$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/D2r3mE_un7duh2iFidq0cL0NrOM.roa File: D2r3mE_un7duh2iFidq0cL0NrOM.roa (raw, json) Hash identifier: FQppwe/D7uN5mksA85/+lXBXz3hoyjHDki1QcmBoF+k= Subject key identifier: 0F:6A:F7:98:4F:EE:9F:B7:6E:87:68:85:89:DA:B4:70:BD:0D:AC:E3 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 01A5 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/D2r3mE_un7duh2iFidq0cL0NrOM.roa Signing time: Sun 01 Oct 2023 01:28:32 +0000 ROA not before: Sun 01 Oct 2023 01:28:32 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9371 IP address blocks: 133.167.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Oct 1 01:28:32 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=0F6AF7984FEE9FB76E87688589DAB470BD0DACE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:9e:25:a3:83:35:e0:16:69:a4:ce:f9:1f: ae:92:6c:78:67:db:72:ae:ba:c6:75:45:3d:9a:f4: d9:af:f8:9e:37:8c:62:fd:47:8b:1e:10:18:00:53: f7:06:73:d4:2b:b5:c4:eb:83:56:0f:71:88:b7:a7: e5:65:f8:d4:80:60:09:a0:a3:26:02:e3:e3:8b:6c: bb:4d:89:68:0b:50:98:bb:23:56:1d:fb:e5:90:7f: 00:18:59:f3:ef:d1:04:cf:26:2b:85:44:6b:a7:dc: b3:32:46:b1:66:40:d2:a4:ee:49:17:67:ec:4a:46: 27:5d:af:d6:01:c2:45:bd:8d:8f:e9:5b:73:6e:6b: dd:6e:ab:40:c5:2a:8e:89:c6:01:01:32:7e:ae:0a: a7:1b:68:78:81:24:3b:0c:ec:59:c8:06:61:c4:1a: 0e:85:10:dc:0b:23:92:59:46:6b:24:88:4c:e5:9f: 46:de:7c:0c:3a:bd:72:22:7d:84:b1:cd:ea:7b:58: 5a:8b:bd:b8:20:5f:b3:8a:88:93:24:47:59:c9:0d: 2f:de:09:eb:1b:2c:c6:b1:d5:56:38:7c:f4:66:96: a2:41:c2:69:8a:4c:31:3d:d5:ed:4e:4b:1f:00:55: 32:41:1b:19:29:6b:4f:91:53:a5:d5:61:05:21:e5: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6A:F7:98:4F:EE:9F:B7:6E:87:68:85:89:DA:B4:70:BD:0D:AC:E3 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/D2r3mE_un7duh2iFidq0cL0NrOM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.167.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:33:ed:3e:b8:96:6d:c5:16:47:99:eb:02:0b:a0:ee:14:b0: 3a:e1:a6:d2:65:89:8c:60:2a:eb:89:d0:4b:92:6b:5f:65:91: dd:34:9e:3a:d7:72:a6:ab:a0:45:63:0a:06:11:bc:d1:a1:48: b7:7c:12:9e:1e:be:15:6a:83:d2:75:6b:a5:81:68:b8:5a:5b: 58:da:ca:40:c0:97:84:a6:e3:01:20:b5:f6:ea:92:9f:55:ec: ee:0d:78:24:2c:96:c6:c8:a5:53:4d:4b:0b:04:9d:dd:2c:be: 15:ec:36:c5:a3:28:c4:4c:01:2a:9f:58:85:99:21:93:3d:cd: 30:d0:0f:1d:56:3b:62:1a:34:62:a2:e1:9f:ed:96:9d:a4:1b: 9a:b3:e1:2b:f3:b9:00:21:0d:ae:5e:07:80:9f:8d:38:30:c2: 07:32:b5:bc:27:0e:3a:94:a0:93:fd:6d:17:d9:0b:7b:95:fb: f2:da:8c:71:4c:f6:37:00:4f:ba:70:8c:51:5b:4d:e1:46:2d: 7c:c1:f4:dc:5f:8a:df:bb:84:97:27:da:72:eb:19:21:0f:d3: b3:5f:91:92:66:39:3b:eb:df:77:de:f6:dc:d5:5e:46:0e:aa: 17:1e:b2:68:8c:fe:10:a5:fe:b3:0a:a5:4e:24:e8:13:2c:a6: 14:fe:6e:c1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzEwMDEw MTI4MzJaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDBGNkFGNzk4NEZFRTlG Qjc2RTg3Njg4NTg5REFCNDcwQkQwREFDRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtWp4lo4M14BZppM75H66SbHhn23KuusZ1RT2a9Nmv+J43jGL9 R4seEBgAU/cGc9QrtcTrg1YPcYi3p+Vl+NSAYAmgoyYC4+OLbLtNiWgLUJi7I1Yd ++WQfwAYWfPv0QTPJiuFRGun3LMyRrFmQNKk7kkXZ+xKRiddr9YBwkW9jY/pW3Nu a91uq0DFKo6JxgEBMn6uCqcbaHiBJDsM7FnIBmHEGg6FENwLI5JZRmskiEzln0be fAw6vXIifYSxzep7WFqLvbggX7OKiJMkR1nJDS/eCesbLMax1VY4fPRmlqJBwmmK TDE91e1OSx8AVTJBGxkpa0+RU6XVYQUh5VprAgMBAAGjggInMIICIzAdBgNVHQ4E FgQUD2r3mE/un7duh2iFidq0cL0NrOMwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9EMnIzbUVfdW43ZHVoMmlGaWRxMGNMME5yT00u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAhacwDQYJKoZIhvcNAQELBQADggEBAEoz7T64lm3FFkeZ6wILoO4U sDrhptJliYxgKuuJ0EuSa19lkd00njrXcqaroEVjCgYRvNGhSLd8Ep4evhVqg9J1 a6WBaLhaW1jaykDAl4Sm4wEgtfbqkp9V7O4NeCQslsbIpVNNSwsEnd0svhXsNsWj KMRMASqfWIWZIZM9zTDQDx1WO2IaNGKi4Z/tlp2kG5qz4SvzuQAhDa5eB4CfjTgw wgcytbwnDjqUoJP9bRfZC3uV+/LajHFM9jcAT7pwjFFbTeFGLXzB9Nxfit+7hJcn 2nLrGSEP07NfkZJmOTvr33fe9tzVXkYOqhcesmiM/hCl/rMKpU4k6BMsphT+bsE= -----END CERTIFICATE-----Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org