: 0f:74:ba:c6:0a:19:f6:b2:64:7d:83:c6:65:5b:9e: 11:54:f1:36:f7:75:56:e4:38:64:ff:0d:a6:1a:a0: 3c:ba:80:1d:9c:ba:b4:22:ac:ad:6b:e4:4d:f1:a9: 73:bc:b3:e7:15:00:3f:e3:5a:68:dd:3a:26:d4:21: 2c:2f:de:ff:19:fb:27:23:27:58:06:8c:26:2c:8a: fe:19:07:ce:2f:42:aa:65:41:28:51:a2:a2:bb:f6: 89:c7:92:9a:02:86:ec:fb:4c:5b:5d:91:c5:0d:1e: 90:e7:a8:c8:43:7d:d1:ac:fa:00:56:4f:56:ae:1d: b0:40:a2:78:3d:27:f9:fd:62:63:70:72:65:82:84: d3:d0:70:b5:cb:23:b6:50:a8:f0:12:57:9c:04:96: bc:d1:f7:bf:5f:d8:6b:cb:48:06:fe:25:ae:f2:b3: da:5f:2f:3a:bf:9a:22:70:f1:35:7e:1d:03:8a:80: 63:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CF:51:E4:C4:F3:6B:0C:A6:6D:BB:22:51:22:44:04:6A:08:43:FB X509v3 Authority Key Identifier: keyid:71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/Ec9R5MTzawymbbsiUSJEBGoIQ_s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.247.144.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:69:28:7c:d1:09:9f:13:87:b7:21:8b:27:65:bb:ea:b6:5f: 2f:43:48:6e:c7:49:a5:29:fa:5d:59:99:cb:4f:95:a4:a9:37: 03:4e:f9:83:05:27:d5:5e:f5:70:4b:42:15:35:25:1e:7c:93: 96:88:5f:80:2d:80:37:f7:5f:ae:a0:44:0a:9f:10:3b:c0:cc: f2:16:69:26:12:62:56:28:17:fb:f7:43:34:90:de:87:9d:7b: d0:b1:f5:61:13:b0:82:f6:0d:f2:c0:bb:17:19:f8:9b:1d:14: 69:5e:4c:73:43:2f:f8:bf:2d:30:4a:8d:31:2b:e1:cc:51:24: 82:e9:f7:f0:da:9c:65:50:4a:95:a8:f5:03:1b:38:8e:5d:ab: bc:45:08:45:ec:e8:44:29:ed:1f:10:ca:68:2b:4e:fc:b1:75: 96:93:97:d5:fc:74:4b:81:0b:bc:73:94:11:c5:5f:c8:35:a9: f6:5a:28:95:ed:33:28:db:cf:37:7c:80:a0:b9:39:2e:f4:c4: 04:e4:9e:ff:da:53:ed:44:9c:38:67:61:42:5a:15:16:73:6b: ad:44:3f:26:68:f4:0c:70:c0:d8:06:0b:26:91:2d:c1:d2:16: 9b:b7:e3:12:e7:07:af:1b:d1:02:66:67:78:ac:77:4d:50:cf: a6:a6:40:4d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTFG NjI2NTk1QkRFQUJFOTMzNEM2MUQ3MjlDNERBMjU0Q0VEOTFDMB4XDTI0MDYwNDAx MTU0N1oXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoMTFDRjUxRTRDNEYzNkIw Q0E2NkRCQjIyNTEyMjQ0MDQ2QTA4NDNGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOCWSRsdwpbU1bPsc684fnapB8J2keRdtngyKWz/YLS5rmkMoU7C PWiX/3izphJkKDNkB/ZnKKjGaYot9DDKvaPhYkaPlGBUsJ6uD3S6xgoZ9rJkfYPG ZVueEVTxNvd1VuQ4ZP8NphqgPLqAHZy6tCKsrWvkTfGpc7yz5xUAP+NaaN06JtQh LC/e/xn7JyMnWAaMJiyK/hkHzi9CqmVBKFGiorv2iceSmgKG7PtMW12RxQ0ekOeo yEN90az6AFZPVq4dsECieD0n+f1iY3ByZYKE09BwtcsjtlCo8BJXnASWvNH3v1/Y a8tIBv4lrvKz2l8vOr+aInDxNX4dA4qAYyUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQRz1HkxPNrDKZtuyJRIkQEaghD+zAfBgNVHSMEGDAWgBRxH2Jllb3qvpM0xh1y nE2iVM7ZHDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwOTMvY1I5aVpaVzk2cjZUTk1ZZGNweE5vbFRPMlJ3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY1I5aVpaVzk2cjZUTk1ZZGNweE5v bFRPMlJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDkzL0VjOVI1TVR6YXd5bWJic2lVU0pFQkdvSVFfcy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBASF95AwDQYJKoZIhvcNAQELBQADggEBAI5pKHzRCZ8Th7chiydlu+q2 Xy9DSG7HSaUp+l1ZmctPlaSpNwNO+YMFJ9Ve9XBLQhU1JR58k5aIX4AtgDf3X66g RAqfEDvAzPIWaSYSYlYoF/v3QzSQ3oede9Cx9WETsIL2DfLAuxcZ+JsdFGleTHND L/i/LTBKjTEr4cxRJILp9/DanGVQSpWo9QMbOI5dq7xFCEXs6EQp7R8QymgrTvyx dZaTl9X8dEuBC7xzlBHFX8g1qfZaKJXtMyjbzzd8gKC5OS70xATknv/aU+1EnDhn YUJaFRZza61EPyZo9AxwwNgGCyaRLcHSFpu34xLnB68b0QJmZ3isd01Qz6amQE0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:43:42 2025 by rpki-client